1 Reply Latest reply on Jul 27, 2010 12:45 PM by Lajmic

    Virus Scan 8.5i Patch 6 Causes Citrix Servers to have Hard Disk write Hard delays

      Hi Everyone

      i am new to the forum and today had a proble with 12 Citrix servers all displayed the follwoing errors in the event logs and caused the entire system to hang with disk write errors

      Event Type: Error
      Event Source: McLogEvent
      Event Category: None
      Event ID: 1008
      Date: 02/03/2009
      Time: 16:54:41
      User: N/A
      Computer: LIV1WS09
      Description:
      The McShield service terminated unexpectedly.
      Please review event 5019 or 5051 for details. The McShield service will be restarted in 5 seconds;


      Event Type: Error
      Event Source: McLogEvent
      Event Category: None
      Event ID: 5051
      Date: 02/03/2009
      Time: 16:52:06
      User: NT AUTHORITY\SYSTEM
      Computer: LIV1WS09
      Description:
      A thread in process C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe took longer than 90000 ms to complete a request.
      The process will be terminated. Thread id : 4264 (0x10a8)
      Thread address : 0x7C8285EC
      Thread message :

      Build VSCORE.13.3.2.128 / 5300.2777
      Object being scanned = \Device\HarddiskVolume1\Program Files\Citrix\System32\Citrix\IMA\IMARpcClient.dll
      by C:\Program Files\Citrix\ICA Client\PNAMAIN.EXE
      17018(15)(0)
      17017(0)(1)
      7007(0)(0)
      5006(0)(0)
      5004(0)(0)
      5003(0)(0)
      5002(0)(1)
      15002(0)(0)


      Event Type: Error
      Event Source: McLogEvent
      Event Category: None
      Event ID: 5051
      Date: 02/03/2009
      Time: 16:38:44
      User: NT AUTHORITY\SYSTEM
      Computer: LIV1WS11
      Description:
      A thread in process C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe took longer than 90000 ms to complete a request.
      The process will be terminated. Thread id : 4624 (0x1210)
      Thread address : 0x7C8285EC
      Thread message :
      Object being scanned = \Device\HarddiskVolume1\Program Files\Common Files\McAfee\Engine
      by C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
      17018(875)(0)
      17017(0)(1)
      7007(0)(0)
      5006(0)(0)
      5004(0)(0)
      5003(0)(0)
      5002(0)(1)
      15002(0)(0)

      Event Type: Error
      Event Source: McLogEvent
      Event Category: None
      Event ID: 5051
      Date: 02/03/2009
      Time: 16:52:37
      User: NT AUTHORITY\SYSTEM
      Computer: LIV1WS13
      Description:
      A thread in process C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe took longer than 90000 ms to complete a request.
      The process will be terminated. Thread id : 4212 (0x1074)
      Thread address : 0x7C8285EC
      Thread message :

      Build VSCORE.13.3.2.128 / 5300.2777
      Object being scanned = \Device\HarddiskVolume1\Documents and Settings\philt\Local Settings\Temporary Internet Files\Content.IE5\VDQ0XQMA\today[3].xml
      by C:\Program Files\Internet Explorer\iexplore.exe
      4(0)(0)
      4(0)(0)
      7200(0)(0)
      7595(0)(0)
      7005(0)(0)
      7004(0)(0)
      5006(0)(0)
      5004(0)(0)

      as you see each server had a totally different application they locked up on. what has caused the this and how do i fix the problem or prevent it from happening again.

      thank you for your help