4 Replies Latest reply on May 26, 2011 8:46 AM by fosteras36

    McAfee processes trying to be stopped

    protector
      I have about 12 windows 2008 core servers that are running VSE 8.7 with the 5300 engine and dat 5558. On these servers, I have wmiprvse.exe trying to kill VSE processes. By looking at the logs, I can see that this is occurring every two days at 6:43 - 6:45am. I don't have any tasks setup to run on that system at that time. I have submitted a sample to webimmune but wanted to know if anyone else has seen this issue before.


      3/19/2009 6:44:12 AM Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\McShield.exe Common Standard Protection:Prevent termination of McAfee processes Action blocked : Terminate
      3/19/2009 6:44:12 AM Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\mfeann.exe Common Standard Protection:Prevent termination of McAfee processes Action blocked : Terminate
      3/19/2009 6:44:12 AM Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\EngineServer.exe Common Standard Protection:Prevent termination of McAfee processes Action blocked : Terminate


      Thanks.