Recently we have been requested to run our software along with the McAfee Enterprise VirusScan. The results where not good. The software runs very sluggishly. The software runs fine with other AntiVirus software. I have turned off every option in the virus scan control panel. Still the same results. How do I go about trying to find out what the interfering interaction between the McAfee software and our software is? An example of the problem is that one of our applications will display probe measurments. I can depress the probe and wait from 1-2 seconds before the value is updated on the screen. During this time period there is no reading or writting of files. Any Ideas?
Well, given the complete lack of diagnostic information, I would suggest the use of McAfee Profiler ( http://mer.mcafee.com/enduser/downloadmcprofiler.aspx ) (use only in IE) which may provide a great deal of info as to what is going on.
Also, check out this Hot Topics ( https://kc.mcafee.com/corporate/index?page=content&id=KB65944 ) which may help identify several areas that you may wish to investigate further to identify the issue at hand.
You may want to consider High Risk/Low Risk profiles and consider exclusions needed for your specific application.
I would strongly recommend the Best Practices Guide as a good starting point for understanding how to control the defaults currently in place and modifying VSE appropriately.
Hope this helps
Thanks for the information. I am going through the best practice guide.
As far as diagnostics I searched the nt even log but did not see anything. One entry for MclogEvent
McShield service started.
Engine version : 5400.1158
DAT version : 6834.0000
Number of signatures in EXTRA.DAT : None
Names of threats that EXTRA.DAT can detect : None
As far as the applications most are writtenin vb6.
OS: Win7 x64
McAfee Enterprise VirusScan + AntiSpyware version 8.8 Evaluation copy.
I am not sure what is going on based on the descriptions you have provided. Event Logs are good to have when a Failure has occurred but not when things are working, albeit slowly. Slow performance does not constitute an 'event' in most cases.
This is why the McAfee Profiler tool is useful. You might even consider Sysinternals Process Explorer or Process Monitor. These tools may expose where the 'sluggishness' is coming from. From that, we can diagnose and potentially suggest what needs to be done. (I even use these tools to better identify where my code spends too much time and resources, which helps in the quality of the code, regardless of other issues.)
1) Are networks scanned (OAS)?
2) Is the application making a great deal of registry queries or changes?
3) Is ScriptScan enabled?
Performance tuning is an Art and a Science. Without using the tools, tuning is like playing darts, blindfolded.
As a test, turn off Buffer Overflow protection. Let's see if that's the problem. If so there are ways to make exclusions for it. Turn everything back to the default policies though.