5 Replies Latest reply: Feb 11, 2014 9:27 AM by dnoaker RSS

    Windows server Freeze also Event ID 5019

    mmohaneee

      Hi All,

       

      Need HELP

       

      I have problem in my enveronment. Many servers hung / not loding profile (Hung at loading your personal settings). Also found 5019 event ID for every time. I know only reboot solving my problem. Can this problem due to Update of 'McAfee VirusScan Enterprise 8.8 Patch 2'?

       

      Server Windows 2003 SP2

       

      Engine version : 5400.1158

      DAT version : 7011.0000

       

       

      Event Type: Error
      Event Source: McLogEvent
      Event Category: None
      Event ID: 5019
      Date:  3/13/2013
      Time:  10:40:59 AM
      User:  NT AUTHORITY\SYSTEM
      Computer: <Server Name>

      Description:
      Exception in McShield.Exe!
      Exception details follow :
      VSCORE.15.0.0.468
      Exception Code       : 0XC0000005
      Exception Address    : 0X1471A33F
      Exception Parameters : 2
      Param 1 = 0X00000001
      Param 2 = 0X00000004

      More information :
      Exception in UpdateCallback thread.

        • 1. Re: Windows server Freeze also Event ID 5019
          Hayton

          The question was posted in 'Getting Started in The Community' and a quick search of previous posts showed a couple of similar questions from 2010 in Business / VirusScan Enterprise, so I've moved this post to the VSE section for attention.

          • 2. Re: Windows server Freeze also Event ID 5019
            jeffreychirino

            Do you have the option 'Processes on enable' option  enabled on the machine?

             

            Could you also run a repair of the VSE software?

            Does VSE update correctly?

            • 3. Re: Windows server Freeze also Event ID 5019
              chrisvn

              I have the same problem with a 2003 Windows Server SP2. Also running VSE 8.8 with Patch 2. Engine version is the same. The only subtle difference is VSCORE 15.0.0.466.

              Once McShield.EXE crashes, the server requires a hard reboot to restore operations. This has happened 3-4 times since we installed Patch 2 last November.

               

              Processes on enable is NOT selected.

              VSE does update correctly.

               

              Have you been able to resolve your problem. I am considering a reinstall of VSE at this point as I have three other servers with identical config which aren't experiencing the same problem.

              • 4. Re: Windows server Freeze also Event ID 5019
                mixmasterm

                Hello -

                 

                Did this issue start only after updating to 8.8 P2?

                 

                Is there any correlation to DAT updates and the timing of the crashes?  Do you use Extra DATs in your environment?

                • 5. Re: Windows server Freeze also Event ID 5019
                  dnoaker

                  I also have been experiencing this problem where a 5019 event is logged andshortly after that the system slows down to the point where it has to berebooted. The applicable systems are the following,

                   

                  Windows Server 2003 R2 SP2
                  Windows Server 2008 R2 SP2

                   

                  Exception thrown

                   

                  Exception in McShield.Exe!
                  VSCORE. 15.0.0.468
                  Exception Code: 0xC0000005

                   

                  I have been applying a POC Hotfix to the affected server achieving positive results. The POC I have been using was provided by McAfee Platinum Support andshould be included in VSE 8.8 P4 release.

                   

                  This is due to a code-path in McShield’s execution that is not thread-safe.

                   

                  Try contacting Platinum Support asking about this problem and their suggested resolution.