5 Replies Latest reply: Feb 11, 2014 9:27 AM by dnoaker RSS

    Windows server Freeze also Event ID 5019


      Hi All,


      Need HELP


      I have problem in my enveronment. Many servers hung / not loding profile (Hung at loading your personal settings). Also found 5019 event ID for every time. I know only reboot solving my problem. Can this problem due to Update of 'McAfee VirusScan Enterprise 8.8 Patch 2'?


      Server Windows 2003 SP2


      Engine version : 5400.1158

      DAT version : 7011.0000



      Event Type: Error
      Event Source: McLogEvent
      Event Category: None
      Event ID: 5019
      Date:  3/13/2013
      Time:  10:40:59 AM
      Computer: <Server Name>

      Exception in McShield.Exe!
      Exception details follow :
      Exception Code       : 0XC0000005
      Exception Address    : 0X1471A33F
      Exception Parameters : 2
      Param 1 = 0X00000001
      Param 2 = 0X00000004

      More information :
      Exception in UpdateCallback thread.

        • 1. Re: Windows server Freeze also Event ID 5019

          The question was posted in 'Getting Started in The Community' and a quick search of previous posts showed a couple of similar questions from 2010 in Business / VirusScan Enterprise, so I've moved this post to the VSE section for attention.

          • 2. Re: Windows server Freeze also Event ID 5019

            Do you have the option 'Processes on enable' option  enabled on the machine?


            Could you also run a repair of the VSE software?

            Does VSE update correctly?

            • 3. Re: Windows server Freeze also Event ID 5019

              I have the same problem with a 2003 Windows Server SP2. Also running VSE 8.8 with Patch 2. Engine version is the same. The only subtle difference is VSCORE

              Once McShield.EXE crashes, the server requires a hard reboot to restore operations. This has happened 3-4 times since we installed Patch 2 last November.


              Processes on enable is NOT selected.

              VSE does update correctly.


              Have you been able to resolve your problem. I am considering a reinstall of VSE at this point as I have three other servers with identical config which aren't experiencing the same problem.

              • 4. Re: Windows server Freeze also Event ID 5019

                Hello -


                Did this issue start only after updating to 8.8 P2?


                Is there any correlation to DAT updates and the timing of the crashes?  Do you use Extra DATs in your environment?

                • 5. Re: Windows server Freeze also Event ID 5019

                  I also have been experiencing this problem where a 5019 event is logged andshortly after that the system slows down to the point where it has to berebooted. The applicable systems are the following,


                  Windows Server 2003 R2 SP2
                  Windows Server 2008 R2 SP2


                  Exception thrown


                  Exception in McShield.Exe!
                  Exception Code: 0xC0000005


                  I have been applying a POC Hotfix to the affected server achieving positive results. The POC I have been using was provided by McAfee Platinum Support andshould be included in VSE 8.8 P4 release.


                  This is due to a code-path in McShield’s execution that is not thread-safe.


                  Try contacting Platinum Support asking about this problem and their suggested resolution.