Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
2966 Views 5 Replies Latest reply: Feb 11, 2014 9:27 AM by dnoaker RSS
mmohaneee Newcomer 1 posts since
Mar 27, 2013
Currently Being Moderated

Mar 27, 2013 9:07 AM

Windows server Freeze also Event ID 5019

Hi All,

 

Need HELP

 

I have problem in my enveronment. Many servers hung / not loding profile (Hung at loading your personal settings). Also found 5019 event ID for every time. I know only reboot solving my problem. Can this problem due to Update of 'McAfee VirusScan Enterprise 8.8 Patch 2'?

 

Server Windows 2003 SP2

 

Engine version : 5400.1158

DAT version : 7011.0000

 

 

Event Type: Error
Event Source: McLogEvent
Event Category: None
Event ID: 5019
Date:  3/13/2013
Time:  10:40:59 AM
User:  NT AUTHORITY\SYSTEM
Computer: <Server Name>

Description:
Exception in McShield.Exe!
Exception details follow :
VSCORE.15.0.0.468
Exception Code       : 0XC0000005
Exception Address    : 0X1471A33F
Exception Parameters : 2
Param 1 = 0X00000001
Param 2 = 0X00000004

More information :
Exception in UpdateCallback thread.

Attachments:
  • Hayton Volunteer Moderator 4,602 posts since
    Sep 27, 2010
    Currently Being Moderated
    1. Mar 27, 2013 12:01 PM (in response to mmohaneee)
    Re: Windows server Freeze also Event ID 5019

    The question was posted in 'Getting Started in The Community' and a quick search of previous posts showed a couple of similar questions from 2010 in Business / VirusScan Enterprise, so I've moved this post to the VSE section for attention.


    Volunteer Moderator  Leeds, UK
    No PM's please
  • jeffreychirino Apprentice 90 posts since
    Jul 8, 2008
    Currently Being Moderated
    2. Mar 29, 2013 4:15 AM (in response to Hayton)
    Re: Windows server Freeze also Event ID 5019

    Do you have the option 'Processes on enable' option  enabled on the machine?

     

    Could you also run a repair of the VSE software?

    Does VSE update correctly?

  • chrisvn Newcomer 1 posts since
    Apr 25, 2013
    Currently Being Moderated
    3. Apr 25, 2013 11:38 AM (in response to mmohaneee)
    Re: Windows server Freeze also Event ID 5019

    I have the same problem with a 2003 Windows Server SP2. Also running VSE 8.8 with Patch 2. Engine version is the same. The only subtle difference is VSCORE 15.0.0.466.

    Once McShield.EXE crashes, the server requires a hard reboot to restore operations. This has happened 3-4 times since we installed Patch 2 last November.

     

    Processes on enable is NOT selected.

    VSE does update correctly.

     

    Have you been able to resolve your problem. I am considering a reinstall of VSE at this point as I have three other servers with identical config which aren't experiencing the same problem.

  • mixmasterm Newcomer 2 posts since
    May 20, 2013
    Currently Being Moderated
    4. May 20, 2013 2:35 PM (in response to mmohaneee)
    Re: Windows server Freeze also Event ID 5019

    Hello -

     

    Did this issue start only after updating to 8.8 P2?

     

    Is there any correlation to DAT updates and the timing of the crashes?  Do you use Extra DATs in your environment?

  • dnoaker Newcomer 1 posts since
    Feb 11, 2014
    Currently Being Moderated
    5. Feb 11, 2014 9:27 AM (in response to mmohaneee)
    Re: Windows server Freeze also Event ID 5019

    I also have been experiencing this problem where a 5019 event is logged andshortly after that the system slows down to the point where it has to berebooted. The applicable systems are the following,

     

    Windows Server 2003 R2 SP2
    Windows Server 2008 R2 SP2

     

    Exception thrown

     

    Exception in McShield.Exe!
    VSCORE. 15.0.0.468
    Exception Code: 0xC0000005

     

    I have been applying a POC Hotfix to the affected server achieving positive results. The POC I have been using was provided by McAfee Platinum Support andshould be included in VSE 8.8 P4 release.

     

    This is due to a code-path in McShield’s execution that is not thread-safe.

     

    Try contacting Platinum Support asking about this problem and their suggested resolution.

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points