FramePkg
  • Home
  • About
  • Procedures
    • ePO Upgrade
    • ePO Architecture
    • BackUp ePO
    • How To Uninstall McAfee Client Manually
    • McAfee Drive Encryption
    • TIE Guide - A to Z Steps
  • ePO
  • VSE
  • DLP
  • HIPS
  • Solutions
  • Tips
  • Videos
  • Online Updates

Failed to update virus scan

16/3/2017

0 Comments

 
Problem:

When trying to update McAfee Virus Scan 8.x the update failed with the error:
"Error occurred while getting point product callback component interface"

Solution:

Re-Register the following file vsupdate.dll

Open Command line and run the following command:

​regsvr32.exe “C:\Program Files (x86)\McAfee\VirusScan Enterprise\vsupdate.dll”
0 Comments

mcafee validation trust protection service disabled - McAfee Mcshield service not runinng

27/10/2016

0 Comments

 
Problem:

McAfee validation trust protection service disabled
McAfee McShield service not running

McAfee Virus Scan 8.8 Patch 6 or 4
Upgrade Virus Scan 8.8 Patch 4 to Patch 6

Solution

Click Start -> Run -> type regedit and click OK.

Go to the following registry key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\
 
For each of the following sub keys, verify the Start value exists within the key, and contains the data shown:

​McShield
Start=2

mfevtp
Start=2

mfehidk
Start=0
 
If there is no Start value, right-click a blank space and select New, DWORD value, and name it Start.

Right-click the new Start value, select Modify, and ensure that the Value data is the same:
McShield
Start=2

mfevtp
Start=2

mfehidk
Start=0

Restart the system.
0 Comments

access is denied on the windows login screen

14/2/2016

0 Comments

 
Problem:

When login on local session or RDP there is an error massage : Access is denied

Windows 7, Windows 2008 / R2, Windows 8/8.1, Windows 2003, Windows 2012.
Picture
Note:

​This problem may be related to McAfee running this versions:
McAfee Agent Version 5.0.1 and above
McAfee Virus Scan 8.8 patch 5 and above

This problem occur after SysCore 15.3 or later is installed

Solution:

There is several solution that I tested


1. Restart the system and start in Safe Mode, after a successful login restart the system normally

2. From ePO change the Access protection policy (Part of Virus Scan):
- Disable the Access protection Policy for the affected systems
- make sure the system received the policy and the access protection is Disable
- Restart the system
- after a successful login Enable the access protection policy from ePO


0 Comments

Access Protection rule are blank

2/7/2015

5 Comments

 
Problem:
After installing Virus Scan Enterprise 8.8 Patch 5, The Access protection Rule are empty.
Picture
Solution:

Enabled 8.3 on volume using: 

1. Open Command Line(CMD)  
- run the command "fsutil.exe 8dot3name set D: 0"
Note: D is is the volume where ePO is installed.


2. open registry (From command line\run click regedit)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
change the value of "NtfsDisable8dot3NameCreation" to 0

rebooted system
removed extension and then checked it back in. (before removing the extension. 
Please export, VSE poilcies/policy assignment, client task/client task assignments)
re-imported policies and extensions
5 Comments

multiple / Duplicate McAfee Agent Icon

7/6/2015

0 Comments

 
Picture
Problem: Multiple McAfee Virus Scan icons are displayed.

Solution 1:

Uninstall and reinstall(restart between the action is recommended)

Solution 2:

Go to unaffected system, open the registry (from the run command "regedit") export the the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection\LicenseInformation

Go to affected system and run the file from the unaffected system, click OK when ask.


0 Comments

VSE: On access and access protection are always disable

16/5/2015

0 Comments

 
Problem:

Always On Access and Access Protection modules are disable and also McAfee McShield and McAfee Validation Trust Protection services are stopped and can't be started.

Solution:

Click Start, Run, type regedit and click Ok.

Go to those paths:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\McShield
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mfevtp
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mfehidk

Do the following to all paths:
  1. If there is no Start value, right click a blank space and select New, DWORD value, and name it Start
  2. Right-click the new Start value, select Modify, and ensure that the Value data is set to 0 (zero). Change it if necessary
  3. Restart the system


0 Comments

How to configure VirusScan Enterprise(VSE) to improve performance for mcafee product

29/4/2015

0 Comments

 
When using McAfee Virus Scan Enterprise(VSE) with multiples McAfee product it is recommended to configure specifics exclusion.

McAfee ePolicy Orchestrator:
Add the process "EventParser.exe" to On-Access Low-Risk Processes Policies


McAfee Data Loss Prevention Endpoint (DLP) 9.x:
Add the following process  to On-Access Low-Risk Processes Policies:
fcags.exe
fcagte.exe
fcagswd.exe
fcag.exe
fcagt.exe

Add the following folders to On-Access Default Processes Policies:
C:\Documents and Settings\All Users\Application Data\McAfee\DLP\
C:\ProgramData\McAfee\DLP\

McAfee Endpoint Encryption for PC 5.x
Add the following folders and process to On-Access Default Processes Policies:
SbClientManager.exe
SbClientHelper.exe
\Device\SafeBootFSVolumes\Disk0\

0 Comments

Recommended exclusions for Virus Scan Enterprise for Servers

20/4/2015

0 Comments

 
Recommended exclusions for VirusScan Enterprise on a Windows Domain Controller with Active Directory or File Replication Service

VSE/SaaS Endpoint Protection exclusions for Exchange Server 2007 and 2010 when running Security for Exchange/GroupShield for Exchange

Recommended VSE exclusions on a Microsoft SharePoint server with McAfee Security for Microsoft SharePoint 

Recommended exclusions for VSE on Microsoft SQL Servers

Required exclusions for running VSE 8.x on Oracle database servers 

How to exclude SAN and NAS mount points in VSE 8.x
Improve your Virus Scan
-------------------------------------------------------------------------
Recommended Anti-Virus exclusions for ForcePoint AP-DATA / Websense DLP version 7.x, 8.x:

On the Triton Server, Exclude the following Folders:
?:\Program Files\Websense\
?:\Program Files (x86)\Websense\
?:\Program files\Microsoft SQL Server\*.*
C:\Documents and Settings\*\Local Settings\Temp\*.*
%WINDIR%\Temp\*.*
The forensics repository (configurable; defaults to Websense folder)

On the system client, exclude the following folder
exclude the installation folder(*:\Program Files\Websense or *:\Program Files (x86)\Websense)
Exclude the following process(Low risk process):
wepsvc.exe
dserui.exe
kvoop.exe
EndpointClassifier.exe

Understanding High-Risk, Low-Risk, and Default processes configuration and usage Click here

For Updated about Websense/ForcePoint DLP Click Here
0 Comments

McAfee Anti Virus Download free

14/4/2015

4 Comments

 
Click on this link to download McAfee Virus Scan for home user

or go to this link:
http://home.mcafee.com/downloads/free-virus-scan
4 Comments

 Windows Action Center reports incorrectly McAfee Virusscan Enterprise as turned off

26/3/2015

0 Comments

 
Windows Security Center does not show the VSE 8.8 status correctly.

There is nothing wrong with the Virus Scan, but there is a problem in the integration of McAfee Virus Scan and Windows Action Center.

There is several thing yo can do:

  • First try to run the The McAfee virtual technician, click here
  • Uninstall and re-install the McAfee Virus Scan.
  • Check and change value in the McAfee Virus Scan:

Click Start, Run, type regedit, and press ENTER.

Navigate to:

For 32-bit computers:
HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection.

For 64-bit computers:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\DesktopProtection.

Double-click bUseWscAVExe.

*If the key does not exist, create it as a REG_DWORD value.

Change Value data to 1 and click OK.

Close the registry editor
  • Restart the "Security Center" Service.
  • Check Micrisoft Support Community:

Win7

Win8



0 Comments
<<Previous
    Picture
    View my profile on LinkedIn

    Categories

    All

    Uninstall VSE
    Ebates Coupons and Cash Back
    Action Coin

    Archives

    March 2017
    October 2016
    February 2016
    July 2015
    June 2015
    May 2015
    April 2015
    March 2015

    Buy me a coffee:)