The McAfee McShield service has entered a Running or Paused state

kafan_Seal

Corporate KnowledgeBase ID:		KB60215
Published:		December 16, 2008

Environment McAfee VirusScan Enterprise 8.5i Patch 2 to 7 (localized versions only)
Microsoft Windows (All supported versions. See KB51109)

Summary The same issue for the English operating systems has been resolved with VSE 8.5i Patch 6 and above. For further details, see KB51590.


Problem 1 The Windows System Event log is populated with multiple entries for Event ID 7036 after applying VirusScan Enterprise (VSE) 8.5i. Patch 2 or later for non-English operating systems.


Problem 2 The Windows System event log records the following details:
  Event Properties for entering the running state

Source:	Service Control Manager
Category:	None
Event ID:	7036
Type:	Information
Description:	The McAfee McShield service has entered the running state . For more information, see Help and Support Centre at http://go.microsoft.com/fwlink/events.asp

Event Properties for entering the paused state

Source:	Service Control Manager
Category:	None
Event ID:	7036
Type:	Information
Description:	The McAfee McShield service has entered the paused state . For more information, see Help and Support Center at: http://go.microsoft.com/fwlink/events.asp

Problem 3 This issue is only reported on computers managed by ePolicy Orchestrator (ePO) or ProtectionPilot (PrP).


Cause This event is informational only, and does not indicate an issue with the product. The presence of the event indicates that Service Control Manager has noted a change in state of the McShield service, such as the service entering the paused or running state.

This change in behavior was introduced to better synchronize the scanning activity of the McShield service with modification or enforcement of scanning configuration settings where prior to Patch 2, a rare timing issue could result in termination of the McShield service.

Solution For non-English Operating Systems
For non-English operating systems the issue is resolved with HotFix 386922  which is attached to this KnowledgeBase article. In addition, both the ePO server(s) and client(s) must be restarted for this HotFix to take effect because the ePO Server may still have events queued which must be removed.

IMPORTANT: HotFix 386922 is not included in VSE 8.5i Patch 7 and is required to address issues for non-English operating systems.

VSE85HF386922.zip下载https://kc.mcafee.com/resources/sites/MCAFEE/content/live/CORP_KNOWLEDGEBASE/60000/KB60215/en_US/VSE85HF386922.zip

这个只出现在用ePO或ProtectionPilot管理的电脑上面，没用的可以不用装了,用于非E文操作系统

[ 本帖最后由 kafan_Seal 于 2008-12-18 08:01 编辑 ]

深度扫描

8.7貌似可以路过。。。。