mcafee8.7i 事件id:7036 !?

www_5750

事件查看器中不定时出现**服务处于 正在暂停状态，然后又 **服务处于 正在运行状态。网上查了下有西文网页说8.5i有这个问题，不明白到底是怎么回事？各位有谁知道?求解

zhousf

http://mysupport.mcafee.com/Eservice/templatepage.aspx?sURL=3

Environment          McAfee VirusScan Enterprise 8.5i Patches 2 through 7 (localized versions only)
Microsoft Windows (All supported versions. See KB51109)

Summary          The same issue for the English operating systems has been resolvedwith VirusScan Enterprise (VSE) 8.5i Patch 6 and above. For furtherdetails, see KB51590.


                                                                                                                                                                                                                                                                                                                                                                  Problem  1         The Windows System Event log is populated with multiple entries for Event ID 7036 after applying VirusScan Enterprise (VSE) 8.5i. Patch 2 or later for non-English operating systems.


                                                                                                                                                                                                                                                                                                                                                    Problem  2         The Windows System event log records the following details:
Event Properties for entering the running state

Source:	Service Control Manager
Category:	None
Event ID:	7036
Type:	Information
Description:	The McAfee McShield service has entered the running state .                          For more information, see Help and Support Centre at             http://go.microsoft.com/fwlink/events.asp

Event Properties for entering the paused state

Source:	Service Control Manager
Category:	None
Event ID:	7036
Type:	Information
Description:	The McAfee McShield service has entered the paused state .                          For more information, see Help and Support Center at: http://go.microsoft.com/fwlink/events.asp

                                                                                                                                                                                                                                                                                                                                                    Problem  3         This issue is only reported on computers managed by ePolicy Orchestrator (ePO) or ProtectionPilot (PrP).

                                                                                                                                                                  
Cause          This event is informational only, and does not indicate an issue withthe product. The presence of the event indicates that Service ControlManager has noted a change in state of the McShield service, such asthe service entering the paused or running state.

This change in behavior was introduced to better synchronize thescanning activity of the McShield service with modification orenforcement of scanning configuration settings. Before Patch 2, a raretiming issue could result in termination of the McShield service.

                                                                                                                                                                                                                                                                                                              Solution          Non-English Operating Systems only
For non-English operating systems, this issue is resolved with HotFix 386922  which is attached to this KnowledgeBase article, or with the latest VirusScan Enterprise Patch.

IMPORTANT: Both theePO server(s) and client(s) must be restarted because the ePO Servermay still have queued events which must be removed.



                                                                                                                                                                  

Related Information          NOTE:Event7036 is still expected to occur during a policy enforcement wheneverpolicies which cause the scanner to pause and resume have changed. ThisHotFix prevent the events from occurring when no such policies havebeen changed.

                                                                                                                                                                                                                                                                                                              Attachment                                  VSE85HF386922.zip
210K • < 1 minute @ 56k, < 1 minute @ broadband


看看此KB是否有帮助.

www_5750

谢谢啦，我理解是这个问题对8.5i不造成影响，有解决方法但不保证完全解决这种情况，不影响使用，不算bug,8.7i差不多吧，可能要下补丁哦