Monday 29 July 2013

Problem with McAfee on MacOS

I'd like to add a "me, too", and possibly get some follow-up.

We're seeing the same messages (see below) in Console.app's "All Messages" about 50x per second...

kernel     Virex Kext: "Scanner is not responding".

@sudeepg - I do not see /var/log/McAfeeSecurity.log file.

However, I do have numerous entries for /usr/local/McAfee/AntiMalware/VShieldScanManager, logged here...

/Library/Logs/DiagnosticReports/VShieldScanManager_[date time stamp]_localhost.crash.

### BEGIN LOG SNIPPET... ####

Process:         VShieldScanManager [5990]

Path:            /usr/local/McAfee/AntiMalware/VShieldScanManager

Identifier:      VShieldScanManager

Version:         ??? (???)

Code Type:       X86 (Native)

Parent Process:  launchd [1]

Date/Time:       2011-11-04 09:06:15.538 -0700

OS Version:      Mac OS X 10.6.8 (10K549)

Report Version:  6

Exception Type:  EXC_BAD_ACCESS (SIGBUS)

Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000038

Crashed Thread:  6

[ SKIPPING TO THREAD 6 ]

Thread 6 Crashed:

0   libSystem.B.dylib                       0x90d784cf flockfile + 22

1   libSystem.B.dylib                       0x90d6e629 fgets + 49

2   VShieldScanManager                      0x00007aeb TrustedProcesses::refreshTrustedProcessesList() + 119

3   VShieldScanManager                      0x00003fe6 ScanManager::setTrustedProcesses(void*) + 40

4   libSystem.B.dylib                       0x90d71259 _pthread_start + 345

5   libSystem.B.dylib                       0x90d710de thread_start + 34

[ SKIPPING TO THREAD 6 STATE ]

Thread 6 crashed with X86 Thread State (32-bit):

  eax: 0xb038d000  ebx: 0xb038d000  ecx: 0x90d49e82  edx: 0x00000000

  edi: 0x00000001  esi: 0x00000000  ebp: 0xb038cdc8  esp: 0xb038cdb0

   ss: 0x0000001f  efl: 0x00010282  eip: 0x90d784cf   cs: 0x00000017

   ds: 0x0000001f   es: 0x0000001f   fs: 0x0000001f   gs: 0x00000037

  cr2: 0x00000038

#### END LOG SNIPPET ####

Affected clients are Mac OS X 10.6.8 (10K549) w/ the following McAfee product versions...

McAfee Security

Version 1.0.0 (676)

Anti-malware

Version: 9.0.0 (4012)

Engine Version: 5400.1158

DAT Version: 6519.0000

DAT Creation Date: 11/3/11

We have McAfee Security v1.1.0 (1309) for Lion-compatibility, which (on Lion/10.7.2/11C73) does not appear to have this issue/log into Console.

I will remove McAfee v1.0.0 from our 10.6.8 image, install McAfee v1.1.0, test and report back.


View the original article here

No comments:

Post a Comment