After installing VirusScan Enterprise (VSE) 8.7i Patch 3 and restarting the computer, the desktop will not display.
Windows task manager shows that Explorer.exe is not running.
Installed Patch 3 for VSE 8.7i and restarted computer.
The Access Protection rule Standard Protection: Prevent Windows Process spoofing is enabled and configured to Block.
This issue has been reported for the Explorer.exe process. Other Windows processes might also be affected.
McAfee is investigating this issue. As a temporary measure, implement the workaround shown below.
NOTE: For environments that must have this Access Protection Rule enabled and set to Block, McAfee is working on a hotfix. When the hotfix is available, it will be attached to this article.
To receive email notification when this article is updated, click Subscribe at the top of the page. (You must be logged in at https://mysupport.mcafee.com to subscribe.)
Disable the Access Protection rule
Click Start, Programs, McAfee, VirusScan Console.
Right-click Access Protection and select Properties.
Select Anti-virus Standard Protection.
Select Prevent Windows Process spoofing and deselect the Block option. Optionally, deselect the Report option but this can remain enabled.
Users who log in to their systems quickly may not encounter this issue, even when the rule to block spoofing of Windows processes is enabled. This is because the Explorer.exe process will launch and be running before the Access Protection Rule takes effect.
Thanks to McAfee.