Problem
After installing VirusScan Enterprise (VSE) 8.7i Patch 3 and restarting the computer, the desktop will not display.
Windows task manager shows that Explorer.exe is not running.
System Change
Installed Patch 3 for VSE 8.7i and restarted computer.
Cause
The Access Protection rule Standard Protection: Prevent Windows Process spoofing is enabled and configured to Block.
This issue has been reported for the Explorer.exe process. Other Windows processes might also be affected.
Solution
McAfee is investigating this issue. As a temporary measure, implement the workaround shown below.
NOTE: For environments that must have this Access Protection Rule enabled and set to Block, McAfee is working on a hotfix. When the hotfix is available, it will be attached to this article.
To receive email notification when this article is updated, click Subscribe at the top of the page. (You must be logged in at https://mysupport.mcafee.com to subscribe.)
Workaround
Disable the Access Protection rule
-
Click Start, Programs, McAfee, VirusScan Console.
-
Right-click Access Protection and select Properties.
-
Select Anti-virus Standard Protection.
-
Select Prevent Windows Process spoofing and deselect the Block option. Optionally, deselect the Report option but this can remain enabled.
-
Click OK.
Related Information
Users who log in to their systems quickly may not encounter this issue, even when the rule to block spoofing of Windows processes is enabled. This is because the Explorer.exe process will launch and be running before the Access Protection Rule takes effect.
Thanks to McAfee.