Explorer.exe fails to load after installing Patch 3 for VSE 8.7i

Problem

After installing VirusScan Enterprise (VSE) 8.7i Patch 3 and restarting the computer, the desktop will not display.

Windows task manager shows that Explorer.exe is not running.

System Change

Installed Patch 3 for VSE 8.7i and restarted computer.

Cause

The Access Protection rule Standard Protection: Prevent Windows Process spoofing is enabled and configured to Block.

This issue has been reported for the Explorer.exe process. Other Windows processes might also be affected.

Solution

McAfee is investigating this issue. As a temporary measure, implement the workaround shown below.

NOTE: For environments that must have this Access Protection Rule enabled and set to Block, McAfee is working on a hotfix. When the hotfix is available, it will be attached to this article.

To receive email notification when this article is updated, click Subscribe at the top of the page. (You must be logged in at https://mysupport.mcafee.com to subscribe.)

Workaround

Disable the Access Protection rule

  1. Click Start, Programs, McAfee, VirusScan Console.
  2. Right-click Access Protection and select Properties.
  3. Select Anti-virus Standard Protection.
  4. Select Prevent Windows Process spoofing and deselect the Block option. Optionally, deselect the Report option but this can remain enabled.
  5. Click OK.

Related Information

Users who log in to their systems quickly may not encounter this issue, even when the rule to block spoofing of Windows processes is enabled. This is because the Explorer.exe process will launch and be running before the Access Protection Rule takes effect.
Thanks to McAfee.

Leave a Reply

Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.