Oplossen van hardnekkige problemen met Mcafee antivirus/anti malware software.

McAfee AntiVirus Plus 2013 lijkt een oude bug te bevatten die ook in versie 2010 en 2011 al voor kwam. Na update van een oudere versie op een Windows XP sp3 machine startte Windows niet meer op, het scherm werd zwart en de pc startte niet goed door. De muiscursor werd wel op het scherm getoond en kon ook verplaats worden.

De pc terugzetten naar een vorig herstelpunt of deïnstallatie van Mcafee na opstarten in veilige modus lijkt de enige oplossing. Na het nodige speurwerk blijkt de oplossing vrij simpel.

Vul het juiste bestandspad in, het eerste deel “C:\windows\” ontbreekt in de volgende registrysleutels:

1. zoek sleutel HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\mfeavfk\ en verander de waarde van het veld :”ImagePath” van system32\drivers\mfeavfk.sys in: C:\windows\system32\drivers\mfeavfk.sys
2. zoek sleutel HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\mfefirek\ en verander de waarde van het veld: “ImagePath” van system32\drivers\mfefirek.sys in: c:\windows\system32\drivers\mfefirek.sys

Onderstaande teksten zijn niet zelfgeschreven maar afkomstig van de service pagina’s van de website van Mcafee. Hierin worden een aantal oplossingen beschreven voor veel voorkomende problemen.

Your computer is at risk: Real-Time Scanning: Off

EnvironmentAffected Suites:
Total Protection 2010, 2011
Internet Security Suite 2010, 2011
AntiVirus Plus 2010, 2011

Affected Operating Systems:
Windows XP
Windows Vista
Windows 7

NOTE: If you are unsure what version of the McAfee Security software you have installed, please see article TS101107.

Problem
Your McAfee Real-Time Scanning service stops functioning unexpectedly and your protection status changes to Red. An error similar to the one below will be displayed in McAfee SecurityCenter.

Solution
Perform the steps in each of the sections below to enable Real-Time Scanning in the SecurityCenter. If Real-Time Scanning will not start or becomes disabled again, continue to the next section. If Real-Time Scanning remains green and enabled, you do not need to continue.

Enable Real-Time Scanning in McAfee SecurityCente

Run McAfee Virtual Technician (MVT)

McAfee Virtual Technician (MVT) is an automated self-healing tool that can diagnose and fix many problems related to your McAfee product.

Go to http://mvt.mcafee.com and follow the prompts to install and run MVT.  If MVT discovers any problems, allow it to repair those problems and attempt to enable Real-Time Scanning again.

If your status still shows that you are not protected, continue.

Download and run the oas-disabled-fix.cmd utility

1. Right-click the link below and save the file to your desktop:
   http://download.mcafee.com/products/licensed/cust_support_patches/oas-disabled-fix.cmd
2. Double-click the oas-disabled-fix.cmd tool.
   NOTE: Windows Vista and 7 users should right-click oas-disabled-fix.cmd and select Run as Administrator.
   If you receive the error StopService: Unable to open service McShield via SCM (5), press CTRL+C to terminate the process.  You will be prompted to terminate the batch job. Type Y and press ENTER. Run the oas-disabled-fix utility again.
3. Restart your computer and ensure that McAfee Security Center shows that Real-Time Scanning is enabled.

If your status still shows that you are not protected, continue.

Check for non-McAfee security software

Other security software may cause a conflict with your McAfee products. For instructions on how to remove incompatible third-party applications and a list of many incompatible products, see:

• Removing incompatible third party applications (2010): TS100914
• Removing incompatible third party applications (2011): TS101083

After you have removed any incompatible software, enable Real-Time Scanning in McAfee Security Center.

If your status still shows that you are not protected, continue.

Remove and reinstall your McAfee software

For details on removing and reinstalling your McAfee software, follow the instructions in FAQ article TS101331.

If Real-Time Scanning is still disabled, contact McAfee Technical Support. Go to http://service.mcafee.com and select Technical Support.

Related Information
Running a System Restore on your computer can cause the Real-Time Scanner to become disabled. System Restore attempts to return your computer to a stable restore point from the past, but that restore point might have been created before critical updates were installed. To learn more about how System Restore can affect your security software, see FAQ article TS101062.

How to uninstall or reinstall supported McAfee products using the Consumer Products Removal tool (MCPR)

Environment

Affected Suites:
McAfee AntiVirusPlus
McAfee Internet Security Suite
McAfee Total Protection
McAfee Family Protection
McAfee Online Backup

Affected Operating Systems:
Microsoft Windows 7
Microsoft Windows Vista
Microsoft Windows XP

NOTE: If you are unsure of the McAfee Security software you have installed, see article TS101107.

Summary

Use the McAfee Consumer Product Removal tool (MCPR) to remove data completely for a McAfee Security product installation on a supported Windows operating system. The tool can clean up data from 2005 – 2012 versions of McAfee Security home user products for Windows.

NOTE: MCPR is not compatible with McAfee Anti-Theft (MAT) 2.0 and Intel Anti-Theft Service (IATS) 2.0. You must unsubscribe your Anti-Theft service before you run MCPR.

IMPORTANT: You must uninstall your McAfee products using the Windows Add/Remove Programs (Windows XP) or Programs and Features (Windows 7 and Windows Vista) before you run MCPR. Otherwise, the number of your licenses might be incorrectly counted.

If you cannot uninstall successfully using Windows Add/Remove Programs, or you have already run MCPR without uninstalling, you can access your McAfee account and deactivate the license for your computer to ensure that the license is released for a later installation. Do the following to deactivate a license from your current McAfee subscription and release the license for use with a different computer:

1. Open a web browser and go to http://home.mcafee.com.
2. Click My Account in the upper right corner.
3. Type your McAfee user account email and password.
4. Click Log In.NOTE: If you want your browser to remember your email address, select the Remember Me option.
5. Click the Device Protection tab.
6. Select the computer you want to deactivate and click Deactivate.

2. Download and run the McAfee Consumer Product Removal (MCPR) tool:

1. Download the MCPR tool from: http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe and save it to a folder on your computer.IMPORTANT: The MCPR tool is updated periodically when new products and updates are released. Always download a new copy of the MCPR tool before using it to uninstall your product.
2. Navigate to the folder where you saved the file, and double-click MCPR.exe.NOTE: Windows 7 and Windows users, right-click MCPR.exe, and select Run as Administrator.
3. When you see the User Account Control dialog box, click Yes.
4. At the McAfee Software Removal screen, click Next.
5. At the End User License Agreement (EULA) dialog box, click Next to accept the agreement.
6. When prompted, type the Captcha information, which is case sensitive, to validate to application security, then click Next.

• If you have Family Protection installed, type your Administrator user name and password and click Next.
• If you cannot authenticate, follow the on-screen instructions to obtain an uninstall code. If you do not have Family Protection installed, you will not receive this authentication prompt.

7. When you see the message CleanUp Successful, restart your computer. Your McAfee product will not be fully removed until after the restart.

IMPORTANT: If you see the message Cleanup Unsuccessful, save your MCPR log files for analysis by Technical Support:

1. At the Cleanup Unsuccessful dialog box, click View Logs. Your troubleshooting log opens in a Notepad window.
2. Click File, Save As, and save the file to your Desktop. Name the file MCPR_date.txt (for example, MCPR_Jan10_12.txt).
3. Contact McAfee Technical Support and provide the log file to your technician for troubleshooting.
4. Confirm that all McAfee products have been removed from your computer.

Reinstall your McAfee products.