Process Hacker and Windows discussion

 
oacrk15a

Cannot terminate the process of McAfee

03 May 2018 08:50

Hi Everyone,

I'm using Process Hacker 2.39.124.
My machine is running Windows 10 RS1 x64 with McAfeeTotal Protection 16 on it.
I found that Process Hacker cannot terminate McAfee's processes when the feature of McAfee Access Protect is enabled.
I tried the same scenario on Windwos 7 x64, the Process Hacker became freezed and had no response.
Process Hacker can terminate AV's processes like Kaspersky and Symantec when similar feature is enabled.
Could anyone help on this?
Thank you.

Image
 
2legit2quit

Re: Cannot terminate the process of McAfee

14 May 2018 13:34

Hi,

same with me -process hacker used to work to kill McAfee, up until a few months ago, but it doesn't any more.

This is the primary reason why I use it, and now that is gone... -please put the "Hack" back into ProcessHacker.

Are you up for the challenge, or are you gonna let McAfee mock your "ProcesssMaybe" software?

The youth of America are depending on you -at least I am, and I'm old, haha.


Excelsior!
 
User avatar
viksoftru
Member
Posts: 617
Joined: 15 Aug 2011 06:01
OS: Win7 (Live! DVD), BSD
Location: Russia

Re: Cannot terminate the process of McAfee

17 May 2018 03:55

Hi Everyone,

I'm using Process Hacker 2.39.124.
My machine is running Windows 10 RS1 x64 with McAfeeTotal Protection 16 on it.
I found that Process Hacker cannot terminate McAfee's processes when the feature of McAfee Access Protect is enabled.
I tried the same scenario on Windwos 7 x64, the Process Hacker became freezed and had no response.
Process Hacker can terminate AV's processes like Kaspersky and Symantec when similar feature is enabled.
Could anyone help on this?

Thank you.
Please check that you have disabled the McAfee Access Protect service that blocks any attempts to make changes to the OS from outside programs and stop the McAfee services. It is disconnected through the McAfee management console. At least in McAfee VirusScan Enterprise + AntiSpyware Enterprise management is there. Otherwise, you can not stop McAfee services. Next, go to the Services tab and stop the antivirus services in their context menu (right mouse button). But it's easier to stop them from his control panel. At least this will lead to the correct results.
 
Guest

Re: Cannot terminate the process of McAfee

24 May 2018 13:43

Is anyone going to address this?
 
User avatar
TETYYS
Contributor
Posts: 515
Joined: 23 Apr 2013 10:37
OS: Win 10 x64

Re: Cannot terminate the process of McAfee

03 Jun 2018 11:14

Its process is protected by its driver. Since AV companies are given a free pass to do some crazy hooks on your system which is not a specialty of Process Hacker to remove them, the solution is uninstall the AV.
 
tedmed
Member
Posts: 8
Joined: 05 Jun 2018 08:02
OS: windows 8.1 64bit
Location: Slovakia

Re: Cannot terminate the process of McAfee

09 Jun 2018 16:49

Yes, i saw in forums that some programs have own driver. If i go to device manager, i don't see driver for bitdefender total security. It somehow possible to find driver and delete it (without uninstalling whole program)?
 
User avatar
TETYYS
Contributor
Posts: 515
Joined: 23 Apr 2013 10:37
OS: Win 10 x64

Re: Cannot terminate the process of McAfee

09 Jun 2018 16:52

It's not a device driver. You can find it through Services tab, but driver stopping or deletion itself is probably protected by same driver
 
tedmed
Member
Posts: 8
Joined: 05 Jun 2018 08:02
OS: windows 8.1 64bit
Location: Slovakia

Re: Cannot terminate the process of McAfee

09 Jun 2018 17:08

You mean services tab in task manager?
It could be disabled in safe mode. How can i see what is driver of AV?
Last edited by tedmed on 09 Jun 2018 17:15, edited 2 times in total.
 
User avatar
TETYYS
Contributor
Posts: 515
Joined: 23 Apr 2013 10:37
OS: Win 10 x64

Re: Cannot terminate the process of McAfee

09 Jun 2018 17:09

In process hacker.

Of course it can because safe mode doesn't load all drivers in the first place
 
tedmed
Member
Posts: 8
Joined: 05 Jun 2018 08:02
OS: windows 8.1 64bit
Location: Slovakia

Re: Cannot terminate the process of McAfee

09 Jun 2018 17:28

I found driver. It's BitLocker Drive Encryption Filter Driver, file name is fvevol.sys in folder \System32\DRIVERS\
 
tedmed
Member
Posts: 8
Joined: 05 Jun 2018 08:02
OS: windows 8.1 64bit
Location: Slovakia

Re: Cannot terminate the process of McAfee

09 Jun 2018 18:36

I screwed up. In process hacker i changed startup for this driver to manual. And error level to normal. Now i can't launch windows. If i select safe mode in troubleshooting, it doesn't work. Command prompt is available in troubleshooting - can i do something?
 
User avatar
TETYYS
Contributor
Posts: 515
Joined: 23 Apr 2013 10:37
OS: Win 10 x64

Re: Cannot terminate the process of McAfee

09 Jun 2018 18:38

You can change service configuration by following command: sc config <service name> start=<mode>
 
tedmed
Member
Posts: 8
Joined: 05 Jun 2018 08:02
OS: windows 8.1 64bit
Location: Slovakia

Re: Cannot terminate the process of McAfee

09 Jun 2018 18:46

yes, i saw this before your answer. What exactly should i enter? Maybe this: "sc config fvevol.sys start=boot"?
 
tedmed
Member
Posts: 8
Joined: 05 Jun 2018 08:02
OS: windows 8.1 64bit
Location: Slovakia

Re: Cannot terminate the process of McAfee

09 Jun 2018 19:00

It's not working. "sc is not recognized..." Command prompt in troubleshooting shows X:window\system32

I'm back, posting from pc. Attempting repairs worked. It also uninstalled process hacker.
How can i disable driver without this stressed "shyt"? Can i delete driver's key in registry? I bet you will answer: "No f... ing way."
 
User avatar
TETYYS
Contributor
Posts: 515
Joined: 23 Apr 2013 10:37
OS: Win 10 x64

Re: Cannot terminate the process of McAfee

30 Jun 2018 15:15

I think most AVs have standalone uninstall tools on their websites, but last time I've seen someone use one of those, windows had to be reinstalled because it was broken completely.
 
mslontheprairie

Re: Cannot terminate the process of McAfee

22 Feb 2019 17:51

Hi, I had two Dell computers factory installed with McAfee. I had one hell of a difficult time with removal as well. There is a tool (program) that is known as MCPR.exe. Details
within properties state "McAfee ESD Package". File size is 10.1MB. I was so pleased as it removed every trace of McAfee on both machines. Google it, as I recall - I down loaded it from McAfee site. It absolutely did the job, and saved me a lot of grief!