mcsvhost.exe Application Error on shutdown SOLVED

Are you receiving an application error from Mcsvhost.exe when shutting down your computer?

The usual cases where this appears are:

McAfee 2010 product installed.

Office Installed.

Windows XP.

We have seen reports that users thought that the problem was only when office was launched, particularly outlook for reading email but we have found that the error is also seen even if outlook is not loaded. Other users also report seeing the problem with office 2010 beta. Again we have found that the McAfee application error is also seen with other versions of office and also when no office is installed.

Searching the forums there are many people claiming to try this and try that, uninstall mcafee and send log files and from this it is quite clear that there are quite a few people who are experiencing the application error.

This error is only seen on shutdown. Some advanced user have provided a work around by writing code that is injected into the process to force windows to believe that the McAfee service is shut down. Others have recommended disabling all the McAfee services but this would not leave your computer protected against viruses.

On our examinations we have found that the problem was infact caused by a trojan which seems to be linked with a fake antivirus program. We ran a full scan, after installing and updating malwarebytes on the computer. This detected antivirus.rogue and two registry settings which allow security center notifications. Once scanned and removed, following a reboot the message has not been seen since.

We also noticed two startup entries winnt4.exe and winnt2.exe when the startup list was viewed in msconfig. It would appear that at sometime in the past the computers had been infected with a fake antivirus program.

Viewed: 1281 times.