MS SQL Server - SQL Express issue with McAfee VirusScan

Author

SQL Express issue with McAfee VirusScan

Russ

2006-02-09, 8:23 pm

We've encountered episodes of SQL Server 2005 Express intermittently
"pausing" for up to 30 seconds on a PC (WinXP Pro, DELL 380) that was also
running McAfee VirusScan version 8. This occurred even after excluding all
SQL Server folders and file types from VirusScan.

Issue goes away immediately if turn off (1) "On-Access Scanner" and (2)
"Buffer Overflow Protection" of VirusScan. Results imply that the McAfee
scanning software is causing the problem, not the scanning of specific
files/processes.

We're in the process of contacting McAfee regarding this. Was wondering if
anyone else has seen this or has a workaround. (We would prefer to continue
using the On-Access Scanner.)

Thanks

Roger Wolter[MSFT]

2006-02-09, 8:23 pm

Are you using "User Instance" connections to SQL Express? If so, there's
another set of database files in your user directory that you may need to
exclude. The simplest way to find them is to search for .MDF and .LDF
files.

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"Russ" <Russ@discussions.microsoft.com> wrote in message
news:090581CD-309D-4187-8018- EB3306019CFC@microso
ft.com...
> We've encountered episodes of SQL Server 2005 Express intermittently
> "pausing" for up to 30 seconds on a PC (WinXP Pro, DELL 380) that was also
> running McAfee VirusScan version 8. This occurred even after excluding
> all
> SQL Server folders and file types from VirusScan.
>
> Issue goes away immediately if turn off (1) "On-Access Scanner" and (2)
> "Buffer Overflow Protection" of VirusScan. Results imply that the McAfee
> scanning software is causing the problem, not the scanning of specific
> files/processes.
>
> We're in the process of contacting McAfee regarding this. Was wondering
> if
> anyone else has seen this or has a workaround. (We would prefer to
> continue
> using the On-Access Scanner.)
>
> Thanks

Russ

2006-02-09, 8:23 pm

Roger, we have the "User Instance" feature turned off.

I just had the "pause" occur with both the On-Access scan and Buffer
Overflow scan features of VirusScan disabled. This means the only method
I've found to completely stop the problem is to unstall VirusScan 8. The
"pause" has never occurred with VirusScan uninstalled.

I'll be talking to McAfee tomorrow and may learn more.

Russ

"Roger Wolter[MSFT]" wrote:

> Are you using "User Instance" connections to SQL Express? If so, there's
> another set of database files in your user directory that you may need to
> exclude. The simplest way to find them is to search for .MDF and .LDF
> files.
>
> --
> This posting is provided "AS IS" with no warranties, and confers no rights.
> Use of included script samples are subject to the terms specified at
> http://www.microsoft.com/info/cpyright.htm
>
> "Russ" <Russ@discussions.microsoft.com> wrote in message
> news:090581CD-309D-4187-8018- EB3306019CFC@microso
ft.com...
>
>
>

Russ

2006-02-17, 11:23 am

Spoke to McAfee. They suggested applying "Patch 11" for the Virus Scan 8i
Enterprise that we're using. This patch solves the problem.

They also provided a registry setting that will make Virus Scan 8 behave
more like Virus Scan 7 (which does not appear to have the issue):
HKey_Local_Machine\S
ystem\CurrentControl
Set\Services\NaiAvTd
i1 then change
the start value from '1' to '4'

"Russ" wrote:
[color=darkred]
> Roger, we have the "User Instance" feature turned off.
>
> I just had the "pause" occur with both the On-Access scan and Buffer
> Overflow scan features of VirusScan disabled. This means the only method
> I've found to completely stop the problem is to unstall VirusScan 8. The
> "pause" has never occurred with VirusScan uninstalled.
>
> I'll be talking to McAfee tomorrow and may learn more.
>
> Russ
>
>
> "Roger Wolter[MSFT]" wrote:
>

Sponsored Links