Since yesterday I noticed that there is an existing problem when you run a terminal server farm within the following environment.
- Windows 2008
- Multi-Language Support Enabled
- McAfee VSE 8.7
- McAfee Patch Level 4
- Terminal Services installed.
Problem
Quote from https://kc.mcafee.com/corporate/index?page=content&id=KB70384&cat=INTERNAL_CATEGORIES&actp=LIST:
“A blue screen error occurs sporadically when VirusScan Enterprise 8.7i with Patch 4 is installed on systems with Windows 2008 and terminal services such as Citrix terminal services or Windows Vista with Fast-User-Switching and where multi-language support has been enabled.”
I found out that this problem is already known for a while. You can find more details in the knowledgebase from McAfee: Bugcheck 0×5 INVALID_PROCESS_ATTACH_ATTEMPT.
Last update of this article was December 09, 2010. The only workaround available is to downgrade the McAfee Engine back to Patch Level 3.
Update (3th of February 2011):
There is now a hotfix available to solve the problem. Please find more details here: https://kc.mcafee.com/corporate/index?page=content&id=KB70384