The McAfee Agent Service service terminated unexpectedly (ma_variant.dll)

Technical Articles ID: KB92905
Last Modified: 2021-02-23 17:35:43 Etc/GMT

Environment

McAfee Agent (MA) 5.6.0–5.6.5

For environment information, see KB51573 - Supported platforms for McAfee Agent 5.x.

Problem 1

When you install McAfee Agent 5.6.0 or later, it can cause several unexpected system crashes.

The Windows System event log for the computer records one of the following:

Service Control Manager
Event ID: 7031
Description: The McAfee Agent Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Or
Service Control Manager
Event ID: 7034
Description: The McAfee Agent Service service terminated unexpectedly. It has done this 1 time(s).

Problem 2

The system crash stack includes the following information:

0:013> ~kvn

Child-SP RetAddr : Args to Child : Call Site
00 00000000`039eed90 00007ff8`caa1c266 : 00000000`01ce0000 00007ff8`caa797b0 00000000`00000008 00000000`01ce0000 : ntdll!RtlReportCriticalFailure+0x97
01 00000000`039eeea0 00007ff8`caa1c531 : 00000000`00000008 00000000`0411c9f0 00000000`01ce0000 00000000`00000006 : ntdll!RtlpHeapHandleError+0x12
02 00000000`039eeed0 00007ff8`ca9ba505 : 00000000`00000000 00000000`00000000 00000000`00000002 00000000`00000020 : ntdll!RtlpHpHeapHandleError+0x5d
03 00000000`039eef00 00007ff8`ca9c990d : 00007ff8`b93d8c40 00000000`00000000 00000000`00000000 00007ff8`c24a2967 : ntdll!RtlpLogHeapFailure+0x45
04 00000000`039eef30 00000000`688d8d94 : 00000000`00000000 00000000`00000000 00000000`0411cf90 00007ff8`b937333c : ntdll!RtlFreeHeap+0x92b1d
05 00000000`039eefd0 00007ff8`c24a1a35 : 00000000`022b32c0 00000000`00000000 00000000`0411cca1 00008c7a`e52e0814 : msvcr100!free+0x1c
06 00000000`039ef000 00007ff8`b93739cc : 00000000`00000003 00000000`039ef0b0 00000000`022b32c0 00007ff8`b9373469 : ma_variant!ma_wbuffer_release+0x15
07 00000000`039ef030 00007ff8`b9373c17 : 00000000`00000000 00000000`00000000 00000000`00000000 00007ff8`b9373469 : ma_serialization!ma_serializer_add_variant+0x41c
08 00000000`039ef0d0 00007ff8`b9373ad7 : 00000000`00000003 00000000`039ef1f0 00000000`00000000 00007ff8`b9373469 : ma_serialization!ma_serializer_add_variant+0x667
09 00000000`039ef170 00007ff8`b9373ad7 : 00000000`039ef280 00000000`039ef280 00000000`00000000 00007ff8`ca930000 : ma_serialization!ma_serializer_add_variant+0x527
0a 00000000`039ef210 00007ff8`b93c92c2 : 00000000`039ef2f8 00000000`00000000 00000000`0411ce30 00007ff8`b93c76b1 : ma_serialization!ma_serializer_add_variant+0x527

Or:

BUCKET_ID_IMAGE_STR: ma_variant.dll FAILURE_MODULE_NAME: ma_variant BUCKET_ID_MODULE_STR: ma_variant FAILURE_FUNCTION_NAME: Unknown BUCKET_ID_FUNCTION_STR: Unknown BUCKET_ID_OFFSET: 1a35 BUCKET_ID_MODTIMEDATESTAMP: 5d669088 BUCKET_ID_MODCHECKSUM: 1afea BUCKET_ID_MODVER_STR: 5.6.2.209 BUCKET_ID_PREFIX_STR: HEAP_CORRUPTION_ACTIONABLE_BlockNotBusy_DOUBLE_FREE_ FAILURE_PROBLEM_CLASS: HEAP_CORRUPTION

Cause

One thread is reading the software_id table data, while a second thread is trying to write to the same table the first thread has locked.

Solution

This issue is resolved with McAfee Agent 5.6.5 Hotfix 1 (build 5.6.5.195) or later.

Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, go to the Product Downloads site.

Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.

NOTE: You need a valid Grant Number for access. See KB56057 - How to download product updates and documentation for more information about the Product Downloads site, and alternate locations for some products.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

The McAfee Agent Service service terminated unexpectedly (ma_variant.dll)

Environment

Problem 1

Problem 2

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

The McAfee Agent Service service terminated unexpectedly (ma_variant.dll)

Environment

Problem 1

Problem 2

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title