MASVC process releases more handles using (get-process name "masvc")

Technical Articles ID: KB92584
Last Modified: 2020-09-09 16:50:53 Etc/GMT

Environment

McAfee Agent (MA) 5.6.5, 5.6.4, 5.6.3

Problem

You see more MA handles for the MASVC.exe process when you run the following command in a PowerShell:

get-process -name "masvc"

You see an unexpected large number of handles (17000–27000) for the MASVC process:

Handles	NPM(K)	PM(K)	WS(K)	CPU(s)	Id	SI	ProcessName
--------	--------	=====	=====	=====	=====	=====	=====
17599	30	43216	93686	7,348.95	4380	0	masvc
PS C:\WINDOWS\system32>

By default, the number of handles you see are about 400–500:

Handles	NPM(K)	PM(K)	WS(K)	CPU(s)	Id	SI	ProcessName
--------	--------	--------	--------	--------	--------	--------	--------
444	34	18856	22480	249,97	4104	0	masvc
PS C:\WINDOWS\system32>

Cause

The MASVC process has handles in the following registry key, which is kept open during collect and send property:

HKLM\SYSTEM\ControlSet001\Services\LanmanServer\Parameters

The registry entry updates the computer description in the MA property page. The same registry entry is also used to update Computer description, My computer, Properties.

Solution

This issue is resolved with McAfee Agent 5.6.6.

Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, go to the Product Downloads site.

Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.

NOTE: You need a valid Grant Number for access. See KB56057 - How to download product updates and documentation for more information about the Product Downloads site, and alternate locations for some products.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

MASVC process releases more handles using (get-process name "masvc")

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

MASVC process releases more handles using (get-process name "masvc")

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title