<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:media="http://search.yahoo.com/mrss/">
<channel>
<title>DisplayFusion RSS: DisplayFusionService.exe trying to terminate McAfee Anti-Virus processes; is this expected or a bug?</title>
<atom:link href="https://www.displayfusion.com/Discussions/RSS/?TopicID=dd540acb-d98a-48ec-82c9-00001133325a" rel="self" type="application/rss+xml" />
<link>https://www.displayfusion.com/Discussions/RSS/?TopicID=dd540acb-d98a-48ec-82c9-00001133325a</link>
<description>DisplayFusion RSS: DisplayFusionService.exe trying to terminate McAfee Anti-Virus processes; is this expected or a bug?</description>
<lastBuildDate>Sun, 10 May 2026 14:14:06 GMT</lastBuildDate>
<language>en</language>
<sy:updatePeriod>hourly</sy:updatePeriod>
<sy:updateFrequency>1</sy:updateFrequency>
<generator>https://www.displayfusion.com/Discussions/RSS/?TopicID=dd540acb-d98a-48ec-82c9-00001133325a</generator>
<item>
<title>RE: DisplayFusionService.exe trying to terminate McAfee Anti-Virus processes; is this expected or a bug?</title>
<link>https://www.displayfusion.com/Discussions/View/displayfusionserviceexe-trying-to-terminate-mcafee-anti-virus-processes-is-this-expected-or-a-bug/?ID=dd540acb-d98a-48ec-82c9-00001133325a#5</link>
<pubDate>Wed, 11 Jun 2014 20:16:04 GMT</pubDate>
<dc:creator>Binary Fortress Software</dc:creator>
<guid isPermaLink="false">https://www.displayfusion.com/Discussions/View/displayfusionserviceexe-trying-to-terminate-mcafee-anti-virus-processes-is-this-expected-or-a-bug/?ID=dd540acb-d98a-48ec-82c9-00001133325a#5</guid>
<category>DisplayFusion</category>
<description><![CDATA[Had another customer report this recently, and the latest DisplayFusion 6.0 Beta resolved the issue for them.]]></description>
<content:encoded><![CDATA[<div class="CTDiscussions">
Had another customer report this recently, and the latest DisplayFusion 6.0 Beta resolved the issue for them.
</div>
]]></content:encoded>
</item>
<item>
<title>RE: DisplayFusionService.exe trying to terminate McAfee Anti-Virus processes; is this expected or a bug?</title>
<link>https://www.displayfusion.com/Discussions/View/displayfusionserviceexe-trying-to-terminate-mcafee-anti-virus-processes-is-this-expected-or-a-bug/?ID=dd540acb-d98a-48ec-82c9-00001133325a#4</link>
<pubDate>Wed, 23 Apr 2014 18:20:06 GMT</pubDate>
<dc:creator>Binary Fortress Software</dc:creator>
<guid isPermaLink="false">https://www.displayfusion.com/Discussions/View/displayfusionserviceexe-trying-to-terminate-mcafee-anti-virus-processes-is-this-expected-or-a-bug/?ID=dd540acb-d98a-48ec-82c9-00001133325a#4</guid>
<category>DisplayFusion</category>
<description><![CDATA[@Tammy: Would you be able to help us troubleshoot this further? In the current DisplayFusion 6.0 Beta, DisplayFusionService enumerates all running processes with this flag: PROCESS_QUERY_LIMITED_INFORMATION, so we're not sure why McAfee would think that DisplayFusionService is trying to terminate...]]></description>
<content:encoded><![CDATA[<div class="CTDiscussions">
@Tammy: Would you be able to help us troubleshoot this further? In the current DisplayFusion 6.0 Beta, DisplayFusionService enumerates all running processes with this flag: PROCESS_QUERY_LIMITED_INFORMATION, so we're not sure why McAfee would think that DisplayFusionService is trying to terminate it.<br/>
<br/>
Could you try updating to the latest beta (<a href="http://www.displayfusion.com/Download/Beta/" target="_blank" rel="nofollow"><b>http://www.displayfusion.com/Download/Beta/</b></a>) on one of the affected machines, and if the issue still exists, send us the log from McAfee, and the info from the DisplayFusion Settings &gt; Troubleshooting tab?<br/>
<br/>
Thanks!
</div>
]]></content:encoded>
</item>
<item>
<title>RE: DisplayFusionService.exe trying to terminate McAfee Anti-Virus processes; is this expected or a bug?</title>
<link>https://www.displayfusion.com/Discussions/View/displayfusionserviceexe-trying-to-terminate-mcafee-anti-virus-processes-is-this-expected-or-a-bug/?ID=dd540acb-d98a-48ec-82c9-00001133325a#3</link>
<pubDate>Tue, 22 Apr 2014 15:47:35 GMT</pubDate>
<dc:creator>Binary Fortress Software</dc:creator>
<guid isPermaLink="false">https://www.displayfusion.com/Discussions/View/displayfusionserviceexe-trying-to-terminate-mcafee-anti-virus-processes-is-this-expected-or-a-bug/?ID=dd540acb-d98a-48ec-82c9-00001133325a#3</guid>
<category>DisplayFusion</category>
<description><![CDATA[My company is also experiencing this.  The McAfee access protection rule to prevent termination of McAfee processes is activated whenever a process tries to interact with a protected McAfee process, and explicitly seeks the access mask called TERMINATE_PROCESS, which is a flag that programmers of...]]></description>
<content:encoded><![CDATA[<div class="CTDiscussions">
My company is also experiencing this.  The McAfee access protection rule to prevent termination of McAfee processes is activated whenever a process tries to interact with a protected McAfee process, and explicitly seeks the access mask called TERMINATE_PROCESS, which is a flag that programmers of the 3rd party process, in this case DisplayFusionService.exe, pass along in their request for gaining access/info from the protected McAfee process.<br/>
 <br/>
It's a behavior that processes do not need to engage in but has become a fairly common programming practice because the programmers are not using the principle of "least privilege".  It is easier for the programmer to seek a higher level of access, even to do mundane things in their program (not actually intending to terminate the process) than it is to take the time to use appropriate levels of access for each task.<br/>
<br/>
This is something that needs to change since it makes legitimate programs appear malicious.
</div>
]]></content:encoded>
</item>
<item>
<title>RE: DisplayFusionService.exe trying to terminate McAfee Anti-Virus processes; is this expected or a bug?</title>
<link>https://www.displayfusion.com/Discussions/View/displayfusionserviceexe-trying-to-terminate-mcafee-anti-virus-processes-is-this-expected-or-a-bug/?ID=dd540acb-d98a-48ec-82c9-00001133325a#2</link>
<pubDate>Wed, 11 Dec 2013 14:34:06 GMT</pubDate>
<dc:creator>Binary Fortress Software</dc:creator>
<guid isPermaLink="false">https://www.displayfusion.com/Discussions/View/displayfusionserviceexe-trying-to-terminate-mcafee-anti-virus-processes-is-this-expected-or-a-bug/?ID=dd540acb-d98a-48ec-82c9-00001133325a#2</guid>
<category>DisplayFusion</category>
<description><![CDATA[That's most definitely not expected. Would you be able to do the following to help troubleshoot this issue?
Enable debug logging on the Troubleshooting tab (set it to Logging: Important Only) and click Apply
Restart DisplayFusion
Reproduce the issue (please note the time so I'll know where to ...]]></description>
<content:encoded><![CDATA[<div class="CTDiscussions">
That's most definitely not expected. Would you be able to do the following to help troubleshoot this issue?<br/>
<ul class="ListBullet">
<li>Enable debug logging on the Troubleshooting tab (set it to Logging: Important Only) and click Apply</li>
<li>Restart DisplayFusion</li>
<li>Reproduce the issue (please note the time so I'll know where to look in the log file)</li>
<li>Attach the %appdata%\DisplayFusion\DisplayFusion.log file to this topic (can be found by clicking the 'Open Log' button on the Troubleshooting tab)</li>
<li>Disable debug logging after sending me the log</li></ul>
<br/>
Thanks!
</div>
]]></content:encoded>
</item>
<item>
<title>DisplayFusionService.exe trying to terminate McAfee Anti-Virus processes; is this expected or a bug?</title>
<link>https://www.displayfusion.com/Discussions/View/displayfusionserviceexe-trying-to-terminate-mcafee-anti-virus-processes-is-this-expected-or-a-bug/?ID=dd540acb-d98a-48ec-82c9-00001133325a</link>
<pubDate>Tue, 10 Dec 2013 23:19:57 GMT</pubDate>
<dc:creator>Binary Fortress Software</dc:creator>
<guid isPermaLink="false">https://www.displayfusion.com/Discussions/View/displayfusionserviceexe-trying-to-terminate-mcafee-anti-virus-processes-is-this-expected-or-a-bug/?ID=dd540acb-d98a-48ec-82c9-00001133325a</guid>
<category>DisplayFusion</category>
<description><![CDATA[Hi Team,
One of the users in our network installed DisplayFusion and since then the DisplayFusionService.exe is trying to terminate McAfee's VirusScan related processes. This is resulting in zillions of VSE related point product events on the PC and filling up the McAfee central management solut...]]></description>
<content:encoded><![CDATA[<div class="CTDiscussions">
Hi Team,<br/>
<br/>
One of the users in our network installed DisplayFusion and since then the DisplayFusionService.exe is trying to terminate McAfee's VirusScan related processes. This is resulting in zillions of VSE related point product events on the PC and filling up the McAfee central management solution i.e. ePO's Database.<br/>
<br/>
Why DisplayFusionService.exe trying to terminate Anti-Virus process?<br/>
If this is expected behavior then its not looking good as we may have to remove DisplayFusionService.exe<br/>
<br/>
The below is an extract from VirusScan's Access Protection log<img src="https://www.displayfusion.com/MediaCommon/SVGs/FontAwesome/face-flushed.light.svg" alt=":-[" style="box-sizing:border-box;position:relative;overflow:hidden;vertical-align:middle !important;width:16px;height:16px;" HelpButtonData=":-[" HelpButtonDataAlign="BelowMiddle" />br/]
<br/>
<div class="col-md-12 BoxWrap"><div class="Box table-responsive"><a name="code" style="width:0; height:0;"></a><h2 class="TableTitle" style="border:0"><div class="TableTitleText">Code</div><div class="TitleButtons"><div class="TableTitleButton"><a href="#" onclick="return false;" data-clipboard-target="#code019e123cfb8970e6a0d8f086558d6b6a" class="ClipboardCopyControl"><img src="https://www.displayfusion.com/MediaCommon/SVGs/FontAwesome/clone.blue.svg" style="box-sizing:border-box;position:relative;overflow:hidden;width:auto;max-width:16px;height:16px;" /><span class="Text">Copy</span></a></div><div class="TableTitleButton"><a href="#" onclick="bfs.util.codeEditorSelectAll('code019e123cfb8970e6a0d8f086558d6b6aJs'); return false;"><img src="https://www.displayfusion.com/MediaCommon/SVGs/FontAwesome/square-check.blue.svg" style="box-sizing:border-box;position:relative;overflow:hidden;width:auto;max-width:16px;height:16px;" /><span class="Text">Select All</span></a></div></div></h2><div class="TableTitleContent table-responsive"><div class="AceEditorWrapper" style="border-top:solid 1px var(--color-default-border);padding:0"><pre id="code019e123cfb8970e6a0d8f086558d6b6aJs" contenteditable="true" spellcheck="true" class="skiptranslate" style="width:100%; min-height:75px;">10/12/2013      12:07:35 PM     Blocked by Access Protection rule       NT AUTHORITY\SYSTEM     
C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe   C:\Program Files (x86)\McAfee\Common Framework\naPrdMgr.exe 
Common Standard Protection:Prevent termination of McAfee processes      Action blocked : Terminate

10/12/2013      12:07:35 PM     Blocked by Access Protection rule       NT AUTHORITY\SYSTEM     
C:\Program Files(x86)\DisplayFusion\DisplayFusionService.exe   C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe        
Common Standard Protection:Prevent termination of McAfee processes      Action blocked : Terminate</pre><textarea id="code019e123cfb8970e6a0d8f086558d6b6a" name="code019e123cfb8970e6a0d8f086558d6b6a" style="position:absolute; top:0; left:-999999px; width:1px; height:1px;"></textarea></div>
</div></div></div><br/>
<br/>
Regards,<br/>
<br/>
Amit Vaidya
</div>
]]></content:encoded>
</item>
</channel>
</rss>