Process Analysis of McAfee VirusScan v8.0i

Source: NEEA0s Blog

Coffee's Enterprise Edition processes occupy a large amount of memory, which is almost the only unpleasant disadvantage of coffee. What are seven processes in total? If 8.1 of the firewall is not installed, there should be a total of seven processes.

UpdaterUI.exe
Shstat.exe
Tbmon.exe
Vstskmgr.exe
Mcshield.exe
Frameworkservice.exe
NaPrdMgr.exe

UpdaterUI.exe: the automatic upgrade process is in the registry. I don't think it is necessary to let the coffee upgrade once a week. Just go to the Registry and start the project KO. During the upgrade, the process will be started by yourself. After the upgrade, you can turn it off from the process management in the task manager.

Shstat.exe: The same icon as the shield in your system bar. The startup item is in the registry, and it is best to keep it.

Tbmon.exe: the startup Item of the Error Report program is in the registry. I cannot figure out the necessity of this item, especially for individual users.

Vstskmgr.exe: this is a system service. I don't know exactly what to use. Many posts only mention that this process seems to be related to the console. But one thing is certain, that is, disabling it does not have any impact on the system scanning and virus detection. The only thing that requires it is that when you enable the coffee console, if you disable the service at this time, it will first start the service before you can open the console. Therefore, I usually change the service to manual. When you use the console, he will start the service by himself, so don't worry. I changed this service to manual. If it is not started at ordinary times, it will be stopped from the task manager after it is used up.

Mcshield.exe: the Core of coffee and the system service,

Frameworkservice.exe: the background framework process of coffee, which is a service. The test will not affect normal use, but will affect the upgrade. This process is different from vstskmgr.exe and cannot start the service automatically. If you change it to manual, you have to start the service by yourself to run the Upgrade Program, if you don't care about the trouble, you can change it to manual calculation. The coffee only rises once a week ........

NaPrdMgr.exe: this process was available in previous versions. I don't know what it is, that is, it is not in the Registry Startup item or in the service, after reading many posts, I only mentioned two vague articles that the program name seems to be a process used to transmit certain information. This process passes my test and only proves that there is a frameworkservice.exe. if frameworkservice.exe is stopped, it will never appear in the task manager.