Bluepoint Design

Practical cost effective solutions   
McAfee AP & Defender

Home
Up
If you have McAfee Virus Scan Enterprise with the Access Protection (let's call it AP) enabled you might find that Windows Defender updates are not being installed. Further inspection would find that in the Windows Update logs an error 80070005 for which there is no help on MS's website.

The problem can be one or two things. First the Defender updates application is running under the Service Host  (svchost.exe) and AP prevents svchost from launching other applications. The second is that the update application mpcmdrun.exe uses TFTP for transfers which is also blocked by a different rule under Access Protection. The solution in both cases is to add the application to the exemptions for AP.

To add the exemption simply go into the AP process properties. To get to the VS console right click the shield in the system tray and choose it from the menu. Then double click on the AP to get the properties. You will need administrative privileges.
Select "Antivirus Standard Protection" in the left and then scroll down to "Prevent use of tftp.exe". Double click it and add mpcmdrun.exe
 
Now do the same for "Anti-virus Maximum Protection" and "Prevent svchost executing non-Windows executables".

 
Practical cost effective solutions