How to stop McAfee Client Proxy (mcpservice.exe)

McAfee Client Proxy (mcpservice.exe) Version 2.3.0.0 no longer has its own service, so when you try to stop the process, even as SYSTEM, it’ll fail with an Access Denied error.

mcafee-client-proxy_mcpservice.exe_2.3.0.0_unable-to-terminate_access-denied

So, how to stop McAfee Client Proxy (mcpservice.exe)? Well, with the help of Process Hacker (Process Explorer should also do). Before continuing, let me say that you’ve got to be extra careful and that you’ll be responsible should anything go wrong (these are easy steps though..).

Download link for Process Hacker: http://processhacker.sourceforge.net/

Once I ran Process Hacker, I noticed that the McAfee Client Proxy had a parent process called mfemms.exe that starts from a service called McAfee Service Controller. So that means we’re still going to be able to try and stop this process by working on the parent’s.

mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-properties

Note: If you’re running an old version of McAfee Client Proxy Service, that has its own service, you may follow the steps below that I will action against mfemms.exe and then stop the process.

So, back in Process Hacker (remember to run it as an administrator!):

  • Go to the Services Tab.
  • Go to mfemms’s properties.
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-mfemms-properties
  • Under the tab Security, click Advanced and change the owner to Administrators. Click Ok twice, until mfemms’  properties window closes. You must run this step in order to run next’s!
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-mfemms-properties-security-advanced
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-mfemms-properties-security-owner
  • Now assign Full Control to Authenticated Users and Administrators (just Administrators didn’t work for me). Do the same for SYSTEM if you’re running as SYSTEM.
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-mfemms-properties-security-permissions
  • You can finally stop the service.
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-stop-mfemms
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-mfemms-stopped
  • Now that the parent service is stoppped, go back to the Processes Tab and kill mcpservice.exe.
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-terminate
  • After a reboot, the process will start again. You may disable mfemms service to prevent it from starting again (not suggested as this service may be controlling other important processes/services).

4 thoughts on “How to stop McAfee Client Proxy (mcpservice.exe)

  1. Hi,
    This solution worked for months (anyway many, many thanks for this article!), but after last update it does not work anymore 🙁 They (McAfee?) improvements something, they added new process calles “McAfee Process Validation Service” or “McAfee Core Firewall Service” (see ref1) and following the instructions above, now I can’t kill Client Proxy process and getting “Access denied”. What a pity… 😐
    I could pay a lot bitcoins to have a fun with killing McAfee Proxy Client. 😉

    ref1: https://i.imgur.com/bOb2LiQ.png

    1. Hey,
      Aw, that’s a pity! I’m no longer working with McAfee products, last time I did it wast over 6 months ago. What if you kill the service you mentioned first and then you get on to the other one?

  2. Thank you Simone for the answer.
    Yeah, I tried several times on different ways, and still have the same message: “Unable to terminate McpService.exe (PID XXXX): Access is denied.”
    Although these new services were created, McpService still depends only one parent service – mfemms.exe. Stopping mfemms not helped anymore.

    1. Thanks for letting me (us) know! If I’ll ever end up working with McAfee again, it’ll be the first thing I’ll try 😀 – If you find anything, feel free to let me know and we can update this post. Thanks.

Leave a Reply

Your email address will not be published. Required fields are marked *