How to stop McAfee Client Proxy (mcpservice.exe)

How to stop McAfee Client Proxy (mcpservice.exe)

McAfee Client Proxy (mcpservice.exe) Version 2.3.0.0 no longer has its own service, so when you try to stop the process, even as SYSTEM, it’ll fail with an Access Denied error.

mcafee-client-proxy_mcpservice.exe_2.3.0.0_unable-to-terminate_access-denied

So, how to stop McAfee Client Proxy (mcpservice.exe)? Well, with the help of Process Hacker (Process Explorer should also do). Before continuing, let me say that you’ve got to be extra careful and that you’ll be responsible should anything go wrong (these are easy steps though..).

Download link for Process Hacker: http://processhacker.sourceforge.net/

Once I ran Process Hacker, I noticed that the McAfee Client Proxy had a parent process called mfemms.exe that starts from a service called McAfee Service Controller. So that means we’re still going to be able to try and stop this process by working on the parent’s.

mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-properties

Note: If you’re running an old version of McAfee Client Proxy Service, that has its own service, you may follow the steps below that I will action against mfemms.exe and then stop the process.

So, back in Process Hacker (remember to run it as an administrator!):

  • Go to the Services Tab.
  • Go to mfemms’s properties.
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-mfemms-properties
  • Under the tab Security, click Advanced and change the owner to Administrators. Click Ok twice, until mfemms’  properties window closes. You must run this step in order to run next’s!
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-mfemms-properties-security-advanced
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-mfemms-properties-security-owner
  • Now assign Full Control to Authenticated Users and Administrators (just Administrators didn’t work for me). Do the same for SYSTEM if you’re running as SYSTEM.
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-mfemms-properties-security-permissions
  • You can finally stop the service.
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-stop-mfemms
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-mfemms-stopped
  • Now that the parent service is stoppped, go back to the Processes Tab and kill mcpservice.exe.
    • mcafee-client-proxy_mcpservice.exe_2.3.0.0_process-hacker-terminate
  • After a reboot, the process will start again. You may disable mfemms service to prevent it from starting again (not suggested as this service may be controlling other important processes/services).

IT Droplets

IT Droplets