McAfee Anti-Virus Error

I was using my computer when McAfee Anti-Virus upgraded itself automatically. Unfortunately, it malfunctioned and caused Internet Explorer to crash. When IE continued to crash now and then, I suspected that McAfee was causing it, so I reinstalled McAfee and IE is working fine now. However, I got the following error from Action Center before reinstalling McAfee. The computer seems to be working fine now, although I can't see some images on websites such as Google Streetview. Please help.

Description
Faulting Application Path: C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe
Problem signature
Problem Event Name: APPCRASH
Application Name: mini_WMCore.exe
Application Version: 0.0.0.0
Application Timestamp: 4b0e5dd8
Fault Module Name: unknown
Fault Module Version: 0.0.0.0
Fault Module Timestamp: 00000000
Exception Code: c0000005
Exception Offset: 00000000
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 6153

Your best first option at this time is to uninstall McAfee and use one of the free AV's, I prefer Microsoft Security Essentials but there are others.

Ken

Sonic Order said:

I was using my computer when McAfee Anti-Virus upgraded itself automatically. Unfortunately, it malfunctioned and caused Internet Explorer to crash. When IE continued to crash now and then, I suspected that McAfee was causing it, so I reinstalled McAfee and IE is working fine now. However, I got the following error from Action Center before reinstalling McAfee. The computer seems to be working fine now, although I can't see some images on websites such as Google Streetview. Please help.

Description
Faulting Application Path: C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe
Problem signature
Problem Event Name: APPCRASH
Application Name: mini_WMCore.exe
Application Version: 0.0.0.0
Application Timestamp: 4b0e5dd8
Fault Module Name: unknown
Fault Module Version: 0.0.0.0
Fault Module Timestamp: 00000000
Exception Code: c0000005
Exception Offset: 00000000
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 6153

Click to expand...

McAfee has a very bad reputation on Win7 systems
Remove it and use MSE

I bought my new laptop thursday, and it had McAfee on it. I uninstalled it and put Avast. Should I wish to MSE?

That's clearly your matter of choice.
I use Avast for over 2 years now on 4 PCs without any problems at all. (besides the occasional false positive)
If at one point you feel like it's not the program for you, uninstall it and switch to MSE.
Both shouldn't give you any grieve unlike McAfee/Symantec.

-DG

Does anyone what C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe
is?

That is apparently the Dell Wireless Driver

I'm going on a limb here but to me it looks like McAfee stopped the driver to connect to somewhere and the driver's response was a crash.
Hard to say if McAfee stopped it because it was a bogus connection or because it's installation/upgrade failed.
If you want to stick with McAfee use their tool do uninstall it completely before you re install the new version.

How to uninstall or reinstall supported McAfee consumer products using the McAfee Consumer Products Removal tool (MCPR.exe)

-DG

I used McAfee's removal tool and reinstalled the Anti-Virus software. If C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe is a wireless driver, which one is it on Dell's website? If it crashed, do I need to reinstall the driver as well?

your Dell Driver you should find here:
Dell - Drivers and Downloads
enter your Service Tag for easier selection.

You can try the one installed first. Chances are, now that your McAfee works correctly, it will do as it should.
In case it crashes again, you could still get it from that Dell Site

-DG

HonorGamer said:

I bought my new laptop thursday, and it had McAfee on it. I uninstalled it and put Avast. Should I wish to MSE?

Click to expand...

Avast webshield stole about 70% of my bandwidth and it's detection rate is below both MSE and Avira AV

AV-Test.org · Tests of Anti-Virus- and Security-Software

That's what you say...
I say Avast has no noticeable impact on my system, updates several time a day and never failed me in over 2 years on any of the 6 computers I maintain.
While when I tested MSE (shortly after it was released), I caught a nasty within the first week.

I don't give much on those "independent" tests since each and every one of them has a different outcome
Remember who pays the Orchestra can decide what they play , too.

-DG

It's not what I say - It's what 100's of people say (Including people on this site) that avast webshield steals bandwidth. Not surprising since it goes through a http proxy. Avast forums are full of people complaining. The strange thing is there are those it does not affect...maybe something to do with servers used.

I use avira now but I haven't had any forum of malicious code in years.

I checked the logs in the event viewer and discovered that the following logs keep getting repeated every time I turn the computer on. The computer is running a bit slower than usual and I can't see some images on websites, but other than that, it's fine. Please help.

Log Name: Application
Source: gusvc
Date: 09/11/2010 14:59:15
Event ID: 0
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: David-PC
Description:
The description for Event ID 0 from source gusvc cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
Service started
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="gusvc" />
<EventID Qualifiers="0">0</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-11-09T14:59:15.000000000Z" />
<EventRecordID>3294</EventRecordID>
<Channel>Application</Channel>
<Computer>David-PC</Computer>
<Security />
</System>
<EventData>
<Data>Service started</Data>
</EventData>
</Event>

Log Name: Application
Source: gupdate
Date: 09/11/2010 14:31:01
Event ID: 0
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: David-PC
Description:
The description for Event ID 0 from source gupdate cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
Service stopped
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="gupdate" />
<EventID Qualifiers="0">0</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-11-09T14:31:01.000000000Z" />
<EventRecordID>3293</EventRecordID>
<Channel>Application</Channel>
<Computer>David-PC</Computer>
<Security />
</System>
<EventData>
<Data>Service stopped</Data>
</EventData>
</Event>

Log Name: Application
Source: LMS
Date: 09/11/2010 14:15:10
Event ID: 1
Task Category: None
Level: Warning
Keywords: Classic
User: SYSTEM
Computer: David-PC
Description:
LMS Service cannot connect to Intel(R) MEI driver
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="LMS" />
<EventID Qualifiers="32768">1</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-11-09T14:15:10.000000000Z" />
<EventRecordID>3265</EventRecordID>
<Channel>Application</Channel>
<Computer>David-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data>LMS Service cannot connect to Intel(R) MEI driver</Data>
</EventData>
</Event>

Log Name: Application
Source: sprtsvc_dellsupportcenter
Date: 09/11/2010 14:17:23
Event ID: 1
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: David-PC
Description:
The description for Event ID 1 from source sprtsvc_dellsupportcenter cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
Service started
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="sprtsvc_dellsupportcenter" />
<EventID Qualifiers="16386">1</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-11-09T14:17:23.000000000Z" />
<EventRecordID>3284</EventRecordID>
<Channel>Application</Channel>
<Computer>David-PC</Computer>
<Security />
</System>
<EventData>
<Data>Service started</Data>
</EventData>
</Event>

With that stuff I would like to ask you to run HijackThis and post the logfile here

What I see is a bunch of junk which apparently is damaged or uninstalled uncorrectly HijackThis will show if there are more potential customers.

gusvc = Google Toolbar
gupdate = Google Toolbar
sprtsvc_dellsupportcenter = possibly malware (several webpages classify this malware, could be as well just OEM bloat stuff)

LMS Service cannot connect to Intel(R) MEI driver here you should possibly re install your chipset drivers. You should be able to find them at the page I named in an earlier post.

-DG

Thanks for your suggestions. I reinstalled the chipset drivers and they'll working fine now. I think it was the Google Toolbar that started all the problems. Is the sprtsvc_dellsupportcenter alright?

A few weeks ago, there was an error posted in Action Center saying

Description
Windows Installer reconfigured the product. Product Name: Google Toolbar for Internet Explorer. Product Version: 1.0.0. Product Language: 1033. Manufacturer: Google Inc.. Reconfiguration success or error status: 1638.

Aside from the Google Toolbar logs, I'm still getting the following log in event viewer.

Log Name: Application
Source: LMS
Date: 10/11/2010 13:33:19
Event ID: 1
Task Category: None
Level: Warning
Keywords: Classic
User: SYSTEM
Computer: David-PC
Description:
LMS Service cannot connect to Intel(R) MEI driver
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="LMS" />
<EventID Qualifiers="32768">1</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-11-10T13:33:19.000000000Z" />
<EventRecordID>3366</EventRecordID>
<Channel>Application</Channel>
<Computer>David-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data>LMS Service cannot connect to Intel(R) MEI driver</Data>
</EventData>
</Event>

Thanks for the feedback SonicOrder.
I'm glad it's all working for you now.
My personal POV in the matter :Toolbars are generally bad (not always in a malicious way tho) so I kill them whenever I come across..

You see...a little inconsistency with those so called BHOs and your Internet experience/responsiveness goes down the drain.

As for sprtsvc_dellsupportcenter
I don't own a Dell, so I can't be sure. Didn't find any convincing evidence on Google either... but it appears to be OK as long as it's in the original folder "C:\Program Files\Dell Support Center\bin"

-DG

LMS Service cannot connect to Intel(R) MEI driver

That should have been resolved by re installing the chipset drivers. Did you can uninstall them first and then re installed them ?
If not perhaps you should try it this way.

Then again it's only a flagged event, if your computer runs fine otherwise you should be all set
-DG

Thanks for the help. I think I didn't reinstall the chipset drivers; I just upgraded the wired networking driver.

I installed the Intel Chipset without uninstalling it and I think it has slowed down my computer. The driver works now, but Internet Explorer crashes whenever I go to any websites with a lot of images. Please help.

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 12/11/2010 19:49:12
Event ID: 63
Task Category: None
Level: Warning
Keywords: Classic
User: David-PC\David
Computer: David-PC
Description:
A provider, IntelMEProv, has been registered in the Windows Management Instrumentation namespace root\Intel_ME to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="32768">63</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-11-12T19:49:12.000000000Z" />
<EventRecordID>3566</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>David-PC</Computer>
<Security UserID="S-1-5-21-2757666640-822403823-612415957-1000" />
</System>
<EventData>
<Data>IntelMEProv</Data>
<Data>root\Intel_ME</Data>
</EventData>
</Event>