cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

mcshield.exe remains 'established' according to netstat and TCPview after going offline.

While checking netstat (via netstat -a) after going offline, I noticed that only one connection - mcshield.exe, IP 161.69.199.6 - is always Established. I also ran TCPView just for clarification, and it says the same. Any info I could find on mcshield.exe shows it as a component of McAfee On-Access Anti-virus Scanner, but it seems to have something of a questionable rep amongst users.

With that all said, is it supposed to remain Established when offline? I've never seen this listed before today, and I'm curious whether or not it's a trojan etc. For what it's worth, my mcshield.exe is located in C:\Program Files\Common Files\mcafee\AMCore, which is generally said on most sites to be a 'safe' location, but I'm not sure. And if it's an issue, how do I resolve it?


Thanks in advance!

How Many Badges Can You Collect?
Ready for a little competition? Members like you are earning badges and unlocking perks for their helpful answers. Are you? Click here to find out.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community