Home How it works Support Boost Connect Download

Boost Connect

Uncovering the DNA of programs.
Good programs    
Fair programs  
Bad programs 

What is mcshield.exe?

Part of Anti-Malware Core by McAfee

What is it?

McAfee On-Access Scanner service features true blocking On Access Scanning. It scans every file being accessed from or written to the machine and blocks infections if any. On Access Scanner can be configured to scan on Read Only, Write only or both. It can also be configured to scan files on network volumes.
Download Boost (100% FREE) Speed up Anti-Malware Core and optimize your PC.

How does mcshield.exe run?

Service - mcshield.exe runs as a background Windows service called 'mfecore' (McAfee Anti-Malware Core). This service runs as the SYSTEM account with extensive privileges on the local computer, and acts as the computer on the network. McAfee Anti-Malware Core runs as a program that can be started by the Service Controller and that obeys the service control protocol. This type of service runs in a process by itself.


What is the community is seeing?What is the community is doing?
About 0.0% of all Boost users have the mcshield.exe process running.Of the 0.0% of mcshield.exe users, 12.0% have disabled it.
How resource intensive is mcshield.exe?
Comparison based on the average resource utilization across all programs.
0.00557% CPU55685.4%
Average CPU utilization across all programs is 0.00001%.
319.38 MB RAM1483.2%
Average private memory utilization across all programs is 21.53 MB.
5,371 /min238.4%
Average I/O read and write operations for all programs is 2,253 per minute.
150 context switches/sec150.0%
Average context switches for all programs is 100 per second.
Typical file (disk image) location:
C:\Program Files\common files\mcafee\amcore\mcshield.exe

Are there other versions of Anti-Malware Core?

What modules are loaded?

A module is a dynamic link library (DLL) or an executable file that is loaded into the process. Below is a list of non-system modules that are loaded by Anti-Malware Core.

What else is related?

What Windows OS versions does this run on?

Windows 7 Home Premium (6.1.7601.65536)

About McAfee, Inc.

McAfee, a wholly owned subsidiary of Intel Corporation (NASDAQ:INTC), is the world’s largest dedicated security technology company. McAfee delivers proactive an More...
Download Boost

File details

File name: mcshield.exe
Publisher: McAfee, Inc. (verified)
Name: Anti-Malware Core
Description: McAfee On-Access Scanner service
Version: Anti-Malware Core.
Size: 1001.67 KB

Digital certificate

Issued to: McAfee
Certificate authority: VeriSign
Effective date: 6/10/2011

Resource utilization

CPU utilization averages
Total CPU: 0.0127885083%
Privileged CPU: 0.0072199688%
User CPU: 0.00556853942209%
Privileged CPU time: 40310.66 ms
Privileged CPU time /min: 973 ms
CPU cycle count: 1,578,969,448
CPU cycle count /min: 2,072,464,488
Context switches /sec: 150
Memory utilization averages
Committed memory: 572.13 MB
Peak committed memory: 674.53 MB
Paged memory: 319.38 MB
Peak paged memory: 458.04 MB
Paged system memory: 184.44 KB
Non-paged system memory: 43.33 KB
Working set memory: 305.53 MB
Peak working set memory: 442.83 MB
Min working set memory: 112.58 MB
Private memory: 319.38 MB
Page faults: 3,361,624
Page faults /min: 81,174
Process I/O averages
Total read operations: 221,925
Read operations /min: 5,359
Read transfer /min: 160.87 MB
Total write operations: 481
Write operations /min: 12
Total write transfer: 2.36 MB
Write transfer /min: 58.28 KB
Total other operations: 1,122,332
Other operations /min: 27,101
Other Transfer /min: 71.62 MB
Handle count average: 665
Thread count average: 51
Thread resource averages

Process details

Runs as (owner): System
Integrety level: System
Windows platform: 64-bit
Runs as a service: Yes
Parent Process
Process Command
"C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe"

Service details

Name: McAfee Anti-Malware Core
Service name: mfecore
Service type: Win32OwnProcess
Description: “McAfee OnAccess Scanner”

Image hashes

MD5: e85ac33b3e5d81bf750ac8ffbe7fd46f
SHA-1: db9942b37e698170e26b6d891e5185405cf8fad9

PE image details

CLR assembly: Yes
Langauge*: Microsoft Visual C# / Basic .NET
File packed: No
Import Table
Stay up to date with news about Boost
Subscribe to our newsletter to receive the latest Boost news and discounts.
© 2018 Reason Software Company Inc.
228 Park Ave S #74122 New York, NY 10003
(646) 664-1038 | info@boostbyreason.com
How it works Privacy Terms Support Contact Download Donate Reason Software, the makers of Boost logo

Download Boost and enjoy your PC.

Increase your PC's performance.
Remove unwanted crapware.
Reduce your boot time.
Identify and resolves crashes.
Download the FREE unlimited trial of Boost!
No spyware, no adware, no bundles, no tricks.

Save 40% on Boost

For a limited time, from now until Sunday, June 24, 2018 you can purchase Boost for 40% off of the normal price, only $39.95 $24.95.
The instant online savings will be automatically applied during checkout.

100% Satisfaction Guarantee

Purchase with confidence. We stand behind Boost.
If for any reason you are not satisfied with your software purchase, simply contact our Customer Support within 30 days, and we'll refund the purchase price. We won't make you jump through hoops to get all your money back!