guest reboot unexpectedly - antivirus

[edox77]

Hello,

i'm working on Vsphere, with ESX 4.1 (HP DL385 G7). One of my guest (W2003, vcpu 8, ram 4096 ...) borned from P2V conversion has a strange problem. I've installed AV McAfee Enterprise 8.7.0i, when i enable his services, my guest shutdown unexpectedly, when i leaves this service disabled, server function correctly.

Follow vmware.log:

Oct 13 19:55:31.118: vcpu-3| pciBridge7:2: ISA/VGA decoding enabled (ctrl 0004)

Oct 13 19:55:31.151: vcpu-3| pciBridge7:3: ISA/VGA decoding enabled (ctrl 0004)

Oct 13 19:55:31.186: vcpu-3| pciBridge7:4: ISA/VGA decoding enabled (ctrl 0004)

Oct 13 19:55:31.220: vcpu-3| pciBridge7:5: ISA/VGA decoding enabled (ctrl 0004)

Oct 13 19:55:31.248: vcpu-3| pciBridge7:6: ISA/VGA decoding enabled (ctrl 0004)

Oct 13 19:55:31.280: vcpu-3| pciBridge7:7: ISA/VGA decoding enabled (ctrl 0004)

Oct 13 19:55:33.036: vcpu-3| CDROM: Mode Sense for Unsupported Page 0x1B

Oct 13 19:55:33.037: vcpu-3| SCSI DEVICE (ide1:0): MODE SENSE(10) for unsupported page 0x1b

Oct 13 19:55:49.753: vcpu-3| CDROM: Emulate GET CONFIGURATION RT 0 starting feature 0

Oct 13 19:55:49.754: vcpu-3| CDROM: Emulate GET CONFIGURATION RT 0 starting feature 0

Oct 13 19:55:49.755: vcpu-3| CDROM: Emulate GET CONFIGURATION RT 0 starting feature 0

Oct 13 19:55:49.761: vcpu-3| CDROM: Unknown command 0xA4.

Oct 13 19:55:49.761: vcpu-3| CDROM ide1:0: CMD 0xa4 (UNKNOWN (0xa4)) FAILED (key 0x5 asc 0x20 ascq 0)

Oct 13 19:55:51.077: vcpu-1| SVGA: Unregistering IOSpace at 0x10d0

Oct 13 19:55:51.078: vcpu-1| SVGA: Unregistering MemSpace at 0xd4000000(0xd4000000) and 0xd8000000(0xd8000000)

Oct 13 19:55:51.096: vcpu-1| SVGA: Registering IOSpace at 0x10d0

Oct 13 19:55:51.177: vcpu-1| SVGA: Registering MemSpace at 0xd4000000(0xd4000000) and 0xd8000000(0xd8000000)

Oct 13 19:55:58.500: mks| Guest display topology changed: numDisplays 1

Oct 13 19:55:58.511: vcpu-4| Guest: vmx_fb: This is the primary surface: PPDEV e1923010

Oct 13 19:55:58.513: vcpu-4| Guest: vmx_fb: Display driver is out of sync with virtual hardware. Disabling 3d.

Oct 13 19:55:58.514: vcpu-4| Guest: vmx_fb: Current hardware revision: 0.0.

Oct 13 19:55:58.515: vcpu-4| Guest: vmx_fb: Driver compiled against: 2.0.

Oct 13 19:55:58.516: vcpu-4| Guest: vmx_fb: DrvGetDirectDrawInfo: Overlay flags set

Oct 13 19:55:58.518: vcpu-4| Guest: vmx_fb: This is the primary surface: PPDEV e1923010

Oct 13 19:55:58.519: vcpu-4| Guest: vmx_fb: Display driver is out of sync with virtual hardware. Disabling 3d.

Oct 13 19:55:58.519: vcpu-4| Guest: vmx_fb: Current hardware revision: 0.0.

Oct 13 19:55:58.520: vcpu-4| Guest: vmx_fb: Driver compiled against: 2.0.

Oct 13 19:55:58.521: vcpu-4| Guest: vmx_fb: DrvGetDirectDrawInfo: Overlay flags set

Oct 13 19:56:04.967: vcpu-4| CDROM: Emulate GET CONFIGURATION RT 2 starting feature 0

Oct 13 19:56:04.975: vcpu-4| CDROM: Emulate GET CONFIGURATION RT 2 starting feature 30

Oct 13 19:56:04.976: vcpu-4| CDROM: Emulate GET CONFIGURATION RT 2 starting feature 31

Oct 13 19:56:04.976: vcpu-4| CDROM: Emulate GET CONFIGURATION RT 2 starting feature 32

Oct 13 19:56:04.977: vcpu-4| CDROM: Emulate GET CONFIGURATION RT 2 starting feature 33

Oct 13 19:56:04.978: vcpu-4| CDROM: Emulate GET CONFIGURATION RT 2 starting feature 35

Oct 13 19:56:04.978: vcpu-4| CDROM: Emulate GET CONFIGURATION RT 2 starting feature 36

Oct 13 19:56:04.979: vcpu-4| CDROM: Emulate GET CONFIGURATION RT 2 starting feature 38

Oct 13 19:56:04.979: vcpu-4| CDROM: Emulate GET CONFIGURATION RT 2 starting feature 45

Oct 13 19:56:04.980: vcpu-4| CDROM: Emulate GET CONFIGURATION RT 2 starting feature 46

Oct 13 19:56:04.980: vcpu-4| CDROM: Emulate GET CONFIGURATION RT 2 starting feature 47

Oct 13 19:56:04.981: vcpu-4| CDROM: Emulate GET CONFIGURATION RT 2 starting feature 259

Oct 13 19:56:17.230: vcpu-7| Balloon: Start: vmmemctl reset balloon

Oct 13 19:56:17.231: vcpu-7| Balloon: Reset (n 6 pages 0)

Oct 13 19:56:17.231: vcpu-7| Balloon: Reset: nUnlocked 0 size 0

Oct 13 19:57:23.040: vmx| GuestRpcSendTimedOut: message to toolbox timed out.

Oct 13 19:57:23.052: vmx| Vix: : Error VIX_E_TOOLS_NOT_RUNNING in VMAutomationTranslateGuestRpcError(): VMware Tools are not running in the guest

Oct 13 19:57:27.412: vcpu-6| GuestRpc: application toolbox already registered, id: -1

Oct 13 19:57:27.413: vcpu-6| GuestRpc: Channel 2, guest application toolbox.

Oct 13 19:57:27.442: vcpu-7| TOOLS ToolsCapabilityGuestTempDirectory received 1 C:\WINDOWS\TEMP\vmware-SYSTEM

Oct 13 19:57:27.515: vcpu-7| TOOLS autoupgrade protocol version 2

Oct 13 19:57:27.527: vcpu-7| TOOLS ToolsCapabilityGuestConfDirectory received C:\Documents and Settings\All Users\Application Data\VMware\VMware Tools

Oct 13 19:57:27.528: vcpu-7| ToolsSetVersionWork did nothing; new tools version (8290) matches old Tools version

Oct 13 19:57:27.547: vcpu-7| TOOLS unified loop capability requested by 'toolbox'; now sending options via TCLO

Oct 13 19:57:27.548: vcpu-7| Guest: toolbox: Version: build-257589

Oct 13 20:05:55.512: vmx| TOOLS received request in VMX to set option 'synctime' -> '0'

Oct 13 20:05:55.516: vmx| VMXVmdb_LoadRawConfig: Loading raw config

Oct 13 20:10:55.788: vmx| TOOLS received request in VMX to set option 'synctime' -> '0'

[jamesbowling]

Have you attempted a reinstall of the AV software? I would remove McAfee and then reboot, reinstall McAfee and see if you have the same issue. It seems like it may not like the fact of being P2V'd.

If you found this at all helpful please award points by using the correct or helpful buttons! Thanks!