"McTray.exe" Process on Windows 7

Q

What is the "McTray.exe" process on windows 7? Is the "McTray.exe" process a virus? Can I terminate the "McTray.exe" process?

✍: FYIcenter.com

A

"McTray.exe" process represents "McTray Application" program. "McTray.exe" process is created by the startup program: "McAfee Agent".

"McTray.exe" process is normally running under the parent process "UdaterUI" as shown in the process tree below:

Boot
   UdaterUI
      McTray

On the Processes tab of "Task Manager", "McTray.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
McTray.exe                  344 K   McTray Application

Additional information about "McTray.exe" process:

Command line:
   /load

Programe file information:
   Name: McTray.exe
   Location: C:\Program Files (x86)\McAfee\Common Framework\McTray.exe
   Description: McTray Application
   Version: 2.1.1.1248
   Size: 90992 bytes
   Last modified: 2/10/2015 4:08:00 PM
   Company Name: McAfee, Inc.
   
Some data files used:
C:\Windows
C:\Windows\SysWOW64
C:\Windows\Fonts\StaticCache.dat
C:\Program Files (x86)\McAfee\Common Framework\McTray\Images\McAfee\tray_menu_okay.png
C:\Windows\SysWOW64\en-US\crypt32.dll.mui
C:\Windows\SysWOW64\en-US\KernelBase.dll.mui
C:\Users\fyicenter\AppData\Roaming\Microsoft\SystemCertificates\My

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\CustomLocale
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer
HKLM\SYSTEM\ControlSet001\Control\Nls\Locale\Alternate Sorts
HKLM\SYSTEM\ControlSet001\Control\Nls\Locale
HKLM\SYSTEM\ControlSet001\Control\Nls\Language Groups
HKLM\SOFTWARE\Wow6432Node\McAfee\McTray\Plugins

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\SYSTEM32\wow64.dll
C:\windows\SYSTEM32\wow64win.dll
C:\windows\SYSTEM32\wow64cpu.dll
C:\Program Files (x86)\McAfee\Common Framework\McTray.exe
C:\windows\SysWOW64\ntdll.dll
C:\windows\syswow64\kernel32.dll
C:\windows\syswow64\KERNELBASE.dll
C:\Program Files (x86)\McAfee\Common Framework\McAfeeWin32GUISupportDLL.dll

"McTray.exe" process is not a virus. You should not terminate "McTray.exe" process.

 

McAfee Program Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials

2016-12-19, 937👍, 0💬