McAfee Host Intrusion Prevention
What is McAfee Host Intrusion Prevention? (from McAfee)
McAfee Host Intrusion Prevention for Desktops safeguards your business against complex security threats that may otherwise be unintentionally introduced or allowed by desktops and laptops. Host Intrusion Prevention for Desktops is easy to deploy, configure, and manage. Three layers of protection (signature analysis, be... Read more
Overview
McAfee Host Intrusion Prevention is a program developed by McAfee. The most used version is 8.00.0402, with over 98% of all installations currently using this version. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. The main program executable is mcafeefire.exe. The software installer includes 82 files and is usually about 37.95 MB (39,795,346 bytes). In comparison to the total number of users, most PCs are running the OS Windows 7 (SP1) as well as Windows 10. While about 61% of users of McAfee Host Intrusion Prevention come from the United States, it is also popular in India and Germany.
Program details
URL: www.mcafee.com
Installation folder: C:\Program Files\McAfee\Host Intrusion Prevention\
Uninstaller: C:\Windows\UTILIT~1\UNWISE.EXE /S C:\Windows\System32\UNINST~1\MCAFEE~1.0P~\MCAFEE~1.LOG
(Wise Installer is used for installing and uninstalling this software.)
Estimated size: 37.95 MB
Files installed by McAfee Host Intrusion Prevention
| Program executable: | mcafeefire.exe |
| Name: | McAfee Host Intrusion Prevention |
| McAfee HIP Client User Interface |
| Path: | C:\Program Files\mcafee\host intrusion prevention\mcafeefire.exe |
| MD5: | 5d206033e7bbfb0b3ff654a0a778def7 |
Additional files:
-
ClientControl.exe - McAfee Host Intrusion Prevention (McAfee HIP ClientControl Utility)
-
DebugLog.dll - McAfee Debug Log Library
-
FireCL.dll - McAfee HIP Client Library
-
FireCNL.dll - McAfee HIP Core Networking Library
-
FireComm.dll - McAfee HIP Communications library
-
FireCore.dll - McAfee HIP Core Library
-
FireEpo.dll - McAfee HIP ePO plug-in
-
FireSvc.exe - McAfee HIP Main Service
-
FireTray.exe - McAfee HIP Tray Application
-
HcApi.dll - McAfee HIP Engine
-
HcCode.dll - McAfee HIP Synchronous Hook Module
-
HcSql.dll - McAfee HIP SQL Engine
-
HcSvc.dll - McAfee HIP Services Engine
-
HcThe.dll - McAfee HIP Thin Hook Environment
-
Helper.exe - McAfee HIP x64 Helper
-
HipHandlers.dll - HIPS Signatures
-
HipIISEngine.dll - McAfee HIP IIS HTTP Engine
-
HipIISEngineStub.dll
-
HipMgmt.exe - HIP lpc interface with MA 4.5+
-
HipMgmtHpr.dll - HIP interface wraper for MA 4.5+ lpc
-
HipMgtPlugin.dll - McAfee HIP Client CMA Management Plugin
-
HipRc.dll - McAfee HIP RuleCompiler
-
HIPResolver.dll - HIPS Variable Path Resolver
-
HipShield.dll - McAfee HIP HipShield.dll
-
HpmRegistry.dll - McAfee Registry Configuration library
-
IsapiEngine.dll - McAfee HIP IIS HTTP Filter Engine
-
IsapiStub.dll - McAfee HIP IIS HTTP Filter
-
Jsbp.dll
-
KevlarSigs.dll
-
McTrayHipPlugin.dll - McAfee HIP McTray Plugin library
-
MngFirecore.dll - McAfee FireCore Integration library
-
SecCtrFw.exe - McAfee Windows Security Center Support
-
VersionInformation.exe - McAfee HIP File version information report
-
WinSecCtr.exe - McAfee Windows Security Center library
-
WinToasts.dll - McAfee Windows Toast Library
-
nailite.dll - McAfee, Inc. Common Licensing
-
mcafeewin32guisupportdll.dll - McAfee System Tray (McTray Support Library)
-
ts.dll - TrustedSource SDK
-
apprl.dll - McAfee HIP Resources for McAfeeFire.exe
-
clibrl.dll - McAfee HIP Resources for FireCL.dll
-
corerl.dll - McAfee HIP Core Externals
-
hiphandlers64.dll
-
hipresolver64.dll
-
kevlarsigs64.dll
-
mctrayhiprl.dll - McAfee HIP Resources for McTrayHipPlugin.dll
-
netshrrl.dll - McAfee HIP Shared Resources
-
trayrl.dll - McAfee HIP Tray Application Resources
-
hipa.dll - HIPSCORE.14.1.0.437.x86 (HIPS Content Driver)
-
hipc.dll - HIPS point product interface
-
hipi.dll - HIPSCore Injected Library
-
hipis.dll - HIPSCore Injected Stub
-
hipppi.dll - HIPSCore Point Product Interface
-
hippsa.dll - Process Start Monitor API
-
hippssa.dll - HIPSCore Injection Control
-
hipqa.dll - HipsCore Query interface
-
hipscorereg.exe - HIPSCore Registry Setup
-
hipsvc.exe - HIPSCore Service
-
mferc.dll - HIPSCore Rule Compiler
-
mfeapfa.dll - SYSCORE.14.1.0.648.x86 (Access Protection Filter Driver API)
-
mfehida.dll - McAfee Driver Communication
Behaviors exhibited
2 Services
- HipMgmt.exe runs as a service named 'McAfee Host Intrusion Prevention lpc Service' (HipMgmt) "Host-based intrusion prevention component that implements the McAfee MA lpc interface".
- FireSvc.exe runs as a service named 'McAfee Host Intrusion Prevention Service' (enterceptAgent) "Host-based intrusion prevention component that blocks exploits and hacks in real-time, including malicious buffer overflow code execution and privilege escalations. If this service is disabled or stopped, the system is no longer protected against intrusions.".
Startup File (All Users Run)
- FireTray.exe is loaded in the all users (HKLM) registry as a startup file name 'McAfee Host Intrusion Prevention Tray' which loads as "C:\Program Files\McAfee\Host Intrusion Prevention\FireTray.exe".
How do I remove McAfee Host Intrusion Prevention?
You can uninstall McAfee Host Intrusion Prevention from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program McAfee Host Intrusion Prevention, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove McAfee Host Intrusion Prevention.
OS VERSIONS
Win 7 (SP1) 75%
Win XP 0%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
 |
Uninstall it 8%
Keep it 92%
|
|
Windows
Which Windows OS versions does it run on?
| Windows 7 |
77.38% |
|
| Windows 10 |
14.09% |
|
| Windows XP |
7.74% |
|
| Windows Vista |
0.50% |
|
| Windows Server 2003 |
0.30% |
|
Which OS releases does it run on? |
| Windows 7 Enterprise |
48.53% |
|
| Windows 7 Professional |
24.27% |
|
| Microsoft Windows XP |
7.68% |
|
| Windows 8.1 Enterprise |
5.76% |
|
| Windows 7 Ultimate |
2.73% |
|
| Windows 10 Enterprise |
2.63% |
|
Geography
60.87% of installs come from the United States
Which countries install it?
| United States |
60.87% |
| India |
3.90% |
| Germany |
3.52% |
| United Kingdom |
2.62% |
| France |
2.17% |
| Israel |
1.80% |
| Brazil |
1.65% |
| Canada |
1.65% |
| Netherlands |
1.57% |
| Singapore |
1.42% |
| South Africa |
1.05% |
| Spain |
1.05% |
| Iran |
1.05% |
| Saudi Arabia |
0.97% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
| Hewlett-Packard |
45.30% |
|
| Dell |
39.16% |
|
| Lenovo |
11.62% |
|
| GIGABYTE |
1.31% |
|
| Acer |
1.04% |
|
| Toshiba |
0.91% |
|
| Intel |
0.65% |
|
Common models |
| HP EliteBook 8460p |
5.15% |
|
| HP EliteBook 840 G1 |
4.62% |
|
| HP EliteBook Folio 9470m |
4.44% |
|
| Dell Latitude E6420 |
4.09% |
|
| HP EliteBook 8440p |
3.73% |
|
| HP EliteBook 8470p |
3.55% |
|
About McAfee
McAfee, a subsidiary of Intel Corporation, is a dedicated security technology company that delivers proactive solutions and services to help secure systems, networks, and mobile devices.
Publisher URL: www.mcafee.com