Use the VtpInfo tool to determine the trust state of a file on disk or of a running process. Use the following commands from an elevated command prompt:

To save a file with the trust status information for the module or process, run the following commands from an elevated command prompt: NOTE: Make sure the directory C:\Temp\ exists before running the command or it fails. The command does not create the target directory. Review the file vtpinfo.txt. Determine what is trusted or untrusted in the specified module or process. All modules loaded into the process being queried are listed in the results with their trust status. In the end of the file, the aggregate result displays. If you see validation_state= VALIDATION_STATE_INVALID or privileges= PRIVILEGE_NONE, the module or process is not trusted.

After you identify the untrusted module or process, contact the vendor to determine how to prevent the binary from injecting into McAfee software.