Error: 10030 - "Unable to establish connection with session" when using McAfee VirusScan 8.x

Article:TECH109132  |  Created: 2005-01-11  |  Updated: 2014-01-16  |  Article URL
Article Type
Technical Solution




The Symantec Ghost Client boots into the Virtual partition but fails to connect to a session, producing Error 10030, "Unable to establish connection with session." The Ghost server or Ghost Console is running McAfee VirusScan 8.0 or later.


McAfee VirusScan 8.0 has a new feature called Access Protection. By default, this feature blocks access to services for IRC on ports 6666 - 6669. Symantec Ghost uses ports 6666 and 6667 for file transfers. When a client tries to connect to a Ghost server running McAfee VirusScan 8.0, the error message appears. To fix this problem, Ghostsrv.exe needs to be added to McAfee's Access Protection exclusions list.

To exclude the IRC Access Protection feature

  1. On the Symantec Ghost Server, right-click the VShield icon in the system tray and select VirusScan Console.
  2. In the task list, double-click Access Protection.
  3. Double-click Prevent IRC Communication.
  4. In the Excluded Processes box, type the following text:

  5. Click OK.
  6. Repeat steps 4 and 5 for the second entry labeled Prevent IRC Communication.
  7. Click OK.
  8. Close the VirusScan console.


McAfee VirusScan 8.5 lists Prevent IRC Communication under a different option than Access Protection. You will now find Prevent IRC Communication under AV Std Protection. For McAfee VirusScan Enterprise 8.5i and later, open the VirusScan Console, right click On-Access Scanner and select Properties. Click All Processes, Detection, Exclusions.

Note: If the above steps do not fix the problem, exclude the Ghost Database (Dbserv.exe) and the Ghost Configuration server (Ngserver.exe), and try again.

Note: If your computer is managed by iPolicy Orchestrator(ePO), the above instructions must be applied through ePO.  If not, any changes made to an ePO managed machine will be overwritten.


Technical Information
Disabling McAfee or disabling it will not unblock the necessary ports. The IRC exceptions must be added.


Legacy ID


Article URL

Terms of use for this information are found in Legal Notices