McAfee Business
Up to Discussions in VirusScan Enterprise
9,904 Views 42 Replies Last post: Mar 27, 2009 6:48 AM by kirkside RSS 1 2 3 Previous Next
Massi79 Newcomer
Massi79
46 posts since
Feb 12, 2008
Currently Being Moderated

Oct 9, 2008 7:47 AM

VSE 8.7 and crypt32 error

Hi all,
i installed (via epo 4 server) VSE 8.7 on several clients, and on ALL these clients i can see in the event viewer this error:

http://support.microsoft.com/kb/317541/en-us

With this error the startup of windows is much slower because of the timeout. The solution is to uninstall that windows component, but i'd like to know if you also have this problem and if there is a solution that is not the uninstall of a windows component.

Thanks
tonyb99 Volunteer Moderator
tonyb99
3,455 posts since
Apr 10, 2006
0
votes
Currently Being Moderated
1. Oct 9, 2008 8:34 AM in response to: Massi79
RE: VSE 8.7 and crypt32 error
I've had this same error on machines that dont have 8.7 installed are you sure this is the only difference?
Have you tried downgrading one to vse 8.5 and does this still happen?
Are there any access protection issues showing in the logs?

McAfee Maniac (Volunteer Moderator)
x2 4.00 ePolicy Orchestrator (Patch 6/Build 1333)
x1 4.5 ePolicy Orchestrator ( Test server)
x1 3.6.1.255 ePolicy Orchestrator 3.6.1 Patch 4
Mcafee Agent 4.0.0.1494
Groupshield 6.02
VSE 8.5.0.781 Patch 4/8 5400 10000 units
VSE 8.7.0.570 Patch 2 5400
x1 Sophos EC 3 SAV 10 x 70
Massi79 Newcomer
Massi79
46 posts since
Feb 12, 2008
0
votes
Currently Being Moderated
2. Oct 9, 2008 9:53 AM in response to: tonyb99
RE: VSE 8.7 and crypt32 error
if no machine has that problem, i install 8.7 on 30 machines, and 30 machines have that problem, so i think i can be shure the origin is 8.7 :)

it seems to me that no access protection message is raised..
very strange

on your 8.7 machines is it all right? even with that component installed?
how did you solved the issue on the 8.5 systems?
ChristianM Newcomer
ChristianM
10 posts since
Oct 8, 2008
0
votes
Currently Being Moderated
3. Oct 10, 2008 1:05 AM in response to: Massi79
RE: VSE 8.7 and crypt32 error
We have the same problem with crypt32 after installing 8.7. The windows startup after the login is very slow.
Massi79 Newcomer
Massi79
46 posts since
Feb 12, 2008
0
votes
Currently Being Moderated
4. Oct 10, 2008 5:15 AM in response to: ChristianM
RE: VSE 8.7 and crypt32 error


I suppose is something about proxy. At home i have no proxy (direct gateway) and no error is given.
Do you have a proxy server?
I'm gonna try some "casual" (lol) proxycfg.exe parameter, but i have no time right now,

Stay tuned happy
Massi79 Newcomer
Massi79
46 posts since
Feb 12, 2008
0
votes
Currently Being Moderated
5. Oct 10, 2008 10:21 AM in response to: Massi79
RE: VSE 8.7 and crypt32 error
it is FOR SURE a problem linked to VSE 8.7.
I don't know the solution, but editing proxycfg configuration let the problem go away.
This is NOT a solutione, because if i have to change che proxy settings of my clients i should have also to re-set proxycfg configuration.
Bad release for this 8.7, gonna wait patch 1..
Robert Rathbun Newcomer
Robert Rathbun
40 posts since
Jan 17, 2008
0
votes
Currently Being Moderated
6. Oct 10, 2008 1:27 PM in response to: Massi79
RE: VSE 8.7 and crypt32 error
I don't think your CRYPT32 errors have anything to do with McAfee 8.7. I have seen this behavior occur on workstations hidden behind proxies across various enterprise environments. This specific error is caused by the system failing to contact the microsoft update site while attempting to verify root certs.

NOTE: no you cannot redirect this to WSUS

McAfee may have aggravated the error, but I doubt that it caused it.

Bottom line, if you are behind a proxy you have the options mentioned in the article provided to fix this problem using Group Policy.

http://technet.microsoft.com/en-us/library/bb457160.aspx#EBAA :eek:
Massi79 Newcomer
Massi79
46 posts since
Feb 12, 2008
0
votes
Currently Being Moderated
7. Oct 10, 2008 1:35 PM in response to: Robert Rathbun
RE: VSE 8.7 and crypt32 error
mmm
i think i've not understood what you say.
In my lan with all VSE 8.5, no client has this error.
I take some clients (really, 30) and install to them VSE 8.7
In my lan with many VSE 8.5 and 30 VSE 8.7, 30 clients have this error

Are you telling me i'm only much much unlucky? happy
akl71 Newcomer
akl71
99 posts since
Oct 7, 2008
0
votes
Currently Being Moderated
8. Oct 13, 2008 7:26 AM in response to: Robert Rathbun
RE: VSE 8.7 and crypt32 error

It is certainly a problem with VSE8.7. We tested it on approx. 50 machines and all have these entries in eventlog. When i remove VSE8.7 from these machines, there are no more crypt32-errors in eventlog. Opened a support call at Mcafee about this.
Massi79 Newcomer
Massi79
46 posts since
Feb 12, 2008
0
votes
Currently Being Moderated
9. Oct 13, 2008 9:12 AM in response to: akl71
RE: VSE 8.7 and crypt32 error
i guess you are behind a proxy, right?
btw, very strange behavious.. even because, as i said before, editing proxycfg configuration lets it work..
Let's wait for McAfee :)

bye
twenden Newcomer
twenden
373 posts since
Sep 14, 2004
0
votes
Currently Being Moderated
10. Oct 16, 2008 12:26 PM in response to: Massi79
RE: VSE 8.7 and crypt32 error
McAfee has just posted a knowledge base article that refers to this crypt32 error.

https://knowledge.mcafee.com/article/842/616948_f.SAL_Public.html

Microsoft Windows 2003 Standard SP2
EPO Server 4.0.0.1298 (Patch 5)
EPO Agent 4.0.0.1494 (Patch 3)
McAfee VirusScan 8.0i - Patch 15 - about 5 slower computers - starting to remove due to EOL on March 2010
McAfee VirusScan 8.5i - Patch 7/8 plus HotFix 458640 x over 500 systems
McAfee VirusScan 8.7i with Patch 2 x over 1200 systems & growing

Massi79 Newcomer
Massi79
46 posts since
Feb 12, 2008
0
votes
Currently Being Moderated
11. Oct 16, 2008 1:49 PM in response to: twenden
RE: VSE 8.7 and crypt32 error
AHAHAHAHAHAHAHAHa they are completely mad!
I really cannot believe that for them a proxy is "None of the computers reporting this error have Internet access."
no words!
They want us to uninstall that component from each computer?

NO WORDS!

EXPECTED ERROR? what about this "expected error" if VSE 8.5 is installed?

bah..
vuilverwerking Newcomer
vuilverwerking
57 posts since
Apr 27, 2006
0
votes
Currently Being Moderated
12. Oct 21, 2008 8:32 AM in response to: Massi79
I think McAfee has a problem.
Through Group Policy i Enabled the option 'Turn off Automatic Root Certificates Update'.
The Crypt32 error is now gone.
But 'Applying computer setting' is still taking to long.

They ask me to try some other settings, but nothing works.
Completly turning off everything does not even work.

Sad but ....

Windows 2000 SP4, 2003 SP2, 2003 R2 SP2, 2008 SP1 & SP2 / Linux RedHat 4.0 Enterprise
EPO Server 4.5
EPO Agent 4.0.0.1444
VirusScan + AntiSpyware Enterprise 8.5i - Patch 8 (100 clients, 20 Servers)
VirusScan + AntiSpyware Enterprise 8.7i - Patch 1 (1 client) testing
GroupShield for Exchange 7.0.1
LinuxShield 1.5
SecurityShield for ISA Server (Patch 5)
Robert Rathbun Newcomer
Robert Rathbun
40 posts since
Jan 17, 2008
0
votes
Currently Being Moderated
13. Oct 23, 2008 12:03 PM in response to: akl71
RE: VSE 8.7 and crypt32 error


Sorry, but even McAfee agreed with me on what I originally stated. It is normal behaivor because Windows is attempting to verify external certs and it cannot check them through the proxy.

Check the Microsoft URL I provided in my earlier post and it should help.
akl71 Newcomer
akl71
99 posts since
Oct 7, 2008
0
votes
Currently Being Moderated
14. Oct 23, 2008 1:33 PM in response to: Robert Rathbun
RE: VSE 8.7 and crypt32 error

Yes but without VSE8.7 there are no crypt32 errors, with every other VSE-version there are no crypt32 errors. If i install VSE8.7 ... crypt32 errors on every machine, i uninstall it and the errors are gone.
The question is, why or for what VSE8.7 uses this root certificate update mechanism (even the support could not answer to this in more than two weeks now)
But it is no problem ... just turn off root certificate update on 25.000 machines ... :eek:
Go to original post 1 2 3 Previous Next

More Like This

  • Retrieving data ...

Bookmarked By (0)