cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

how to check if all my ens 10.6.1 modules are enabled?

Dear All,

Can you help to find out an alternative way to look or run the command line or in the registry for confirming all ENS modules as below are enabled without opening the local ENS console?

Do not say if I can run a query from ePO. I would like to have some command line or a registry path to check if all the ENS modules are enabled or disabled?

 

TIA

Venu
Tags (1)
3 Replies
patrakshar
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: how to check if all my ens 10.6.1 modules are enabled?

Hi @vnaidu 

There are no script available to pull that information locally. 

Re: how to check if all my ens 10.6.1 modules are enabled?

@patrakshar @ryadav1 

The reason why I am asking for a command line or the registry entry are due to which, more than 40K machine was reported with the ENS platform crashed but McAfee EPO is not able to report it?

Below is the sample report from the dump, any assistance or help would be highly appreciated to deal with the current situation.

app_name app_version exception_code_string exception_code fault_offset event_date endpoint_hardware_identifier Service tag
mfeesp.exe 10.6.1.1872 The instruction referenced invalid memory. 3221225477 0x0000000000042a9b 9/8/2020 0018D11A-B5285BFA-A8F28BB0-69AA5E6E-65F9A36C-86B1FB34-AFFB9A11-EACB37C4 DPPZPN2
mfeesp.exe 10.6.1.1872 The instruction referenced invalid memory. 3221225477 0x0000000000042a9b 9/8/2020 00FC9263-B4B5C6FF-3D894837-4E413829-13665A60-13CA2913-62DD3FE5-96E16678 #N/A
mfeesp.exe 10.6.1.1872 The instruction referenced invalid memory. 3221225477 0x0000000000042a9b 9/8/2020 012EFB3B-6C1B5B98-1D9EF5D7-D4191B72-932C5F5D-AAE89B52-76BDEC79-145E3FF6 G13ZGH2
mfeesp.exe 10.6.1.1872 The instruction referenced invalid memory. 3221225477 0x0000000000034e40 9/8/2020 0180FCD3-E15B03E3-638E1C4A-9555D977-F2BE6492-1FDA35FB-074B5E14-E5085AEE 9PJJK13
mfeesp.exe 10.6.1.1872 The instruction referenced invalid memory. 3221225477 0x0000000000042a9b 9/8/2020 03A37701-F661FF1B-565BBCF2-551F39D8-739205CC-0BCF0FCA-7F3B9D9A-CC4BF5F6 23HQP13
mfeesp.exe 10.6.1.1872 The instruction referenced invalid memory. 3221225477 0x0000000000042a9b 9/8/2020 04483B50-D084AC03-8FDCED2E-448F7133-FD79B2DA-9FB0B85E-16033874-7CF822A4 CZZTKC2
mfeesp.exe 10.6.1.1872 The instruction referenced invalid memory. 3221225477 0x0000000000034a43 9/8/2020 05F482DE-29670CFD-77AE3370-21AFA1EE-2C2A14FA-4156ED32-6878C56D-A70E20BF 1VT7FH2
mfeesp.exe 10.6.1.1872 The instruction referenced invalid memory. 3221225477 0x0000000000042a9b 9/8/2020 0882C481-68BFAFAF-29AA3B29-EB1C0926-223C33CA-00A53C78-F0B9C52D-1011B396 CYF1BG2
mfeesp.exe 10.6.1.1872 The instruction referenced invalid memory. 3221225477 0x0000000000039ed0 9/8/2020 0955C642-237D6D27-51E46E48-9D023010-C95B2598-BF6B1DC1-A04D0B10-920A2500 88RQNC2
mfeesp.exe 10.6.1.1872 The instruction referenced invalid memory. 3221225477 0x0000000000042a9b 9/8/2020 09BC3F95-BE458C62-EA4F0F71-FC7CE077-30F9DF6F-D5451DCF-0893E067-B39764C2 HZ73CG2
mfeesp.exe 10.6.1.1872 The instruction referenced invalid memory. 3221225477 0x0000000000042a9b 9/8/2020 0A158DEF-4F1ECC29-588DD520-98100A09-9458F8D0-15FD8034-6A4BFFC1-2A747963 57X70W2
mfeesp.exe 10.6.1.1872 A heap has been corrupted. 3221226356 0x00000000000fb0b9 9/8/2020 0A44D015-9A63F41B-DE5B64CF-45237830-9BC45939-9F90CA53-C5852AFD-F09E8A83 2V5BLQ2
mfeesp.exe 10.6.1.1872 The instruction referenced invalid memory. 3221225477 0x0000000000042a9b 9/8/2020 0ACB2BD1-D6343B00-7F263F52-B63757D3-B45B678C-1F380269-BCCC5FCE-D6356AD5 GJV1NH2
Venu
ryadav1
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: how to check if all my ens 10.6.1 modules are enabled?

Hello ,

Things that you may check from registry :

For ON Access Scan ,

 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\Endpoint\AV\OAS\

The value uOasWacState 1 indicates it's enabled, 2 is disabled

 

For ODS :

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\Endpoint\AV\ODS

ENABLE_ODS

 

For ATP ,                                                 

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\Endpoint\ATP

realProtectEnabled = 1

 

Thank you 

 

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community