cancel
Showing results for 
Search instead for 
Did you mean: 

VSE 8.8 Blocks Java 8 Install (Java installer error 1603) but rule currently not enforced

When I try to update Java to version 8 on Windows 7 Pro 64bit, the installer ends with an error message "Java update did not complete. Error Code: 1603. Please refer to the Java Help Center for troubleshooting information or contact your system administrator." Strangely I could install older versions of Java, just not Java 8. At first I pursued various suggestions offered by Java-related forums. The error message 1603 suggests issues with a Microsoft security update MS14-049 KB2918614 as the cause, but removal of that update did not fix the issue. Then on a whim I disabled McAfee VirusScan 8.8 and viola! the Java 8 install worked.


There were no messags in my VSE logs indicating that VSE was the cause. However I did see logged messages clearly "Would be blocked by Access Protection rule  (rule is currently not enforced)" but in fact, they are apparently being enforced and preventing the successful install of Java 8. Or at least, that is my theory.


What's new about Java 8 and VSE that VSE prevents Java 8 installation?


8/27/201510:32:03 AMWould be blocked by Access Protection rule  (rule is currently not enforced)NT AUTHORITY\SYSTEMC:\Windows\system32\MsiExec.exe\REGISTRY\MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.79.2\MimeTypes\application/x-java-applet;version=1.7\DescriptionCommon Standard ProtectionSmiley Tonguerotect Mozilla & FireFox files and settingsAction blocked : Create


and


8/27/201510:32:04 AMWould be blocked by Access Protection rule  (rule is currently not enforced)NT AUTHORITY\SYSTEMC:\Windows\system32\MsiExec.exe\REGISTRY\MACHINE\SOFTWARE\MozillaPluginsCommon Standard ProtectionSmiley Tonguerotect Mozilla & FireFox files and settingsAction blocked : Write


8 Replies

Re: VSE 8.8 Blocks Java 8 Install (Java installer error 1603) but rule currently not enforced

Hello George

There is nothing new with JAVA 8 . The reason for the issue , is Java is attempting to withe to the Mozilla directory , and due to the AP rules , it is being blocked. Revisit the AP Firefox rules and have a look.

Re: VSE 8.8 Blocks Java 8 Install (Java installer error 1603) but rule currently not enforced

Koseelen,

Thanks for replying, but please explain.Your comment does not help me with the small amount of information you have provided.

1. I don't understand why you conclude there is nothing different about Java 8. Clearly there is something new. Java 7 installs without being blocked. Java 8 is blocked.

2. As far as AP (Access Protection) rules, I'm unclear why a computer that does not have Firefox installed on it would be affected by Firefox rules. This computer has IE9 and Chrome browsers. No Firefox.

3. As I posted, the messages logged by VSE indicate "Would be blocked by Access Protection rule  (rule is currently not enforced)" but apparently these rules are being enforced and causing Java 8 to fail.

I hypothestize:

1. VSE has a program bug regarding enforcement of AP rules (logging the result as informational, but in fact, enforcing the rule)

2. Java 8 now meddles with Mozilla Plugins registry keys for which there are no applications being used (Java 8 is assuming these keys are necessary when in fact they are not) - Java 7 had no such meddlesome behavior.

A posting of a similar question on the Java forum has had no activity. So apparently most Java experts aren't encountering this particular issue. I was hoping McAfee would respond with a KB that perhaps explains the errant VSE behavior fixed by an update which my computer is missing.

Re: VSE 8.8 Blocks Java 8 Install (Java installer error 1603) but rule currently not enforced

George

The Java , does and plugins and DLLs to the Mozilla , folder . If you are blocking access or change to Mozilla , then it will block it .

A test is to disable the block and report , on the firefox AP rules and see the results .

Re: VSE 8.8 Blocks Java 8 Install (Java installer error 1603) but rule currently not enforced

Hello,

I believe I have found an answer to this issue.  Its been a long time for us to find a fix as well.  Here is what I wrote up to our group:

For the longest time we have gotten a 1603 error while installing Java 1.8 u30 or higher.  (The issue started then)  Since then I have been trying to figure this out.  Well today I set to fix it.  I think I have something.

The fix used to be disable Mcafee 8.8 Access protection policy and it would install.  Not easy to do when you are trying to automate patching and then turn back on AP.

So I started to investigate the AccessProtectionlog (which I had done before) and as always did not see any blocks but the normal “Would be blocked” on “Common Standard ProtectionSmiley Tonguerotect Mozilla & FireFox files and settings Action blocked : Write” which should not cause a failed install.  So for grins I disabled even reporting on that rule and tired again.

Again 1603 error but there was AP alerts again.  This time there was:

Blocked by Access Protection rule BTI\LaFranceJason C:\PROGRAM FILES (X86)\JAVA\JRE1.8.0_73\INSTALLER.EXE HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\ Common Standard ProtectionSmiley Tonguerevent installation of Browser Helper Objects and Shell Extensions        Action blocked : Write


Blocked by Access Protection rule BTI\LaFranceJason C:\PROGRAM FILES (X86)\JAVA\JRE1.8.0_73\INSTALLER.EXE HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{DBC80044-A445-435B-BC74-9C25C1C588A9}\  Common Standard ProtectionSmiley Tonguerevent installation of Browser Helper Objects and Shell Extensions        Action blocked : Write

Ohh, interesting.  I then added INSTALLER.exe executable to the exclude rule of “Common Standard ProtectionSmiley Tonguerevent installation of Browser Helper Objects and Shell Extensions” then bingo it installed just fine.

So the issue was the reporting set on for Common Standard ProtectionSmiley Tonguerotect Mozilla & FireFox files and settings Action blocked : Write” was not letting the real message I needed to fix the issue be shown.  I have a case open with Mcafee to report this.  I was actually on the phone waiting for them to help when I found the fix myself.  It would be best to put in a wildcard string to exclude the installer.exe.  I am going to be using "C:\program files (x86)\java\*\installer.exe" and "C:\program files\java\*\installer.exe"  but that needs testing..

I still need to test further but this is the first time since Java 1.8 u30 I have been able to install java without a 1603 and AP on.

Jason LaFrance

wwarren
Level 15
Report Inappropriate Content
Message 6 of 9

Re: VSE 8.8 Blocks Java 8 Install (Java installer error 1603) but rule currently not enforced

VERY interesting find. It sounds like there is a bug here in the rule violation reporting.

I hope the Support folk you work with are able to chase this through to resolution, so we root-cause the underlying reason for this behavior. (Did you have an SR# provided?)

William W. Warren | S.I.R.R. | Customer Success Group | McAfee

Re: VSE 8.8 Blocks Java 8 Install (Java installer error 1603) but rule currently not enforced

Well I have an initial SR # but I was on the phone waiting on hold for a tech to answer for about 2 hours so once I found it I hit the button to hold my line in queue.  That has been 3 hours now.  Usually they won't call back but I do plan to try calling tomorrow once I have more free time.

Re: VSE 8.8 Blocks Java 8 Install (Java installer error 1603) but rule currently not enforced

Wondering if I am still waiting in that queue.  They never called back or updated the issue.  Been requesting daily updates to deaf ears.  If I call in I get infinite hold.  Yesterday I was on hold for 8 hours till I gave up.

wwarren
Level 15
Report Inappropriate Content
Message 9 of 9

Re: VSE 8.8 Blocks Java 8 Install (Java installer error 1603) but rule currently not enforced

I can only help in this regard -

If you let me know that SR# I can ensure the appropriate person is reminded.

William W. Warren | S.I.R.R. | Customer Success Group | McAfee