cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Level 8
Report Inappropriate Content
Message 1 of 10

Virus definition cannot be updated - Unable to find valid repository

One endpoint cannot update its virus definition for the following reasons (log extract below): ---------------- 2020-07-14 21:42:05 E #18888 downloader Downloading file from https://XXXXX:443/Software/SiteStat.xml?hash={ca371a64-c5d7-11ea-2039-efdd8f0048e0} to C:\windows\TEMP\SiteStat.xml failed. 2020-07-14 21:42:05 I #18888 creposi Repository ePO_XXXXX02 is not usable for the current update session. 2020-07-14 21:42:05 I #18888 downloader no relay found in the network. 2020-07-14 21:42:05 I #18888 ScrptMain McAfee Update Engine is exiting with return code: 1 2020-07-14 21:42:05 I #18888 SessMgr Unable to find any valid repository --------------------- All other endpoints are correctly updating (sitestat/catalog files and "current" folder are present) There is no proxy server set up for the connection. McAfee EPO server (FQDN) is accessible from this endpoint. All McAfee products are installed on this endpoint but the update fails which represents a lack of security. Would you have any idea please ? Thank you

9 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 10

Re: Virus definition cannot be updated - Unable to find valid repository

From that client, test in browser by using this url (put in correct servername)

https://XXXXX:443/Software/SiteStat.xml

If it fails, neither can the agent get to it.  Is there anything unique about this system vs the ones that work ok?  Is that the only repository you have, or do you have distributed repositories?

 

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Highlighted
Level 8
Report Inappropriate Content
Message 3 of 10

Re: Virus definition cannot be updated - Unable to find valid repository

Thank you for answer.

I confirm that the client can browse the SiteStat with your provided url.

 

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 10

Re: Virus definition cannot be updated - Unable to find valid repository

Since it works in browser and not via agent, then check proxy settings on browser.  If anything at all is checked/enabled for proxy, even automatically detect, uncheck it and then see if you can still download the file.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Highlighted
Level 8
Report Inappropriate Content
Message 5 of 10

Re: Virus definition cannot be updated - Unable to find valid repository

Hi Thanks for feedback and suggestion.

The current device is running in China mainland. In order to reach internet, we setup an Astrill Client. It worked so far very well.

We had to resetup the computer recently and it has been setup with mcafee agent 5.6.5.

McAfee agent seems not able to reach any server at all as per the logs below. With or without proxy Active/Unactive, without any settings in browser, with automatic settings.

None works.

I've even reinstalled the whole McAfee tools from scratch (ENS 1.7 & Agent 5.6.5) but no progress.

On the other hand, on the computer itself, internet access works well, with or without Astrill.

 

here is a more extended log extract:

2020-07-21 22:14:57 I #20152 ScrptMain START [C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe -script C:\ProgramData\McAfee\Agent\update\UpdateMain.McS -id 26110 -localeid 0409 -logfile C:\ProgramData\McAfee\Agent\logs\McScript -parent FRAMEWORK -initiator 0 -ipcid ma.service.updater.uiprovider.CMAAGENT3000.0.0 -installdir C:\Program Files\McAfee\Agent\\x86\ -taskid {8de9b532-cb5c-11ea-372f-dc5bd781dae3}]
2020-07-21 22:14:57 I #724 SutDnWtch Successfully set up shutdown watch
2020-07-21 22:14:57 I #20152 MueEep Initializing MUE EEP Script ID = 26110
2020-07-21 22:14:57 I #20152 crypto Crypto logger used <01FD97C8>
2020-07-21 22:14:58 I #20152 crypto Key imported successfully and recognized in RSA format
2020-07-21 22:14:58 I #20152 crypto Key imported successfully and recognized in RSA format
2020-07-21 22:14:58 I #12116 msgbus Added file watcher on broker config file <C:\ProgramData\McAfee\Agent\msgbus\config.ini>
2020-07-21 22:14:58 I #12116 msgbus msgbus connectvity status : Connected
2020-07-21 22:14:58 I #12116 msgbus Allowing <7264> onto msgbus
2020-07-21 22:14:58 I #20152 ma_client ma client is started.
2020-07-21 22:14:58 I #20152 mue changed self priority to 16384
2020-07-21 22:14:58 I #20152 mue Setting up update options ini file C:\ProgramData\McAfee\Agent\\\UpdateOptions.ini.
2020-07-21 22:14:58 I #20152 mue Setting up update history ini file C:\ProgramData\McAfee\Agent\\\UpdateHistory.ini.
2020-07-21 22:14:58 I #20152 mue Using the ui provider set in the task.
2020-07-21 22:14:58 I #20152 repoclient Trying to get the repositories.
2020-07-21 22:14:58 I #20152 repoclient Trying to get the repositories, attempt <1>.
2020-07-21 22:14:58 I #20152 repoclient Repo list received, repo ranking state is <0>.
2020-07-21 22:14:58 I #20152 creposi Repositories retrieved successfully.
2020-07-21 22:14:58 I #20152 creposi proxy configuration retrieved successfully.
2020-07-21 22:14:58 I #20152 MueEep Initializing MUE EEP Script ID = 26110
2020-07-21 22:14:58 I #20152 MueEep Invoking ShowUpdateDialog withDialogType " 1" Title " Update in Progress" Message " Please wait for update to finish..." CountdownMessage " " CountdownValue" 0" Session id" {8de9b532-cb5c-11ea-372f-dc5bd781dae3}" Updater ui id" ma.service.updater.uiprovider.CMAAGENT3000.0.0"
2020-07-21 22:14:58 I #20152 ScrptLpc Saving hash to registry
2020-07-21 22:14:58 I #20152 LPCDLLManager Successfully loaded LPC runtime mfelpc.dll
2020-07-21 22:14:58 I #20152 LpcConnMgr Initializing lpc data
2020-07-21 22:14:58 I #20152 LpcConnMgr Registering software id CMNUPD__3000 with a hash value of 1496913389
2020-07-21 22:14:58 I #20152 LpcConnMgr Starting lpc connection manager
2020-07-21 22:14:58 I #20152 LpcConnMgr Setting up watchdog component
2020-07-21 22:14:58 I #2496 WatchDog Running scheduled health check
2020-07-21 22:14:58 I #12116 msgbus Allowing <10732> onto msgbus
2020-07-21 22:14:58 I #2496 WatchDog Signalling lpc availability to registrants.
2020-07-21 22:14:58 I #2496 LpcConnMgr Invoking lpc revalidation on lpc available
2020-07-21 22:14:58 I #2496 LpcConnMgr Cleaning up message queue
2020-07-21 22:14:58 I #17988 MsgPoll starting poll thread for message queue
2020-07-21 22:14:58 I #17988 MsgPoll signalled start to message queue
2020-07-21 22:14:58 I #17988 MsgPoll Registering client channel for message type 1496913389 extended id 474185642 client id 194220927
2020-07-21 22:14:58 I #17988 MsgPoll Registering client software id CMNUPD__3000:DEFAULT:15004 with lpc server
2020-07-21 22:14:58 I #17988 MsgQueue Adding channel for message queue 1496913389 extended software id hash 474185642 client id 194220927
2020-07-21 22:14:58 I #17988 MsgQueue Channel added to message queue successfully
2020-07-21 22:14:58 I #17988 MsgQueue Getting message from message queue
2020-07-21 22:14:58 I #2496 WatchDog Done signalling lpc availability to registrants.
2020-07-21 22:14:58 I #20152 LPCConfig Waiting LPC server availability
2020-07-21 22:14:58 I #20152 LPCConfig LPC server is now available
2020-07-21 22:14:58 I #20152 ScrptLpc LPC frame work for update engine succeeded
2020-07-21 22:14:58 I #20152 ScrptLpc Successfully registered LPC UpdateCallback interface
2020-07-21 22:14:58 I #20152 p2p_client Checking P2P services via discovery...
2020-07-21 22:14:58 I #20152 creposi Trying the repository McAfeeHttp
2020-07-21 22:14:58 I #20152 creposi Checking for a valid license.
2020-07-21 22:14:59 I #20152 licmgr Downloading file from https://lc.mcafee.com:443/LicenseServer/LicenseWS.asmx/MLNodeUpdateCheck
2020-07-21 22:14:59 I #20152 network URL(https://lc.mcafee.com:443/LicenseServer/LicenseWS.asmx/MLNodeUpdateCheck) request, failed with curl error 6, Response 0, Connect code 0,
2020-07-21 22:14:59 I #20152 curl text 38 Could not resolve host: lc.mcafee.com
2020-07-21 22:14:59 I #20152 curl text 21 Closing connection 0
2020-07-21 22:14:59 E #20152 licmgr Error trace:
2020-07-21 22:14:59 E #20152 Thread [Main thread]->
2020-07-21 22:14:59 E #20152 SessMgr [initializeScript]->
2020-07-21 22:14:59 E #20152 creposi [setNextRepositoryToUse]->
2020-07-21 22:14:59 E #20152 licmgr Downloading file from https://lc.mcafee.com:443/LicenseServer/LicenseWS.asmx/MLNodeUpdateCheck failed.
2020-07-21 22:14:59 E #20152 creposi Error trace:
2020-07-21 22:14:59 E #20152 Thread [Main thread]->
2020-07-21 22:14:59 E #20152 SessMgr [initializeScript]->
2020-07-21 22:14:59 E #20152 creposi [setNextRepositoryToUse]->
2020-07-21 22:14:59 E #20152 creposi Download is allowed from the McAfee repositories but error condition found. Error code:-2. Error message:
2020-07-21 22:14:59 I #20152 downloader calling system proxy client api.
2020-07-21 22:14:59 I #20152 downloader client api sync_get_system_proxy failed.
2020-07-21 22:14:59 I #20152 downloader Downloading file from http://update.nai.com:80/Products/CommonUpdater/SiteStat.xml?hash={8f7b8b14-cb5c-11ea-1b8b-2be02f018...} to C:\windows\TEMP\SiteStat.xml with timeout 18000
2020-07-21 22:14:59 I #20152 network URL(http://update.nai.com:80/Products/CommonUpdater/SiteStat.xml?hash={8f7b8b14-cb5c-11ea-1b8b-2be02f018...}) request, failed with curl error 6, Response 0, Connect code 0,
2020-07-21 22:14:59 I #20152 curl text 39 Could not resolve host: update.nai.com
2020-07-21 22:14:59 I #20152 curl text 21 Closing connection 0
2020-07-21 22:14:59 E #20152 downloader Error trace:
2020-07-21 22:14:59 E #20152 Thread [Main thread]->
2020-07-21 22:14:59 E #20152 SessMgr [initializeScript]->
2020-07-21 22:14:59 E #20152 creposi [setNextRepositoryToUse]->
2020-07-21 22:14:59 E #20152 creposi [downloadFile,SiteStat.xml,C:\windows\TEMP]->
2020-07-21 22:14:59 E #20152 downloader Downloading file from http://update.nai.com:80/Products/CommonUpdater/SiteStat.xml?hash={8f7b8b14-cb5c-11ea-1b8b-2be02f018...} to C:\windows\TEMP\SiteStat.xml failed.
2020-07-21 22:14:59 I #20152 creposi Repository McAfeeHttp is not usable for the current update session.
2020-07-21 22:14:59 I #20152 creposi Trying the repository ePO_xxxxxx02
2020-07-21 22:14:59 I #20152 downloader calling system proxy client api.
2020-07-21 22:15:00 I #20152 downloader client api sync_get_system_proxy failed.
2020-07-21 22:15:00 I #20152 downloader Downloading file from https://ourIPaddress:443/Software/SiteStat.xml?hash={8fca3be2-cb5c-11ea-1651-2be02f0184e2} to C:\windows\TEMP\SiteStat.xml with timeout 18000
2020-07-21 22:15:00 I #20152 network URL(https://ourIPaddress:443/Software/SiteStat.xml?hash={8fca3be2-cb5c-11ea-1651-2be02f0184e2}) request, failed with curl error 7, Response 0, Connect code 0,
2020-07-21 22:15:00 I #20152 curl text 21 Closing connection 0
2020-07-21 22:15:00 I #20152 curl text 21 Closing connection 0
2020-07-21 22:15:00 E #20152 downloader Error trace:
2020-07-21 22:15:00 E #20152 Thread [Main thread]->
2020-07-21 22:15:00 E #20152 SessMgr [initializeScript]->
2020-07-21 22:15:00 E #20152 creposi [setNextRepositoryToUse]->
2020-07-21 22:15:00 E #20152 creposi [downloadFile,SiteStat.xml,C:\windows\TEMP]->

 

Any suggestions?

For now, i'll manually update it using the dat v3 file available on mcafee website.

Cheers.

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 10

Re: Virus definition cannot be updated - Unable to find valid repository

Hello,

Thanks for your response.

It is failing with Curl Error 6 and 7.

CURLE_COULDNT_RESOLVE_HOST (6)  Could not resolve host. The given remote host could not be resolved
CURLE_COULDNT_CONNECT (7) Failed to connect to host or proxy

 

Have you tried checking the masvc,log for the communication purpose?

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Highlighted
Level 8
Report Inappropriate Content
Message 7 of 10

Re: Virus definition cannot be updated - Unable to find valid repository

Hi

thanks for your quick reply. That's an important thing. The agent is able to download the sources from deploy rules and to install them. It's really linked to the update of McAfee Thread Prevention.

 

2020-07-21 22:22:08.565 masvc(7264.1052) Updater.Info: Adding the updater request taskid <{8f584f72-cb5d-11ea-113f-9e4c70ae52dc}> in the queue.
2020-07-21 22:22:08.590 masvc(7264.1052) reporank.Info: Policy change as got from Configurator <0>
2020-07-21 22:22:09.565 masvc(7264.1052) Updater.Info: Using Ui provider ma.service.updater.uiprovider.CMAAGENT3000.0.0.
2020-07-21 22:22:09.565 masvc(7264.1052) Updater.Info: Invoking mue as, [C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe -script C:\ProgramData\McAfee\Agent\update\UpdateMain.McS -id 27521 -localeid 0409 -logfile C:\ProgramData\McAfee\Agent\logs\McScript -parent FRAMEWORK -initiator 0 -ipcid ma.service.updater.uiprovider.CMAAGENT3000.0.0 -installdir C:\Program Files\McAfee\Agent\\x86\ -taskid {8f584f72-cb5d-11ea-113f-9e4c70ae52dc} (null) ].
2020-07-21 22:22:09.568 masvc(7264.1052) Updater.Info: Updater engine is spawned successfully.
2020-07-21 22:22:09.568 masvc(7264.1052) Updater.Info: Creating mue event handler.
2020-07-21 22:22:09.569 masvc(7264.1052) Updater.Info: Created mue event handler.
2020-07-21 22:22:09.569 masvc(7264.1052) Updater.Info: Launched updater engine successfully.
2020-07-21 22:22:09.569 masvc(7264.1052) Updater.Info: Updater session started for initiator type=0, task id = <{8f584f72-cb5d-11ea-113f-9e4c70ae52dc}>.
2020-07-21 22:22:10.087 masvc(7264.1052) msgbus.Info: QueryFullProcessImageName C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe
2020-07-21 22:22:10.101 masvc(7264.1052) msgbus.Info: verify code signature returns <0>, GetLastError <0>.
2020-07-21 22:22:10.101 masvc(7264.1052) msgbus.Info: Adding <C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe>:<11772> auth info reference
2020-07-21 22:22:10.135 masvc(7264.1052) msgbus.Info: executable <C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe> is trusted via authenticode. Signer: <McAfee, Inc.> Issuer: <GlobalSign CodeSigning CA - G3>
2020-07-21 22:22:10.136 masvc(7264.1052) msgbus.Info: Allowing <11772> onto msgbus
2020-07-21 22:22:10.539 masvc(7264.1052) compatservice.Info: Received notifications for changes on backcompat watcher
2020-07-21 22:22:10.540 masvc(7264.1052) compatservice.Info: is_compat_running: 1, is_compat_required: 1
2020-07-21 22:22:11.017 masvc(7264.1052) Repository.Error: detect system proxy failed <rc = 12>.
2020-07-21 22:22:11.525 masvc(7264.1052) Repository.Error: detect system proxy failed <rc = 12>.
2020-07-21 22:22:11.530 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:22:11.989 masvc(7264.1052) Repository.Error: detect system proxy failed <rc = 12>.
2020-07-21 22:22:12.434 masvc(7264.1052) Repository.Error: detect system proxy failed <rc = 12>.
2020-07-21 22:22:12.942 masvc(7264.1052) Repository.Error: detect system proxy failed <rc = 12>.
2020-07-21 22:22:15.887 masvc(7264.1052) Repository.Error: detect system proxy failed <rc = 12>.
2020-07-21 22:22:16.319 masvc(7264.1052) Repository.Error: detect system proxy failed <rc = 12>.
2020-07-21 22:22:16.771 masvc(7264.1052) Repository.Error: detect system proxy failed <rc = 12>.
2020-07-21 22:22:19.292 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:22:19.296 masvc(7264.1052) Updater.Info: Script Event : EID:0, Sev:0, ProductId:EPOAGENT3000, Locale:0409, Type:N/A, State:4, Error:26, NewVersion:N/A, Date:N/A, Message:
2020-07-21 22:22:19.296 masvc(7264.1052) Updater.Info: Script Event msg iEventId "0" iSeverity "0" iProductId "EPOAGENT3000" iLocale "0409" iUpdateType "N/A" iUpdateState "4" iUpdateError "26" iNewVersion "N/A" iDateTime "N/A" iCustomMessage ""
2020-07-21 22:22:19.332 masvc(7264.1052) Updater.Info: End dialog, title "Update Failed" message "Please check the update log for more details." countdownMessage " " countdownValue "0l"
2020-07-21 22:22:24.203 masvc(7264.1052) scheduler.Info: Scheduler: Invoking task [ma.event.priority.event.send.task.name]...
2020-07-21 22:22:24.203 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name becomes active
2020-07-21 22:22:24.240 masvc(7264.1052) event.Info: Agent is looking for events to upload
2020-07-21 22:22:24.240 masvc(7264.1052) ahclient.Info: Scheduling spipe connection with "immediate" priority.
2020-07-21 22:22:24.240 masvc(7264.1052) ahclient.Info: Start processing spipe connection request.
2020-07-21 22:22:24.249 masvc(7264.1052) event.Info: Sending Events...
2020-07-21 22:22:24.249 masvc(7264.1052) event.Info: Agent is sending EVENT package to ePO server
2020-07-21 22:22:24.250 masvc(7264.1052) event.Info: Agent uploading 2 events to ePO Server
2020-07-21 22:22:24.250 masvc(7264.1052) DataChannel.Manager.Info: DataChannel Service ignoring decoration of SPIPE package for : { Event }
2020-07-21 22:22:24.264 masvc(7264.1052) ahclient.Info: Agent communication session started
2020-07-21 22:22:24.264 masvc(7264.1052) ahclient.Info: Agent is connecting to ePO server
2020-07-21 22:22:24.264 masvc(7264.1052) ahclient.Info: Initiating spipe connection to site https://ourIPAddress:443/spipe/pkg?AgentGuid={cccad2fe-cb57-11ea-1459-7c7a91c053f0}&Source=Agent_3.0.0.
2020-07-21 22:22:24.265 masvc(7264.1052) ahclient.Info: connection initiated to site https://ourIPAddress:443/spipe/pkg?AgentGuid={cccad2fe-cb57-11ea-1459-7c7a91c053f0}&Source=Agent_3.0.0.
2020-07-21 22:22:24.329 masvc(7264.1052) Updater.Info: Updater engine exited with exit status as 1 and term signal 0.
2020-07-21 22:22:24.329 masvc(7264.1052) scheduler.Info: Scheduler: Task [{8f584f72-cb5d-11ea-113f-9e4c70ae52dc}] is finished
2020-07-21 22:22:24.338 masvc(7264.1052) scheduler.Info: The task {8f584f72-cb5d-11ea-113f-9e4c70ae52dc} is freed
2020-07-21 22:22:25.204 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name is successful
2020-07-21 22:22:25.204 masvc(7264.1052) scheduler.Info: Next time(local) of task ma.event.priority.event.send.task.name: 2020-07-21 22:27:24
2020-07-21 22:22:25.515 masvc(7264.1052) ahclient.Info: Network library rc = <1008>, Agent handler reports response code <202>.
2020-07-21 22:22:25.515 masvc(7264.1052) ahclient.Info: Agent handler doesn't have anything to send. response code 202.
2020-07-21 22:22:25.516 masvc(7264.1052) ahclient.Info: Spipe connection response received, network return code = 1008, response code 202.
2020-07-21 22:22:25.516 masvc(7264.1052) event.Info: Package uploaded to ePO Server successfully
2020-07-21 22:22:25.516 masvc(7264.1052) event.Info: Removing the last sent events from persist.
2020-07-21 22:22:25.551 masvc(7264.1052) ahclient.Info: Agent communication session closed
2020-07-21 22:22:25.551 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:22:25.573 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:26:25.366 masvc(7264.1052) svcmgr.Info: Get the subscribers list for input topic name <dxl.subscribe.*>
2020-07-21 22:27:24.205 masvc(7264.1052) scheduler.Info: Scheduler: Invoking task [ma.event.priority.event.send.task.name]...
2020-07-21 22:27:24.205 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name becomes active
2020-07-21 22:27:24.207 masvc(7264.1052) event.Info: Agent is looking for events to upload
2020-07-21 22:27:25.206 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name is successful
2020-07-21 22:27:25.206 masvc(7264.1052) scheduler.Info: Next time(local) of task ma.event.priority.event.send.task.name: 2020-07-21 22:32:24
2020-07-21 22:30:21.565 masvc(7264.1052) Updater.Info: Received updater request initiator_type=0 request_type=0 taskid={b5320fe8-cb5e-11ea-0812-791986b7148e}.
2020-07-21 22:30:21.565 masvc(7264.1052) Updater.Info: Creating on Demand updater request, task id = {b5320fe8-cb5e-11ea-0812-791986b7148e}.
2020-07-21 22:30:21.565 masvc(7264.1052) Updater.Info: Adding the updater request taskid <{b5320fe8-cb5e-11ea-0812-791986b7148e}> in the queue.
2020-07-21 22:30:21.592 masvc(7264.1052) reporank.Info: Policy change as got from Configurator <0>
2020-07-21 22:30:22.564 masvc(7264.1052) Updater.Info: Using Ui provider ma.service.updater.uiprovider.CMAAGENT3000.0.0.
2020-07-21 22:30:22.564 masvc(7264.1052) Updater.Info: Invoking mue as, [C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe -script C:\ProgramData\McAfee\Agent\update\UpdateMain.McS -id 29131 -localeid 0409 -logfile C:\ProgramData\McAfee\Agent\logs\McScript -parent FRAMEWORK -initiator 0 -ipcid ma.service.updater.uiprovider.CMAAGENT3000.0.0 -installdir C:\Program Files\McAfee\Agent\\x86\ -taskid {b5320fe8-cb5e-11ea-0812-791986b7148e} (null) ].
2020-07-21 22:30:22.567 masvc(7264.1052) Updater.Info: Updater engine is spawned successfully.
2020-07-21 22:30:22.567 masvc(7264.1052) Updater.Info: Creating mue event handler.
2020-07-21 22:30:22.567 masvc(7264.1052) Updater.Info: Created mue event handler.
2020-07-21 22:30:22.567 masvc(7264.1052) Updater.Info: Launched updater engine successfully.
2020-07-21 22:30:22.567 masvc(7264.1052) Updater.Info: Updater session started for initiator type=0, task id = <{b5320fe8-cb5e-11ea-0812-791986b7148e}>.
2020-07-21 22:30:23.174 masvc(7264.1052) msgbus.Info: QueryFullProcessImageName C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe
2020-07-21 22:30:23.187 masvc(7264.1052) msgbus.Info: verify code signature returns <0>, GetLastError <0>.
2020-07-21 22:30:23.188 masvc(7264.1052) msgbus.Info: Adding <C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe>:<19640> auth info reference
2020-07-21 22:30:23.219 masvc(7264.1052) msgbus.Info: executable <C:\Program Files\McAfee\Agent\x86\McScript_InUse.exe> is trusted via authenticode. Signer: <McAfee, Inc.> Issuer: <GlobalSign CodeSigning CA - G3>
2020-07-21 22:30:23.220 masvc(7264.1052) msgbus.Info: Allowing <19640> onto msgbus
2020-07-21 22:30:23.562 masvc(7264.1052) compatservice.Info: Received notifications for changes on backcompat watcher
2020-07-21 22:30:23.563 masvc(7264.1052) compatservice.Info: is_compat_running: 1, is_compat_required: 1
2020-07-21 22:30:24.505 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:30:32.410 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:30:32.414 masvc(7264.1052) Updater.Info: Script Event : EID:0, Sev:0, ProductId:EPOAGENT3000, Locale:0409, Type:N/A, State:4, Error:26, NewVersion:N/A, Date:N/A, Message:
2020-07-21 22:30:32.414 masvc(7264.1052) Updater.Info: Script Event msg iEventId "0" iSeverity "0" iProductId "EPOAGENT3000" iLocale "0409" iUpdateType "N/A" iUpdateState "4" iUpdateError "26" iNewVersion "N/A" iDateTime "N/A" iCustomMessage ""
2020-07-21 22:30:32.430 masvc(7264.1052) Updater.Info: End dialog, title "Update Failed" message "Please check the update log for more details." countdownMessage " " countdownValue "0l"
2020-07-21 22:30:37.450 masvc(7264.1052) Updater.Info: Updater engine exited with exit status as 1 and term signal 0.
2020-07-21 22:30:37.450 masvc(7264.1052) scheduler.Info: Scheduler: Task [{b5320fe8-cb5e-11ea-0812-791986b7148e}] is finished
2020-07-21 22:30:37.459 masvc(7264.1052) scheduler.Info: The task {b5320fe8-cb5e-11ea-0812-791986b7148e} is freed
2020-07-21 22:32:24.207 masvc(7264.1052) scheduler.Info: Scheduler: Invoking task [ma.event.priority.event.send.task.name]...
2020-07-21 22:32:24.207 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name becomes active
2020-07-21 22:32:24.222 masvc(7264.1052) event.Info: Agent is looking for events to upload
2020-07-21 22:32:24.223 masvc(7264.1052) ahclient.Info: Scheduling spipe connection with "immediate" priority.
2020-07-21 22:32:24.223 masvc(7264.1052) ahclient.Info: Start processing spipe connection request.
2020-07-21 22:32:24.233 masvc(7264.1052) event.Info: Sending Events...
2020-07-21 22:32:24.234 masvc(7264.1052) event.Info: Agent is sending EVENT package to ePO server
2020-07-21 22:32:24.234 masvc(7264.1052) event.Info: Agent uploading 2 events to ePO Server
2020-07-21 22:32:24.234 masvc(7264.1052) DataChannel.Manager.Info: DataChannel Service ignoring decoration of SPIPE package for : { Event }
2020-07-21 22:32:24.248 masvc(7264.1052) ahclient.Info: Agent communication session started
2020-07-21 22:32:24.248 masvc(7264.1052) ahclient.Info: Agent is connecting to ePO server
2020-07-21 22:32:24.249 masvc(7264.1052) ahclient.Info: Initiating spipe connection to site https://ourIPAddress:443/spipe/pkg?AgentGuid={cccad2fe-cb57-11ea-1459-7c7a91c053f0}&Source=Agent_3.0.0.
2020-07-21 22:32:24.250 masvc(7264.1052) ahclient.Info: connection initiated to site https://ourIPAddress:443/spipe/pkg?AgentGuid={cccad2fe-cb57-11ea-1459-7c7a91c053f0}&Source=Agent_3.0.0.
2020-07-21 22:32:25.208 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name is successful
2020-07-21 22:32:25.208 masvc(7264.1052) scheduler.Info: Next time(local) of task ma.event.priority.event.send.task.name: 2020-07-21 22:37:24
2020-07-21 22:32:25.502 masvc(7264.1052) ahclient.Info: Network library rc = <1008>, Agent handler reports response code <202>.
2020-07-21 22:32:25.502 masvc(7264.1052) ahclient.Info: Agent handler doesn't have anything to send. response code 202.
2020-07-21 22:32:25.503 masvc(7264.1052) ahclient.Info: Spipe connection response received, network return code = 1008, response code 202.
2020-07-21 22:32:25.503 masvc(7264.1052) event.Info: Package uploaded to ePO Server successfully
2020-07-21 22:32:25.503 masvc(7264.1052) event.Info: Removing the last sent events from persist.
2020-07-21 22:32:25.537 masvc(7264.1052) ahclient.Info: Agent communication session closed
2020-07-21 22:32:25.538 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:32:25.561 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:37:24.208 masvc(7264.1052) scheduler.Info: Scheduler: Invoking task [ma.event.priority.event.send.task.name]...
2020-07-21 22:37:24.208 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name becomes active
2020-07-21 22:37:24.210 masvc(7264.1052) event.Info: Agent is looking for events to upload
2020-07-21 22:37:25.209 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name is successful
2020-07-21 22:37:25.209 masvc(7264.1052) scheduler.Info: Next time(local) of task ma.event.priority.event.send.task.name: 2020-07-21 22:42:24
2020-07-21 22:41:25.391 masvc(7264.1052) svcmgr.Info: Get the subscribers list for input topic name <dxl.subscribe.*>
2020-07-21 22:41:54.438 masvc(7264.1052) scheduler.Info: Scheduler: Invoking task [ma.property.collect.timeout.task.name]...
2020-07-21 22:41:54.438 masvc(7264.1052) scheduler.Info: The task ma.property.collect.timeout.task.name becomes active
2020-07-21 22:41:54.440 masvc(7264.1052) property.Info: Collecting Properties
2020-07-21 22:41:54.446 masvc(7264.1052) publisher.Info: message <ma.property.collect> will be sent after <0> seconds.
2020-07-21 22:41:54.446 masvc(7264.1052) property.Info: Property collection session initiated for PropsVersion with session id -155.
2020-07-21 22:41:54.631 masvc(7264.1052) policybag.Warning: returning default policy for section=General , key=ePOMaxChars , value=128
2020-07-21 22:41:54.679 masvc(7264.1052) property.Info: Properties received from EPOAGENT3000 provider
2020-07-21 22:41:54.693 masvc(7264.1052) compatservice.Info: is_compat_running: 1, is_compat_required: 1
2020-07-21 22:41:54.696 masvc(7264.1052) property.Info: Properties received from DXL_____1000 provider
2020-07-21 22:41:54.696 masvc(7264.1052) property.Info: Properties received from AMCORE__2000 provider
2020-07-21 22:41:54.708 masvc(7264.1052) property.Info: Properties received from SYSPROPS1000 provider
2020-07-21 22:41:54.716 masvc(7264.1052) property.Info: Properties received from ENDP_GS_1070 provider
2020-07-21 22:41:54.774 masvc(7264.1052) property.Info: Properties received from ENDP_AM_1070 provider
2020-07-21 22:41:54.774 masvc(7264.1052) property.Info: Finished Collecting Properties
2020-07-21 22:41:54.774 masvc(7264.1052) property.Warning: Property collection session timed out
2020-07-21 22:41:54.818 masvc(7264.1052) property.Info: Agent started performing ASCI
2020-07-21 22:41:54.819 masvc(7264.1052) ahclient.Info: Scheduling spipe connection with "immediate" priority.
2020-07-21 22:41:54.819 masvc(7264.1052) ahclient.Info: Start processing spipe connection request.
2020-07-21 22:41:54.828 masvc(7264.1052) property.Info: Agent is sending PROPS VERSION package to ePO server
2020-07-21 22:41:54.829 masvc(7264.1052) DataChannel.Manager.Info: DataChannel Service ignoring decoration of SPIPE package for : { PropsVersion }
2020-07-21 22:41:54.843 masvc(7264.1052) ahclient.Info: Agent communication session started
2020-07-21 22:41:54.843 masvc(7264.1052) ahclient.Info: Agent is connecting to ePO server
2020-07-21 22:41:54.843 masvc(7264.1052) ahclient.Info: Initiating spipe connection to site https://ourIPAddress:443/spipe/pkg?AgentGuid={cccad2fe-cb57-11ea-1459-7c7a91c053f0}&Source=Agent_3.0.0.
2020-07-21 22:41:54.844 masvc(7264.1052) ahclient.Info: connection initiated to site https://ourIPAddress:443/spipe/pkg?AgentGuid={cccad2fe-cb57-11ea-1459-7c7a91c053f0}&Source=Agent_3.0.0.
2020-07-21 22:41:55.447 masvc(7264.1052) scheduler.Info: The task ma.property.collect.timeout.task.name is successful
2020-07-21 22:41:55.447 masvc(7264.1052) scheduler.Info: Next time(local) of task ma.property.collect.timeout.task.name: 2020-07-21 23:41:54
2020-07-21 22:41:55.643 masvc(7264.1052) scheduler.Info: Scheduler: Invoking task [ma.policy.enforce.timeout.task.name]...
2020-07-21 22:41:55.643 masvc(7264.1052) scheduler.Info: The task ma.policy.enforce.timeout.task.name becomes active
2020-07-21 22:41:55.644 masvc(7264.1052) io.service.Info: Next policy enforcement in 60 minutes
2020-07-21 22:41:55.645 masvc(7264.1052) policy.Info: Enforcing policies
2020-07-21 22:41:55.645 masvc(7264.1052) publisher.Info: message <ma.policy.notification> will be sent after <0> seconds.
2020-07-21 22:41:55.645 masvc(7264.1052) policy.Info: Enforcing Policies for DXL_____1000
2020-07-21 22:41:55.646 masvc(7264.1052) policy.Info: Enforcing Policies for ENDP_AM_1070
2020-07-21 22:41:55.646 masvc(7264.1052) policy.Info: Enforcing Policies for ENDP_GS_1070
2020-07-21 22:41:55.646 masvc(7264.1052) policy.Info: Enforcing Policies for EPOAGENT3000
2020-07-21 22:41:55.646 masvc(7264.1052) policy.Info: Agent finished Enforcing policies
2020-07-21 22:41:55.765 masvc(7264.1052) nameservice.Info: Writing broker info in file <C:\ProgramData\McAfee\Agent\msgbus\config.ini>
2020-07-21 22:41:55.791 masvc(7264.1052) event.Info: Enforcing event service policy.
2020-07-21 22:41:55.791 masvc(7264.1052) policybag.Warning: returning default policy for section=EventService , key=EventFreeDiskSpaceThresholdPercentage , value=5
2020-07-21 22:41:55.791 masvc(7264.1052) policybag.Warning: returning default policy for section=EventService , key=EventFreeDiskSpaceThreshold , value=500
2020-07-21 22:41:55.792 masvc(7264.1052) event.Info: Publishing event filter.
2020-07-21 22:41:55.792 masvc(7264.1052) policybag.Warning: returning default policy for section=AMPQ , key=AMPQ_ENABLED , value=1
2020-07-21 22:41:55.828 masvc(7264.1052) reporank.Info: Policy change as got from Configurator <0>
2020-07-21 22:41:55.838 masvc(7264.1052) compatservice.Info: is_compat_running: 1, is_compat_required: 1
2020-07-21 22:41:55.838 masvc(7264.1052) ContribManagerService.Info: Configuring Contrib manager service
2020-07-21 22:41:55.838 masvc(7264.1052) ContribManagerService.Info: Verify client extension version against manifest.
2020-07-21 22:41:55.839 masvc(7264.1052) ContribManagerService.Info: Matching client extensions are installed. No remediation action will be initiated.
2020-07-21 22:41:55.852 masvc(7264.1052) ContribManagerService.Info: Client Extensions are installed properly.
2020-07-21 22:41:55.852 masvc(7264.1052) ContribManager.Info: Configuring contrib manager
2020-07-21 22:41:55.853 masvc(7264.1052) ContribManager.Info: Configuring DXL_____1000 plugin
2020-07-21 22:41:55.853 masvc(7264.1052) ContribManager.Info: Finished configuring service DXL_____1000.
2020-07-21 22:41:55.853 masvc(7264.1052) McAfeeUI.Service.Info: Configuring McAfee UI Server
2020-07-21 22:41:55.859 masvc(7264.1052) McAfeeUI.Service.Info: Trying to launch updater ui in session 2
2020-07-21 22:41:55.859 masvc(7264.1052) McAfeeUI.Service.Info: McAfee UI processes to launch : "C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe" /StartedFromRunKey
2020-07-21 22:41:55.871 masvc(7264.1052) McAfeeUI.Service.Info: Launched process: "C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe" /StartedFromRunKey in session:(2)
2020-07-21 22:41:55.878 masvc(7264.1052) aac_service.Info: Self Protection is enabled in policy
2020-07-21 22:41:55.882 masvc(7264.1052) msgbus.Info: File watcher callback invoked on broker config change, file name <config.ini>
2020-07-21 22:41:55.890 masvc(7264.1052) msgbus.Info: File watcher callback invoked on broker config change, file name <config.ini>
2020-07-21 22:41:55.890 masvc(7264.1052) msgbus.Info: File watcher callback invoked on broker config change, file name <config.ini>
2020-07-21 22:41:55.890 masvc(7264.1052) msgbus.Info: File watcher callback invoked on broker config change, file name <config.ini>
2020-07-21 22:41:55.890 masvc(7264.1052) msgbus.Info: File watcher callback invoked on broker config change, file name <config.ini>
2020-07-21 22:41:55.934 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:41:56.340 masvc(7264.1052) msgbus.Info: QueryFullProcessImageName C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe
2020-07-21 22:41:56.349 masvc(7264.1052) msgbus.Info: verify code signature returns <0>, GetLastError <0>.
2020-07-21 22:41:56.349 masvc(7264.1052) msgbus.Info: Adding <C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe>:<17040> auth info reference
2020-07-21 22:41:56.387 masvc(7264.1052) msgbus.Info: executable <C:\Program Files\McAfee\Agent\x86\UpdaterUI.exe> is trusted via authenticode. Signer: <McAfee, Inc.> Issuer: <GlobalSign CodeSigning CA - G3>
2020-07-21 22:41:56.387 masvc(7264.1052) msgbus.Info: Allowing <17040> onto msgbus
2020-07-21 22:41:56.687 masvc(7264.1052) scheduler.Info: The task ma.policy.enforce.timeout.task.name is successful
2020-07-21 22:41:56.687 masvc(7264.1052) scheduler.Info: Next time(local) of task ma.policy.enforce.timeout.task.name: 2020-07-21 23:41:55
2020-07-21 22:41:56.880 masvc(7264.1052) ahclient.Info: Network library rc = <1008>, Agent handler reports response code <202>.
2020-07-21 22:41:56.880 masvc(7264.1052) ahclient.Info: Agent handler doesn't have anything to send. response code 202.
2020-07-21 22:41:56.881 masvc(7264.1052) ahclient.Info: Spipe connection response received, network return code = 1008, response code 202.
2020-07-21 22:41:56.881 masvc(7264.1052) property.Info: Package uploaded to ePO Server successfully
2020-07-21 22:41:56.924 masvc(7264.1052) xml_generator.Info: ma_property_xml_generator_save_props_to_datastore
2020-07-21 22:41:56.937 masvc(7264.1052) property.Info: Published property collect and send status message
2020-07-21 22:41:56.937 masvc(7264.1052) ahclient.Info: Agent communication session closed
2020-07-21 22:41:56.938 masvc(7264.1052) msgbus.Info: Received Timer event to read msgbus config file
2020-07-21 22:41:56.939 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:41:56.961 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:41:56.973 masvc(7264.1052) io.service.Info: Next collect and send properties in 59 minutes and 58 seconds.
2020-07-21 22:41:56.981 masvc(7264.1052) ahclient.Info: Scheduling spipe connection with "immediate" priority.
2020-07-21 22:41:56.981 masvc(7264.1052) ahclient.Info: Start processing spipe connection request.
2020-07-21 22:41:56.989 masvc(7264.1052) DataChannel.Manager.Info: DataChannel Service ignoring decoration of SPIPE package for : { PolicyManifestRequest }
2020-07-21 22:41:57.002 masvc(7264.1052) ahclient.Info: Agent communication session started
2020-07-21 22:41:57.003 masvc(7264.1052) ahclient.Info: Agent is connecting to ePO server
2020-07-21 22:41:57.003 masvc(7264.1052) ahclient.Info: Initiating spipe connection to site https://ourIPAddress:443/spipe/pkg?AgentGuid={cccad2fe-cb57-11ea-1459-7c7a91c053f0}&Source=Agent_3.0.0.
2020-07-21 22:41:57.003 masvc(7264.1052) ahclient.Info: connection initiated to site https://ourIPAddress:443/spipe/pkg?AgentGuid={cccad2fe-cb57-11ea-1459-7c7a91c053f0}&Source=Agent_3.0.0.
2020-07-21 22:41:57.004 masvc(7264.1052) event.Info: Agent is looking for events to upload
2020-07-21 22:41:57.004 masvc(7264.1052) event.Info: Agent did not find any events to upload
2020-07-21 22:41:58.113 masvc(7264.1052) ahclient.Info: Network library rc = <1008>, Agent handler reports response code <200>.
2020-07-21 22:41:58.113 masvc(7264.1052) ahclient.Info: Agent handler reports spipe package received. response code 200.
2020-07-21 22:41:58.113 masvc(7264.1052) ahclient.Info: Spipe connection response received, network return code = 1008, response code 200.
2020-07-21 22:41:58.115 masvc(7264.1052) policy.Info: Agent received POLICY package from ePO server
2020-07-21 22:41:58.144 masvc(7264.1052) ahclient.Info: Agent communication session closed
2020-07-21 22:41:58.145 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:41:58.183 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:41:58.276 masvc(7264.1052) ioservice.Info: Refreshed the policy bag.
2020-07-21 22:41:58.291 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:42:24.210 masvc(7264.1052) scheduler.Info: Scheduler: Invoking task [ma.event.priority.event.send.task.name]...
2020-07-21 22:42:24.210 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name becomes active
2020-07-21 22:42:24.212 masvc(7264.1052) event.Info: Agent is looking for events to upload
2020-07-21 22:42:25.210 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name is successful
2020-07-21 22:42:25.210 masvc(7264.1052) scheduler.Info: Next time(local) of task ma.event.priority.event.send.task.name: 2020-07-21 22:47:24
2020-07-21 22:47:24.211 masvc(7264.1052) scheduler.Info: Scheduler: Invoking task [ma.event.priority.event.send.task.name]...
2020-07-21 22:47:24.211 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name becomes active
2020-07-21 22:47:24.213 masvc(7264.1052) event.Info: Agent is looking for events to upload
2020-07-21 22:47:25.212 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name is successful
2020-07-21 22:47:25.212 masvc(7264.1052) scheduler.Info: Next time(local) of task ma.event.priority.event.send.task.name: 2020-07-21 22:52:24
2020-07-21 22:51:39.172 masvc(7264.1052) msgbus.Info: Allowing <16464> onto msgbus
2020-07-21 22:51:39.172 masvc(7264.1052) msgbus.Info: Updating the <16464> auth info reference
2020-07-21 22:51:39.219 masvc(7264.1052) msgbus.Error: Failed to write data on pipe name <\\.\pipe\ma_5bd9fa52-9d71-e8fd-20b0-306ab91d3db1_7264.0000000001ADDDA0_400120379_0000000003446100>
2020-07-21 22:51:39.219 masvc(7264.1052) msgbus.Error: UV write failed - uv error <36> <broken pipe>
2020-07-21 22:51:39.228 masvc(7264.1052) msgbus.Info: Allowing <16464> onto msgbus
2020-07-21 22:51:39.228 masvc(7264.1052) msgbus.Info: Updating the <16464> auth info reference
2020-07-21 22:51:39.262 masvc(7264.1052) msgbus.Error: Failed to write data on pipe name <\\.\pipe\ma_5bd9fa52-9d71-e8fd-20b0-306ab91d3db1_7264.0000000001ADDDA0_400120379_0000000003443A30>
2020-07-21 22:51:39.262 masvc(7264.1052) msgbus.Error: UV write failed - uv error <36> <broken pipe>
2020-07-21 22:51:39.270 masvc(7264.1052) msgbus.Info: Allowing <16464> onto msgbus
2020-07-21 22:51:39.271 masvc(7264.1052) msgbus.Info: Updating the <16464> auth info reference
2020-07-21 22:51:39.309 masvc(7264.1052) msgbus.Error: Failed to write data on pipe name <\\.\pipe\ma_5bd9fa52-9d71-e8fd-20b0-306ab91d3db1_7264.0000000001ADDDA0_400120379_0000000003451890>
2020-07-21 22:51:39.310 masvc(7264.1052) msgbus.Error: UV write failed - uv error <36> <broken pipe>
2020-07-21 22:51:41.015 masvc(7264.1052) msgbus.Error: Failed to write data on pipe name <\\.\pipe\ma_5bd9fa52-9d71-e8fd-20b0-306ab91d3db1_7264.0000000001ADDDA0_400120379_000000000344E4D0>
2020-07-21 22:51:41.015 masvc(7264.1052) msgbus.Error: UV write failed - uv error <36> <broken pipe>
2020-07-21 22:51:59.905 masvc(7264.1052) msgbus.Info: QueryFullProcessImageName C:\Program Files\McAfee\Endpoint Security\Threat Prevention\mfetp.exe
2020-07-21 22:51:59.921 masvc(7264.1052) msgbus.Info: verify code signature returns <0>, GetLastError <0>.
2020-07-21 22:51:59.922 masvc(7264.1052) msgbus.Info: Adding <C:\Program Files\McAfee\Endpoint Security\Threat Prevention\mfetp.exe>:<18588> auth info reference
2020-07-21 22:51:59.958 masvc(7264.1052) msgbus.Info: executable <C:\Program Files\McAfee\Endpoint Security\Threat Prevention\mfetp.exe> is trusted via authenticode. Signer: <McAfee, Inc.> Issuer: <GlobalSign CodeSigning CA - G3>
2020-07-21 22:51:59.958 masvc(7264.1052) msgbus.Info: Allowing <18588> onto msgbus
2020-07-21 22:52:01.174 masvc(7264.1052) ioservice.Info: IO service received the message.
2020-07-21 22:52:24.212 masvc(7264.1052) scheduler.Info: Scheduler: Invoking task [ma.event.priority.event.send.task.name]...
2020-07-21 22:52:24.212 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name becomes active
2020-07-21 22:52:24.663 masvc(7264.1052) event.Info: Agent is looking for events to upload
2020-07-21 22:52:25.213 masvc(7264.1052) scheduler.Info: The task ma.event.priority.event.send.task.name is successful
2020-07-21 22:52:25.213 masvc(7264.1052) scheduler.Info: Next time(local) of task ma.event.priority.event.send.task.name: 2020-07-21 22:57:24
2020-07-21 22:56:25.307 masvc(7264.1052) svcmgr.Info: Get the subscribers list for input topic name <dxl.subscribe.*>

 

Any ideas/suggestions? I'm still connected on the remote client for a few more minutes. 🙂

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 8 of 10

Re: Virus definition cannot be updated - Unable to find valid repository

I see it is able to reach epo server for asci, but can't get updates.  After re-installing the agent and ens on system, can you still get to https://ourIPaddress:443/Software/SiteStat.xml in browser?  If so, does it work with everything unchecked in proxy settings?  Is the agent using a proxy?  That would be in the repository policy.  Otherwise, you might need to get a wireshark capture for when it attempts to reach the server.  In one of the log entries, it also failed to update.nai.com site.  Can it get to that in browser?  I know you said it worked before, but I wanted to confirm that with proxy settings disabled and from both epo and update.nai.com sites.  It really sounds like a firewall/proxy issue.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Highlighted
Level 8
Report Inappropriate Content
Message 9 of 10

Re: Virus definition cannot be updated - Unable to find valid repository

Thank you for your reply.
I aslo opened a ticket with McAfee support.
A technician tried to fix it but problem remains.

After agent reinstallation, SiteStat.xml is still reachable but not the repository.

Error shows proxy references and indeed client is based in China and uses Astrill as proxy to bypass Chinese restrictions.

But even with Astrill OFF, so with proxy settings disabled too, the problem remains.

We have other clients in China, also using Astrill and theirs virus definition is updating correctly.

 

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 10 of 10

Re: Virus definition cannot be updated - Unable to find valid repository

You might need to get a wireshark capture then from the system to see what is going on with it.  You might also want to ensure the system has all the required root certificates.  See KB92937.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community