1 2 3 Previous Next 28 Replies Latest reply on Nov 18, 2010 8:44 AM by serc09

    win7 x32/x64 and VSE Scan Task

    serc09

      Hey there.

       

      Using ePO 4.5 (V4.5.0 P3 = 4.5.0.937), MA 4.0 P3 (4.0.0.1494 | current branch), MA 4.5 P1 (4.5.0.1429) and VSE 8.7 P3.


      Everythings seems to work fine except of one thing:

       

      In my systemtree i have a group with a clienttask "Full System Scan" (Scan on demand (VSE 8.7)) which runs immediately.

       

      This works fine on all XP clients.

       

      But now we are getting more and more win7 (x32/x64) clients and today i wanted to make a "Full System Scan" on such a win7 client.

       

      I dropped the client in that systemtreegroup - did an asci local at the agent monitor and didn't see the task appearing in the agent monitor.

       

      What i tried to solve this:

       

      1.1 nothing of mcAfee was installed

      1.2 installed MA 4.0 P3

      1.3 installed VSE 8.7 P3 ( extra systemtreegroup) - worked fine

      1.4 droped the client in "Full System Scan" systemtreegroup - the VSE 8.7 Install Task was deleted - the full system scan task did not appear

      1.5 uninstalled VSE 8.7 & MA 4.0 P3

       

      2.1 deleted everything with "VSE" from master repo

      2.2 checked VSE 8.7 P3 in the master repo

      2.3 deleted the Full System Scan task from the systemtreegroup

      2.4 recreated the Full System Scan at the systemtreegroup

      2.5 installed MA 4.5 P1

      2.6 installed VSE 8.7 P3 ( extra systemtreegroup) - worked fine

      2.7 droped the client in "Full System Scan" systemtreegroup - the VSE 8.7  Install Task was deleted - the full system scan task did not appear

       

      What can i do that the "Full System Scan" tasc appears at my win7 clients?

       

      If logs a required tell me which ones.

       

      THX in advance

       

      regards

       

      serc09

        • 1. Re: win7 x32/x64 and VSE Scan Task
          Attila Polinger

          Hello,

           

          this issue became fashionable to be asked among forum members as I saw in the last several weeks. Its very likely that the tasks your agents download lack the Windows 7 platform code, and the agents therefore does not simply run them.

          You must add the Windows 7 platform code so management becomes complete on Windows 7 (I wonder why they did not seem to embed it into an ePO patch however).

           

          See KB67347. There is another KB on the same topic, slightly more but only in that it has another SQL script that is more targeted to one sort of a task fix.

           

          Attila

          1 of 1 people found this helpful
          • 2. Re: win7 x32/x64 and VSE Scan Task
            serc09

            Thx Attila,

             

            i ran the script on the sql-browser as shown in KB67347:

             

            DECLARE @ProductCode NVARCHAR(100)

            DECLARE @PlatformCode NVARCHAR(100)

            SET @ProductCode = 'EPOAGENTMETA'

            SET @PlatformCode = 'WNT7W'

            UPDATE [dbo].[EPOTask]

             

               SET [PlatformsSupported] =  [PlatformsSupported]+'|'+@PlatformCode,

             

                   [TheTimestamp] = @@DBTS

             

            WHERE [ProductCode] = @ProductCode

             

               AND [PlatformsSupported] NOT LIKE '%'+@PlatformCode+'%'

             

               AND [PlatformsSupported] LIKE '%WXPW%'

             

            GO

             

             

            Then i rebuilded the client task, dropped in the clients did an ASCI - but all as before - nothing happes/happened.

             

            Something special to check for?

            • 3. Re: win7 x32/x64 and VSE Scan Task
              Attila Polinger

              Hello Serc09,

               

              please check if the platform code actually got on the relevant tasks on the client. Browse to \Documents and Settings\All Users\Application Data\McAfee\Common Framework\Task and open each .INI file therein.

              You should see something like this:

               

              [Task]
              TaskName=VSE patch terítési taszk - Global
              Platforms=WIN95|WIN98|WINME|WNTS|WNTW|WXPW|WXPS|WXPHE|W2KS|W2KW|WVST|WVSTS|LINUX |MAC|SCM|SLR|HPUX|WNT7W
              TaskPriority=0
              SoftwareName=EPOAGENT3000
              TaskID=581
              CreatorSoftwareID=EPOAGENT3000
              TaskType=Update
              TaskVersion=217847271
              [General]
              TaskType=Update
              [InetManager]

               

              etc.etc.

               

              When you see the highlighted item, the task is ok.

               

              Attila

              • 4. Re: win7 x32/x64 and VSE Scan Task
                serc09

                apoling schrieb:

                Browse to \Documents and Settings\All Users\Application Data\McAfee\Common Framework\Task and open each .INI file therein.

                 

                There is just one .INI File

                 

                {A14CD6FC-3BA8-4703-87BF-E3247CE382F5}.ini

                 

                Which is the standard-update task from VSE.

                 

                [Task]
                TaskName={A14CD6FC-3BA8-4703-87BF-E3247CE382F5}
                Platforms=*
                TaskPriority=99
                SoftwareName=VIRUSCAN8700
                TaskID={A14CD6FC-3BA8-4703-87BF-E3247CE382F5}
                CreatorSoftwareID=VIRUSCAN8700
                TaskType=UPDATE
                TaskVersion=
                UserName=
                DomainName=
                Password=
                [Settings]
                StopAfterMinutes=0
                Enabled=1
                Duplicated=0
                DialupTriggerEnabled=0
                [Schedule]
                Type=0
                GMTTime=0
                RunIfMissed=1
                RunIfMissedDelayMins=5
                StartDateTime=20020903170000
                StopDateValid=0
                StopDateTime=00000000000000
                TaskRepeatable=0
                RepeatOption=0
                RepeatInterval=1
                UntilOption=0
                UntilTime=00000000000000
                UntilDuration=1
                RandomizationEnabled=1
                RandomizationWndMins=60
                EnableRunTaskOnceADay=0
                AtStartupDelayMinutes=5
                RepeatDays=1
                RepeatWeeks=1
                MaskDaysOfWeek=0
                MonthOption=0
                DayNumOfMonth=0
                WeekNumOfMonth=0
                DayOfWeek=0
                MaskMonthsOfYear=0
                IdleMinutes=0
                [VSE7_SchedulerSection]
                VSE7_UserName=
                VSE7_DomainName=

                 

                What to do now?

                • 5. Re: win7 x32/x64 and VSE Scan Task
                  serc09

                  I just tested it with a XP client - in the taks-folder 122.ini appeared and when i look at it, i see the following:

                   

                  Platforms=WNTS|WNTW|WIN95|WIN98|WINME|WXPW|WXPS|WXPHE|W2KS|W2KW|WVST|WVSTS

                   

                  WNT7W is missing. But why does the deployment task to deploy VSE 8.7 work fine?!

                   

                   

                  This is the 122.ini:

                   

                  [Task]
                  TaskName=Full System Scan
                  Platforms=WNTS|WNTW|WIN95|WIN98|WINME|WXPW|WXPS|WXPHE|W2KS|W2KW|WVST|WVSTS
                  TaskPriority=0
                  SoftwareName=VIRUSCAN8700
                  TaskID=122
                  CreatorSoftwareID=EPOAGENT3000
                  TaskType=VSC700_Scan_Task
                  TaskVersion=2119798
                  [Actions]
                  uAction=1
                  uSecAction=4
                  [Advanced]
                  bDeferScanInFullScreen=0
                  bDeferScanOnBattery=0
                  bDoHsm=1
                  bPermitUserDefer=0
                  dwHeuristicNetCheckSensitivity=-1
                  dwMacroHeuristicsLevel=1
                  dwProgramHeuristicsLevel=1
                  nPriority=30
                  uDeferTime=1
                  [Exclusions]
                  bAppendExclusions=0
                  dwExclusionCount=0
                  [General]
                  TaskType=SCAN
                  UIType=2
                  bAlwaysExit=1
                  bAutoExit=1
                  bAutoStart=1
                  bSkipSplash=1
                  szTaskName=New Scan Task
                  wTaskAttrib=3
                  [Reports]
                  Alert_ExcludeCookies=0
                  LogFileFormat=1
                  bLimitSize=1
                  bLogScanFailure=1
                  bLogSettings=0
                  bLogSummary=1
                  bLogToFile=1
                  szLogFileName=%DEFLOGDIR%\OnDemandScanLog.txt
                  uKilobytes=1024
                  [ScanItems]
                  dwScanItemCount=5
                  szScanItem0=SpecialScanForRootkits
                  szScanItem1=SpecialMemory
                  szScanItem2=LocalDrives
                  szScanItem3=SpecialCookiesSpyware
                  szScanItem4=SpecialRegistrySpyware
                  [Schedule]
                  GMTTime=0
                  RandomizationEnabled=0
                  RandomizationWndMins=1
                  RunIfMissed=0
                  RunIfMissedDelayMins=0
                  StartDateTime=20100722120000
                  StopDateValid=0
                  TaskRepeatable=0
                  Type=7
                  [Settings]
                  Enabled=1
                  StopAfterMinutes=0
                  [Spyware]
                  ApplyNVP=1
                  uAction_Program=1
                  uSecAction_Program=4
                  [VSE7_SchedulerSection]
                  VSE7_DomainName=
                  VSE7_Password=
                  VSE7_UserName=
                  bDisplayTask=0
                  bRunOnServer=1
                  bRunOnWrkstn=1
                  [What]
                  ScanArchives=1
                  ScanMime=0
                  bScanAllFiles=1
                  bScanAllOle=0
                  bScanDefaultFiles=0
                  szDefProgExts=
                  szProgExts=
                  [Where]
                  bScanSubDirs=1
                  bSkipBootScan=0

                   

                  From the 122.ini:

                  CreatorSoftwareID=EPOAGENT3000

                   


                  From  the SQL-Script:

                   

                  DECLARE @ProductCode NVARCHAR(100)

                  DECLARE @PlatformCode NVARCHAR(100)

                  SET @ProductCode = 'EPOAGENTMETA'
                  SET @PlatformCode = 'WNT7W'

                  UPDATE [dbo].[EPOTask]

                   

                     SET [PlatformsSupported] =  [PlatformsSupported]+'|'+@PlatformCode,

                   

                         [TheTimestamp] = @@DBTS

                   

                  WHERE [ProductCode] = @ProductCode

                   

                     AND [PlatformsSupported] NOT LIKE '%'+@PlatformCode+'%'

                   

                     AND [PlatformsSupported] LIKE '%WXPW%'

                   

                  GO

                   

                  Is this ok so far or am i missing the 3000 ?! (hope you understand my thinkings... ) Or does this epoagentmeta and epoagent3000 come from the different agent versions? XP client is MA 4.0 P3 and win7 is MA 4.5 P1.

                   

                  regards

                   

                  serc09

                   

                   

                  Nachricht geändert durch serc09 on 22.07.10 12:28:11 GMT+01:00
                  • 6. Re: win7 x32/x64 and VSE Scan Task
                    Attila Polinger

                    After I have checked a few things it seems to me that the only reason for this platform code not to appear in a managed task, could be when the task is not destined to run on the platform, that is, e.g. either of these settings are 0:

                     

                    bRunOnServer=1
                    bRunOnWrkstn=1

                     

                    But in your case this specific task is destined to run on both servers and workstations, so the platform code should be there; I suggest you create a similar task beside the one already there and do an asci and see if this task has the platform code.

                     

                    The "3000" and "META" suffixes mean different things but not different agent versions. The META is probably the interface the other one is the product itself.

                     

                    Attila

                    • 7. Re: win7 x32/x64 and VSE Scan Task
                      serc09

                      Created new systemtree group with a "scan on demand vse 8.7" client task.

                       

                      Dropped in the 3 clients.

                       

                      woke up the agents.

                       

                      win 7 x32 - agent reported back - no new task appeared

                       

                      win 7 x64 - agent reported back - no new task appeared

                       

                      win XP - agent reported back - 124.INI appeared - task appeared - full system scan ran immediately

                       

                      [Task]
                      TaskName=Full Scan 2
                      Platforms=WNTS|WNTW|WIN95|WIN98|WINME|WXPW|WXPS|WXPHE|W2KS|W2KW|WVST|WVSTS
                      TaskPriority=0
                      SoftwareName=VIRUSCAN8700
                      TaskID=124
                      CreatorSoftwareID=EPOAGENT3000
                      TaskType=VSC700_Scan_Task
                      TaskVersion=2123637
                      [Actions]
                      uAction=1
                      uSecAction=4
                      [Advanced]
                      bDeferScanInFullScreen=0
                      bDeferScanOnBattery=0
                      bDoHsm=1
                      bPermitUserDefer=0
                      dwHeuristicNetCheckSensitivity=-1
                      dwMacroHeuristicsLevel=1
                      dwProgramHeuristicsLevel=1
                      nPriority=30
                      uDeferTime=1
                      [Exclusions]
                      bAppendExclusions=0
                      dwExclusionCount=0
                      [General]
                      TaskType=SCAN
                      UIType=2
                      bAlwaysExit=1
                      bAutoExit=1
                      bAutoStart=1
                      bSkipSplash=1
                      szTaskName=New Scan Task
                      wTaskAttrib=3
                      [Reports]
                      Alert_ExcludeCookies=0
                      LogFileFormat=1
                      bLimitSize=1
                      bLogScanFailure=1
                      bLogSettings=0
                      bLogSummary=1
                      bLogToFile=1
                      szLogFileName=%DEFLOGDIR%\OnDemandScanLog.txt
                      uKilobytes=1024
                      [ScanItems]
                      dwScanItemCount=5
                      szScanItem0=SpecialScanForRootkits
                      szScanItem1=SpecialMemory
                      szScanItem2=LocalDrives
                      szScanItem3=SpecialCookiesSpyware
                      szScanItem4=SpecialRegistrySpyware
                      [Schedule]
                      GMTTime=0
                      RandomizationEnabled=0
                      RandomizationWndMins=1
                      RunIfMissed=0
                      RunIfMissedDelayMins=0
                      StartDateTime=20100722120000
                      StopDateValid=0
                      TaskRepeatable=0
                      Type=7
                      [Settings]
                      Enabled=1
                      StopAfterMinutes=0
                      [Spyware]
                      ApplyNVP=1
                      uAction_Program=1
                      uSecAction_Program=4
                      [VSE7_SchedulerSection]
                      VSE7_DomainName=
                      VSE7_Password=
                      VSE7_UserName=
                      bDisplayTask=0
                      bRunOnServer=1
                      bRunOnWrkstn=1
                      [What]
                      ScanArchives=1
                      ScanMime=0
                      bScanAllFiles=1
                      bScanAllOle=0
                      bScanDefaultFiles=0
                      szDefProgExts=
                      szProgExts=
                      [Where]
                      bScanSubDirs=1
                      bSkipBootScan=0

                       

                      So the plattformcode is still missing.

                       

                      Any more ideas? Run the SQL-Script again?

                      • 8. Re: win7 x32/x64 and VSE Scan Task
                        Attila Polinger

                        Hi,

                         

                        from an SQL client run the following script to see which task has the platform code set:

                         

                        SELECT

                         

                         

                        GlobalTaskID, ProductCode, TaskType, TaskName, PlatformsSupported

                        FROM

                         

                         

                        ePOTask

                        WHERE

                         

                         

                        PlatformsSupported LIKE '%WNT7W%'

                        ORDER

                         

                         

                        BY ProductCode

                         

                        The Win 7 platform code is at the end. Run the original script again if no task has the Win 7 platform code.

                         

                        Attila

                        • 9. Re: win7 x32/x64 and VSE Scan Task
                          serc09

                          SELECT

                           

                           

                          GlobalTaskID, ProductCode, TaskType, TaskName, PlatformsSupported

                          FROM

                           

                           

                          ePOTask

                          WHERE

                           

                           

                          PlatformsSupported LIKE '%WNT7W%'

                          ORDER

                           

                           

                          BY ProductCode

                           

                          When i run this script i don't see my 2 "Scan on Demand" tasks.

                           

                          When i then run the script from KB67347 it says:

                           

                          (0 Zeile(n) betroffen) -> translated: 0 lines affected.

                          1 2 3 Previous Next