7 Replies Latest reply on Sep 3, 2010 7:53 AM by harryleravi

    Framepkg.exe deployed but not running.

      Hello all,

       

      This is the history of my problem:

      - I can't get McAfee Agent properties from ~130 computers to my EPO server.

      - I tried to deploy another time the Agent from my server to this computers but there is the same problem.

      - I see on the Agent_[computer].log a problem with the key between computers and agent.

      - Yesterday I lauched the command "C:\program files\mcafee\common framework\frminst.exe" /remove=agent /s remotely with psexec.exe utility to computers

      - Next I rebooted them to purge cache files.

       

      Today I tried to launch a deploying task with my EPO server to this computers.

      The task is successfull on the server but the McAfee agent is not installed.

       

      FramePkg.exe is on c:\WINNT\. In that case, I think the FramePkg.exe is deployed to computers but the command to install the Agent is not running.

       

      My configuration:

      - EPO 4.5, Agent 4.5.0.1429

      - Synchronisation with Active Directory with automatic agent deploying

      - Firewall OK

      - Install Account is local admin on Computer

       

      What is the default command to install Agent with FramePkg.exe when it was deployed with EPO?

      I want this command to lauch it remotely on computer with psexec.exe in order to see if it lauched successfully.

       

      If you need more informations, tell me.

       

      Thanks.

        • 1. Re: Framepkg.exe deployed but not running.

          I have lauched this command:

          "c:\WINNT\FramePkg.exe" /install=agent /s remotely with psexec.exe on a computer.

           

          It was an error.

           

          I found the FrmInst_[Computer].log :

           

          2010-09-01 10:47:22    I    #3440    Stub    Pkg   
          2010-09-01 10:47:22    I    #3440    Stub    Pkg    START ["C:\WINNT\framePkg.exe" /install=agent /s]
          2010-09-01 10:47:22    I    #3440    Common    Pkg    CreateDirectory (C:\DOCUME~1\adm.epo\LOCALS~1\Temp\mfe4DB.tmp)
          2010-09-01 10:47:23    I    #3440    Common    Pkg    CreateProcess (C:\DOCUME~1\adm.epo\LOCALS~1\Temp\mfe4DB.tmp\FrmInst.exe, /install=agent /s /FramePkg /OriginalFramePkg="C:\WINNT\framePkg.exe" /Cleanup="C:\DOCUME~1\adm.epo\LOCALS~1\Temp\mfe4DB.tmp" /LOGDIR="C:\DOCUME~1\adm.epo\LOCALS~1\Temp\McAfeeLogs" /EmbeddedUsername="" /EmbeddedDomain="" /EmbeddedPassword="")
          2010-09-01 10:47:23    I    #3440    Stub    Pkg    Waiting for installation to complete
          2010-09-01 10:47:23    I    #3440    Common    Pkg    WaitForSingleObject (C:\DOCUME~1\adm.epo\LOCALS~1\Temp\mfe4DB.tmp\FrmInst.exe, -1)
          2010-09-01 10:47:23    I    #3496    Setup    Ins    START [/install=agent /s /FramePkg /OriginalFramePkg="C:\WINNT\framePkg.exe" /Cleanup="C:\DOCUME~1\adm.epo\LOCALS~1\Temp\mfe4DB.tmp" /LOGDIR="C:\DOCUME~1\adm.epo\LOCALS~1\Temp\McAfeeLogs" /EmbeddedUsername="" /EmbeddedDomain="" /EmbeddedPassword=""]
          2010-09-01 10:47:23    I    #3496    Setup    Ins    Windows 5.1.2600 Service Pack 3
          2010-09-01 10:47:23    I    #3496    Setup    Ins    Attempting to perform a setup operation
          2010-09-01 10:47:23    I    #3496    caShrLb    Ins    SOFTWARE\Network Associates\TVD\Shared Components\Framework is not present
          2010-09-01 10:47:23    I    #3496    Setup    Ins    Legacy installed=0
          2010-09-01 10:47:23    I    #3496    Setup    Ins    Installing version=4.5.0.1429
          2010-09-01 10:47:23    I    #3496    Setup    Ins    Higher version installed=0
          2010-09-01 10:47:23    I    #3496    Setup    Ins    C:\WINNT\system32\msiexec.exe /i "C:\DOCUME~1\adm.epo\LOCALS~1\Temp\mfe4DB.tmp\MFEagent.msi" ADDLOCAL=Main,Agent TRANSFORMS=:1036.mst /q REBOOT=R /l+*v "C:\DOCUME~1\adm.epo\LOCALS~1\Temp\McAfeeLogs\MFEagent.msi.2010.09.01.10.47.23. log" SITEINFO="C:\DOCUME~1\adm.epo\LOCALS~1\Temp\mfe4DB.tmp\SiteList.xml" PRESERVEREPOSITORIES=True FRMINSTLOGFILE="C:\DOCUME~1\adm.epo\LOCALS~1\Temp\McAfeeLogs\FrmInst_XS3685"
          2010-09-01 10:47:31    E    #3496    Setup    Ins    Error trace:
          2010-09-01 10:47:31    E    #3496    Thread    Ins     [Main thread]->
          2010-09-01 10:47:31    E    #3496    Setup    Ins     [Attempting to perform a setup operation]->
          2010-09-01 10:47:31    E    #3496    Setup    Ins     [Run MSI]->
          2010-09-01 10:47:31    E    #3496    Setup    Ins      error 1603: Fatal error during installation.
          2010-09-01 10:47:31    I    #3496    Thread    Ins    Exit program
          2010-09-01 10:47:31    I    #3496    Setup    Ins    END 1603
          2010-09-01 10:47:31    I    #3440    Stub    Pkg    END 1603
          2010-09-01 10:47:31    I    #1896    Main    Cle   
          2010-09-01 10:47:31    I    #1896    Main    Cle    START [4000 /LOGDIR="C:\DOCUME~1\adm.epo\LOCALS~1\Temp\McAfeeLogs" "C:\DOCUME~1\adm.epo\LOCALS~1\Temp\mfe4DB.tmp"]
          2010-09-01 10:47:31    I    #1896    Common    Cle    WaitForSingleObject (calling FrmInst.exe, 30000)
          2010-09-01 10:47:32    I    #1896    Main    Cle    Delete on reboot: C:\DOCUME~1\adm.epo\LOCALS~1\Temp\mfe4DB.tmp\cleanup.exe
          2010-09-01 10:47:32    I    #1896    Main    Cle    Delete on reboot: C:\DOCUME~1\adm.epo\LOCALS~1\Temp\mfe4DB.tmp
          2010-09-01 10:47:32    I    #1896    Main    Cle    END 0

           

          In that case i found a topic with this fatal error 1603 : https://kc.mcafee.com/corporate/index?page=content&id=KB69124

           

          I checked on  MFEagent.msi.<timestamp>.log I checked and i founded:

           

          MSI (s) (B8:00) [10:47:30:057]: SOURCEMGMT: Now checking product {F2969393-2D4D-4977-8166-B1251B08EF12}
          MSI (s) (B8:00) [10:47:30:057]: SOURCEMGMT: Media is enabled for product.
          MSI (s) (B8:00) [10:47:30:057]: SOURCEMGMT: Attempting to use LastUsedSource from source list.
          MSI (s) (B8:00) [10:47:30:057]: SOURCEMGMT: Processing net source list.
          MSI (s) (B8:00) [10:47:30:057]: SOURCEMGMT: Trying source C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\.
          MSI (s) (B8:00) [10:47:30:119]: SOURCEMGMT: Source is invalid due to invalid package code (product code doesn't match).
          MSI (s) (B8:00) [10:47:30:119]: SOURCEMGMT: Trying source C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\mfe20.tmp\.
          MSI (s) (B8:00) [10:47:30:119]: Note: 1: 2203 2: C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\mfe20.tmp\MFEagent.msi 3: -2147287037
          MSI (s) (B8:00) [10:47:30:119]: SOURCEMGMT: Source is invalid due to missing/inaccessible package.
          MSI (s) (B8:00) [10:47:30:119]: Note: 1: 1706 2: -2147483647 3: MFEagent.msi
          MSI (s) (B8:00) [10:47:30:119]: SOURCEMGMT: Processing media source list.
          MSI (s) (B8:00) [10:47:31:166]: Note: 1: 2203 2:  3: -2147287037
          MSI (s) (B8:00) [10:47:31:166]: SOURCEMGMT: Source is invalid due to missing/inaccessible package.
          MSI (s) (B8:00) [10:47:31:166]: Note: 1: 1706 2: -2147483647 3: MFEagent.msi
          MSI (s) (B8:00) [10:47:31:166]: SOURCEMGMT: Processing URL source list.
          MSI (s) (B8:00) [10:47:31:166]: Note: 1: 1402 2: UNKNOWN\URL 3: 2
          MSI (s) (B8:00) [10:47:31:166]: Note: 1: 1706 2: -2147483647 3: MFEagent.msi
          MSI (s) (B8:00) [10:47:31:166]: Note: 1: 1706 2:  3: MFEagent.msi
          MSI (s) (B8:00) [10:47:31:166]: SOURCEMGMT: Failed to resolve source
          MSI (s) (B8:D8) [10:47:31:166]: Note: 1: 1714 2: McAfee Agent 3: 1612
          MSI (s) (B8:D8) [10:47:31:166]: Transforming table Error.

           

          MSI (s) (B8:D8) [10:47:31:166]: Transforming table Error.

           

          MSI (s) (B8:D8) [10:47:31:166]: Product: McAfee Agent -- Error 1714. The older version of McAfee Agent can not be removed. Check with your technical support personnel. System error: 1612.

           

           

           

          In that case the problem can be in the registry. There is a trace of old Agent not completely uninstalled successfully.

           

          Do you have an easy solution to resolve this problem for all computers or I need to check on all of them the registry value to delete?

           

          Thanks.

          • 2. Re: Framepkg.exe deployed but not running.
            rackroyd

            MSI Error 1603 just means 'it broke', it doesn't provide any meat to the bones unfortunately.

            The other snippet is more interesting though, it looks a lot like KB60106.

             

            Bear in mind that KB60106 is for MA 4.0 so the uninstall GUID in the registry that it mentions will likely be different.

            I do not know which value you will need to find but my guess is it's there somwhere and contains the wrong path as the article describes.

             

            Hth.

            • 3. Re: Framepkg.exe deployed but not running.

              I take attention about these lines:

               

              MSI (s) (B8:00) [10:47:30:057]: SOURCEMGMT: Trying source C:\Documents  and Settings\All Users\Application Data\McAfee\Common Framework\.
              MSI (s) (B8:00) [10:47:30:119]: SOURCEMGMT: Source is invalid due to invalid package code (product code doesn't match).

               

              The installer is checking MFEagent.msi.

               

              This msi is on this path.

               

              What meens "Source is invalid due to invalid package code (product code doesn't match)." ?

              Computers have a bad version of MFEagent.msi ?

              • 4. Re: Framepkg.exe deployed but not running.

                Hello!

                 

                I found an information : https://kc.mcafee.com/corporate/index?page=content&id=KB65863

                 

                Solution 2 - Step 3-13:

                 

                Right-click the appropriate sub-key below and select Delete:

                 

                McAfee Agent 4.0 - {F2969393-2D4D-4977-8166-B1251B08EF12}
                McAfee Agent 4.5 - {B639A4DE-A375-47D3-89C3-DDCF98D992F7}

                 

                 

                 

                In my MFEagent.msi.<timestamp> we can see:

                 

                           ******* Product: {F2969393-2D4D-4977-8166-B1251B08EF12}
                           ******* Action:
                           ******* CommandLine: **********
                MSI (s) (84:98) [13:08:20:358]: Warning: Local cached package 'C:\WINNT\Installer\2c92b.msi' is missing.
                MSI (s) (84:98) [13:08:20:358]: User policy value 'SearchOrder' is 'nmu'
                MSI (s) (84:98) [13:08:20:358]: User policy value 'DisableMedia' is 0
                MSI (s) (84:98) [13:08:20:358]: Machine policy value 'AllowLockdownMedia' is 0
                MSI (s) (84:98) [13:08:20:358]: SOURCEMGMT: Media enabled only if package is safe.
                MSI (s) (84:98) [13:08:20:358]: SOURCEMGMT: Looking for sourcelist for product {F2969393-2D4D-4977-8166-B1251B08EF12}
                MSI (s) (84:98) [13:08:20:358]: SOURCEMGMT: Adding {F2969393-2D4D-4977-8166-B1251B08EF12}; to potential sourcelist list (pcode;disk;relpath).
                MSI (s) (84:98) [13:08:20:358]: SOURCEMGMT: Now checking product {F2969393-2D4D-4977-8166-B1251B08EF12}
                MSI (s) (84:98) [13:08:20:358]: SOURCEMGMT: Media is enabled for product.
                MSI (s) (84:98) [13:08:20:358]: SOURCEMGMT: Attempting to use LastUsedSource from source list.
                MSI (s) (84:98) [13:08:20:358]: SOURCEMGMT: Processing net source list.
                MSI (s) (84:98) [13:08:20:358]: SOURCEMGMT: Trying source C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\.
                MSI (s) (84:98) [13:08:20:358]: SOURCEMGMT: Source is invalid due to invalid package code (product code doesn't match).
                MSI (s) (84:98) [13:08:20:358]: SOURCEMGMT: Trying source C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\mfe20.tmp\.
                MSI (s) (84:98) [13:08:20:358]: Note: 1: 2203 2: C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\mfe20.tmp\MFEagent.msi 3: -2147287037
                MSI (s) (84:98) [13:08:20:358]: SOURCEMGMT: Source is invalid due to missing/inaccessible package.
                MSI (s) (84:98) [13:08:20:358]: Note: 1: 1706 2: -2147483647 3: MFEagent.msi
                MSI (s) (84:98) [13:08:20:358]: SOURCEMGMT: Processing media source list.
                MSI (s) (84:98) [13:08:21:421]: Note: 1: 2203 2:  3: -2147287037
                MSI (s) (84:98) [13:08:21:421]: SOURCEMGMT: Source is invalid due to missing/inaccessible package.
                MSI (s) (84:98) [13:08:21:421]: Note: 1: 1706 2: -2147483647 3: MFEagent.msi
                MSI (s) (84:98) [13:08:21:421]: SOURCEMGMT: Processing URL source list.
                MSI (s) (84:98) [13:08:21:421]: Note: 1: 1402 2: UNKNOWN\URL 3: 2
                MSI (s) (84:98) [13:08:21:421]: Note: 1: 1706 2: -2147483647 3: MFEagent.msi
                MSI (s) (84:98) [13:08:21:421]: Note: 1: 1706 2:  3: MFEagent.msi
                MSI (s) (84:98) [13:08:21:421]: SOURCEMGMT: Failed to resolve source
                MSI (s) (84:F0) [13:08:21:421]: Note: 1: 1714 2: McAfee Agent 3: 1612
                MSI (s) (84:F0) [13:08:21:421]: Transforming table Error.

                MSI (s) (84:F0) [13:08:21:421]: Transforming table Error.

                MSI (s) (84:F0) [13:08:21:421]: Produit : McAfee Agent -- Erreur 1714. Impossible de supprimer la version antérieure de McAfee Agent. Contactez votre groupe de support technique.  Erreur système : 1612.

                 

                 

                This product {F2969393-2D4D-4977-8166-B1251B08EF12} is in reality McAfee Agent 4.0.

                But I'm trying to install McAfee Agent 4.5......

                 

                I don't have the good MFEagent.msi to uninstall McAfee agent 4.0.

                 

                I forgot this information :

                These computers were managed by another EPO server in 4.0 version with 4.0 McAfee Agent.

                I tried directly to manage these computers by the new EPO 4.5 server with 4.5 McAfee Agent with no 4.0 McAfee Agent Package installed on this server.

                 

                The 4.0 EPO server doesn't exist.

                The 4.5 EPO server doesn't have McAfee 4.0 Agent Package and Extention.

                 

                I founded a MFEagent.msi in 4.0 but I can't insert it on remotely on C:\Document And Settings\All Users\Application Data\McAfee\Common Framework\ because there is VSE8.7 and access protection... and I think this is not a right method... dirty

                 

                I think I need to install McAfee 4.0 Agent Package and Extention on my EPO 4.5 server in order to try a deployement of the 4.0 agent on these computers.

                Next I will launch a uninstall task to remove correctly the 4.0 Agent.

                In fine I will deploy the 4.5 Agent.

                 

                Do you think this is a good way to resolve my problem?

                 

                 

                Ce message a été modifié par: harryleravi on 02/09/10 07:19:39 CDT
                • 5. Re: Framepkg.exe deployed but not running.
                  Tristan

                  You could try on a 'test' system

                   

                  1. "C:\Program Files\McAfee\Common Framework\frminst.exe /forceuninstall"  to completely remove the current agent

                  2. reboot

                  3. delete "C:\Program Files\McAfee\Common Framework" and "C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework" folders if they exist

                  4. generate a fresh framepkg.exe from your epo console.

                  5. run framepkg.exe on the client

                   

                   

                  Message was edited by: Tristan  opps forget about vse access protection but you can temporarily disable that with the 'remote console' function in mcconsol.exe on 02/09/10 14:49:06 IST
                  • 6. Re: Framepkg.exe deployed but not running.

                    I tried this before and there is this error message:

                     

                    error 1605: This action is only valid for products that are currently installed

                     

                    I think computers have the Agent 4.5 frmpkg.exe but they need the Agent 4.0 one to run uninstall.

                     

                    But my EPO server doesn't have the McAfee 4.0 Agent package.

                     

                    I think the server needs this one in order to use the MFEagent.msi 4.0 for uninstalling the 4.0 Agent and then it will use the MFEagent.msi 4.5 for installing the 4.5 Agent.

                     

                     

                     

                    But at first, I tried to install the 4.5 Agent from the 4.5 EPO server. These computers are managed with another EPO 4.0 server that is was removed few days ago.

                    By deploying the 4.5 Agent on computers, the framepkg.exe removed 4.0 sources and computers can't access to 4.0 (EPO 4.0 removed, EPO 4.5 doesn't have 4.0 agent package and 4.0 local sources removed by 4.5 sources).

                     

                    That's why if I import 4.0 Agent on my EPO 4.5 server, I think I could deploy the 4.0 pachage in ordre to uninstall the rest on computers.

                     

                    Do you agree what I said?

                     

                    Thanks for your help.

                    • 7. Re: Framepkg.exe deployed but not running.

                      Hi all!

                       

                      I have a solution.

                       

                       

                       

                      By checking on the registry for the product I founded in MFEagent.msi.<timestamp>.txt   (F2969393-2D4D-4977-8166-B1251B08EF12, it could change), I found this key:

                       

                      - HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\3939692FD4D2779418661B52 B180FE21

                       

                      This key could change but you will find on a product name value "McAfee Agent" and ".....F2969393-2D4D-4977-8166-B1251B08EF12....." .

                      There is subkeys with values : MFEagent.msi to use, check paths....

                       

                      By deleting this key [3939692FD4D2779418661B52B180FE21] , I was able to successfully install the 4.5 agent from my EPO server (actually tested by running remotely with psexec c:\WINNT\FramePkg.exe /install=agent /s, pachage send by my first EPO deployement).

                       

                      Thanks all.