Is anyone else seeing this after the HIPS 8 w/Patch 1 upgrade?
VirusScan 8.8 Patch 1
ePO Agent 4.5 Patch 2
We moved from HIPS 8.0 RTW to 8.0 Patch 1 using the standalone patch installer. On our machines (both Vista x86 SP2 and Windows 7 x64 w/SP1), we are seeing this issue sporadically.
Faulting application name: McTray.exe, version: 22.214.171.1246, time stamp: 0x4c51bc16
Faulting module name: RPCRT4.dll, version: 6.1.7601.17514, time stamp: 0x4ce7ba59
Exception code: 0xc0020043
Fault offset: 0x0005cd99
Faulting process id: 0x10f8
Faulting application start time: 0x01ccb130cce58733
Faulting application path: C:\Program Files (x86)\McAfee\Common Framework\McTray.exe
Faulting module path: C:\Windows\syswow64\RPCRT4.dll
Report Id: 0e933833-1d24-11e1-9da3-005056c00008
I got the same with VirusScan 8.8 SP2, ePO Agent 126.96.36.1992 and HIPS 188.8.131.529 and 184.108.40.2061. Only HIPS 220.127.116.111 is okay.
Anyone an answer?
I've had a case with McAfee open on this issue almost a year with no solution yet - even after sending them GB of dumps, logs, and even VMs on which the issue can be reproduced.
How did you solve this issue. We still use HIPS 18.104.22.1681. I cannot update to a newer version. The rest is up-to-date VS8.8SP, ePO Agent 22.214.171.1242.
We didn't. We are in the same boat - we cannot move to HIPS 8.0 Patch 2. We moved to ePO 4.6.3 & VirusScan 8.8 P2, and we will be rolling out the latest agent version as well. We are stuck though with HIPS.
I also created a case at McAfee.
What a strange situation!
Are we the only two one earth?!?!?
Agreed. McAfee said only a handful of customers are experiencing this issue - most likely because most customers don't run ALL of the apps in the endpoint suite like we do (VirusScan, DLP, HIPS, etc).
Which tray icon do you use? We use the VirusScan one and not the ePo agent icon. I just changed to the ePo icon and disabled the VirusScan Icon. No problems so far.
We have always used the VirusScan one - not the ePO one.
Enable the ePO icon and you're done!
No errors anymore.