1 2 Previous Next 10 Replies Latest reply: Oct 14, 2012 5:31 AM by aira RSS

    VSE 8.8 P1 can not run scan

      I have  install VSE 8.8 P1 on all computer in my company via ePO 4.0.

      on some computer unable to run scan virus (only some, not all)

      The client is Windows XP SP2 and SP3

       

      When user open virus scan console then start full scan, nothing happen.

      When user right click on folder and select "scan for threats.." the error show

      "The application or DLL C:\Windows\system32\winhafnt.dll is not a valid Windows image. Please check this against your installation diskette".

       

      I try to reinstall by manual, run "sfc /scannow", check disk, upgrade windows to SP3.

      But the problem still occored.

       

      Does anyone know how to solve this problem?

       

      Mcafee error.jpg

        • 1. Re: VSE 8.8 P1 can not run scan
          sbenedix

          I would give it a shot, does not entirely fit your picture, but worth a try:

           

          http://support.microsoft.com/kb/972397

          • 2. Re: VSE 8.8 P1 can not run scan
            wwarren

            You say the scan will not run, but that isn't correct -

             

            The scan will run, just click OK to the message. The scan is being postponed until you respond to this message.

            You are receiving the message because of the 3rd party DLL that has injected intself (or tried to) into the McAfee scanner process.

             

            This will only occur for the scenario of a user-invoked scan, and when you have an intrusive 3rd party application that's utilizing a specific DLL-injection method.

            • 3. Re: VSE 8.8 P1 can not run scan
              pintaric

              And the solution for this? I have a lot of problems on a customer site caused by this issue. Identifying the DLL is not an option. Everything was fine with VSE 8.7i.

              • 4. Re: VSE 8.8 P1 can not run scan
                wwarren

                pintaric wrote:

                 

                And the solution for this? I have a lot of problems on a customer site caused by this issue. Identifying the DLL is not an option. Everything was fine with VSE 8.7i.


                What problems?

                As mentioned, you can just click OK to the message. I'm trying to imagine what problems this would cause beyond seeing a message pop up.

                 

                If the sum of problems is just this message pop up, then there is no solution for you at this time, only workarounds and one of them you've stated - use VSE 8.7i, the other you say is not an option.

                • 5. Re: VSE 8.8 P1 can not run scan

                  The problem is when I click "OK" on pop up message then the scan will not run as you say.

                  How ever from my testing, this problem not occured on Windows 7.

                  do you have any idea to skip scanning file "c:\windows\system32\winhafnt.dll"?

                  I try to set exclude of this file on access scan and on demand scan but the problem still occured.

                  • 6. Re: VSE 8.8 P1 can not run scan
                    pintaric

                    The pop up window is the problem. Shouldn't appear.

                    • 7. Re: VSE 8.8 P1 can not run scan
                      wwarren

                      adminsupport@ wrote:

                       

                      The problem is when I click "OK" on pop up message then the scan will not run as you say.

                      How ever from my testing, this problem not occured on Windows 7.

                      do you have any idea to skip scanning file "c:\windows\system32\winhafnt.dll"?

                      I try to set exclude of this file on access scan and on demand scan but the problem still occured.


                      It sounds like you have a second issue preventing the UI from displaying.

                      Look for this registry value:

                      HKLM\Software\McAfee\DesktopProtection, LicenseInformation

                       

                      If it's missing, it needs to be replaced - you can import a copy from any working system.

                      If it's present and you're not seeing the scan UI, consider contacting Support or reinstalling the product.

                      • 8. Re: VSE 8.8 P1 can not run scan

                        Thank you very much wwarren.

                        I recheck value

                        HKLM\Software\McAfee\DesktopProtection, LicenseInformation and

                        HKLM\Software\McAfee\DesktopProtection, ASLicenseInformation

                        The value on WinXP is difference from Win7.

                        After I replace value from Win7 to WinXP.

                        The problem is solved.

                        But I have WinXP client on my company about 1200 unit.

                        Is it possible to fix the problem by ePO?

                        • 9. Re: VSE 8.8 P1 can not run scan
                          wwarren

                          adminsupport@ wrote:

                           

                          Thank you very much wwarren.

                          I recheck value

                          HKLM\Software\McAfee\DesktopProtection, LicenseInformation and

                          HKLM\Software\McAfee\DesktopProtection, ASLicenseInformation

                          The value on WinXP is difference from Win7.

                          After I replace value from Win7 to WinXP.

                          The problem is solved.

                          But I have WinXP client on my company about 1200 unit.

                          Is it possible to fix the problem by ePO?

                          This particular problem of the LicenseInformation value going missing is a troublesome one. It can cause some very undesirable behavior - we're taking steps with 8.8 Patch 2 (Q1 2012 release) to ensure this value is populated for systems, and also to remove the code that is inadvertantly deleting it.

                          McAfee Support can help you fix up the environment by recreating the value on systems that need it. And that solution can be distributed via ePO if desired.

                          1 2 Previous Next