3 Replies Latest reply on May 21, 2012 11:34 AM by sbenedix

    VSE Keeps trying to install, fails, restarts PC

      Me: end-user with local admin rights

       

      PC - windows 7 image was created with VSE/HIPS, which was then ripped out (mostly) during image reconfiguring and then reused as an image (I have no control over these steps).

       

      Anyway, the suspician is that McAfee wasn't completely ripped out completely so when it tries to reinstall itself (enterprise ePo) it errors out and restarts the PC with 0.5 sec warning. Over and over. If someone can tell me how to clear up my current installation so that it will reinstall again cleanly that would be spiffy.

       

       

      A typical even log entries looks like this:

       

       

      The description for Event ID 514 from source mfehidk cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

       

      If the event originated on another computer, the display information had to be saved with the event.

       

      The following information was included with the event:

       

      \Device\mfehidk

      **\svchost.exe

      424

       

      The specified resource type cannot be found in the image file

       

       

      The description for Event ID 519 from source mfehidk cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

       

      If the event originated on another computer, the display information had to be saved with the event.

       

      The following information was included with the event:

       

      \Device\mfehidk

      **\VsTskMgr.exe

      1980

       

      The specified resource type cannot be found in the image file

        • 1. Re: VSE Keeps trying to install, fails, restarts PC

          Just happened again - here are the App Log entries (in reverse order)

           

          Beginning a Windows Installer transaction: C:\ProgramData\McAfee\Common Framework\Current\HOSTIPS_7000\Install\0409\McAfeeHIP_ClientSetup.msi. Client Process Id: 5684.

           

          Product: McAfee Host Intrusion Prevention -- Error 1406.Could not write value LanguageID to key \SOFTWARE\McAfee\HIP.  System error .  Verify that you have sufficient access to that key, or contact your support personnel.

           

          Product: McAfee Host Intrusion Prevention -- Configuration failed.

           

          Windows Installer reconfigured the product. Product Name: McAfee Host Intrusion Prevention. Product Version: 7.00.0800. Product Language: 1033. Manufacturer: McAfee, Inc.. Reconfiguration success or error status: 1603.

           

          Ending a Windows Installer transaction: C:\ProgramData\McAfee\Common Framework\Current\HOSTIPS_7000\Install\0409\McAfeeHIP_ClientSetup.msi. Client Process Id: 5684.

          • 2. Re: VSE Keeps trying to install, fails, restarts PC

            McAfee Versions:

             

            System Information 

            Computer Name: My_PC

              

            McAfee Agent 

            Version number: 4.5.0.1810

            Managed 

            Last security update check: 5/16/2012 3:12:09 PM

            Last agent-to-server communication: 5/16/2012 9:46:22 AM

            Agent to Server Communication Interval (every): 4 hours

            Policy Enforcement Interval (every): 30 minutes

            Agent ID: {3625EA2F-F4C5-4596-A9ED-A31F79C51E3D}

            ePO Server/Agent Handler 

            DNS Name: 3001

            IP Address: xxx.xxx.xxx.001

            Port Number: 443

            DNS Name: 3003

            IP Address: xxx.xxx.xxx.002

            Port Number: 443

            DNS Name: 3004

            IP Address: xxx.xxx.xxx.003

            Port Number: 443

              

            Asset Baseline Monitor 

            Version number: 3.5.0.190

            Language: English (United States)

              

            McAfee Policy Auditor Content Update 

            Version number: 5.3.0.167

            Language: Multiple

              

            McAfee DLP Agent 

            Version number: 9.1.6.4

            Language: English (United States)

             

            Host Intrusion Prevention 7.0.0 

            Version number: 7.0.0.1159

            Language: English (United States)

              

            McAfee Policy Auditor 

            Version number: 5.3.0.167

            Language: Multiple

              

            McAfee VirusScan Enterprise + AntiSpyware Enterprise 

            Version number: 8.8.0 (8.8.0.849)

            Build date: 9/14/2011

              

            Anti-virus License Type: licensed

              

            Scan engine version (32-bit): 5400.1158

              

            Scan engine version (64-bit): 5400.1158

              

            DAT version: 6712.0000

            DAT Created on: 5/15/2012

              

            Number of Signatures in extra.dat: 0

            Name of threats that extra.dat can detect: None 

            Buffer Overflow and Access Protection DAT version: 588

              

            Installed Patches: 1

              

            Installed Modules: 

              

            Copyright © 1995-2010 McAfee, Inc. 

            All Rights Reserved. 

            www.mcafee.com

            • 3. Re: VSE Keeps trying to install, fails, restarts PC
              sbenedix

              Appears your HIPS installer is falling over for whatever reason, I would imagine the HIPS product forum is a better place to find a solution for this. The 519/516 are unrelated to your install issue and need to be taken care of separately. Trawl the MFE knowledgebase for 516/519 you will find loads of guidance on this topic there. The KB also has all the manual uninstall KBs for most of the products, manual removal = very time and labour intensive.

              You have a lot more installed than just VSE and HIPS though, cleaning out all that manually is a very tedious job to say the least. Even leaving all the rest on the box and just getting rid of VSE and HIPS separately will be an awful manual job (just the thought sends shivers down my back) and it not certain everything will work after the manual cleanup as expected.

              Way more time efficient would be to start from scratch if that is at all possible (fresh image), looking at your description not sure if thats an option.

               

              My 0.02 cent.