8 Replies Latest reply: Mar 20, 2013 9:23 PM by floren RSS

    Upgrading HIPS from 8.0.0.2151 to 8.0.0.2239?

    floren

      Hi,

       

      I installed HIPS 8.0.0.2151 on my corporate laptop running Windows 8 64bits and I would like to upgrade it to 8.0.0.2239.

      From the 791162 hotfix, all I have to do is disable the HIPS service and run the McAfeeHIP_ClientHotfix2_791162.exe file. I did all this, but HIPS client still reports as 8.0.0.2151 after reboot. Can you please let me know what am i missing? Thank you.

       

      Floren Munteanu

        • 1. Re: Upgrading HIPS from 8.0.0.2151 to 8.0.0.2239?
          greatscott

          restart the mcafee agent services

          • 2. Re: Upgrading HIPS from 8.0.0.2151 to 8.0.0.2239?
            floren

            Just to make sure, isn't rebooting the laptop having the same effect? I'm not familiar with McAfee products, but this what i did:

            While running the patch executable, I watched the task manager to see when the process was completed. While doing this I noticed that the patch started the HIPS service which was stopped prior running the patch. Is there a way to validate the actual HIPS version using a console command?

             

            Thank you.

             

            Floren

             

            on 3/20/13 10:01:46 AM CDT

             

            on 3/20/13 10:04:26 AM CDT
            • 3. Re: Upgrading HIPS from 8.0.0.2151 to 8.0.0.2239?
              Kary Tankink

              1. Make sure you run the hotfix with RUN AS ADMINISTRATOR option.  Rclick the .EXE and run with elevated admin privileges.

              2. If you are running HIPS 8.0 on Windows 8, you should should be running Hotfix 803520 for some known issues (constant rebooting when IPS is enabled).

               

              KB77323 - Host Intrusion Prevention 8.0.0 Patch 2 Hotfix Rollup 803520 Release Notes

              • 4. Re: Upgrading HIPS from 8.0.0.2151 to 8.0.0.2239?
                floren

                Hi Kary,

                 

                My request is very specific as I have a Juniper host checker that needs McAfee HIPS 8.0.0.2239. Any other version will not do. Yes, I ran the McAfeeHIP_ClientHotfix2_791162.exe file as Administrator. Yet, in Task Manager the HIPS executable shows the 2151 version. Do I have the right files?

                 

                Floren

                • 5. Re: Upgrading HIPS from 8.0.0.2151 to 8.0.0.2239?
                  Kary Tankink

                  Looks like the right file.  Check the HF799162 install log file (C:\Windows\Temp\McAfeeLogs\McAfeeHIP8_Hotfix791162_8.0.0.2239).

                  • 6. Re: Upgrading HIPS from 8.0.0.2151 to 8.0.0.2239?
                    floren

                    The log shows as 8.0.0.2239 being installed successfully:

                     

                    ########### Session:    Wed Mar 20 02:12:42 2013      ###########

                    03-20 02:12:42 [04112] INFO: -- OnBegin --

                    03-20 02:12:42 [04112] INFO: Installing on Windows Vista or later

                    03-20 02:12:42 [04112] INFO: Installing on 64-bit

                    03-20 02:12:42 [04112] INFO: -->GetRebootNeeded()

                    03-20 02:12:42 [04112] INFO: <--GetRebootNeeded()

                    03-20 02:12:42 [04112] INFO: -->SetInstallFile()

                    03-20 02:12:42 [04112] INFO: <--SetInstallFile()

                    03-20 02:12:42 [04112] INFO: HOTFIX 791162 - HIP 8.0.0.2239.6 08/08/2012

                    03-20 02:12:42 [04112] INFO: Input cmd line =

                    03-20 02:12:42 [04112] INFO: SUPPORTDIR = C:\Users\Floren\AppData\Local\Temp\{F55B8878-262A-4319-AF69-5C8B6AD719E3}\{AB6E 7F77-9350-43AB-B3CD-9FD3B6A78BD7}\

                    03-20 02:12:42 [04112] INFO: ENT_DEVBOX is OFF

                    03-20 02:12:42 [04112] INFO: Check to see if the right HIP version is installed

                    03-20 02:12:42 [04112] INFO: Check to see if any patch is installed

                    03-20 02:12:42 [04112] INFO: Patch 2 is currently installed

                    03-20 02:12:42 [04112] INFO: No PatchMinor1 or PatchMinor2

                    03-20 02:12:42 [04112] INFO: Check to see if any hotfixes are installed

                    03-20 02:12:42 [04112] INFO: No hotfixes were installed yet

                    03-20 02:12:42 [04112] INFO: Setting gTARGETDIR32 to C:\Program Files (x86)\McAfee\Host Intrusion Prevention

                    03-20 02:12:42 [04112] INFO: Setting TARGETDIR to C:\Program Files (x86)\McAfee\Host Intrusion Prevention

                    03-20 02:12:42 [04112] INFO: Setting gTARGETDIR to C:\Program Files\McAfee\Host Intrusion Prevention

                    03-20 02:12:42 [04112] INFO: Setting gTARGETDIR64 to C:\Program Files\McAfee\Host Intrusion Prevention

                    03-20 02:12:42 [04112] INFO: ** bVirtualPC not found **

                    03-20 02:12:42 [04112] INFO: Setting VIRTUALPC to

                    03-20 02:12:42 [04112] INFO: Stopping enterceptAgent service

                    03-20 02:12:42 [04112] DEBUG: SI Service want state Not Running(1), service enterceptAgent

                    03-20 02:12:42 [04112] INFO: C:\Program Files\McAfee\Host Intrusion Prevention\FireSvc.exe is NOT locked any more.

                    03-20 02:12:42 [04112] INFO: Updating files

                    03-20 02:12:42 [04112] INFO: -- OnFirstUIBefore --

                    03-20 02:12:44 [04112] INFO: -- OnMoved --

                    03-20 02:12:44 [04112] INFO: -- OnEnd --

                    03-20 02:12:44 [04112] INFO: -- SetRegistryKeys --

                    03-20 02:12:44 [04112] INFO: Get the installed build number

                    03-20 02:12:44 [04112] INFO: Installed build number is 2151

                    03-20 02:12:44 [04112] INFO: New build number is 2239

                    03-20 02:12:44 [04112] INFO: This is 64-bit

                    03-20 02:12:44 [04112] INFO: Installing Core - x64 HIP

                    03-20 02:12:44 [04112] INFO: Launching "C:\Program Files (x86)\McAfee\Host Intrusion Prevention\vscore\x64\mfehidin.exe" -i HIP8P2 -l C:\Windows\TEMP\McAfeeLogs\hip8.0_core_hip_3_20_201302_12_44.log -x hip.xml firecore APDriver AVDriver

                    03-20 02:13:02 [04112] INFO: "C:\Program Files (x86)\McAfee\Host Intrusion Prevention\vscore\x64\mfehidin.exe" completed.

                    03-20 02:13:02 [04112] INFO: Installing Core - x64 HIPSHIELDK

                    03-20 02:13:02 [04112] INFO: Launching "C:\Program Files (x86)\McAfee\Host Intrusion Prevention\vscore\x64\mfehidin.exe" -i HIP8P2 -l C:\Windows\TEMP\McAfeeLogs\hip8.0_core_hipshieldk_3_20_201302_13_02.log -x HipShieldK.xml

                    03-20 02:13:02 [04112] INFO: "C:\Program Files (x86)\McAfee\Host Intrusion Prevention\vscore\x64\mfehidin.exe" completed.

                    03-20 02:13:02 [04112] INFO: Installing Core - x64 FIRENFCP

                    03-20 02:13:02 [04112] INFO: Launching "C:\Program Files (x86)\McAfee\Host Intrusion Prevention\vscore\x64\mfehidin.exe" -i HIP8P2 -l C:\Windows\TEMP\McAfeeLogs\hip8.0_core_firenfcp_3_20_201302_13_02.log -x firenfcp.xml

                    03-20 02:13:02 [04112] INFO: "C:\Program Files (x86)\McAfee\Host Intrusion Prevention\vscore\x64\mfehidin.exe" completed.

                    03-20 02:13:02 [04112] INFO: Setting Hotfix value to 771202;791162;

                    03-20 02:13:02 [04112] INFO: Setting Version value to 8.0.0.2239

                    03-20 02:13:02 [04112] INFO: Setting CreatedDate value to 08/08/2012

                    03-20 02:13:02 [04112] INFO: Starting enterceptAgent service

                    03-20 02:13:02 [04112] DEBUG: SI Service want state Not Running(1), service enterceptAgent

                    03-20 02:13:02 [04112] DEBUG: SI Service want state Running(4), service enterceptAgent

                    03-20 02:13:02 [04112] INFO: SI Service,  Desired = Running(4) , Current = Starting(2)

                    03-20 02:13:04 [04112] INFO: SI Service,  Desired = Running(4) , Current = Running(4)

                    03-20 02:13:04 [04112] INFO: -->GetRebootNeeded()

                    03-20 02:13:04 [04112] INFO: <--GetRebootNeeded()

                    03-20 02:13:04 [04112] INFO: ##### Patch Finished #####

                    03-20 02:13:04 [04112] INFO: -->DeleteInstallFile()

                    03-20 02:13:04 [04112] INFO: <--DeleteInstallFile()

                     

                    I rebooted the machine again, why the HIPS Tray reports as 8.0.0.2151?

                    hips-tray.png

                    • 7. Re: Upgrading HIPS from 8.0.0.2151 to 8.0.0.2239?
                      Kary Tankink

                      Firetray.exe is not a driver that gets updated with this hotfix. 

                       

                      Review the HIPS Client UI HELP, ABOUT menu or the registry (HKLM\Software\McAfee\HIP\Version) for product version information.

                       

                      helpabout.jpg

                      • 8. Re: Upgrading HIPS from 8.0.0.2151 to 8.0.0.2239?
                        floren

                        Thank you Kary, very helpful.

                        Here it is mines:

                        hips-version.png