0 Replies Latest reply on Jun 9, 2014 4:20 PM by bigag

    GDIPLUS.DLL and LOGONUI.exe and blackscreen endpoint

    bigag

      Hi, an endpoint with application control installed has a error... a big error, only load a black screen with a pointer....

       

      the only way was to uninstall Application Control.... the log:

       

      Monitoring Events Information                              

       

      Agent GUIDA184F092-F02B-4F7A-AF1A-306B65594975
      Event Display NameExecution Denied
      Event File Namec:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18120_ none_72d2e82386681b36\gdiplus.dll
      Event Generated TimeJun 9, 2014 1:06:18 PM Central Standard Time
      Event Id20720
      Event NameEXECUTION_DENIED
      Event Seq No1,386
      Generated by an UpdaterNo
      Generated in an Update WindowNo
      Object Namec:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18120_ none_72d2e82386681b36\gdiplus.dll
      Performed ByNT AUTHORITY\SYSTEM
      Process ID872
      Program NameC:\Windows\System32\LogonUI.exe
      ReasonMcAfee Application Control blocked this binary file because it is not whitelisted. To execute this binary file, define a policy with the relevant rules.