2 Replies Latest reply on Jul 21, 2015 10:33 AM by kjohnson83

    Virus Scan 8.8.x Plugin flag changing in the Registry

    kjohnson83

      We have several machines that the plugin flag locate in the registry, changes from a DWORD value of "0" to "8".  We cannot figure out what is triggering this.  We have discovered that the machines with the value set to  "8", are showing up in queries not having virus scan installed.

       

      HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8800

       

      Has anyone else ran into this?  Or does anyone know what would cause the value t change?

        • 1. Re: Virus Scan 8.8.x Plugin flag changing in the Registry
          mmcgary

          This generally happens when a patch 4/5 upgrade is pushed over an unsupported upgrade path, patch level 0 (RTW) or 1. The patch upgrade will fail and the registry key will get stuck at 8 which no longer enforces policies from EPO for VSE and reports as not being installed. If you check your Windows\Temp\McAfeeLogs directory on the client you will usually see a lot of patch4/5 install logs which indicates an attempt to upgrade during every daily update. The easiest fix is to send an uninstall task for VSE to all of your systems showing no VSE installed and then push the latest full install after that is complete.

           

          If this is the case make sure in the future you upgrade your product patches to the minimum required patch levels before checking new patches into the current branch. The release notes for patches will state the minimum patch level required to successfully upgrade.

          • 2. Re: Virus Scan 8.8.x Plugin flag changing in the Registry
            kjohnson83

            mmcgary,

             

            Thank you for your quick reply.  I will be testing this in DEV this afternoon.

             

            Kevin