1 2 Previous Next 10 Replies Latest reply on May 24, 2017 9:18 AM by Vagner Silva

    Endpoint Threat Protection client GUI error

    jrp78

      I am attempting to install threat protection only here. From an EPO console standpoint, the software appears to be running and up to date. However, on the client, this is all I get(pic below). Has anyone seen this before? This is the result of an attempted upgrade from VSE 8.8 Patch 8/Agent 5.0.4.449 on Windows 7 SP1 Ent x64. I have since tried uninstalling all McAfee components and installing Endpoint Threat Protection solely. Still same error. Each time I try to open the GUI, the EndpointSecurityPlatform_Errors.log writes the following(snippet below):

       

      2017-03-17 13_48_18-lu42860 - Remote Desktop Connection.png

       

      03/17/2017 01:28:40.594 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:137): Trust failed with privilege = 0

      03/17/2017 01:28:40.596 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:151): ValidateModuleReport failed for 'C:\Windows\SysWOW64\AMInit32.dll'

      03/17/2017 01:28:40.600 PM    mfetp(1436.3728) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:137): Trust failed with privilege = 0

      03/17/2017 01:28:40.602 PM    mfetp(1436.3728) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:151): ValidateModuleReport failed for 'C:\Windows\SysWOW64\AMInit32.dll'

      03/17/2017 01:28:40.605 PM MFEConsole(5388.4276) <username> MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): subscribeEvent ( ["MfeuxThreatSummary",{"@topname":"EventFilter","TechnologyName":"EM","Name":"C onfig.Refresh"},null,null]) : operation returned non-success: BL_ERROR_SERVER_NOT_STARTED

      03/17/2017 01:28:40.616 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:137): Trust failed with privilege = 0

      03/17/2017 01:28:40.618 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:151): ValidateModuleReport failed for 'C:\Windows\SysWOW64\AMInit32.dll'

      03/17/2017 01:28:40.621 PM MFEConsole(5388.4276) <username> MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): getObjectHandle ( ["PW",null,null]) : operation returned non-success: BL_ERROR_SERVER_NOT_STARTED

      03/17/2017 01:28:40.639 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:137): Trust failed with privilege = 0

      03/17/2017 01:28:40.640 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:151): ValidateModuleReport failed for 'C:\Windows\SysWOW64\AMInit32.dll'

      03/17/2017 01:28:40.643 PM MFEConsole(5388.4276) <username> MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): getObjectHandle ( ["PKGMGR",null,null]) : operation returned non-success: BL_ERROR_SERVER_NOT_STARTED

      03/17/2017 01:28:40.652 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:137): Trust failed with privilege = 0

      03/17/2017 01:28:40.654 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:151): ValidateModuleReport failed for 'C:\Windows\SysWOW64\AMInit32.dll'

      03/17/2017 01:28:40.657 PM MFEConsole(5388.4276) <username> MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): getObjectHandle ( ["PW",null,null]) : operation returned non-success: BL_ERROR_SERVER_NOT_STARTED

      03/17/2017 01:28:40.664 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:137): Trust failed with privilege = 0

      03/17/2017 01:28:40.666 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:151): ValidateModuleReport failed for 'C:\Windows\SysWOW64\AMInit32.dll'

      03/17/2017 01:28:40.669 PM MFEConsole(5388.4276) <username> MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): getObjectHandle ( ["PW",null,null]) : operation returned non-success: BL_ERROR_SERVER_NOT_STARTED

      03/17/2017 01:28:40.673 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:137): Trust failed with privilege = 0

      03/17/2017 01:28:40.675 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:151): ValidateModuleReport failed for 'C:\Windows\SysWOW64\AMInit32.dll'

      03/17/2017 01:28:40.678 PM MFEConsole(5388.4276) <username> MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): getObjectHandle ( ["EM",null,null]) : operation returned non-success: BL_ERROR_SERVER_NOT_STARTED

      03/17/2017 01:28:40.682 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:137): Trust failed with privilege = 0

      03/17/2017 01:28:40.684 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:151): ValidateModuleReport failed for 'C:\Windows\SysWOW64\AMInit32.dll'

      03/17/2017 01:28:40.687 PM MFEConsole(5388.4276) <username> MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): getObjectHandle ( ["EM",null,null]) : operation returned non-success: BL_ERROR_SERVER_NOT_STARTED

      03/17/2017 01:28:40.731 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:137): Trust failed with privilege = 0

      03/17/2017 01:28:40.732 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:151): ValidateModuleReport failed for 'C:\Windows\SysWOW64\AMInit32.dll'

      03/17/2017 01:28:40.735 PM MFEConsole(5388.4276) <username> MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): getObjectHandle ( ["PW",null,null]) : operation returned non-success: BL_ERROR_SERVER_NOT_STARTED

        • 1. Re: Endpoint Threat Protection client GUI error

          So you're installing ENS Platform and Threat Prevention only, correct?

          Which version are trying to deploy from ePO?

          • 2. Re: Endpoint Threat Protection client GUI error
            jrp78

            Correct.

             

            Version 10.5

             

            And, OK, here's where it gets weirder. I noticed if I go to Programs and Features and highlight Threat Prevention and proceed to remove it, the uninstaller pops up to remove the software but then I can open the GUI COMPLETELY NORMAL in those few moments before the application is actually removed. It prompts for the password just like I have set and everything in the GUI looks fine. Obviously though, at this point, the software has begun being removed. I tried hitting cancel but when I do that, it's like it reverts some change or flag and the GUI goes back to displaying the error.

            • 3. Re: Endpoint Threat Protection client GUI error
              johnmoe

              To be clear, you mention several times that you're installing Threat Prevention, but don't mention Platform; they are two separate packages.  You're running two separate installs?  If so, can you try as a test just installing Platform, not Threat Prevention, and see if it gives the same error?

              • 4. Re: Endpoint Threat Protection client GUI error
                jrp78

                It is my understanding that you cannot have just Threat Prevention installed? Platform is automatically installed with it. Also, if I go to uninstall Threat Prevention, it automatically removes platform as well. It won't let me uninstall just Threat Prevention.

                • 5. Re: Endpoint Threat Protection client GUI error
                  chrisnlc

                  In the deployment task I thought you had to have platform as the first item in 'Products and components:' then the module you want to install as the second item and so on.

                  • 6. Re: Endpoint Threat Protection client GUI error
                    jrp78

                    Chrisnlc, yes, you can do it this way but you don't have to, as I understand it. If I deploy just the platform via EPO (just tested this), everything is happy and the GUI opens without any issue. As soon as I deploy TP, it displays the error I deployed my TP task to three machines originally and the other two upgrades went fine from VSE to ES. This one bombed. My concern is there might be others like this when I do the live rollout -- so I'd really like to solve this without a reinstall of windows.

                     

                    EDIT: I was able to deploy TP 10.2 and all worked fine. The GUI opened up with no issue. Tried upgrading to 10.5 from there and the error returns.

                    • 7. Re: Endpoint Threat Protection client GUI error

                      That's an odd one.  Pretty much all install issues have been resolved in the 10.5 builds.

                       

                      You said that 10.2 TP installed fine, can you do a clean uninstall via ePO, reboot system - then do a clean ePO deployment of 10.5 again.

                      If that is not working, I would recommend running the MER tool and opening a support ticket.

                       

                      In parallel, widen your pilot testing to 5-10 more similar systems - upgrading from VSE 8.8 Patch 8/Agent 5.0.4.449 on Windows 7 SP1 Ent x64, as you said this was.

                       

                      I would like you to verify your confidence in ENS upgrades. 

                      • 8. Re: Endpoint Threat Protection client GUI error
                        johnmoe

                        jrp78 Yeah, when I read the product manuals, I thought the same, but figured it was worth testing anyway. I always install similar to chrisnlc; Platform, TP, Firewall, WC, then ATP, so I can't tell you if just installing one gives you platform as well.

                        • 9. Re: Endpoint Threat Protection client GUI error
                          jrp78

                          I saw where a patch was released for Endpoint (10.5.0.1) I was hoping that it would resolve the issue. Unfortunately it did not so I kept digging.

                           

                          The issue was actually right in front of me the whole time. AMInit32.dll is not a McAfee file. It's a Symantec Altiris file. There was some type of conflict with Altiris and Endpoint. I uninstalled Endpoint Platform, Threat Prevention and Symantec Altiris. I reinstalled Endpoint Platform then Threat Prevent then Altiris and all is working fine now. Thanks to all for comments.

                           

                          03/17/2017 01:28:40.732 PM   mfeesp(2860.5652) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:151): ValidateModuleReport failed for 'C:\Windows\SysWOW64\AMInit32.dll'

                          03/17/2017 01:28:40.735 PM MFEConsole(5388.4276) <username> MFEConsole.MFEConsole.Error (mfeux_extension.cpp:2104): getObjectHandle ( ["PW",null,null]) : operation returned non-success: BL_ERROR_SERVER_NOT_STARTED

                           

                           

                          2 of 2 people found this helpful
                          1 2 Previous Next