ePO 4.5 VSE & ASM 8.7 Some Window 7 x64 computers do not report VSE or ASM installed

[Former Member]

I checked under Programs And Features and it shows isntalled and SCCM reports that it is installed and so far it continues to update as well. It does not happen on every machine but it does seem to lean towards laptops.  I even had one laptop where it worked and after uninstalling and reinstalling VSE/ASM it stopped reporting that VSE/ASM was installed. I was able to fix it on one laptop by uninstalling VSE/ASM and the agent and reinstalling but the others have not been successful. Most have the ePO Agent 4.5.1499 so I tried upgrading some to 4.5.0.1852 with no success. Any ideas?

Message was edited by: raider25 on 7/31/12 10:27:56 AM CDT

[jstanley]

Check "lastprops.xml" on the client and see if it has VSE listed in it or not. This will tell you if the client is sending this information to ePO or not. Depending on the OS this file can be in one of two locations by default:

• C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework
• C:\ProgramData\McAfee\Common Framework

Check the registry on the client and see if the application plugin key for VSE is present. It should be here:

[HKLM\Software\Network Associates\ePolicy Orchestrator\Application Plugins\Viruscan8700]

Check the ePO server and confirm the client has a recent last communication date.

If none of that is helping the post a copy of the agent log.

[Former Member]

I was finally able to get around to checking this, I apologize for the delay and really do appreciate your assistance. I was able to fix two PC's by uninstalling ASM, VSE and the agent and then manually reinstalling the agent as an administrator and letting VSE/ASM reinstall via policy from ePO.  However, the next two I tried did not work after the uninstall/reinstall. 

I checked "lastprop.xml" and VSE is not listed.

The plugin for VSE is listed in the registry.

The ePO server communicates as normal and shows a new date-time group when you tell it to wake up the client for full product properties and "Force complete policy and task update".

I have not checked all policies but I do know we have turned off the splash screen for VSE when you log in and so far on the "bad" computers it still shows up so at least that is not being enforced either.

Here is the agent log:

McAfee Agent Activity Log Version [4.5.0.1852] Computer name [SWC000003C3CBS1] ePO server [MSMGMT03] View debug logs: FrameSvc current / previous, NaPrdMgr current / previous

Date and Time Type Component Message Wednesday, August 08, 2012 10:41:25 AM Info Updater Verifying setupvse.exe. Wednesday, August 08, 2012 10:41:25 AM Info Updater Downloading setup.ini. Wednesday, August 08, 2012 10:41:25 AM Info Updater Verifying setup.ini. Wednesday, August 08, 2012 10:41:25 AM Info Updater Downloading Uninst.exe. Wednesday, August 08, 2012 10:41:25 AM Info Updater Verifying Uninst.exe. Wednesday, August 08, 2012 10:41:25 AM Info Updater Downloading Uninstx64.exe. Wednesday, August 08, 2012 10:41:25 AM Info Updater Verifying Uninstx64.exe. Wednesday, August 08, 2012 10:41:25 AM Info Updater Downloading UnInst.Ini. Wednesday, August 08, 2012 10:41:26 AM Info Updater Verifying UnInst.Ini. Wednesday, August 08, 2012 10:41:26 AM Info Updater Downloading VSE870.msi. Wednesday, August 08, 2012 10:41:32 AM Info Updater Verifying VSE870.msi. Wednesday, August 08, 2012 10:41:32 AM Info Updater Downloading WindowsInstaller-KB893803-v2-x86.exe. Wednesday, August 08, 2012 10:41:34 AM Info Updater Verifying WindowsInstaller-KB893803-v2-x86.exe. Wednesday, August 08, 2012 10:42:07 AM Info Scheduler Next time(local) of task {A14CD6FC-3BA8-4703-87BF-E3247CE382F5}: Wednesday, August 08, 2012 5:58:00 PM Wednesday, August 08, 2012 10:42:09 AM Info Scheduler Added a new task {A14CD6FC-3BA8-4703-87BF-E3247CE382F5} to Scheduler's task list Wednesday, August 08, 2012 10:42:14 AM Info Updater Update succeeded to version 8.7.0. Wednesday, August 08, 2012 10:42:14 AM Info Updater Verifying MAS870det.mcs. Wednesday, August 08, 2012 10:42:14 AM Info Updater Downloading MAS870det.mcs. Wednesday, August 08, 2012 10:42:14 AM Info Updater Verifying MAS870det.mcs. Wednesday, August 08, 2012 10:42:14 AM Info Updater Downloading PkgCatalog.z. Wednesday, August 08, 2012 10:42:14 AM Info Updater Verifying PkgCatalog.z. Wednesday, August 08, 2012 10:42:14 AM Info Updater Extracting PkgCatalog.z. Wednesday, August 08, 2012 10:42:14 AM Info Updater Loading update configuration from: PkgCatalog.xml Wednesday, August 08, 2012 10:42:15 AM Info Updater Installing VSEMAS870000. Wednesday, August 08, 2012 10:42:15 AM Info Updater Downloading VSE87MAS.exe. Wednesday, August 08, 2012 10:42:16 AM Info Updater Verifying VSE87MAS.exe. Wednesday, August 08, 2012 10:42:24 AM Info Scheduler Next time(local) of task {A14CD6FC-3BA8-4703-87BF-E3247CE382F5}: Wednesday, August 08, 2012 5:44:00 PM Wednesday, August 08, 2012 10:42:30 AM Info Updater Update succeeded to version 8.7.0. Wednesday, August 08, 2012 10:42:30 AM Info Updater Update Finished Wednesday, August 08, 2012 10:42:30 AM Info Updater Checking update packages from repository MSCM02. Wednesday, August 08, 2012 10:42:31 AM Info Updater Initializing update... Wednesday, August 08, 2012 10:42:31 AM Info Updater Verifying catalog.z. Wednesday, August 08, 2012 10:42:31 AM Info Updater Extracting catalog.z. Wednesday, August 08, 2012 10:42:31 AM Info Updater Loading update configuration from: catalog.xml Wednesday, August 08, 2012 10:42:32 AM Info Updater Update list doesn't exist or is empty. Performing one-click update. Wednesday, August 08, 2012 10:42:32 AM Info Updater These updates will be applied if they are in the repository: Engine, DAT, EPOAGENT3000META, SIAREVOK1000, VIRUSCAN8700, BOCVSE__1000, SUPPCLNT1000. Wednesday, August 08, 2012 10:42:32 AM Info Updater Downloading PkgCatalog.z. Wednesday, August 08, 2012 10:42:32 AM Info Updater Verifying PkgCatalog.z. Wednesday, August 08, 2012 10:42:32 AM Info Updater Extracting PkgCatalog.z. Wednesday, August 08, 2012 10:42:32 AM Info Updater Loading update configuration from: PkgCatalog.xml Wednesday, August 08, 2012 10:42:33 AM Info Updater Verifying V2engdet.mcs. Wednesday, August 08, 2012 10:42:33 AM Info Updater Downloading V2engdet.mcs. Wednesday, August 08, 2012 10:42:33 AM Info Updater Product(s) running the latest Engine. Wednesday, August 08, 2012 10:42:33 AM Info Updater Downloading PkgCatalog.z. Wednesday, August 08, 2012 10:42:33 AM Info Updater Verifying PkgCatalog.z. Wednesday, August 08, 2012 10:42:33 AM Info Updater Extracting PkgCatalog.z. Wednesday, August 08, 2012 10:42:33 AM Info Updater Loading update configuration from: PkgCatalog.xml Wednesday, August 08, 2012 10:42:34 AM Info Updater Verifying V2datdet.mcs. Wednesday, August 08, 2012 10:42:34 AM Info Updater Downloading V2datdet.mcs. Wednesday, August 08, 2012 10:42:34 AM Info Updater Downloading PkgCatalog.z. Wednesday, August 08, 2012 10:42:34 AM Info Updater Verifying PkgCatalog.z. Wednesday, August 08, 2012 10:42:34 AM Info Updater Extracting PkgCatalog.z. Wednesday, August 08, 2012 10:42:34 AM Info Updater Loading update configuration from: PkgCatalog.xml Wednesday, August 08, 2012 10:42:35 AM Info Updater Starting DAT update. Wednesday, August 08, 2012 10:42:36 AM Info Updater Downloading DAT. Wednesday, August 08, 2012 10:42:36 AM Info Updater Downloading gdeltaavv.ini. Wednesday, August 08, 2012 10:42:36 AM Info Updater Downloading avvdat-6796.zip. Wednesday, August 08, 2012 10:43:09 AM Info Scheduler Next time(local) of task {A14CD6FC-3BA8-4703-87BF-E3247CE382F5}: Wednesday, August 08, 2012 5:37:00 PM Wednesday, August 08, 2012 10:43:22 AM Info Agent Agent is looking for events to upload Wednesday, August 08, 2012 10:43:22 AM Info Agent Agent uploading 1 events to ePO Server Wednesday, August 08, 2012 10:43:22 AM Info Agent Agent communication session started Wednesday, August 08, 2012 10:43:22 AM Info Agent Agent is sending EVENT package to ePO server Wednesday, August 08, 2012 10:43:22 AM Info Agent Agent is connecting to ePO server Wednesday, August 08, 2012 10:43:22 AM Info Agent No package received from ePO Server Wednesday, August 08, 2012 10:43:22 AM Info Agent Agent communication session closed Wednesday, August 08, 2012 10:43:53 AM Info Updater Backing up file(s) Engine DAT Wednesday, August 08, 2012 10:43:53 AM Info Updater Pre-notifying for DAT update. Wednesday, August 08, 2012 10:43:53 AM Info Updater Copying DAT. Wednesday, August 08, 2012 10:43:53 AM Info Updater Update succeeded to version 6796.0000. Wednesday, August 08, 2012 10:43:53 AM Info Updater Post-notifying for DAT update. Wednesday, August 08, 2012 10:44:09 AM Info Updater Verifying VSE870Det.mcs. Wednesday, August 08, 2012 10:44:09 AM Info Updater Searching available updates for McAfee VirusScan Enterprise 8.7.0. Wednesday, August 08, 2012 10:44:09 AM Info Updater Product(s) running the latest HotFix 5. Wednesday, August 08, 2012 10:44:09 AM Info Updater Downloading PkgCatalog.z. Wednesday, August 08, 2012 10:44:09 AM Info Updater Verifying PkgCatalog.z. Wednesday, August 08, 2012 10:44:09 AM Info Updater Extracting PkgCatalog.z. Wednesday, August 08, 2012 10:44:09 AM Info Updater Loading update configuration from: PkgCatalog.xml Wednesday, August 08, 2012 10:44:11 AM Info Updater Starting HotFix update. Wednesday, August 08, 2012 10:47:01 AM Info Updater Update failed to version HotFix 643440. Wednesday, August 08, 2012 10:47:01 AM Info Updater Verifying BocDet_VSE.McS. Wednesday, August 08, 2012 10:47:01 AM Info Updater Downloading BocDet_VSE.McS. Wednesday, August 08, 2012 10:47:01 AM Info Updater Searching available updates for BOC DAT. Wednesday, August 08, 2012 10:47:01 AM Info Updater Downloading PkgCatalog.z. Wednesday, August 08, 2012 10:47:01 AM Info Updater Verifying PkgCatalog.z. Wednesday, August 08, 2012 10:47:01 AM Info Updater Extracting PkgCatalog.z. Wednesday, August 08, 2012 10:47:01 AM Info Updater Loading update configuration from: PkgCatalog.xml Wednesday, August 08, 2012 10:47:02 AM Info Updater Product(s) running the latest BOC DAT. Wednesday, August 08, 2012 10:47:02 AM Info Updater Verifying SuppClntDet.McS. Wednesday, August 08, 2012 10:47:02 AM Info Updater Downloading SuppClntDet.McS. Wednesday, August 08, 2012 10:47:02 AM Info Updater Update Finished Wednesday, August 08, 2012 10:48:22 AM Info Agent Agent is looking for events to upload Wednesday, August 08, 2012 10:48:22 AM Info Agent Agent uploading 1 events to ePO Server Wednesday, August 08, 2012 10:48:22 AM Info Agent Agent communication session started Wednesday, August 08, 2012 10:48:22 AM Info Agent Agent is sending EVENT package to ePO server Wednesday, August 08, 2012 10:48:22 AM Info Agent Agent is connecting to ePO server Wednesday, August 08, 2012 10:48:22 AM Info Agent No package received from ePO Server Wednesday, August 08, 2012 10:48:22 AM Info Agent Agent communication session closed Wednesday, August 08, 2012 10:50:05 AM Info Agent Agent Started Enforcing policies Wednesday, August 08, 2012 10:50:05 AM Info Management Enforcing Policies for EPOAGENT3000META Wednesday, August 08, 2012 10:50:05 AM Info Management Enforcing Policies for EPOAGENT3000 Wednesday, August 08, 2012 10:50:05 AM Info Management Enforcing Policies for McAfee Agent Wednesday, August 08, 2012 10:50:06 AM Info Agent Agent finished Enforcing policies Wednesday, August 08, 2012 10:50:06 AM Info Agent Next policy enforcement in 10 minutes Wednesday, August 08, 2012 10:53:22 AM Info Agent Agent is looking for events to upload Wednesday, August 08, 2012 10:58:22 AM Info Agent Agent is looking for events to upload Wednesday, August 08, 2012 11:00:06 AM Info Agent Agent Started Enforcing policies Wednesday, August 08, 2012 11:00:06 AM Info Management Enforcing Policies for EPOAGENT3000META Wednesday, August 08, 2012 11:00:06 AM Info Management Enforcing Policies for EPOAGENT3000 Wednesday, August 08, 2012 11:00:06 AM Info Management Enforcing Policies for McAfee Agent Wednesday, August 08, 2012 11:00:06 AM Info Agent Agent finished Enforcing policies Wednesday, August 08, 2012 11:00:06 AM Info Agent Next policy enforcement in 10 minutes Wednesday, August 08, 2012 11:01:00 AM Info Agent Agent wakeup call received Wednesday, August 08, 2012 11:01:00 AM Info Agent Agent wakeup call for FULL PROPS received Wednesday, August 08, 2012 11:01:00 AM Info Agent Agent started performing ASCI Wednesday, August 08, 2012 11:01:00 AM Info Management Collecting Properties Wednesday, August 08, 2012 11:01:00 AM Info Agent Agent is looking for events to upload Wednesday, August 08, 2012 11:01:00 AM Info Agent Agent uploading 1 events to ePO Server Wednesday, August 08, 2012 11:01:00 AM Info Agent Agent communication session started Wednesday, August 08, 2012 11:01:00 AM Info Agent Agent is sending FULL PROPS package to ePO server Wednesday, August 08, 2012 11:01:00 AM Info Agent Agent is connecting to ePO server Wednesday, August 08, 2012 11:01:01 AM Info Agent Package uploaded to ePO Server successfully Wednesday, August 08, 2012 11:01:01 AM Info Agent Agent communication session closed Wednesday, August 08, 2012 11:01:01 AM Info Agent Agent received POLICY package from ePO server Wednesday, August 08, 2012 11:01:01 AM Info Agent New server policy was successfully merged Wednesday, August 08, 2012 11:01:01 AM Info Agent Enforcing newly downloaded policies Wednesday, August 08, 2012 11:01:01 AM Info Agent Agent Started Enforcing policies Wednesday, August 08, 2012 11:01:01 AM Info Management Enforcing Policies for EPOAGENT3000META Wednesday, August 08, 2012 11:01:01 AM Info Agent Agent communication session started Wednesday, August 08, 2012 11:01:01 AM Info Agent Agent is sending EVENT package to ePO server Wednesday, August 08, 2012 11:01:01 AM Info Agent Agent is connecting to ePO server Wednesday, August 08, 2012 11:01:01 AM Info Management Enforcing Policies for EPOAGENT3000 Wednesday, August 08, 2012 11:01:01 AM Info Management Enforcing Policies for McAfee Agent Wednesday, August 08, 2012 11:01:01 AM Info Agent Agent finished Enforcing policies Wednesday, August 08, 2012 11:01:01 AM Info Agent Next policy enforcement in 10 minutes Wednesday, August 08, 2012 11:01:01 AM Info Agent No package received from ePO Server Wednesday, August 08, 2012 11:01:01 AM Info Agent Agent communication session closed Wednesday, August 08, 2012 11:05:30 AM Info Agent Agent wakeup call received Wednesday, August 08, 2012 11:05:30 AM Info Agent Agent wakeup call for FULL PROPS received Wednesday, August 08, 2012 11:05:30 AM Info Agent Agent started performing ASCI Wednesday, August 08, 2012 11:05:30 AM Info Management Collecting Properties Wednesday, August 08, 2012 11:05:30 AM Info Agent Agent is looking for events to upload Wednesday, August 08, 2012 11:05:30 AM Info Agent Agent communication session started Wednesday, August 08, 2012 11:05:30 AM Info Agent Agent is sending FULL PROPS package to ePO server Wednesday, August 08, 2012 11:05:30 AM Info Agent Agent is connecting to ePO server Wednesday, August 08, 2012 11:05:30 AM Info Agent Package uploaded to ePO Server successfully Wednesday, August 08, 2012 11:05:30 AM Info Agent Agent communication session closed Wednesday, August 08, 2012 11:05:30 AM Info Agent Agent received POLICY package from ePO server Wednesday, August 08, 2012 11:05:31 AM Info Agent New server policy was successfully merged Wednesday, August 08, 2012 11:05:31 AM Info Agent Enforcing newly downloaded policies Wednesday, August 08, 2012 11:05:31 AM Info Agent Agent Started Enforcing policies Wednesday, August 08, 2012 11:05:31 AM Info Management Enforcing Policies for EPOAGENT3000META Wednesday, August 08, 2012 11:05:31 AM Info Management Enforcing Policies for EPOAGENT3000 Wednesday, August 08, 2012 11:05:31 AM Info Management Enforcing Policies for McAfee Agent Wednesday, August 08, 2012 11:05:31 AM Info Agent Agent finished Enforcing policies Wednesday, August 08, 2012 11:05:31 AM Info Agent Next policy enforcement in 10 minutes Wednesday, August 08, 2012 11:10:30 AM Info Agent Agent is looking for events to upload Wednesday, August 08, 2012 11:11:54 AM Info Scheduler Next time(local) of task DAT Update: Wednesday, August 08, 2012 7:00:00 PM Wednesday, August 08, 2012 11:13:00 AM Info Updater Subsystem started Wednesday, August 08, 2012 11:13:00 AM Info Scheduler Next time(local) of task DAT Update: Wednesday, August 08, 2012 7:00:00 PM Wednesday, August 08, 2012 11:13:00 AM Info Scheduler Next time(local) of task {A14CD6FC-3BA8-4703-87BF-E3247CE382F5}: Wednesday, August 08, 2012 5:17:00 PM Wednesday, August 08, 2012 11:13:00 AM Info Scheduler Scheduler is now running Wednesday, August 08, 2012 11:13:01 AM Info Agent Agent will connect to Server in randomized full ASCI interval : 3600 seconds Wednesday, August 08, 2012 11:13:01 AM Info Agent Next policy enforcement in 10 minutes Wednesday, August 08, 2012 11:13:01 AM Info Agent Agent will connect to Server in : 51 minutes and 42 seconds Wednesday, August 08, 2012 11:17:49 AM Info Agent Agent started performing ASCI Wednesday, August 08, 2012 11:17:49 AM Info Agent Checking MAC address... Wednesday, August 08, 2012 11:17:50 AM Info Agent Agent communication session started Wednesday, August 08, 2012 11:17:50 AM Info Agent Agent is sending PROPS VERSION package to ePO server Wednesday, August 08, 2012 11:17:50 AM Info Agent Agent is connecting to ePO server Wednesday, August 08, 2012 11:17:50 AM Info Agent No package received from ePO Server Wednesday, August 08, 2012 11:17:50 AM Info Agent Agent communication session closed Wednesday, August 08, 2012 11:18:01 AM Info Agent Agent is looking for events to upload Wednesday, August 08, 2012 11:18:10 AM Info Agent Agent Started Enforcing policies Wednesday, August 08, 2012 11:18:10 AM Info Management Enforcing Policies for EPOAGENT3000META Wednesday, August 08, 2012 11:18:10 AM Info Management Enforcing Policies for EPOAGENT3000 Wednesday, August 08, 2012 11:18:10 AM Info Management Enforcing Policies for McAfee Agent Wednesday, August 08, 2012 11:18:10 AM Info Agent Agent finished Enforcing policies Wednesday, August 08, 2012 11:18:10 AM Info Agent Next policy enforcement in 10 minutes Wednesday, August 08, 2012 11:18:14 AM Info Agent Agent started performing ASCI Wednesday, August 08, 2012 11:18:14 AM Info Management Collecting Properties Wednesday, August 08, 2012 11:18:14 AM Info Agent Agent communication session started Wednesday, August 08, 2012 11:18:14 AM Info Agent Agent is sending PROPS VERSION package to ePO server Wednesday, August 08, 2012 11:18:14 AM Info Agent Agent is connecting to ePO server Wednesday, August 08, 2012 11:18:14 AM Info Agent Package uploaded to ePO Server successfully Wednesday, August 08, 2012 11:18:14 AM Info Agent Agent communication session closed Wednesday, August 08, 2012 11:18:14 AM Info Agent Agent received REQUEST PROPS package from ePO server Wednesday, August 08, 2012 11:18:14 AM Info Agent Agent communication session started Wednesday, August 08, 2012 11:18:14 AM Info Agent Agent is sending INC PROPS package to ePO server Wednesday, August 08, 2012 11:18:14 AM Info Agent Agent is connecting to ePO server Wednesday, August 08, 2012 11:18:14 AM Info Agent No package received from ePO Server Wednesday, August 08, 2012 11:18:14 AM Info Agent Agent communication session closed Wednesday, August 08, 2012 11:23:01 AM Info Agent Agent is looking for events to upload Wednesday, August 08, 2012 11:28:01 AM Info Agent Agent is looking for events to upload Wednesday, August 08, 2012 11:28:10 AM Info Agent Agent Started Enforcing policies Wednesday, August 08, 2012 11:28:10 AM Info Management Enforcing Policies for EPOAGENT3000META Wednesday, August 08, 2012 11:28:10 AM Info Management Enforcing Policies for EPOAGENT3000 Wednesday, August 08, 2012 11:28:10 AM Info Management Enforcing Policies for McAfee Agent Wednesday, August 08, 2012 11:28:10 AM Info Agent Agent finished Enforcing policies Wednesday, August 08, 2012 11:28:10 AM Info Agent Next policy enforcement in 10 minutes Wednesday, August 08, 2012 11:33:01 AM Info Agent Agent is looking for events to upload

[jstanley]

With the data provided I can't tell what is wrong but I can clearly see that something is wrong. The agent is not even attempting to enforce policies for VSE which usually means the agent has not loaded the VSE plugin.

I'd either reboot the machine or restart the VSE and MA services and see if that clears up the issue loading the plugin. You may have to disable VSE's access protection feature to do this:

• net stop mcafeeframework
• net stop mcshield
• net stop mctaskmanager
• net start mctaskmanager
• net start mcshield
• net start mcafeeframework

Other than that collect a MER from the client.

[JoeBidgood · Accepted solution]

Could also be the plugin flag = 8 thing  - check KB60593 for details.

HTH -

Joe

[Former Member]

KB60593 worked part way.  I changed the DWORD value to "0" and after a short while and a few agent wake-ups it showed VSE installed. I checked a "good" PC for ASM and it's correct value and changed the DWORD value for ASM plugin flag from "e" to "6". After another short time and a few agent wake-ups it reported as well.  The only reason I did not mark it as a helpful answer is because I don't know what else is not working.  I am waiting on a report back from the user as to whether the VSE splash screen goes away on login too.

Message was edited by: raider25 on 8/10/12 6:20:44 AM CDT

[Former Member]

VSE splash screen appears to have cleared as well.  I will consider this resolved for my purposes. Thanks to jstanley and JoeBidgood!