Sarine Advisor not loading after installation of eset endpoint security

[Paneliya Mehulkumar 0]

 From today morning we have to complete remove eset endpoint security after we can start advisor.more than 10 system randomly affected this problem.give us solution on urgent basis.

SysInspector-SM51-200205-145755.zip

Edited February 5, 2020 by Paneliya Mehulkumar

[itman 1,801]

Have you checked your Eset log files to determine if Eset is detecting this plug-in file or anything else associated with this Sarine Advisor software as malware or the like?

[Marcos 5,451]

Does pausing protection make a difference? If not, what about temporarily disabling real-time protection and HIPS one at a time in the advanced setup and rebooting the machine? Or temporarily disabling protocol filtering?

[itman 1,801]

There also appears to be a problem with the Microsoft Bing servers that has cropped up today. Don't know if this could be related to this issue in some way.

[Paneliya Mehulkumar 0]

11 hours ago, Marcos said:

Does pausing protection make a difference? If not, what about temporarily disabling real-time protection and HIPS one at a time in the advanced setup and rebooting the machine? Or temporarily disabling protocol filtering?

I have disabled all the protection but advisor not opening,when i trying to uninstall ,during uninstall process removing drivers in uninstllation windwo of eset & i run advisor than advisor is started without need restart after uninstallation finish..If i just do registry changes in safe mode (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehdrv) than  reboot after making change in registry advisor working...So give us permanent solution on urgent basis..

only removing eset solved problem. There is nothing to do with microsoft

Edited February 6, 2020 by Paneliya Mehulkumar

[Marcos 5,451]

Please try the following, one at a time and let us know when the issue goes away:
- in the HIPS setup, disable Protected service and reboot
- in the HIPS setup, disable Self-defense and reboot
- in the HIPS setup, disable Deep behavioral inspection and reboot
- in the HIPS setup, disable Ransomware shield and reboot
- in the HIPS setup, disable HIPS and reboot.

Do you think it will be possible to reproduce the issue in our lab if we request a demo of the software?

[Paneliya Mehulkumar 0]

I have taken Below steps & solution done

boot in safemode

rename existing em001_64.dll & copy file to following location

C:\Program Files\ESET\ESET Security\Modules\em001_64\2102\

reboot & Check

I have attached screenshots of Modules Change 

kindly do correction on urgent basis.

 

Screenshots Of Modules Change.zip

[Marcos 5,451]

Unfortunately the above tells nothing about where the problem could be. If possible, please answer my questions.

If we are unable to reproduce the issue in house, we'll need a complete memory dump from time when the issue occurs as well as a Procmon log from launching the application in question.

[itman 1,801]

2 hours ago, Paneliya Mehulkumar said:

C:\Program Files\ESET\ESET Security\Modules\em001_64\2102\

It appears this module relates to Eset's real-time scanner.

Have you tried to create a real-time exclusion for this Advisor app?

[Paneliya Mehulkumar 0]

Yes i have tried to exclude Advisor from real-time protection but not solved yet..

[Paneliya Mehulkumar 0]

Logs already 

20 hours ago, Marcos said:

Please try the following, one at a time and let us know when the issue goes away:
- in the HIPS setup, disable Protected service and reboot
- in the HIPS setup, disable Self-defense and reboot
- in the HIPS setup, disable Deep behavioral inspection and reboot
- in the HIPS setup, disable Ransomware shield and reboot
- in the HIPS setup, disable HIPS and reboot.

Do you think it will be possible to reproduce the issue in our lab if we request a demo of the software?

Not solved even after disable & reboot of all above protection & advisor + propcon not running at same time ,issue running from last 3 days

[Paneliya Mehulkumar 0]

16 hours ago, Marcos said:

Unfortunately the above tells nothing about where the problem could be. If possible, please answer my questions.

If we are unable to reproduce the issue in house, we'll need a complete memory dump from time when the issue occurs as well as a Procmon log from launching the application in question.

advisor + propcon not running at same time ,issue running from last 3 days

[Marcos 5,451]

Please post information about installed modules from the Update pane.

Does the issue return when you switch to the pre-release update channel in the advanced update setup? If so, is it resolved when you switch back to the regular update channel?

Please do replace modules in subfolders, e.g. \Modules\em001_64\2102. If you are provided with a module to test, it must be placed right in the Modules folder in safe mode and must be removed when a fixed module is available, otherwise the module will stop updating to newer versions.

 

[Paneliya Mehulkumar 0]

I have attached temporary  solution but  This problem in Eset Endpoint Security 7.0,7.1,7.2 & Endpoint security 7.0,7.1,7.2 also.. 

 

 

Logs & Temprary Solution.zip

Edited February 7, 2020 by Paneliya Mehulkumar

[Paneliya Mehulkumar 0]

16 hours ago, itman said:

It appears this module relates to Eset's real-time scanner.

Have you tried to create a real-time exclusion for this Advisor app?

Yes we have created a real-time exclusion for advisor app but same problem running

[itman 1,801]

Have you contacted Sarine tech support in regards to the "hasp plug failed to initialize" error?

[Paneliya Mehulkumar 0]

Dear All,

 

From Since Last one month we are suffering due to eset ,

Due to eset we have regular complaints about advisor not loading random system.

 

If you don’t have permanent solution please give us our payment back or give us Symantec antivirus license key.

But don’t disturb us via eset.

 

This is our last & final statement.

 

Regards,

Mehul Paneliya

(IT-System & Network Admin)

0261-2500500 (Ext:-441,442)

Mo:-9099822662

[Marcos 5,451]

Please switch to the pre-release update channel so that the Firewall module 1400.4 is downloaded and restart the machine.

Let us know if it resolves the issue (it did for other users already). We plan to release the module for all users next week.

[Videsh 0]

Can you guys plz help me?

having this issue after upgrading Advisor 7.5 to 7.6

[Marcos 5,451]

Please make sure that you have Internet protection module 1409.1 or newer installed which contains a workaround to the issue. The actual issue is in the Sarine sw itself and must be solved by Sarine developers. Our developers have already reached out to them but haven't got any response yet.