Jump to content
Paneliya Mehulkumar

Sarine Advisor not loading after installation of eset endpoint security

Recommended Posts

Have you checked your Eset log files to determine if Eset is detecting this plug-in file or anything else associated with this Sarine Advisor software as malware or the like?

Share this post


Link to post
Share on other sites

Does pausing protection make a difference? If not, what about temporarily disabling real-time protection and HIPS one at a time in the advanced setup and rebooting the machine? Or temporarily disabling protocol filtering?

Share this post


Link to post
Share on other sites

There also appears to be a problem with the Microsoft Bing servers that has cropped up today. Don't know if this could be related to this issue in some way.

Share this post


Link to post
Share on other sites
11 hours ago, Marcos said:

Does pausing protection make a difference? If not, what about temporarily disabling real-time protection and HIPS one at a time in the advanced setup and rebooting the machine? Or temporarily disabling protocol filtering?

I have disabled all the protection but advisor not opening,when i trying to uninstall ,during uninstall process removing drivers in uninstllation windwo of eset & i run advisor than advisor is started without need restart after uninstallation finish..If i just do registry changes in safe mode (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehdrv) than  reboot after making change in registry advisor working...So give us permanent solution on urgent basis..

only removing eset solved problem. There is nothing to do with microsoft

Edited by Paneliya Mehulkumar

Share this post


Link to post
Share on other sites

Please try the following, one at a time and let us know when the issue goes away:
- in the HIPS setup, disable Protected service and reboot
- in the HIPS setup, disable Self-defense and reboot
- in the HIPS setup, disable Deep behavioral inspection and reboot
- in the HIPS setup, disable Ransomware shield and reboot
- in the HIPS setup, disable HIPS and reboot.

Do you think it will be possible to reproduce the issue in our lab if we request a demo of the software?

Share this post


Link to post
Share on other sites

I have taken Below steps & solution done

boot in safemode

rename existing em001_64.dll & copy file to following location

C:\Program Files\ESET\ESET Security\Modules\em001_64\2102\

reboot & Check

I have attached screenshots of Modules Change 

kindly do correction on urgent basis.

 

Screenshots Of Modules Change.zip

Share this post


Link to post
Share on other sites

Unfortunately the above tells nothing about where the problem could be. If possible, please answer my questions.

If we are unable to reproduce the issue in house, we'll need a complete memory dump from time when the issue occurs as well as a Procmon log from launching the application in question.

Share this post


Link to post
Share on other sites
2 hours ago, Paneliya Mehulkumar said:

C:\Program Files\ESET\ESET Security\Modules\em001_64\2102\

It appears this module relates to Eset's real-time scanner.

Have you tried to create a real-time exclusion for this Advisor app?

Share this post


Link to post
Share on other sites

Logs already 

20 hours ago, Marcos said:

Please try the following, one at a time and let us know when the issue goes away:
- in the HIPS setup, disable Protected service and reboot
- in the HIPS setup, disable Self-defense and reboot
- in the HIPS setup, disable Deep behavioral inspection and reboot
- in the HIPS setup, disable Ransomware shield and reboot
- in the HIPS setup, disable HIPS and reboot.

Do you think it will be possible to reproduce the issue in our lab if we request a demo of the software?

Not solved even after disable & reboot of all above protection & advisor + propcon not running at same time ,issue running from last 3 days

19616edb-26a8-4960-8740-f54fc142de02.jpg

Share this post


Link to post
Share on other sites
16 hours ago, Marcos said:

Unfortunately the above tells nothing about where the problem could be. If possible, please answer my questions.

If we are unable to reproduce the issue in house, we'll need a complete memory dump from time when the issue occurs as well as a Procmon log from launching the application in question.

advisor + propcon not running at same time ,issue running from last 3 days

19616edb-26a8-4960-8740-f54fc142de02.jpg

Share this post


Link to post
Share on other sites

Please post information about installed modules from the Update pane.

Does the issue return when you switch to the pre-release update channel in the advanced update setup? If so, is it resolved when you switch back to the regular update channel?

Please do replace modules in subfolders, e.g. \Modules\em001_64\2102. If you are provided with a module to test, it must be placed right in the Modules folder in safe mode and must be removed when a fixed module is available, otherwise the module will stop updating to newer versions.

 

Share this post


Link to post
Share on other sites
16 hours ago, itman said:

It appears this module relates to Eset's real-time scanner.

Have you tried to create a real-time exclusion for this Advisor app?

Yes we have created a real-time exclusion for advisor app but same problem running

Share this post


Link to post
Share on other sites

Have you contacted Sarine tech support in regards to the "hasp plug failed to initialize" error?

Share this post


Link to post
Share on other sites

Dear All,

 

From Since Last one month we are suffering due to eset ,

Due to eset we have regular complaints about advisor not loading random system.

 

If you don’t have permanent solution please give us our payment back or give us Symantec antivirus license key.

But don’t disturb us via eset.

 

This is our last & final statement.

 

Regards,

Mehul Paneliya

(IT-System & Network Admin)

0261-2500500 (Ext:-441,442)

Mo:-9099822662

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...