Jump to content

Sarine Advisor not loading after installation of eset endpoint security


Recommended Posts

Have you checked your Eset log files to determine if Eset is detecting this plug-in file or anything else associated with this Sarine Advisor software as malware or the like?

Link to post
Share on other sites
  • Administrators

Does pausing protection make a difference? If not, what about temporarily disabling real-time protection and HIPS one at a time in the advanced setup and rebooting the machine? Or temporarily disabling protocol filtering?

Link to post
Share on other sites

There also appears to be a problem with the Microsoft Bing servers that has cropped up today. Don't know if this could be related to this issue in some way.

Link to post
Share on other sites
11 hours ago, Marcos said:

Does pausing protection make a difference? If not, what about temporarily disabling real-time protection and HIPS one at a time in the advanced setup and rebooting the machine? Or temporarily disabling protocol filtering?

I have disabled all the protection but advisor not opening,when i trying to uninstall ,during uninstall process removing drivers in uninstllation windwo of eset & i run advisor than advisor is started without need restart after uninstallation finish..If i just do registry changes in safe mode (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehdrv) than  reboot after making change in registry advisor working...So give us permanent solution on urgent basis..

only removing eset solved problem. There is nothing to do with microsoft

Edited by Paneliya Mehulkumar
Link to post
Share on other sites
  • Administrators

Please try the following, one at a time and let us know when the issue goes away:
- in the HIPS setup, disable Protected service and reboot
- in the HIPS setup, disable Self-defense and reboot
- in the HIPS setup, disable Deep behavioral inspection and reboot
- in the HIPS setup, disable Ransomware shield and reboot
- in the HIPS setup, disable HIPS and reboot.

Do you think it will be possible to reproduce the issue in our lab if we request a demo of the software?

Link to post
Share on other sites

I have taken Below steps & solution done

boot in safemode

rename existing em001_64.dll & copy file to following location

C:\Program Files\ESET\ESET Security\Modules\em001_64\2102\

reboot & Check

I have attached screenshots of Modules Change 

kindly do correction on urgent basis.

 

Screenshots Of Modules Change.zip

Link to post
Share on other sites
  • Administrators

Unfortunately the above tells nothing about where the problem could be. If possible, please answer my questions.

If we are unable to reproduce the issue in house, we'll need a complete memory dump from time when the issue occurs as well as a Procmon log from launching the application in question.

Link to post
Share on other sites
2 hours ago, Paneliya Mehulkumar said:

C:\Program Files\ESET\ESET Security\Modules\em001_64\2102\

It appears this module relates to Eset's real-time scanner.

Have you tried to create a real-time exclusion for this Advisor app?

Link to post
Share on other sites

Logs already 

20 hours ago, Marcos said:

Please try the following, one at a time and let us know when the issue goes away:
- in the HIPS setup, disable Protected service and reboot
- in the HIPS setup, disable Self-defense and reboot
- in the HIPS setup, disable Deep behavioral inspection and reboot
- in the HIPS setup, disable Ransomware shield and reboot
- in the HIPS setup, disable HIPS and reboot.

Do you think it will be possible to reproduce the issue in our lab if we request a demo of the software?

Not solved even after disable & reboot of all above protection & advisor + propcon not running at same time ,issue running from last 3 days

19616edb-26a8-4960-8740-f54fc142de02.jpg

Link to post
Share on other sites
16 hours ago, Marcos said:

Unfortunately the above tells nothing about where the problem could be. If possible, please answer my questions.

If we are unable to reproduce the issue in house, we'll need a complete memory dump from time when the issue occurs as well as a Procmon log from launching the application in question.

advisor + propcon not running at same time ,issue running from last 3 days

19616edb-26a8-4960-8740-f54fc142de02.jpg

Link to post
Share on other sites
  • Administrators

Please post information about installed modules from the Update pane.

Does the issue return when you switch to the pre-release update channel in the advanced update setup? If so, is it resolved when you switch back to the regular update channel?

Please do replace modules in subfolders, e.g. \Modules\em001_64\2102. If you are provided with a module to test, it must be placed right in the Modules folder in safe mode and must be removed when a fixed module is available, otherwise the module will stop updating to newer versions.

 

Link to post
Share on other sites
16 hours ago, itman said:

It appears this module relates to Eset's real-time scanner.

Have you tried to create a real-time exclusion for this Advisor app?

Yes we have created a real-time exclusion for advisor app but same problem running

Link to post
Share on other sites
  • 3 weeks later...

Dear All,

 

From Since Last one month we are suffering due to eset ,

Due to eset we have regular complaints about advisor not loading random system.

 

If you don’t have permanent solution please give us our payment back or give us Symantec antivirus license key.

But don’t disturb us via eset.

 

This is our last & final statement.

 

Regards,

Mehul Paneliya

(IT-System & Network Admin)

0261-2500500 (Ext:-441,442)

Mo:-9099822662

Link to post
Share on other sites
  • 2 months later...
  • Administrators

Please switch to the pre-release update channel so that the Firewall module 1400.4 is downloaded and restart the machine.

Let us know if it resolves the issue (it did for other users already). We plan to release the module for all users next week.

Link to post
Share on other sites
  • 4 months later...
  • Administrators

Please make sure that you have Internet protection module 1409.1 or newer installed which contains a workaround to the issue. The actual issue is in the Sarine sw itself and must be solved by Sarine developers. Our developers have already reached out to them but haven't got any response yet.

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...