Jump to content

Error upgrading/uninstalling Eset Endpoint Antivirus

Recommended Posts


We've got a network of about 60+ clients of which the majority is still on Eset Endpoint Antivirus 6.5.2094.0.

I'm trying to remotely upgrade these clients by making a new software install task on ERA, upgrading to 7.2.2055.0.
All the clients have the agent installed, installation starts but soon errors presumably on the uninstall of the previous version.
If I check the log file made by the agent I find the following:

Product: ESET Endpoint Antivirus -- Error 1404. Could not delete key \Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe.  System error .  Verify that you have sufficient access to that key, or contact your support personnel. 

Uninstalling using ERA does not work, manually installing 7.2 using a downloaded installer doesn't work either.

To this time the only thing that seems to work is booting to safe mode, using the eset removal tool to delete both agent and endpoint av, rebooting and then installing everything through ERA (server task to install agent followed by a client task to install AV version 7.2)

that said going around and doing this manually on 60-ish clients is a no-go, we don't have that kind of time available. Does anyone know what options I can try to automate the 7.2 deployment?

Side note: We have a few clients running higher versions, upgrading 6.6, 7.0 and 7.1 clients to version 7.2 works without a problem. It's just the 6.5 clients, which are the majority, which fail.

Link to comment
Share on other sites

  • Administrators

This issue is being discussed here: https://forum.eset.com/topic/22485-endpoint-security-anti-phishing-non-functional/ and we also post there latest updates on development. We are preparing a tool to fix troublesome clients as well as an automatic module update (tomorrow) that will automatically patch clients who have affected versions but have not restarted machines yet.

Please continue discussion in the existing topic.

For latest news you can also check the alert on this forum: https://forum.eset.com/announcement/5-endpoint-50-65-and-eset-server-products-65-non-functional-as-of-feb-8/ or the KB https://support.eset.com/en/alert7396-legacy-products-startup-issue.

Link to comment
Share on other sites

  • Marcos locked this topic
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...