EricTallan 1 Posted April 22, 2016 Share Posted April 22, 2016 I have multiple clients suddenly having trouble updating. In ERAS, I get the error message "Error downloading the update". I have tried clearing the update cache and updating again, but that doesn't help. I have verified that the clients in question have plenty of free space on the C: drive. My clients update directly from ESET, and I'm seeing the issue on versions 5.0.2254 and 5.0.2260. One of the clients had the issue yesterday, so I upgraded it from 5.0.2254 to 5.0.2260 and then it started updating, but today the issue is back on that client. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,404 Posted April 22, 2016 Administrators Share Posted April 22, 2016 I'll pm me you with further instructions momentarily. Link to comment Share on other sites More sharing options...
EricTallan 1 Posted April 26, 2016 Author Share Posted April 26, 2016 Any update on this? I replied to your PM with the requested log files last Friday. I now have 5 client machines experiencing this issue. Link to comment Share on other sites More sharing options...
russell_t 2 Posted April 28, 2016 Share Posted April 28, 2016 Hi, I am also seeing this on about 35 clients on 5.0.2237 Doesn't sound like updating will fix this? Can you also PM me instructions? Thanks, Russell Link to comment Share on other sites More sharing options...
Ceralis 0 Posted April 29, 2016 Share Posted April 29, 2016 Hi, what about this problem, the issue started yesterday for us, some client are calling us with the same problem? In administration console, it seems to be computer with Windows 10. Did you have any solution, because the only one we found is upgrading to Endpoint6, but with 1200 clients it will be a little bit difficult.. Thanks Link to comment Share on other sites More sharing options...
EricTallan 1 Posted April 29, 2016 Author Share Posted April 29, 2016 Nobody from ESET has followed up on this since 4/22 when they requested the logs. We now have 12 machines do this, with no resolution. Link to comment Share on other sites More sharing options...
slarkins 5 Posted May 2, 2016 Share Posted May 2, 2016 I have the same probelm...submitted a support request to ESET...their answer was for me to upgrade to 6.x....i just finished upgrading my 4.x to 5.x...so that isnt an option at this time...i di notice the pc's in question are usually ones that the users doesnt restart their pc very often... Link to comment Share on other sites More sharing options...
Ceralis 0 Posted May 2, 2016 Share Posted May 2, 2016 Hi, can you confirm me that the pcs are with Windows 10? Link to comment Share on other sites More sharing options...
slarkins 5 Posted May 2, 2016 Share Posted May 2, 2016 mine are all WIndows 7 pc's Link to comment Share on other sites More sharing options...
Ceralis 0 Posted May 2, 2016 Share Posted May 2, 2016 Ah ok, on the 1250 pc's, we have vista, 7 8, 8.1 and 10 and for the moment only 10 have problem Link to comment Share on other sites More sharing options...
Administrators Marcos 5,404 Posted May 2, 2016 Administrators Share Posted May 2, 2016 To EricTallan: eset.etl does not contain any data. If you open it in a hex editor, you'll see that it's full of 0xFF. Please try to generate it again and also create a Wireshark as well as a Process monitor from the same time. Link to comment Share on other sites More sharing options...
Monkston 0 Posted May 3, 2016 Share Posted May 3, 2016 Was also seeing this, 5.0.2254 clients updating against ERAS 5.2.26. Mostly Win10 machines, but with a couple of occurrences on Win7 clients. Started around 22.04.16. Did not fix it: * Clearing the ERAS update cache (from within UI) does not fix it. * Manually clearing: C:\ProgramData\ESET\ESET Remote Administrator\Server\updfiles\*.* C:\ProgramData\ESET\ESET Remote Administrator\Server\charon\*.* C:\ProgramData\ESET\ESET Remote Administrator\Server\mirror\*.* .. does not fix it. * Rebuilding the ERAS mirror does not fix it. * Pointing the stuck client directly at ESET update servers does not fix it. * Clearing the client update cache (from within UI) does not fix it. Did fix it (temporarily)- Purging the following client folder contents: * C:\ProgramData\ESET\ESET Endpoint Antivirus\Updfiles\*.* * C:\Program Files\ESET\ESET Endpoint Antivirus\em0**_32/64.dat .. but we saw the problem recur on some clients anywhere from 6 -24hrs later. The stuck clients seem to have successfully updated themselves to signature 13428 over the weekend though, so will see what happens.. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,404 Posted May 3, 2016 Administrators Share Posted May 3, 2016 Was also seeing this, 5.0.2254 clients updating against ERAS 5.2.26. Mostly Win10 machines, but with a couple of occurrences on Win7 clients. Started around 22.04.16. That might explain it. Only the latest version of ERA 5.3.33 has all known update / mirror issues fixed. After upgrade, delete the content of the mirror folder so that it's created from scratch. Should the problem persist, we will troubleshoot it further. Link to comment Share on other sites More sharing options...
slarkins 5 Posted May 3, 2016 Share Posted May 3, 2016 what is the process to upgrade era from 5.2.x to 5.3.3? just run the install and it will upgrade automatically? Link to comment Share on other sites More sharing options...
Ceralis 0 Posted May 3, 2016 Share Posted May 3, 2016 Yes, but I stop ERA serveur first and I run the 2 installers. For the moment the upgrade did not fix the problem but we don't have mirror so I don't delete the content of mirror folder Link to comment Share on other sites More sharing options...
Monkston 0 Posted May 3, 2016 Share Posted May 3, 2016 (edited) Upgraded to ERAS 5.3.3 and purged the server updfiles and mirror folder contents - this did not fix the stuck clients. On the stuck clients I then purged: * C:\ProgramData\ESET\ESET Endpoint Antivirus\Updfiles\*.* * C:\Program Files\ESET\ESET Endpoint Antivirus\em0**_32/64.dat and they successfully updated to latest signature. Waiting to see if the problem continues to recur. Edit: Upgrading to ERAS 5.3.3 has not fixed it for us, we're continuing to see Win10 clients get stuck with "Error downloading the update". Edited May 3, 2016 by Monkston Link to comment Share on other sites More sharing options...
Administrators Marcos 5,404 Posted May 3, 2016 Administrators Share Posted May 3, 2016 As the issue persists, please continue as follows: 1, download and install Wireshark as well as Process Monitor. 2, run the following command from the command line prompt started with administrator rights logman start updater -p {f329ae9a-556d-4934-920f-234e835d9ece} 0xffffff 10 -o C:\eset.etl -ets 3, start logging with Wireshark and Process Monitor 4, run update (wait until an error occurs) 5, stop logging in Wireshark and Process Monitor and save the logs 6, run the command "logman stop updater -ets" with administrator rights 7, collect logs using ESET Log Collector (ELC) from both the workstation and server where a mirror is created 8, create a listing of the mirror folder (e.g. dir c:\mirror > mirror.txt) on the server 9, compress all 3 logs + the listing of the mirror folder, upload them to a safe location along with ELC logs and pm me the download links. Link to comment Share on other sites More sharing options...
jpresto 0 Posted May 3, 2016 Share Posted May 3, 2016 How are people purging those recommended files? All the files are locked, don't want to go into safe mode to delete if I can avoid it. Link to comment Share on other sites More sharing options...
slarkins 5 Posted May 4, 2016 Share Posted May 4, 2016 I am thinking this is a problem with the client itself...i have a windows 7 pc...a standalone version of 5.x....configured to download directly from eset and has never been configured with any sort of policy....strictly standalone...yesterday, windows popped up a message about signatures being out of date...and it showed signature update failed...couldnt get the update to work until i rebooted....this was an upgrade over 4.x and never had an issue the 6 or so months it has been running on this pc...the only time this pc is rebooted is windows updates...the signature failure happened after 11 days since the last reboot...i am wondering if eset changed something in their definition files....?? Link to comment Share on other sites More sharing options...
jpresto 0 Posted May 4, 2016 Share Posted May 4, 2016 Has there been any word from ESET? I have a dozen or so systems with the issue. I performed a repair install last night on 4, all are now working but skeptical for how long. Link to comment Share on other sites More sharing options...
rockshox 6 Posted May 4, 2016 Share Posted May 4, 2016 (edited) I am experiencing the same problem here on two ERAS servers. ERAS 5.3.33 and Endpoint 5.0.2254, 5.0.2260 all on Windows 7 machines. Originally it was just one computer and a reboot solved the problem. Then a couple more computers with the same issue and another reboot fixed the problem. This morning it is now 4 more computers with different error messages: Error downloading the update - Error downloading file from the update server Error downloading the update - Could not connect to server Error downloading the update - Error allocating memory I am in the process of deleting the mirror data, clearing the update cache and then doing a clean definition update and see if that helps. *just to note - we serve our definitions through IIS and not the internal web server. Edited May 4, 2016 by rockshox Link to comment Share on other sites More sharing options...
slarkins 5 Posted May 4, 2016 Share Posted May 4, 2016 come on eset..you need to fix this....something changed in the last month or so with regards to the update process...... Link to comment Share on other sites More sharing options...
Monkston 0 Posted May 5, 2016 Share Posted May 5, 2016 I've given up, don't have time to investigate any further & need to get things running. Currently mid-migration to ERAS v6 & v6 clients, which is a whole other exciting adventure of broken services and complications. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,404 Posted May 5, 2016 Administrators Share Posted May 5, 2016 If you can gather the logs I've asked for, please do so and pm me a download link to the files. Otherwise I'd suggest contacting your local customer care or drop me a pm if you're from Europe and we can arrange a remote session. Link to comment Share on other sites More sharing options...
EricTallan 1 Posted May 5, 2016 Author Share Posted May 5, 2016 I have an open support case, and an ESET technician collected all the relevant logs from a problem machine yesterday. Link to comment Share on other sites More sharing options...
Recommended Posts