Default update servers missing from registry after update to Eset Endpoint V5

Discussion in 'ESET Server & Remote Administrator' started by 2xdehelft, Dec 5, 2012.

Thread Status:
Not open for further replies.
  1. 2xdehelft
    Offline

    2xdehelft Registered Member

    About a month ago i upgraded about 65 PC's to endpoint Security V5 using Remote Administrator. We use a dual update configuration profile, updating from LAN first, then update from Eset internet servers.

    Since the upgrade from Eset AV Business edition V4.2 all the default update servers are missing from the registry on all clients. This couses the internet update to fail. (all laptop users taking their laptop out cannot update)

    I exported the correct update server registry keys from another Endpoint AV client and tried to import these. This is not possible in normal mode, but it works in safe mode. Now this client can use the internet update again.

    How is it possible these registry keys have disappeared, and how to restore? I'm not going to boot 65 computers in safe mode to restore the keys. There are also no default update servers option in the configuration/policy files.

    Below the missing registry keys on all clients:

    [HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000400\Settings]

    "DefaultServer0"="http://um10.eset.com/eset_upd/v5"
    "DefaultServerWeight0"=dword:000000c8
    "DefaultServer1"="http://93.184.71.27/eset_upd/v5"
    "DefaultServerWeight1"=dword:000000c8
    "DefaultServer2"="http://um16.eset.com/eset_upd/v5"
    "DefaultServerWeight2"=dword:000000c8
    "DefaultServer3"="http://89.202.149.45/eset_upd/v5"
    "DefaultServerWeight3"=dword:000000c8
    "DefaultServer4"="http://um21.eset.com/eset_upd/v5"
    "DefaultServerWeight4"=dword:000000c8
    "DefaultServer5"="http://89.202.149.49/eset_upd/v5"
    "DefaultServerWeight5"=dword:000000c8
    "DefaultServer6"="http://um23.eset.com/eset_upd/v5"
    "DefaultServerWeight6"=dword:000000c8
    "DefaultServer7"="http://84.233.195.62/eset_upd/v5"
    "DefaultServerWeight7"=dword:000000c8
    "DefaultServer8"="http://um25.eset.com/eset_upd/v5"
    "DefaultServerWeight8"=dword:000000c8
    "DefaultServerCount"=dword:00000009
    Last edited: Dec 5, 2012
  2. dwomack
    Offline

    dwomack Eset Staff Account

    You mentioned upgrading your client computers to version 5. Have you also upgraded your ERAC to v5?
  3. Marcos
    Online

    Marcos Eset Staff Account

    It would help us understand what happened if you copy the registry values found under HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000400\Settings and paste them here.
  4. 2xdehelft
    Offline

    2xdehelft Registered Member

    Off course I also updated the console/server to the newest version. I already did this before the update to Endpoint V5.

    Export of a "broken" registry

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000400\Settings]
    "InstallTime"=dword:50508f4f
    "LastUpdateAttempt"=dword:50c5da3d
    "LastUpdate"=dword:50c5b4fc
    "FailSafeServer"=""
    "UpdateServerGroup"=""
    "UpdateServerGroupOld"=""
    "RegistrationType"=dword:03013458
    "LastBackupTime"=dword:50c58aca
    "LastUpdateSeed"=dword:615c3f0f
    "VerFileLastModified_192.168.16.4:2221"="Mon, 10 Dec 2012 12:48:57 GMT"

    [HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000400\Settings\RegisteringRequest]
    "CustomCode"=dword:00000001

    Export of a working registry:

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000400\Settings]
    "InstallTime"=dword:50b4a264
    "LastUpdateAttempt"=dword:50c5d594
    "LastUpdate"=dword:50c5d594
    "FailSafeServer"="http://update.eset.com/eset_upd/v5/"
    "UpdateServerGroup"=""
    "UpdateServerGroupOld"=""
    "RegistrationType"=dword:00000000
    "LastBackupTime"=dword:50c5c761
    "LastUpdateSeed"=dword:783a8efe
    "VerFileLastModified_update.eset.com"="Tue, 27 Nov 2012 08:53:50 GMT"
    "DefaultServer0"="http://um10.eset.com/eset_upd/v5"
    "DefaultServerWeight0"=dword:000000c8
    "DefaultServer1"="http://93.184.71.27/eset_upd/v5"
    "DefaultServerWeight1"=dword:000000c8
    "DefaultServer2"="http://um16.eset.com/eset_upd/v5"
    "DefaultServerWeight2"=dword:000000c8
    "DefaultServer3"="http://89.202.149.45/eset_upd/v5"
    "DefaultServerWeight3"=dword:000000c8
    "DefaultServer4"="http://um21.eset.com/eset_upd/v5"
    "DefaultServerWeight4"=dword:000000c8
    "DefaultServer5"="http://89.202.149.49/eset_upd/v5"
    "DefaultServerWeight5"=dword:000000c8
    "DefaultServer6"="http://um23.eset.com/eset_upd/v5"
    "DefaultServerWeight6"=dword:000000c8
    "DefaultServer7"="http://84.233.195.62/eset_upd/v5"
    "DefaultServerWeight7"=dword:000000c8
    "DefaultServer8"="http://um25.eset.com/eset_upd/v5"
    "DefaultServerWeight8"=dword:000000c8
    "DefaultServerCount"=dword:00000009
    "VerFileLastModified_um21.eset.com"="Tue, 04 Dec 2012 09:06:17 GMT"
    "VerFileLastModified_84.233.195.62"="Thu, 06 Dec 2012 14:04:02 GMT"
    "VerFileLastModified_DLA-ICT-RG:2221"="Mon, 03 Dec 2012 10:56:38 GMT"
    "VerFileLastModified_89.202.149.49"="Mon, 10 Dec 2012 09:04:50 GMT"
    "VerFileLastModified_89.202.149.45"="Thu, 06 Dec 2012 09:05:51 GMT"
    "VerFileLastModified_93.184.71.27"="Wed, 05 Dec 2012 08:57:34 GMT"
    "Registration"=dword:00000008
    "VerFileLastModified_um23.eset.com"="Mon, 10 Dec 2012 12:04:11 GMT"
    "VerFileLastModified_um10.eset.com"="Mon, 10 Dec 2012 12:04:11 GMT"
    "VerFileLastModified_um25.eset.com"="Thu, 06 Dec 2012 14:03:51 GMT"
    "VerFileLastModified_um16.eset.com"="Mon, 10 Dec 2012 12:04:11 GMT"

    [HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000400\Settings\RegisteringRequest]
    "CustomCode"=dword:00000000
    Last edited: Dec 10, 2012
  5. 2xdehelft
    Offline

    2xdehelft Registered Member

    [MOVE]anybody?[/MOVE]
  6. Marcos
    Online

    Marcos Eset Staff Account

    PM sent.
Thread Status:
Not open for further replies.