Cb Defense: Sensor causes McAfee upgrade failure

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Cb Defense prevents McAfee from being upgraded

Environment

• Cb Defense Sensor: 3.0 and higher
• Microsoft Windows: All Supported Versions
• McAfee VirusScan Enterprise. Product Version: 8.8.011000. Product Language: 1033

Cause

Cb Defense blocks a temporary component of the McAfee installer from running

Resolution

Create 'Allow' rule in the relevant policy for

C:\Windows\TEMP\mfeUnInEn.exe
C:\Program Files (x86)\McAfee\VirusScan Enterprise\VSCore\Backup\x64\*

Additional Information

Following entries are in the McAfee upgrade MSI log file:

• Install_SysCore_Commit - Current directory , Setting to C:\Program Files (x86)\McAfee\VirusScan Enterprise\VSCore\Backup\x64\
• EnableCoreUninstall command failed (exit code -1073741512): "C:\Windows\TEMP\mfeUnInEn.exe" VSE88P9 1