Loading...

Knowledge Center


DLL injection by Crowdstrike Falcon Endpoint Security prohibits access to the Endpoint Security console
Technical Articles ID:   KB87012
Last Modified:  7/19/2018
Rated:


Environment

McAfee Endpoint Security (ENS) Firewall 10.2.x, 10.1.x
McAfee ENS Threat Prevention 10.2.x, 10.1.x
McAfee ENS Web Control 10.2.x, 10.1.x
Crowdstrike Falcon Endpoint Security

Problem

When Crowdstrike Falcon Endpoint Security is installed and running, you cannot access the ENS console.

The ENS console displays the following error:
 
Error communicating with the Event Log.
 
When checking View Security Status from the McAfee Agent system tray icon, the McAfee Endpoint Security status is:
 
Endpoint Security Platform is not running
 
The EndpointSecurityPlatform_Error.log contains the following error:
 
41125     04/18/2016 04:25:54.240 PM    mfefw(3544.25744) <SYSTEM> blframework.blvtp.Error (VerifyProcess.cpp:114): ValidateModuleReport failed for 'C:\Windows\System32\drivers\CrowdStrike\umppc3805.dll', signer - 'C=US, S=California, L=Laguna Niguel, O="CrowdStrike, Inc.", CN="CrowdStrike, Inc."'

Cause

Crowdstrike Falcon Endpoint Security attempted to inject its own code (a DLL) into the ENS process.

Solution

A solution exists for this with ENS 10.5.0, where policy will allow adding the digital certificate of the Crowdstrike Falcon Endpoint Security software as a trusted entity when validation checks are made against McAfee processes.

This issue is resolved in Endpoint Security 10.5.0, which is available from the Product Downloads site at: http://mcafee.com/us/downloads/downloads.aspx.

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Updates are cumulative; Technical Support recommends that you install the latest one.

Workaround

Disable Crowdstrike Falcon Endpoint Security and reboot the system. 

Rate this document

Languages:

This article is available in the following languages:

English United States
Japanese

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.