Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 2021-04-30T17:22:43.169-0400 ERROR application/fleet_gateway.go:186 failed to dispatch actions, error: operator: failed to execute step sc-run, error: operation 'Exec' failed (return code: 21): 2021-04-30 21:22:42: info: Main.cpp:278 Upgrading existing installation (protected)
- 2021-04-30 21:22:42: info: InstallLib.cpp:392 Attempting to create a rollback package
- 2021-04-30 21:22:42: info: InstallLib.cpp:399 Failed to create rollback package, attempting full uninstall
- 2021-04-30 21:22:42: debug: Service.cpp:801 PPL is supported
- 2021-04-30 21:22:42: warning: Util.cpp:899 Error encountered while unprotecting service for uninstall
- 2021-04-30 21:22:42: error: Service.cpp:359 OpenServiceW failed with error 1060
- 2021-04-30 21:22:42: error: Service.cpp:359 OpenServiceW failed with error 1060
- 2021-04-30 21:22:42: error: Service.cpp:169 OpenServiceA failed with error 1060
- 2021-04-30 21:22:42: error: Util.cpp:936 Endpoint service was unable to be deleted or scheduled for deletion.
- 2021-04-30 21:22:42: error: Service.cpp:169 OpenServiceA failed with error 1060
- 2021-04-30 21:22:42: error: Util.cpp:954 Endpoint driver service was unable to be deleted or scheduled for deletion.
- 2021-04-30 21:22:42: info: InstallLib.cpp:251 Uninstall completed
- 2021-04-30 21:22:42: info: InstallLib.cpp:401 Proceeding with install
- 2021-04-30 21:22:42: info: InstallLib.cpp:181 Installing from endpoint-security-resources.zip
- 2021-04-30 21:22:42: info: Internal.cpp:188 Extracting installation artifacts
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\elastic-endpoint.yaml
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\WINDOWS\System32\Drivers\elastic-endpoint-driver.sys
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\WINDOWS\System32\Drivers\ElasticElam.sys
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\SecurityProductInformation.ini
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\elastic-endpoint.exe
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\endpointpe-v4-model
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\endpointpe-v4-exceptionlist
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\endpointpe-v4-blocklist
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\production-ransomware-v1-windows
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-ransomware-v1-windows
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\global-exceptionlist-windows
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\global-trustlist-windows-v1
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\manifest.json
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\manifest.sig
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-malware-signature-v1-windows
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-endpointpe-v4-exceptionlist
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-endpointpe-v4-blocklist
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-endpointpe-v4-model
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\resources\elastic-endpoint-security.png
- 2021-04-30 21:22:43: error: Util.cpp:745 ELAM driver service already in use.
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\elastic-endpoint.yaml]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\WINDOWS\System32\Drivers\elastic-endpoint-driver.sys]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\WINDOWS\System32\Drivers\ElasticElam.sys]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\SecurityProductInformation.ini]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\elastic-endpoint.exe]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\endpointpe-v4-model]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\endpointpe-v4-exceptionlist]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\endpointpe-v4-blocklist]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\production-ransomware-v1-windows]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-ransomware-v1-windows]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\global-exceptionlist-windows]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\global-trustlist-windows-v1]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\manifest.json]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\manifest.sig]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-malware-signature-v1-windows]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-endpointpe-v4-exceptionlist]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-endpointpe-v4-blocklist]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-endpointpe-v4-model]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\resources\elastic-endpoint-security.png]
- 2021-04-30 21:22:43: info: InstallLib.cpp:424 Install failed and no rollback package exists: operation 'Exec' failed (return code: 21): 2021-04-30 21:22:42: info: Main.cpp:278 Upgrading existing installation (protected)
- 2021-04-30 21:22:42: info: InstallLib.cpp:392 Attempting to create a rollback package
- 2021-04-30 21:22:42: info: InstallLib.cpp:399 Failed to create rollback package, attempting full uninstall
- 2021-04-30 21:22:42: debug: Service.cpp:801 PPL is supported
- 2021-04-30 21:22:42: warning: Util.cpp:899 Error encountered while unprotecting service for uninstall
- 2021-04-30 21:22:42: error: Service.cpp:359 OpenServiceW failed with error 1060
- 2021-04-30 21:22:42: error: Service.cpp:359 OpenServiceW failed with error 1060
- 2021-04-30 21:22:42: error: Service.cpp:169 OpenServiceA failed with error 1060
- 2021-04-30 21:22:42: error: Util.cpp:936 Endpoint service was unable to be deleted or scheduled for deletion.
- 2021-04-30 21:22:42: error: Service.cpp:169 OpenServiceA failed with error 1060
- 2021-04-30 21:22:42: error: Util.cpp:954 Endpoint driver service was unable to be deleted or scheduled for deletion.
- 2021-04-30 21:22:42: info: InstallLib.cpp:251 Uninstall completed
- 2021-04-30 21:22:42: info: InstallLib.cpp:401 Proceeding with install
- 2021-04-30 21:22:42: info: InstallLib.cpp:181 Installing from endpoint-security-resources.zip
- 2021-04-30 21:22:42: info: Internal.cpp:188 Extracting installation artifacts
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\elastic-endpoint.yaml
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\WINDOWS\System32\Drivers\elastic-endpoint-driver.sys
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\WINDOWS\System32\Drivers\ElasticElam.sys
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\SecurityProductInformation.ini
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\elastic-endpoint.exe
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\endpointpe-v4-model
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\endpointpe-v4-exceptionlist
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\endpointpe-v4-blocklist
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\production-ransomware-v1-windows
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-ransomware-v1-windows
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\global-exceptionlist-windows
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\global-trustlist-windows-v1
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\manifest.json
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\manifest.sig
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-malware-signature-v1-windows
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-endpointpe-v4-exceptionlist
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-endpointpe-v4-blocklist
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-endpointpe-v4-model
- 2021-04-30 21:22:43: info: Internal.cpp:358 Writing installation file C:\Program Files\Elastic\Endpoint\cache\resources\elastic-endpoint-security.png
- 2021-04-30 21:22:43: error: Util.cpp:745 ELAM driver service already in use.
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\elastic-endpoint.yaml]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\WINDOWS\System32\Drivers\elastic-endpoint-driver.sys]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\WINDOWS\System32\Drivers\ElasticElam.sys]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\SecurityProductInformation.ini]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\elastic-endpoint.exe]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\endpointpe-v4-model]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\endpointpe-v4-exceptionlist]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\endpointpe-v4-blocklist]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\production-ransomware-v1-windows]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-ransomware-v1-windows]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\global-exceptionlist-windows]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\global-trustlist-windows-v1]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\manifest.json]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\manifest.sig]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-malware-signature-v1-windows]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-endpointpe-v4-exceptionlist]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-endpointpe-v4-blocklist]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\artifacts\global-artifacts\diagnostic-endpointpe-v4-model]
- 2021-04-30 21:22:43: debug: File.cpp:471 Removing [C:\Program Files\Elastic\Endpoint\cache\resources\elastic-endpoint-security.png]
- 2021-04-30 21:22:43: info: InstallLib.cpp:424 Install failed and no rollback package exists
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement