EldoS | Feel safer!

Software components for data protection, secure storage and transfer

CBFS6 install error

Also by EldoS: CallbackProcess
A component to control process creation and termination in Windows and .NET applications.
#36430
Posted: 04/09/2016 10:05:49
by Yves Langisch (Standard support level)
Joined: 06/17/2015
Posts: 24

Hi,

We have a few customers having issues while installing the CBFS6 drivers based on the sample installer code you provide. One of these customers enabled the extended logging and now we caught two error events from the event log as follows:

Code
  <Obj RefId="255">
    <TNRef RefId="0" />
    <MS>
      <I32 N="EventID">1</I32>
      <S N="MachineName">WIN-8S18ONBFAEP</S>
      <BA N="Data">hwMAAE9jdCAyMyAyMDE1AC4uXHVtb2RlXGNiZnNhcGlcY2Jmc2FwaS5jAA==</BA>
      <I32 N="Index">7027</I32>
      <S N="Category">(0)</S>
      <I16 N="CategoryNumber">0</I16>
      <Obj N="EntryType" RefId="256">
        <TNRef RefId="1" />
        <ToString>Error</ToString>
        <I32>1</I32>
      </Obj>
      <S N="Message">2</S>
      <S N="Source">cbfs6</S>
      <Obj N="ReplacementStrings" RefId="257">
        <TNRef RefId="2" />
        <LST>
          <S>2</S>
        </LST>
      </Obj>
      <I64 N="InstanceId">1</I64>
      <DT N="TimeGenerated">2016-04-09T13:08:16+00:00</DT>
      <DT N="TimeWritten">2016-04-09T13:08:16+00:00</DT>
      <Nil N="UserName" />
      <Nil N="Site" />
      <Nil N="Container" />
    </MS>
  </Obj>


and

Code
  <Obj RefId="105">
    <TNRef RefId="0" />
    <MS>
      <I32 N="EventID">1</I32>
      <S N="MachineName">WIN-8S18ONBFAEP</S>
      <BA N="Data">hwMAAE9jdCAyMyAyMDE1AC4uXHVtb2RlXGNiZnNhcGlcY2Jmc2FwaS5jAA==</BA>
      <I32 N="Index">7077</I32>
      <S N="Category">(0)</S>
      <I16 N="CategoryNumber">0</I16>
      <Obj N="EntryType" RefId="106">
        <TNRef RefId="1" />
        <ToString>Error</ToString>
        <I32>1</I32>
      </Obj>
      <S N="Message">2</S>
      <S N="Source">cbfs6</S>
      <Obj N="ReplacementStrings" RefId="107">
        <TNRef RefId="2" />
        <LST>
          <S>2</S>
        </LST>
      </Obj>
      <I64 N="InstanceId">1</I64>
      <DT N="TimeGenerated">2016-04-09T13:15:19+00:00</DT>
      <DT N="TimeWritten">2016-04-09T13:15:19+00:00</DT>
      <Nil N="UserName" />
      <Nil N="Site" />
      <Nil N="Container" />
    </MS>
  </Obj>


Can you tell us what the reason for the failing installation could be?

Thanks!
Yves
#36431
Posted: 04/11/2016 04:09:13
by Volodymyr Zinin (EldoS Corp.)

Hello Yves,

Usually, in the case the installation is successful, such log records do not specify error but some technical information. In order to find the reason of these records I need them in the Event Viewer native format (.evtx). Could you please give it to me?

Thanks.
#36448
Posted: 04/11/2016 11:36:23
by Yves Langisch (Standard support level)
Joined: 06/17/2015
Posts: 24

I've received the Application and System logs.

https://dl.dropboxusercontent.com/u/395716/app_log.evtx
https://dl.dropboxusercontent.com/u/395716/sys_log.evtx

Thanks
Yves
#36454
Posted: 04/12/2016 10:01:06
by Volodymyr Zinin (EldoS Corp.)

Thank you for the log files. They specify that the CBFS user mode library tried to access the CBFS driver (cbfs6.sys) but it had not been installed yet. After the driver installation such logs should not appear anymore.

Reply

Statistics

Topic viewed 1801 times

Number of guests: 1, registered members: 0, in total hidden: 0




|

Back to top

As of July 15, 2016 EldoS Corporation will operate as a division of /n software inc. For more information, please read the announcement.

Got it!