Views:

Below is the log snippet from the ofcdebug.log file in the WFBS_Debug folder:

2020 01/27 17:17:50 [3128 : 1c44] (00) (E) [-IPC-][instreg.exe]COIPCObj::InitIPCListenPort - MapViewOfFile failed with Windows error code: [183]. - [oipcobj.cpp(399)]
2020 01/27 17:17:50 [3128 : 1c44] (00) (E) [][instreg.exe]CommonClientUtility::CRegistryController::GetValueString - CRegKey::Open failed with Windows error code:[2]. - [ccutil_registrycontroller.cpp(54)]
2020 01/27 17:18:58 [3128 : 1c44] (00) (E) [][instreg.exe]COfcDigitalSignatureManager::VerifyFileWithDatFHS - failed to check digital signature for C:\Program Files (x86)\Trend Micro\Security Agent\Temp\CCSF\CCSF\module\scan\tmel.sys, err=536876103 - [ds_ofcdsmanager.cpp(578)]
2020 01/27 17:18:58 [3128 : 1c44] (00) (E) [][instreg.exe]COfcDigitalSignatureManager::VerifyFileWithDatFHS - failed to check digital signature for C:\Program Files (x86)\Trend Micro\Security Agent\Temp\CCSF\CCSF\module\TrxHandler\libcurl.dll, err=-2146762479 - [ds_ofcdsmanager.cpp(578)]
2020 01/27 17:19:02 [3128 : 1c44] (00) (E) [][instreg.exe]COfcDigitalSignatureManager::VerifyFileWithDatFHS - failed to check digital signature for C:\Program Files (x86)\Trend Micro\Security Agent\Temp\CCSF\CCSF\module\BES\firefoxextension\core\TmBpFfCore.dll, err=-2146762479 - [ds_ofcdsmanager.cpp(578)]
2020 01/27 17:19:03 [3128 : 1c44] (00) (F) [][instreg.exe]CInstregApp::InitInstance - Bypass CCSF package since it failed to check package integrity. - [instreg_instreg.cpp(860)]
2020 01/27 17:19:03 [3128 : 1c44] (00) (F) [-IPC-][instreg.exe][PFW][ReceiveStop] PipeServer is not initialed. RC[0x1000000A] - [oipcobj.cpp(1112)]
2020 01/27 17:19:03 [3128 : 1c44] (00) (E) [-IPC-][instreg.exe][PFW][ReceiveStop] <--- RC[0x1000000A] - [oipcobj.cpp(1113)]
2020 01/27 17:19:04 [2508 : 1408] (00) (E) [-IPC-][InstReg.exe]COIPCObj::InitIPCListenPort - MapViewOfFile failed with Windows error code: [183]. - [oipcobj.cpp(399)]
2020 01/27 17:19:04 [2508 : 1408] (00) (F) [-IPC-][InstReg.exe][PFW][ReceiveStop] PipeServer is not initialed. RC[0x1000000A] - [oipcobj.cpp(1112)]
2020 01/27 17:19:04 [2508 : 1408] (00) (E) [-IPC-][InstReg.exe][PFW][ReceiveStop] <--- RC[0x1000000A] - [oipcobj.cpp(1113)]

Below is the log snippet within wofie_install from the WFBS_Debug folder:

WFBS_Debug

From Process Monitor, the following lines can be found:

  • These lines show that the Trend Micro certificate is not found under Trusted Certificates:

    Trusted Certificates

  • These lines show that the Trend Micro certificate is under Disallowed System Certificates:

    Disallowed System Certificates

To resolve this isolated issue:

  1. Open Certificate Manager from the machine.
  2. Navigate to Untrusted Certificates > Certificates.
  3. Look for Trend Micro, Inc. certificates if present. This includes SHA256 and SHA1 certificates.
  4. Remove certificates under Untrusted Certificates.
  5. Utilize EasyFix for System Certificates Tool. You may use the command EasyFixSysCerts.exe A1.
  6. Uninstall the Security Agent remnants. You can make use of the uninstall tool or manually delete the security agent files.
  7. Reinstall the Security Agent.
​
Keywords: installation unsuccessful, Instreg.exe failed to check file integrity, missing services, missing drivers, security agent install fails, security agent installation fails