[Bug 43267] McAfee Endpoint Encryption for Files and Folders ( part of McAfee Complete Data Protection Suite 3.1) app 'MfeEERM.exe' fails to run from USB stick

wine-bugs at winehq.org wine-bugs at winehq.org
Sat Jul 8 04:30:45 CDT 2017


https://bugs.winehq.org/show_bug.cgi?id=43267

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Wine error when trying to   |McAfee Endpoint Encryption
                   |open a USB stick encrypted  |for Files and Folders (part
                   |by McAfee                   |of McAfee Complete Data
                   |                            |Protection Suite 3.1) app
                   |                            |'MfeEERM.exe' fails to run
                   |                            |from USB stick
                 CC|                            |focht at gmx.net
            Version|unspecified                 |2.0.1
                URL|                            |https://www.mcafee.com/apps
                   |                            |/downloads/free-evaluations
                   |                            |/default.aspx?region=us&pid
                   |                            |=aaac19350
           Keywords|                            |download

--- Comment #4 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

first, please don't paste backtraces or error logs in the comments field,
attach them instead.

https://wiki.winehq.org/Bugs ("How to report" section)

You could have provided a bit more info on how the USB was encrypted, which
exact product/version was used etc.
I had to spend some time to identify the part of McAffe mal^H^H^Hsoftware this
client app is provided with.

Anyway, here it goes ...

https://www.mcafee.com/apps/downloads/free-evaluations/default.aspx?region=us&pid=aaac19350
-> "McAfee Complete Data Protection" v3.1.1 (release 3/13/2015)

$ du -sh Encryption_CDB.zip 
751M    Encryption_CDB.zip

$ sha1sum Encryption_CDB.zip 
73ebda4bd09130ee571e8c5cf2335650a4744c4d  Encryption_CDB.zip

--- snip ---
$ tree --charset=ANSI -L 2 Encryption_CDB
Encryption_CDB
|-- EASI.exe
|-- ePOSetup
...
|   |-- agenthandler
|   |-- ePO510.msi
|   |-- ePOMain.cab
|   |-- ePOMain.exe
|   |-- Setup
|   |-- Setup.exe
|   |-- Setup.ini
|   `-- UpgradeCompatibility
|-- extensions
...
|-- installers
|-- Manuals
|   |-- InstallationGuide.zip
|   |-- Licenses.txt
|   `-- ReleaseNotes.zip
|-- packages
|   |-- 3-1MfeEEPC.zip
|   |-- 3-2EegoPackage.zip
|   |-- 3-3MfeEEAgent.zip
|   |-- 4-1MNE-OSX-2.1.0.306.zip
|   |-- 4-2MNE-WIN-2.1.0.132.zip
|   |-- 4-3DEGO-OSX-2.1.0.306.zip
|   |-- 5-1-1MA480P2WIN.zip
|   |-- 5-1-2AgentKeyUpdate_patch2.zip
|   |-- 5-2MA480P2LNX.zip
|   |-- 5-3MA480P2HF974930Mac.zip
|   `-- MfeFRP_Client_4.3.1.114.zip
...
|-- Release\ Notes\ for\ McAfee\ Endpoint\ Suite\ Installer\ 3.1_de-de.html
|-- Release\ Notes\ for\ McAfee\ Endpoint\ Suite\ Installer\ 3.1_en-us.html
|-- Release\ Notes\ for\ McAfee\ Endpoint\ Suite\ Installer\ 3.1_es-es.html
|-- Release\ Notes\ for\ McAfee\ Endpoint\ Suite\ Installer\ 3.1_fr-fr.html
|-- Release\ Notes\ for\ McAfee\ Endpoint\ Suite\ Installer\ 3.1_it-it.html
|-- Release\ Notes\ for\ McAfee\ Endpoint\ Suite\ Installer\ 3.1_nl-nl.html
|-- SuiteName.txt
|-- sysTree
|   `-- systree.txt
|-- tags
|   `-- Tags.xml
|-- tasks
|   `-- TaskCatalogExport.xml
`-- Utilities
    |-- ePOMaint_2005.exe.zip
    |-- ePOMaint_2008.exe.zip
    `-- ePO\ Maintenance\ Utility\ Product\ Guide.pdf
--- snip ---

Instead of going through the hassle of installing the whole suite which also
requires .NET for some reasons, I've located the relevant part here:
'MfeFRP_Client_4.3.1.114.zip'

--- snip ---
$ unzip -l Encryption_CDB/packages/MfeFRP_Client_4.3.1.114.zip 
Archive:  Encryption_CDB/packages/MfeFRP_Client_4.3.1.114.zip
  Length      Date    Time    Name
---------  ---------- -----   ----
    99300  12-10-2014 13:08   eeff-detect.mcs
     5356  12-10-2014 13:08   eeff-install.mcs
 10011648  12-10-2014 13:39   eeff32.msi
 11794432  12-10-2014 13:40   eeff64.msi
     2060  12-10-2014 13:08   PkgCatalog.z
---------                     -------
 21912796                     5 files
--- snip ---

Extracting 'eeff32.msi' and installing it via 'msiexec' kinda works, albeit
there are various filter/filesystem kernel driver crashing on prefix startup
(installed as services with autorun setting as part of the suite).

You end up with:

--- snip ---
$ ls -1sh .wine/drive_c/Program\ Files/McAfee/Endpoint\ Encryption\ for\ Files\
and\ Folders/
total 19M
4.0K autorun.inf
 28K License.txt
   0 McAfee Removable Media Protection.app
636K mfecc32.dll
652K mfeccf32.dll
3.6M MfeEERM.exe
488K MfeFfAutomation.dll
2.1M MfeFfConsole.exe
576K MfeFfCore.exe
156K MfeFfCoreService.exe
992K MfeFfDesktopIntegration.dll
268K MfeFfDriverCom.dll
492K MfeFfLocalProvider.dll
884K MfeFfMaProvider.dll
324K MfeFfPolicyEnforcer.dll
272K MfeFfPostInstall.dll
728K MfeFfProviderManager.dll
176K MfeFfProxy.exe
956K MfeFfSelfExtractorStub.exe
200K MfeFfShell.com
204K MfeFfShell.exe
492K MfeFfTray.dll
184K MfeFfTrayPlugin.dll
1.2M MfeResource.dll
3.7M MfeRmdApp.exe
128K MfeVtpA.dll
--- snip ---

Since the WINEPREFIX is kinda broken due to non-working services, drivers etc.,
take the directory content "offline" and create a fresh prefix.

Just starting 'MfeEERM.exe' from the pure directory yields:

--- snip ---
...
002f:Call shlwapi.PathStripToRootW(008a7f20
L"Z:\\home\\focht\\Downloads\\Endpoint Encryption for Files and
Folders\\MfeEERM.exe") ret=0041e379
002f:Ret  shlwapi.PathStripToRootW() retval=00000001 ret=0041e379
...
002f:Call KERNEL32.CreateFileW(008a7cc0 L"Z:\\McAfee
EERM\\encrypted.dsk",80000000,00000001,00000000,00000003,00000000,00000000)
ret=0040ddbc
002f:Ret  KERNEL32.CreateFileW() retval=ffffffff ret=0040ddbc
--- snip --- 

That's the first hint: You need to start it from the removable drive letter
otherwise you always end up with "z:\\" as root which is not going to work!

--- snip ---
# 'f:' = mounted USB drive letter in Wine, optionally "cd" to it
$ wine f:\\MfeEERM.exe
--- snip ---

Since I don't have McAffe encrypted USB stick, I've assembled some minimal set
of files to make it happy:

--- snip ---
$ tree --charset=ANSI -L 2 $(winepath "f:")

/home/focht/.wine/dosdevices/f:/
|-- McAfee\ EERM
|   `-- encrypted.dsk
|-- mfecc32.dll
`-- MfeEERM.exe
--- snip ---

With that in place, an explorer-like GUI opens when 'MfeEERM.exe' is run which
shows some directory tree on left-hand side (treeview pane).
For me it just shows "Desktop" since I don't have a properly created
'encrypted.dsk' file (used some binary and renamed it).

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.



More information about the wine-bugs mailing list