Kaseya Community

remote control

  • i have been having problems with different end customers and not being able to remote control there machines, this is not every agent on every site just what appears to be random agents on different sites, all are using xp and cant be remote controlled using radmin or vnc, there are lots of errors in the registry as seen in the agent log, can anyone advise ?? see below ERROR: execFile() will not run C:WINDOWSsystem32r_server.exe because it is not a valid executable. 09:53:39 10-Aug-06 ERROR: Could not open C:WINDOWSsystem32r_server.exe in doWriteFile() task 09:53:37 10-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRemote Administrator v2.2. 09:53:37 10-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRemote Administrator v2.0. 09:53:37 10-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRemote Administrator v2.1. 09:53:37 10-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRemote Administrator v2.2. 09:45:45 10-Aug-06 Keep alives = 3 23:40:46 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESystemCurrentControlSetServicesWinVNC4. 23:40:30 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWARERealVNCWinVNC4Password. 23:40:29 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWARERealVNCWinVNC4LocalHost. 23:40:03 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRealVNC_is1Version412k1. 23:39:58 9-Aug-06 ERROR: deleteRegistryValue() failed to delete registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallWinVNC. 23:39:57 9-Aug-06 ERROR: deleteRegistryValue() failed to delete registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp PathsWinVNC.Exe. 23:39:57 9-Aug-06 ERROR: deleteRegistryValue() failed to delete registry value HKEY_LOCAL_MACHINESOFTWAREORL. 23:39:57 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp PathsWinVNC.ExePath. 23:39:57 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRealVNC_is1Inno Setup: App Path. 23:39:56 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRealVNC_is1Version412k1. 19:35:18 9-Aug-06 Keep alives = 6 17:05:21 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESystemCurrentControlSetServicesWinVNC4. 17:05:05 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWARERealVNCWinVNC4Password. 17:05:05 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWARERealVNCWinVNC4LocalHost. 17:04:45 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRealVNC_is1Version412k1. 17:04:39 9-Aug-06 ERROR: deleteRegistryValue() failed to delete registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallWinVNC. 17:04:39 9-Aug-06 ERROR: deleteRegistryValue() failed to delete registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp PathsWinVNC.Exe. 17:04:39 9-Aug-06 ERROR: deleteRegistryValue() failed to delete registry value HKEY_LOCAL_MACHINESOFTWAREORL. 17:04:39 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp PathsWinVNC.ExePath. 17:04:38 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRealVNC_is1Inno Setup: App Path. 17:04:38 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallRealVNC_is1Version412k1. 16:58:09 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESystemCurrentControlSetServicesWinVNC4. 16:51:00 9-Aug-06 ERROR: getRegistryValue() failed to query registry value HKEY_LOCAL_MACHINESOFTWARERealVNCWinVNC4Password.

    Legacy Forum Name: remote control,
    Legacy Posted By Username: graham lyle



    [edited by: Anonymous at 10:39 PM (GMT -8) on 3-9-2011] Maybe the agents weren't installed as Administrator, or agent may have invalid credentials, if someone changed the password for the account the agent uses to login. I've had this happen to me before. Something to consider.
  • HI Graham,

    My guess is something is protecting the registry from being changed such as Anti-Virus or Anti-spyware. Have a look in the application list on the machines and see if they have something installed. Then you can build a script to update the exclusion list on whatever software you are encountering.


    Legacy Forum Name: Agents,
    Legacy Posted By Username: raybarber
  • Thanks Ray

    It turns out it was Kaspersky Anti - Hacker that was blocking Kaseya as a potential threat, the strange thing is Kaspersky firewall and anti virus had not flagged it as an issue,

    The solution is to add Kaseya to the trusted list in Kaspersky anti hacker.




    Legacy Forum Name: Agents,
    Legacy Posted By Username: graham lyle