About Ivanti Patch and Compliance Manager and Ivanti Antivirus return codes

Version 21

    Verified Product Versions

    Endpoint Manager 9.6Endpoint Manager 2016.xEndpoint Manager 2017.x

    Description


    What do the codes returned at the bottom of a Security and compliance scan log (vulscan.log) or in the Scheduled Task results mean?

     

    Resolution

     

    You can translate the error codes by finding out where the code originates from.  The rightmost 16 bits of the error value (the low word) contains the error code; the leftmost 16 bits (the high word) are commonly used to indicate the component generating the error.

     

    We will use "Exiting with return code 0x8db301b0" as an example.  In this case, 0x8db3 indicates Vulscan as the source, and 301b0 translates to "432".

     

    0xdb3 or 0x8db3 denote an Ivanti Patch and Compliance Manager facility code.  These can relate to any of the tasks that Vulscan performs, and also relate to results from Ivanti Antivirus or Ivanti Endpoint Security.

     

    0xdb0 and 0x8db0 are Ivanti Antivirus return codes

     

    Codes that start with a different 4-5 digit prefix are going to be from another area of the product, another product, or will be direct Windows error codes.  Codes starting with "C0000..." are typically Microsoft.

     

    0xdb3xxxx = Informational or Status

    0x8db3xxxx = Error occurred

    0xdb0xxxx = Antivirus informational or status

    0x8db0xxxx = Antivirus Error

                     

     

    To reach the decimal numeric return code to compare to the table below you can use the Windows Calculator in "Programmer" mode by doing the following steps:

    1. Open Calc.exe
    2. Go to View - Programmer (or just hit Alt-3 to go to programmer mode).
    3. On the left side click the Hex radio button and enter in the right hand "low bit" value (the hex entry after 0xdb3 or 0x8db3, ignoring the leading zero, so you will have 3 digits, in this example "1b0") then click the radio button on Dec to switch to Decimal.  This will give the 4xx or 5xx resulting error code.

     

    An alternative is to use an Online Hex to Decimal Converter.

     

    Community Articles with details and troubleshooting steps regarding these possible error codes will continue to be created.

     

    MessageErrorDecHex
    PATCH_VULSCAN_MUST_SELF_UPDATEThe scan attempt triggered a self-update.  Please scan again.11876
    PATCH_SPYWARE_INIT_FAILEDAgent failed to self-update.  See log for details.
    PATCH_CLIENT_ALREADY_RUNNINGFailed: Another instance of the agent is running401191
    PATCH_SCAN_ONLY_COMPLETEScan complete402192
    PATCH_SCAN_AND_REPAIR_COMPLETEScan (with autofix) complete403193
    PATCH_CANT_GET_VUL_DATAUnable to get vulnerability definitions from core404194
    PATCH_NO_PATCHES_AVAILABLENo patches available405195
    PATCH_CANT_RESOLVE_DEVICEIDNode's reported device ID is not in the database406196
    PATCH_NOTHING_TO_REMOVENo uninstall instructions.  Patch is not installed407197
    PATCH_CANT_GET_REMOVE_INFOUnable to obtain patch uninstall information408198
    PATCH_FAILED_DOWNLOADAgent failed to download patch409199
    PATCH_COMMANDS_FAILEDError running patch (or running commands)41019A
    PATCH_REMOVE_SUCCEEDEDPatch uninstall succeeded41119B
    PATCH_ALL_PATCHES_FAILEDAll patches failed41219C
    PATCH_SOME_PATCHES_FAILEDOne or more patches failed41319D
    PATCH_ALL_PATCHES_INSTALLEDAll patches installed successfully41419E
    PATCH_REMOVE_VULSCAN_SUCCEEDEDAgent successfully removed41519F
    PATCH_REMOVE_VULSCAN_FAILEDAgent removal failed to clear data at core4161A0
    PATCH_INSTALL_VULSCAN_SUCCEEDEDAgent successfully installed4171A1
    PATCH_FAILED_TO_ELEV_RIGHTSAgent failed insufficient rights4181A2
    PATCH_INVALID_COMMANDLINEAgent failed, invalid commandline4191A3
    PATCH_CLEAR_SCAN_SUCCESSFULClear scan status succeeded4201A4
    PATCH_RESET_SUCCESSFULReset succeeded4211A5
    PATCH_RESET_FAILEDReset vulnerability cache failed4221A6
    PATCH_REBOOT_SUCCEEDEDReboot Succeeded4231A7
    PATCH_USER_CANCELLEDAgent canceled by user4241A8
    PATCH_SCRIPT_INIT_FAILUREAgent failed to initializing scripting engine4251A9
    PATCH_FAILED_REGISTER_MSXML3Agent failed to verify MSXML3.DLL is functioning properly4261AA
    PATCH_USER_CANCELLED_ACTIONThe end user canceled the Patch Management operation4271AB
    PATCH_USER_DEFERRED_ACTIONThe end user deferred the Patch Management operation4281AC
    PATCH_ALL_STAGING_FAILEDAll patch downloads failed4291AD
    PATCH_SOME_STAGING_FAILEDOne or more patch downloads failed4301AE
    PATCH_ALL_PATCHES_STAGEDAll patches downloaded successfully4311AF
    PATCH_CANT_GET_AGENT_BEHAVIORUnable to get or apply agent settings4321B0
    PATCH_SEND_RESULTS_FAILEDServer busy, unable to complete request4331B1
    PATCH_SPYWARE_INIT_FAILEDAgent failed to self-update.  See log for details.4341B2
    PATCH_USER_CANCELLED_REBOOTThe end user canceled the reboot operation4351B3
    PATCH_USER_DEFERRED_REBOOTThe end user deferred the reboot operation4361B4
    PATCH_NOT_REBOOTED_YETCannot complete the requested action. The device must be rebooted first4371B5
    PATCH_UNKNOWN_PLATFORMUnrecognized platform.  Please update your scanning agent4381B6
    PATCH_UPDATE_SUCCEEDEDUpdate succeeded4391B7
    PATCH_UPDATE_FAILEDUpdate failed4401B8
    PATCH_CHANGESETTINGS_SUCCEEDEDChange settings succeeded4411B9
    PATCH_CANT_GET_AV_BEHAVIORUnable to get antivirus settings from core4421BA
    PATCH_CANT_GET_CV_BEHAVIORUnable to get custom variable overrides from core4431BB
    PATCH_RUN_INVALID_ARGSArguments for run request were malformed4441BC
    PATCH_RUN_COMPLETEDRun request completed successfully4451BD
    PATCH_RUN_FAILEDRun request failed4461BE
    PATCH_INSTALL_LDAV_SUCCEEDEDInstalled Ivanti Antivirus4471BF
    PATCH_INSTALL_LDAV_FAILEDFailed to install Ivanti Antivirus4481C0
    PATCH_REMOVE_OLD_AV_SUCCEEDEDRemoved existing antivirus solution4491C1
    PATCH_REMOVE_OLD_AV_FAILEDFailed to remove existing antivirus solution4501C2
    PATCH_CANT_GET_COMPLIANCE_BEHAVIORUnable to get compliance settings from core4511C3
    PATCH_AGENT_NOT_MINIMUM_VERIvanti agent is not up to date4521C4
    PATCH_REMOVE_LDAV_SUCCEEDEDRemoved Ivanti Antivirus4531C5
    PATCH_REMOVE_LDAV_FAILEDFailed to remove Ivanti Antivirus4541C6
    PATCH_INSTALL_HIPS_SUCCEEDEDInstalled Endpoint Security4551C7
    PATCH_INSTALL_HIPS_FAILEDFailed to install Endpoint Security4561C8
    PATCH_REMOVE_HIPS_SUCCEEDEDRemoved Endpoint Security4571C9
    PATCH_REMOVE_HIPS_FAILEDFailed to remove Endpoint Security4581CA
    PATCH_CANT_GET_HIPS_BEHAVIORUnable to get HIPS configuration from core4591CB
    PATCH_INCOMPATIBLE_AVFailed: Incompatible antivirus product found5001F4
    PATCH_AV_XPSP2_NOT_FOUNDFailed to install Ivanti Antivirus.  XPSP2 must first be installed4611CD
    PATCH_AV_INSTALL_FAILEDFailed to install Ivanti Antivirus.  See log for details4621CE
    PATCH_CANT_APPLY_FIREWALL_BEHAVIORFailed to apply firewall settings4631CF
    PATCH_WAITING_FOR_USER_REBOOTTask requires a reboot.  Waiting for user response4641D0
    PATCH_DEFERREDRepair action was deferred4651D1
    PATCH_FAILED_TO_DEFERFailed to schedule deferred repair4661D2
    PATCH_NOT_ALL_PATCHES_SCANNEDOne or more definitions in repair request have not yet been scanned4671D3
    PATCH_CANNOT_LOGON_USERAttempt to logon as specified user failed4681D4
    PATCH_CANT_GET_DCM_BEHAVIORUnable to get Device control settings from core4691D5
    PATCH_CANT_GET_CCM_BEHAVIOR(Deprecated - Not Used)4701D6
    PATCH_CANT_GET_LDF_BEHAVIORUnable to get Ivanti Firewall settings from core4711D7
    PATCH_AV_W2K3SP2_NOT_FOUNDFailed to install Ivanti Antivirus.  Windows 2003 Server with SP2 must first be installed.4721D8
    PATCH_INSTALL_LDAV_PENDINGInstall Ivanti Antivirus pending4731D9
    PATCH_INSTALL_UDINSTALLER_FAILEDInstall Ivanti Antivirus driver failed4741DA
    PATCH_REBOOT_COMMANDReboot request acknowledged4751DB
    PATCH_CANT_GET_REPLICATION_BEHAVIORUnable to get content replication settings from core4761DC
    PATCH_WAITING_FOR_REBOOTClient reboot required for task completion4771DD
    PATCH_AV_PLATFORM_NOT_SUPPORTEDPlatform not supported by Ivanti Antivirus install4781DE
    PATCH_AV_CANT_LAUNCH_SETUP(Note Used anymore - Removed)4791DF
    PATCH_AV_CANT_REMOVE_LEGACYAVUnable to uninstall legacy Ivanti Antivirus4801E0
    PATCH_AV_CANT_LAUNCH_UNINSTALLUnable to launch Ivanti Antivirus install4811E1
    PATCH_AV_SETUP_DOES_NOT_EXISTUnable to find Ivanti Antivirus setup files4821E2
    PATCH_AV_CANT_CREATE_SETUPINIUnable to create setup.ini4831E3
    PATCH_AV_KAVSETUP_FAILEDIvanti Antivirus MSI failed4841E4
    PATCH_AV_KAVSETUP_ALREADY_INSTALLEDIvanti Antivirus already installed4851E5
    PATCH_KAV_ALREADY_INSTALLED_REBOOT_PENDINGIvanti Antivirus already installed, requires a reboot to start the service4861E6
    PATCH_AV_CANT_REMOVE_OLD_KAVUnable to uninstall the previous version of Ivanti Antivirus4871E7
    PATCH_AV_INSTALL_TASK_PENDINGInstalling Ivanti Antivirus4881E8
    PATCH_FAILED_WRITE_FILTERFailed: Embedded OS write filter is active4891E9
    PATCH_PREREPAIR_FAILEDFailed: Pre-install/uninstall script returned failure4901EA
    PATCH_NOT_MAINT_WINDOWSome/all actions have been deferred until the next maintenance window4911EB
    PATCH_APPLY_TRUSTED_FILES_FAILEDFailed to apply some or all trusted file information4921EC
    PATCH_BAD_OR_MISSING_POLICY_FILEFailed to find a policy file or a policy file is invalid4931ED
    PATCH_FILE_INVALID_HASHDownloaded file doesn't match specified hash4941EE
    PATCH_FAILED_APPLY_MAC_POWERFailed to change power settings4951EF
    PATCH_REBOOT_NOT_NEEDEDReboot was not needed or not allowed4961F0
    PATCH_CANT_REMOVE_AGENT_BEHAVIORUnable to remove agent settings4971F1
    PATCH_AV_CANT_INITIALIZE_KESIvanti Antivirus service failed to initialize.4981F2
    PATCH_REBOOT_NOT_ALLOWEDReboot not allowed4991F3
    PATCH_INCOMPATIBLE_AVFailed: Incompatible antivirus product found5001F4
    PATCH_REBOOT_IGNORED_WSCFG32Reboot ignored. WSCFG32 is running.5021F6
    PATCH_FAILED_WRITE_FILTERFailed: Embedded OS write filter is active4891E9
    PATCH_PREREPAIR_FAILEDFailed: Pre-install/uninstall script returned failure4901EA
    PATCH_NOT_MAINT_WINDOWSome/all actions have been deferred until the next maintenance window4911EB
    PATCH_APPLY_TRUSTED_FILES_FAILEDFailed to apply some or all trusted file information4921EC
    PATCH_BAD_OR_MISSING_POLICY_FILEFailed to find a policy file or a policy file is invalid4931ED
    PATCH_FILE_INVALID_HASHDownloaded file doesn't match specified hash4941EE
    PATCH_FAILED_APPLY_MAC_POWERFailed to change power settings4951EF
    PATCH_REBOOT_NOT_NEEDEDReboot was not needed or not allowed4961F0
    PATCH_CANT_REMOVE_AGENT_BEHAVIORUnable to remove agent settings4971F1
    PATCH_AV_CANT_INITIALIZE_KESIvanti Antivirus service failed to initialize.4981F2
    PATCH_REBOOT_NOT_ALLOWEDReboot not allowed4991F3
    PATCH_INCOMPATIBLE_AVFailed: Incompatible antivirus product found5001F4
    PATCH_REBOOT_IGNORED_WSCFG32Reboot ignored.  WSCFG32 is running.5021F6
    PATCH_CONFIG_SUCCEEDED#N/A5031F7
    PATCH_BAD_OR MISSING_CONFIG_FILE#N/A5041F8
    PATCH_FAILED_TO_SETUP_PREFS#N/A5051F9
    PATCH_AV_KES_NOT_INSTALLEDKaspersky Endpoint Security not installed5061FA
    PATCH_AV_KES_SERVICE_NOT RUNNING(Not Used - Removed)5071FB
    PATCH_AV_LDAV_SERVICE_NOT_RUNNINGIvanti Antivirus service not running5081FC
    PATCH_AV_KES_LICENSE_NOT_ACTIVATEDIvanti Antivirus license not activated5091FD
    PATCH_AV_PATTERN_FILES_OUT_OF_DATEIvanti Antivirus pattern files out-of-date5101FE
    PATCH_AV_SETTINGS_NOT_APPLIEDIvanti Antivirus settings not applied5111FF
    PATCH_AV_SETTING_APPLIEDIvanti Antivirus settings applied512200
    PATCH_CANT_APPLY_DLLCan't load 'additional behavior' applier dll513201