Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 1631 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problems installing Sophos AV on SUMs

torpy

It was brough to my attention today that two servers in our environment didn't have Sophos installed which just so happen to be Sophos Update Mangers. When I tried to push from Enterprise Console it would fail immediately with 0000002e error. Then I tried installing it locally from itself through the Update Manager share and that would get a bit further up till the point where it tries to install the actually Anti Virus and it just hangs there. I checked the event logs and didn't see any errors... Any ideas?

:19069


This thread was automatically locked due to age.
Parents
  • 0

    Here is a snippet of the Anti-Virus install log since it is beyond what I can post in this message.

    MSI (s) (C0:CC) [17:14:18:912]: Doing action: RollbackClassFilter
    Action ended 17:14:18: RegisterBufferOverflowProtection. Return value 1.
    Action start 17:14:18: RollbackClassFilter.
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackClassFilter64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackClassFilter64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackClassFilterIA64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackClassFilterX64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: RollbackDriverFiles
    Action ended 17:14:18: RollbackClassFilter. Return value 1.
    Action start 17:14:18: RollbackDriverFiles.
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: RollbackBootDriver
    Action ended 17:14:18: RollbackDriverFiles. Return value 1.
    Action start 17:14:18: RollbackBootDriver.
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackDriverFiles64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackBootDriver64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: SetRollbackDriverFilesVistaProperty
    Action ended 17:14:18: RollbackBootDriver. Return value 1.
    MSI (s) (C0:CC) [17:14:18:912]: PROPERTY CHANGE: Adding RollbackDriverFilesVista property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'.
    Action start 17:14:18: SetRollbackDriverFilesVistaProperty.
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: SetRollbackBootDriverVistaProperty
    Action ended 17:14:18: SetRollbackDriverFilesVistaProperty. Return value 1.
    MSI (s) (C0:CC) [17:14:18:912]: PROPERTY CHANGE: Adding RollbackBootDriverVista property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'.
    Action start 17:14:18: SetRollbackBootDriverVistaProperty.
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: SetRollbackClassFilterVistaProperty
    Action ended 17:14:18: SetRollbackBootDriverVistaProperty. Return value 1.
    MSI (s) (C0:CC) [17:14:18:912]: PROPERTY CHANGE: Adding RollbackClassFilterVista property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\sdcfilter.inf'.
    Action start 17:14:18: SetRollbackClassFilterVistaProperty.
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackBootDriverVista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackDriverFilesVista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackClassFilterVista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackDriverFiles64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackBootDriver64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: InstallDriverFiles2K (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: InstallBootDriver2K (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: InstallDriverFilesXP
    Action ended 17:14:18: SetRollbackClassFilterVistaProperty. Return value 1.
    Action start 17:14:18: InstallDriverFilesXP.
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: InstallBootDriverXP
    Action ended 17:14:18: InstallDriverFilesXP. Return value 1.
    Action start 17:14:18: InstallBootDriverXP.
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: SetInstallDriverFilesVistaProperty
    Action ended 17:14:18: InstallBootDriverXP. Return value 1.
    MSI (s) (C0:CC) [17:14:18:912]: PROPERTY CHANGE: Adding InstallDriverFilesVista property. Its value is 'C:\Program Files\Sophos\AutoUpdate\cache\savxp\WinLH_i386\SAVONACCESSDRIV.INF'.
    Action start 17:14:18: SetInstallDriverFilesVistaProperty.
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: InstallDriverFilesVista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: SetInstallClassFilterVistaProperty
    Action ended 17:14:18: SetInstallDriverFilesVistaProperty. Return value 1.
    MSI (s) (C0:CC) [17:14:18:912]: PROPERTY CHANGE: Adding InstallClassFilterVista property. Its value is 'C:\Program Files\Sophos\AutoUpdate\cache\savxp\ClassFilterDrivers\i386\sdcfilter.inf'.
    Action start 17:14:18: SetInstallClassFilterVistaProperty.
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: InstallClassFilterVista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: SetInstallBootDriverVistaProperty
    Action ended 17:14:18: SetInstallClassFilterVistaProperty. Return value 1.
    MSI (s) (C0:CC) [17:14:18:927]: PROPERTY CHANGE: Adding InstallBootDriverVista property. Its value is 'C:\Program Files\Sophos\AutoUpdate\cache\savxp\WinLH_i386\SOPHOSBOOTDRIVER.INF'.
    Action start 17:14:18: SetInstallBootDriverVistaProperty.
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallBootDriverVista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallBootDriverAMD64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallDriverFilesAMD64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallDriverFilesIA64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallBootDriverIA64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallBootDriverAMD64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallDriverFilesAMD64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallDriverFilesIA64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallBootDriverIA64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Doing action: SetInstallUnsignedBootDriver
    Action ended 17:14:18: SetInstallBootDriverVistaProperty. Return value 1.
    MSI (s) (C0:CC) [17:14:18:927]: PROPERTY CHANGE: Adding InstallUnsignedBootDriver property. Its value is '"C:\Program Files\Sophos\AutoUpdate\cache\savxp\""XP"'.
    Action start 17:14:18: SetInstallUnsignedBootDriver.
    MSI (s) (C0:CC) [17:14:18:927]: Doing action: SetInstallUnsignedDrivers
    Action ended 17:14:18: SetInstallUnsignedBootDriver. Return value 1.
    MSI (s) (C0:CC) [17:14:18:927]: PROPERTY CHANGE: Adding InstallUnsignedDrivers property. Its value is '"C:\Program Files\Sophos\AutoUpdate\cache\savxp\""XP"'.
    Action start 17:14:18: SetInstallUnsignedDrivers.
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedBootDriver (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedDrivers (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedBootDriverAMD64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedDriversAMD64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedBootDriverIA64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedDriversIA64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedBootDriverAMD64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedBootDriverIA64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedDriversAMD64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedDriversIA64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Doing action: InstallClassFilter
    Action ended 17:14:18: SetInstallUnsignedDrivers. Return value 1.
    Action start 17:14:18: InstallClassFilter.
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallClassFilterIA64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallClassFilterIA64Vista (condition is false)

    Here is the AntiVirus Custom Actions log:

    2011-11-21 17:52:23 Starting competitor detection...
    2011-11-21 17:52:34 Boot driver: not installed.
    2011-11-21 17:52:39 Setting class filter present property to: 0
    2011-11-21 17:52:40 PROCESSOR_ARCHITECTURE environment variable is: x86
    2011-11-21 17:52:43 WaitForSAVService: Walking system processes...
    2011-11-21 17:52:43 WaitForSAVService: Finished walking system processes.
    2011-11-21 17:52:44 IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess control. Returning false.
    2011-11-21 17:52:44 IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess filter. Returning false.
    2011-11-21 17:52:57 CopyOtherFiles custom action - Copying other driver files
    2011-11-21 17:52:57 Copying class filter source: C:\Program Files\Sophos\AutoUpdate\cache\savxp\classfilterdrivers\i386\SDCFILTER.INF, target: C:\Program Files\Sophos\Sophos Anti-Virus\
    2011-11-21 17:52:57 GetRidOfExistingDetoured - C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll detoured exists, proceeding to rename it & mark for delete.
    2011-11-21 17:52:57 PROCESSOR_ARCHITECTURE environment variable is: x86
    2011-11-21 17:52:58 BopsUnregister: could not get short path to DLL. It will not be unregistered.
    2011-11-21 17:52:58 GetRidOfExistingDetoured - C:\Program Files\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.
    2011-11-21 17:52:58 BOPS path already exists
    2011-11-21 17:52:58 PROCESSOR_ARCHITECTURE environment variable is: x86

    :19075
Reply
  • 0

    Here is a snippet of the Anti-Virus install log since it is beyond what I can post in this message.

    MSI (s) (C0:CC) [17:14:18:912]: Doing action: RollbackClassFilter
    Action ended 17:14:18: RegisterBufferOverflowProtection. Return value 1.
    Action start 17:14:18: RollbackClassFilter.
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackClassFilter64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackClassFilter64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackClassFilterIA64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackClassFilterX64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: RollbackDriverFiles
    Action ended 17:14:18: RollbackClassFilter. Return value 1.
    Action start 17:14:18: RollbackDriverFiles.
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: RollbackBootDriver
    Action ended 17:14:18: RollbackDriverFiles. Return value 1.
    Action start 17:14:18: RollbackBootDriver.
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackDriverFiles64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackBootDriver64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: SetRollbackDriverFilesVistaProperty
    Action ended 17:14:18: RollbackBootDriver. Return value 1.
    MSI (s) (C0:CC) [17:14:18:912]: PROPERTY CHANGE: Adding RollbackDriverFilesVista property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'.
    Action start 17:14:18: SetRollbackDriverFilesVistaProperty.
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: SetRollbackBootDriverVistaProperty
    Action ended 17:14:18: SetRollbackDriverFilesVistaProperty. Return value 1.
    MSI (s) (C0:CC) [17:14:18:912]: PROPERTY CHANGE: Adding RollbackBootDriverVista property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'.
    Action start 17:14:18: SetRollbackBootDriverVistaProperty.
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: SetRollbackClassFilterVistaProperty
    Action ended 17:14:18: SetRollbackBootDriverVistaProperty. Return value 1.
    MSI (s) (C0:CC) [17:14:18:912]: PROPERTY CHANGE: Adding RollbackClassFilterVista property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\sdcfilter.inf'.
    Action start 17:14:18: SetRollbackClassFilterVistaProperty.
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackBootDriverVista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackDriverFilesVista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackClassFilterVista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackDriverFiles64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: RollbackBootDriver64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: InstallDriverFiles2K (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: InstallBootDriver2K (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: InstallDriverFilesXP
    Action ended 17:14:18: SetRollbackClassFilterVistaProperty. Return value 1.
    Action start 17:14:18: InstallDriverFilesXP.
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: InstallBootDriverXP
    Action ended 17:14:18: InstallDriverFilesXP. Return value 1.
    Action start 17:14:18: InstallBootDriverXP.
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: SetInstallDriverFilesVistaProperty
    Action ended 17:14:18: InstallBootDriverXP. Return value 1.
    MSI (s) (C0:CC) [17:14:18:912]: PROPERTY CHANGE: Adding InstallDriverFilesVista property. Its value is 'C:\Program Files\Sophos\AutoUpdate\cache\savxp\WinLH_i386\SAVONACCESSDRIV.INF'.
    Action start 17:14:18: SetInstallDriverFilesVistaProperty.
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: InstallDriverFilesVista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: SetInstallClassFilterVistaProperty
    Action ended 17:14:18: SetInstallDriverFilesVistaProperty. Return value 1.
    MSI (s) (C0:CC) [17:14:18:912]: PROPERTY CHANGE: Adding InstallClassFilterVista property. Its value is 'C:\Program Files\Sophos\AutoUpdate\cache\savxp\ClassFilterDrivers\i386\sdcfilter.inf'.
    Action start 17:14:18: SetInstallClassFilterVistaProperty.
    MSI (s) (C0:CC) [17:14:18:912]: Skipping action: InstallClassFilterVista (condition is false)
    MSI (s) (C0:CC) [17:14:18:912]: Doing action: SetInstallBootDriverVistaProperty
    Action ended 17:14:18: SetInstallClassFilterVistaProperty. Return value 1.
    MSI (s) (C0:CC) [17:14:18:927]: PROPERTY CHANGE: Adding InstallBootDriverVista property. Its value is 'C:\Program Files\Sophos\AutoUpdate\cache\savxp\WinLH_i386\SOPHOSBOOTDRIVER.INF'.
    Action start 17:14:18: SetInstallBootDriverVistaProperty.
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallBootDriverVista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallBootDriverAMD64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallDriverFilesAMD64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallDriverFilesIA64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallBootDriverIA64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallBootDriverAMD64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallDriverFilesAMD64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallDriverFilesIA64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallBootDriverIA64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Doing action: SetInstallUnsignedBootDriver
    Action ended 17:14:18: SetInstallBootDriverVistaProperty. Return value 1.
    MSI (s) (C0:CC) [17:14:18:927]: PROPERTY CHANGE: Adding InstallUnsignedBootDriver property. Its value is '"C:\Program Files\Sophos\AutoUpdate\cache\savxp\""XP"'.
    Action start 17:14:18: SetInstallUnsignedBootDriver.
    MSI (s) (C0:CC) [17:14:18:927]: Doing action: SetInstallUnsignedDrivers
    Action ended 17:14:18: SetInstallUnsignedBootDriver. Return value 1.
    MSI (s) (C0:CC) [17:14:18:927]: PROPERTY CHANGE: Adding InstallUnsignedDrivers property. Its value is '"C:\Program Files\Sophos\AutoUpdate\cache\savxp\""XP"'.
    Action start 17:14:18: SetInstallUnsignedDrivers.
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedBootDriver (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedDrivers (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedBootDriverAMD64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedDriversAMD64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedBootDriverIA64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedDriversIA64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedBootDriverAMD64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedBootDriverIA64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedDriversAMD64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallUnsignedDriversIA64Vista (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Doing action: InstallClassFilter
    Action ended 17:14:18: SetInstallUnsignedDrivers. Return value 1.
    Action start 17:14:18: InstallClassFilter.
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallClassFilterIA64 (condition is false)
    MSI (s) (C0:CC) [17:14:18:927]: Skipping action: InstallClassFilterIA64Vista (condition is false)

    Here is the AntiVirus Custom Actions log:

    2011-11-21 17:52:23 Starting competitor detection...
    2011-11-21 17:52:34 Boot driver: not installed.
    2011-11-21 17:52:39 Setting class filter present property to: 0
    2011-11-21 17:52:40 PROCESSOR_ARCHITECTURE environment variable is: x86
    2011-11-21 17:52:43 WaitForSAVService: Walking system processes...
    2011-11-21 17:52:43 WaitForSAVService: Finished walking system processes.
    2011-11-21 17:52:44 IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess control. Returning false.
    2011-11-21 17:52:44 IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess filter. Returning false.
    2011-11-21 17:52:57 CopyOtherFiles custom action - Copying other driver files
    2011-11-21 17:52:57 Copying class filter source: C:\Program Files\Sophos\AutoUpdate\cache\savxp\classfilterdrivers\i386\SDCFILTER.INF, target: C:\Program Files\Sophos\Sophos Anti-Virus\
    2011-11-21 17:52:57 GetRidOfExistingDetoured - C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll detoured exists, proceeding to rename it & mark for delete.
    2011-11-21 17:52:57 PROCESSOR_ARCHITECTURE environment variable is: x86
    2011-11-21 17:52:58 BopsUnregister: could not get short path to DLL. It will not be unregistered.
    2011-11-21 17:52:58 GetRidOfExistingDetoured - C:\Program Files\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.
    2011-11-21 17:52:58 BOPS path already exists
    2011-11-21 17:52:58 PROCESSOR_ARCHITECTURE environment variable is: x86

    :19075
Children
No Data