Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 4748 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos AntiVirus won't install

jimartin

 Hello All,

 I'm experiencing a little problem whit installation of SAV.

 When I start the instaltion in few seconds it's rolled back.

 I checked the log and realized that the instalation is stopping on custom action:

 RegisterBufferOverflowProtection.

Could you please advice.

Thanks in advance,

Martin

:6487


This thread was automatically locked due to age.
  • 0

    Just to add info:

    OS: Windows 2003 Server Enterprise Editon SP2 x32bit

    SAV ver: 7.x

    The SAV was installed before. After Sophos EC Remediation to another server

    I had to reinstall SAV and the issue has occured.

    Try cleaning everything manualy. I had read at KB but still no positive result.

    :6489
  • 0

    Hi,

    I assume it's trying to add to the key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs

    The path to: "C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll" as the 8:3 format path:

    "C:\PROGRA~1\Sophos\SOPHOS~1\SOPHOS~1.DLL"

    If you run the install again whilst running Process Monitor:

    http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx

    Do you get access denied or some such problem?

    Also when the install runs, it creates the msi log, eg: "Sophos Anti-Virus Install Log_101124_065518.txt".  It also creates a corresponding custom action log in the same directory: "Sophos Anti-Virus CustomActions Log_101124_065518.txt". At the points this CA runs, does that log give any more information?

    Also, is this a standalone install or managed?  As a standalone install the SAV msi is being run as the logged on user, as a managed install (running setup.exe from the CID) SAV is installed as SYSTEM, so if there are any permission problems, they are probably less likely to be see in a manged install.

    Thanks,

    Jak

    :6491
Unfiltered HTML