Cannot install WinGPG (Sophos Network Threat Protection).

I suppose stopping the Sophos Network Threat Protection Service would allow the install to complete.  Looking at my computer, which is Sophos Central managed, using Process Explorer to look at the modules:

Name Description Company Name Path
BPAIF.dll Sophos System Protection Service Interface DLL Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\BPAIF.dll
HealthApi.dll Sophos Health API Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\HealthApi.dll
Heartbeat.dll Sophos Heartbeat Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\Heartbeat.dll
navl.dll Network Application Visibility Library Procera Networks C:\Program Files\Sophos\Sophos Network Threat Protection\navl.dll
SophosNtpService.exe Sophos Network Threat Protection Service Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpService.exe
SophosNtpService.exe Sophos Network Threat Protection Service Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpService.exe
SortDefault.nls C:\Windows\Globalization\Sorting\SortDefault.nls
advapi32.dll Advanced Windows 32 Base API Microsoft Corporation C:\Windows\System32\advapi32.dll
bcrypt.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\System32\bcrypt.dll
bcryptprimitives.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\System32\bcryptprimitives.dll
clbcatq.dll COM+ Configuration Catalog Microsoft Corporation C:\Windows\System32\clbcatq.dll
combase.dll Microsoft COM for Windows Microsoft Corporation C:\Windows\System32\combase.dll
crypt32.dll Crypto API32 Microsoft Corporation C:\Windows\System32\crypt32.dll
cryptbase.dll Base cryptographic API DLL Microsoft Corporation C:\Windows\System32\cryptbase.dll
cryptsp.dll Cryptographic Service Provider API Microsoft Corporation C:\Windows\System32\cryptsp.dll
dhcpcsvc.dll DHCP Client Service Microsoft Corporation C:\Windows\System32\dhcpcsvc.dll
dhcpcsvc6.dll DHCPv6 Client Microsoft Corporation C:\Windows\System32\dhcpcsvc6.dll
dnsapi.dll DNS Client API DLL Microsoft Corporation C:\Windows\System32\dnsapi.dll
KernelBase.dll.mui Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\System32\en-US\KernelBase.dll.mui
fltLib.dll Filter Library Microsoft Corporation C:\Windows\System32\fltLib.dll
FWPUCLNT.DLL FWP/IPsec User-Mode API Microsoft Corporation C:\Windows\System32\FWPUCLNT.DLL
gdi32.dll GDI Client DLL Microsoft Corporation C:\Windows\System32\gdi32.dll
gdi32full.dll GDI Client DLL Microsoft Corporation C:\Windows\System32\gdi32full.dll
hmpalert.dll HitmanPro.Alert 64-bit Support Library SurfRight B.V. C:\Windows\System32\hmpalert.dll
IPHLPAPI.DLL IP Helper API Microsoft Corporation C:\Windows\System32\IPHLPAPI.DLL
kernel.appcore.dll AppModel API Host Microsoft Corporation C:\Windows\System32\kernel.appcore.dll
kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\System32\kernel32.dll
KernelBase.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\System32\KernelBase.dll
locale.nls C:\Windows\System32\locale.nls
msvcp_win.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\System32\msvcp_win.dll
msvcr120.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\System32\msvcr120.dll
msvcrt.dll Windows NT CRT DLL Microsoft Corporation C:\Windows\System32\msvcrt.dll
msxml6.dll MSXML 6.0 Microsoft Corporation C:\Windows\System32\msxml6.dll
msxml6r.dll XML Resources Microsoft Corporation C:\Windows\System32\msxml6r.dll
nsi.dll NSI User-mode interface DLL Microsoft Corporation C:\Windows\System32\nsi.dll
ntdll.dll NT Layer DLL Microsoft Corporation C:\Windows\System32\ntdll.dll
ntmarta.dll Windows NT MARTA provider Microsoft Corporation C:\Windows\System32\ntmarta.dll
ole32.dll Microsoft OLE for Windows Microsoft Corporation C:\Windows\System32\ole32.dll
oleaut32.dll OLEAUT32.DLL Microsoft Corporation C:\Windows\System32\oleaut32.dll
powrprof.dll Power Profile Helper DLL Microsoft Corporation C:\Windows\System32\powrprof.dll
profapi.dll User Profile Basic API Microsoft Corporation C:\Windows\System32\profapi.dll
rpcrt4.dll Remote Procedure Call Runtime Microsoft Corporation C:\Windows\System32\rpcrt4.dll
rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation C:\Windows\System32\rsaenh.dll
sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation C:\Windows\System32\sechost.dll
SHCore.dll SHCORE Microsoft Corporation C:\Windows\System32\SHCore.dll
shell32.dll Windows Shell Common Dll Microsoft Corporation C:\Windows\System32\shell32.dll
shlwapi.dll Shell Light-weight Utility Library Microsoft Corporation C:\Windows\System32\shlwapi.dll
sxs.dll Fusion 2.5 Microsoft Corporation C:\Windows\System32\sxs.dll
ucrtbase.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\System32\ucrtbase.dll
umpdc.dll C:\Windows\System32\umpdc.dll
user32.dll Multi-User Windows USER API Client DLL Microsoft Corporation C:\Windows\System32\user32.dll
win32u.dll Win32u Microsoft Corporation C:\Windows\System32\win32u.dll
windows.storage.dll Microsoft WinRT Storage API Microsoft Corporation C:\Windows\System32\windows.storage.dll
wldp.dll Windows Lockdown Policy Microsoft Corporation C:\Windows\System32\wldp.dll

If I had to guess, I wonder if C:\Windows\System32\msvcr120.dll is trying to be upgraded by this installer?

For a one off install I would stop the Sophos Network Threat Protection service and try again. 

To fathom what is happening, I would leave the service running, run Process Monitor and reproduce the issue.  I suspect, the installer is "considering" a module loaded by the Sophos NTP service, most likely the VC runtime files.

Jak

I thought I would get the file:

WinGPG-1.0.1-setup.exe /LOG="l.txt"

Logs:

2020-06-24 15:05:19.150 Created temporary directory: C:\Users\emile\AppData\Local\Temp\is-D2A11.tmp
2020-06-24 15:05:31.840 RestartManager found an application using one of our files: Sophos Network Threat Protection
2020-06-24 15:05:31.840 Can use RestartManager to avoid reboot? Yes (0)

If you run /? it shows all the switches.

So:

WinGPG-1.0.1-setup.exe /NOCLOSEAPPLICATIONS

would skip that dialog for example.  I did run Process Monitor and it is almost certainly because of this file:

C:\Windows\System32\msvcp120.dll

as expected:

Regards,

Jak

Jak,

thank you for all your answers and proposals.

Indeed the problematic file was C:\Windows\System32\msvcr120.dll where Process Monitor shows "SHARING VIOLATION". I wonder why WinGPG installation tries to change that library. I beleive the library is part of Microsoft Visual C++ 2013 Redistributable, which had been previously installed by smart card software. Even if I could add an exception in Sophos Enterprise Console to allow a change to this DLL file, it probably wouldn't be a good idea. Maybe smart card reader would stop working. WinGPG should add another library to extend this library, but I know to little about it to judge.

The paremeter /LOG creates nice log, but in this case only shows what GUI already revealed:

2020-06-26 08:16:29.755   RestartManager found an application using one of our files: Sophos Network Threat Protection

What helped was to use installation parameters (I was so blond not to think of it). I installed WinGPG using:

WinGPG-1.0.1-setup.exe  /NORESTART /NOCLOSEAPPLICATIONS /NORESTARTAPPLICATIONS