Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Subscribers 3 subscribers
  • Views 2418 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cannot install WinGPG (Sophos Network Threat Protection).

Lado

I would like to install WinGPG 1.0.1 on Windows 10 64-bit (1909), but installation fails with message:

The following applications are using files that need to be updated by Setup. It is recommended that you allow Setup to autromatically close these applications. After the installation has completed, Setup will attempt to restart the applications.

Sophos Network Threat Protection

On client there is Sophos Endpoint Security and Control version 10.8 installed. On server there is Sophos Enterprise Console 5.5.2 installed.

How can I add exclusion to Allow the installation of WinGPG?



This thread was automatically locked due to age.
Parents
  • 0

    I suppose stopping the Sophos Network Threat Protection Service would allow the install to complete.  Looking at my computer, which is Sophos Central managed, using Process Explorer to look at the modules:


    Name Description Company Name Path
    BPAIF.dll Sophos System Protection Service Interface DLL Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\BPAIF.dll
    HealthApi.dll Sophos Health API Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\HealthApi.dll
    Heartbeat.dll Sophos Heartbeat Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\Heartbeat.dll
    navl.dll Network Application Visibility Library Procera Networks C:\Program Files\Sophos\Sophos Network Threat Protection\navl.dll
    SophosNtpService.exe Sophos Network Threat Protection Service Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpService.exe
    SophosNtpService.exe Sophos Network Threat Protection Service Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpService.exe
    SortDefault.nls C:\Windows\Globalization\Sorting\SortDefault.nls
    advapi32.dll Advanced Windows 32 Base API Microsoft Corporation C:\Windows\System32\advapi32.dll
    bcrypt.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\System32\bcrypt.dll
    bcryptprimitives.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\System32\bcryptprimitives.dll
    clbcatq.dll COM+ Configuration Catalog Microsoft Corporation C:\Windows\System32\clbcatq.dll
    combase.dll Microsoft COM for Windows Microsoft Corporation C:\Windows\System32\combase.dll
    crypt32.dll Crypto API32 Microsoft Corporation C:\Windows\System32\crypt32.dll
    cryptbase.dll Base cryptographic API DLL Microsoft Corporation C:\Windows\System32\cryptbase.dll
    cryptsp.dll Cryptographic Service Provider API Microsoft Corporation C:\Windows\System32\cryptsp.dll
    dhcpcsvc.dll DHCP Client Service Microsoft Corporation C:\Windows\System32\dhcpcsvc.dll
    dhcpcsvc6.dll DHCPv6 Client Microsoft Corporation C:\Windows\System32\dhcpcsvc6.dll
    dnsapi.dll DNS Client API DLL Microsoft Corporation C:\Windows\System32\dnsapi.dll
    KernelBase.dll.mui Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\System32\en-US\KernelBase.dll.mui
    fltLib.dll Filter Library Microsoft Corporation C:\Windows\System32\fltLib.dll
    FWPUCLNT.DLL FWP/IPsec User-Mode API Microsoft Corporation C:\Windows\System32\FWPUCLNT.DLL
    gdi32.dll GDI Client DLL Microsoft Corporation C:\Windows\System32\gdi32.dll
    gdi32full.dll GDI Client DLL Microsoft Corporation C:\Windows\System32\gdi32full.dll
    hmpalert.dll HitmanPro.Alert 64-bit Support Library SurfRight B.V. C:\Windows\System32\hmpalert.dll
    IPHLPAPI.DLL IP Helper API Microsoft Corporation C:\Windows\System32\IPHLPAPI.DLL
    kernel.appcore.dll AppModel API Host Microsoft Corporation C:\Windows\System32\kernel.appcore.dll
    kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\System32\kernel32.dll
    KernelBase.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\System32\KernelBase.dll
    locale.nls C:\Windows\System32\locale.nls
    msvcp_win.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\System32\msvcp_win.dll
    msvcr120.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\System32\msvcr120.dll
    msvcrt.dll Windows NT CRT DLL Microsoft Corporation C:\Windows\System32\msvcrt.dll
    msxml6.dll MSXML 6.0 Microsoft Corporation C:\Windows\System32\msxml6.dll
    msxml6r.dll XML Resources Microsoft Corporation C:\Windows\System32\msxml6r.dll
    nsi.dll NSI User-mode interface DLL Microsoft Corporation C:\Windows\System32\nsi.dll
    ntdll.dll NT Layer DLL Microsoft Corporation C:\Windows\System32\ntdll.dll
    ntmarta.dll Windows NT MARTA provider Microsoft Corporation C:\Windows\System32\ntmarta.dll
    ole32.dll Microsoft OLE for Windows Microsoft Corporation C:\Windows\System32\ole32.dll
    oleaut32.dll OLEAUT32.DLL Microsoft Corporation C:\Windows\System32\oleaut32.dll
    powrprof.dll Power Profile Helper DLL Microsoft Corporation C:\Windows\System32\powrprof.dll
    profapi.dll User Profile Basic API Microsoft Corporation C:\Windows\System32\profapi.dll
    rpcrt4.dll Remote Procedure Call Runtime Microsoft Corporation C:\Windows\System32\rpcrt4.dll
    rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation C:\Windows\System32\rsaenh.dll
    sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation C:\Windows\System32\sechost.dll
    SHCore.dll SHCORE Microsoft Corporation C:\Windows\System32\SHCore.dll
    shell32.dll Windows Shell Common Dll Microsoft Corporation C:\Windows\System32\shell32.dll
    shlwapi.dll Shell Light-weight Utility Library Microsoft Corporation C:\Windows\System32\shlwapi.dll
    sxs.dll Fusion 2.5 Microsoft Corporation C:\Windows\System32\sxs.dll
    ucrtbase.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\System32\ucrtbase.dll
    umpdc.dll C:\Windows\System32\umpdc.dll
    user32.dll Multi-User Windows USER API Client DLL Microsoft Corporation C:\Windows\System32\user32.dll
    win32u.dll Win32u Microsoft Corporation C:\Windows\System32\win32u.dll
    windows.storage.dll Microsoft WinRT Storage API Microsoft Corporation C:\Windows\System32\windows.storage.dll
    wldp.dll Windows Lockdown Policy Microsoft Corporation C:\Windows\System32\wldp.dll

    If I had to guess, I wonder if C:\Windows\System32\msvcr120.dll is trying to be upgraded by this installer?

    For a one off install I would stop the Sophos Network Threat Protection service and try again. 

    To fathom what is happening, I would leave the service running, run Process Monitor and reproduce the issue.  I suspect, the installer is "considering" a module loaded by the Sophos NTP service, most likely the VC runtime files.

    Jak

Reply
  • 0

    I suppose stopping the Sophos Network Threat Protection Service would allow the install to complete.  Looking at my computer, which is Sophos Central managed, using Process Explorer to look at the modules:


    Name Description Company Name Path
    BPAIF.dll Sophos System Protection Service Interface DLL Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\BPAIF.dll
    HealthApi.dll Sophos Health API Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\HealthApi.dll
    Heartbeat.dll Sophos Heartbeat Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\Heartbeat.dll
    navl.dll Network Application Visibility Library Procera Networks C:\Program Files\Sophos\Sophos Network Threat Protection\navl.dll
    SophosNtpService.exe Sophos Network Threat Protection Service Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpService.exe
    SophosNtpService.exe Sophos Network Threat Protection Service Sophos Limited C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNtpService.exe
    SortDefault.nls C:\Windows\Globalization\Sorting\SortDefault.nls
    advapi32.dll Advanced Windows 32 Base API Microsoft Corporation C:\Windows\System32\advapi32.dll
    bcrypt.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\System32\bcrypt.dll
    bcryptprimitives.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\System32\bcryptprimitives.dll
    clbcatq.dll COM+ Configuration Catalog Microsoft Corporation C:\Windows\System32\clbcatq.dll
    combase.dll Microsoft COM for Windows Microsoft Corporation C:\Windows\System32\combase.dll
    crypt32.dll Crypto API32 Microsoft Corporation C:\Windows\System32\crypt32.dll
    cryptbase.dll Base cryptographic API DLL Microsoft Corporation C:\Windows\System32\cryptbase.dll
    cryptsp.dll Cryptographic Service Provider API Microsoft Corporation C:\Windows\System32\cryptsp.dll
    dhcpcsvc.dll DHCP Client Service Microsoft Corporation C:\Windows\System32\dhcpcsvc.dll
    dhcpcsvc6.dll DHCPv6 Client Microsoft Corporation C:\Windows\System32\dhcpcsvc6.dll
    dnsapi.dll DNS Client API DLL Microsoft Corporation C:\Windows\System32\dnsapi.dll
    KernelBase.dll.mui Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\System32\en-US\KernelBase.dll.mui
    fltLib.dll Filter Library Microsoft Corporation C:\Windows\System32\fltLib.dll
    FWPUCLNT.DLL FWP/IPsec User-Mode API Microsoft Corporation C:\Windows\System32\FWPUCLNT.DLL
    gdi32.dll GDI Client DLL Microsoft Corporation C:\Windows\System32\gdi32.dll
    gdi32full.dll GDI Client DLL Microsoft Corporation C:\Windows\System32\gdi32full.dll
    hmpalert.dll HitmanPro.Alert 64-bit Support Library SurfRight B.V. C:\Windows\System32\hmpalert.dll
    IPHLPAPI.DLL IP Helper API Microsoft Corporation C:\Windows\System32\IPHLPAPI.DLL
    kernel.appcore.dll AppModel API Host Microsoft Corporation C:\Windows\System32\kernel.appcore.dll
    kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\System32\kernel32.dll
    KernelBase.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\System32\KernelBase.dll
    locale.nls C:\Windows\System32\locale.nls
    msvcp_win.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\System32\msvcp_win.dll
    msvcr120.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\System32\msvcr120.dll
    msvcrt.dll Windows NT CRT DLL Microsoft Corporation C:\Windows\System32\msvcrt.dll
    msxml6.dll MSXML 6.0 Microsoft Corporation C:\Windows\System32\msxml6.dll
    msxml6r.dll XML Resources Microsoft Corporation C:\Windows\System32\msxml6r.dll
    nsi.dll NSI User-mode interface DLL Microsoft Corporation C:\Windows\System32\nsi.dll
    ntdll.dll NT Layer DLL Microsoft Corporation C:\Windows\System32\ntdll.dll
    ntmarta.dll Windows NT MARTA provider Microsoft Corporation C:\Windows\System32\ntmarta.dll
    ole32.dll Microsoft OLE for Windows Microsoft Corporation C:\Windows\System32\ole32.dll
    oleaut32.dll OLEAUT32.DLL Microsoft Corporation C:\Windows\System32\oleaut32.dll
    powrprof.dll Power Profile Helper DLL Microsoft Corporation C:\Windows\System32\powrprof.dll
    profapi.dll User Profile Basic API Microsoft Corporation C:\Windows\System32\profapi.dll
    rpcrt4.dll Remote Procedure Call Runtime Microsoft Corporation C:\Windows\System32\rpcrt4.dll
    rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation C:\Windows\System32\rsaenh.dll
    sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation C:\Windows\System32\sechost.dll
    SHCore.dll SHCORE Microsoft Corporation C:\Windows\System32\SHCore.dll
    shell32.dll Windows Shell Common Dll Microsoft Corporation C:\Windows\System32\shell32.dll
    shlwapi.dll Shell Light-weight Utility Library Microsoft Corporation C:\Windows\System32\shlwapi.dll
    sxs.dll Fusion 2.5 Microsoft Corporation C:\Windows\System32\sxs.dll
    ucrtbase.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\System32\ucrtbase.dll
    umpdc.dll C:\Windows\System32\umpdc.dll
    user32.dll Multi-User Windows USER API Client DLL Microsoft Corporation C:\Windows\System32\user32.dll
    win32u.dll Win32u Microsoft Corporation C:\Windows\System32\win32u.dll
    windows.storage.dll Microsoft WinRT Storage API Microsoft Corporation C:\Windows\System32\windows.storage.dll
    wldp.dll Windows Lockdown Policy Microsoft Corporation C:\Windows\System32\wldp.dll

    If I had to guess, I wonder if C:\Windows\System32\msvcr120.dll is trying to be upgraded by this installer?

    For a one off install I would stop the Sophos Network Threat Protection service and try again. 

    To fathom what is happening, I would leave the service running, run Process Monitor and reproduce the issue.  I suspect, the installer is "considering" a module loaded by the Sophos NTP service, most likely the VC runtime files.

    Jak

Children
  • +1 in reply to jak

    I thought I would get the file:

    WinGPG-1.0.1-setup.exe /LOG="l.txt"

    Logs:

    2020-06-24 15:05:19.150 Created temporary directory: C:\Users\emile\AppData\Local\Temp\is-D2A11.tmp
    2020-06-24 15:05:31.840 RestartManager found an application using one of our files: Sophos Network Threat Protection
    2020-06-24 15:05:31.840 Can use RestartManager to avoid reboot? Yes (0)

    If you run /? it shows all the switches.


    So:

    WinGPG-1.0.1-setup.exe /NOCLOSEAPPLICATIONS

    would skip that dialog for example.  I did run Process Monitor and it is almost certainly because of this file:

    C:\Windows\System32\msvcp120.dll

    as expected:

    Regards,

    Jak

  • 0 in reply to jak

    Jak,

    thank you for all your answers and proposals.

    Indeed the problematic file was C:\Windows\System32\msvcr120.dll where Process Monitor shows "SHARING VIOLATION". I wonder why WinGPG installation tries to change that library. I beleive the library is part of Microsoft Visual C++ 2013 Redistributable, which had been previously installed by smart card software. Even if I could add an exception in Sophos Enterprise Console to allow a change to this DLL file, it probably wouldn't be a good idea. Maybe smart card reader would stop working. WinGPG should add another library to extend this library, but I know to little about it to judge.

    The paremeter /LOG creates nice log, but in this case only shows what GUI already revealed:

    2020-06-26 08:16:29.755   RestartManager found an application using one of our files: Sophos Network Threat Protection

     

    What helped was to use installation parameters (I was so blond not to think of it). I installed WinGPG using:

    WinGPG-1.0.1-setup.exe  /NORESTART /NOCLOSEAPPLICATIONS /NORESTARTAPPLICATIONS

Unfiltered HTML