Hello!
I have a problem with a few machines not all, that they wont upadate. Errors occured on 28.6., 14.6., 12.5.
Solution is that I delete Cache folder on workstations and then its finished succesfuly.
Can I prevent this? Does anybody have ideas?
Sophos Anti-Virus Major Install Log_160704_063841.txtSophos AutoUpdate 5.2.0.276 install log 20160414 140530.txt
2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 I n f o : L o g g i n g s t a r t e d : i n s t a l l i n g / u p g r a d i n g S o p h o s A n t i - V i r u s 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 I n f o : I n s t a l l F r o m P a t h i s : C : \ P r o g r a m D a t a \ S o p h o s \ A u t o U p d a t e \ c a c h e \ s a v x p \ 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 I n f o : I n s t a l l T o P a t h i s : 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m a j o r v e r s i o n n u m b e r : 1 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m i n o r v e r s i o n n u m b e r : 6 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 I n f o : r e g i s t r y I n s t a l l T o [ o v e r r i d i n g I n s t a l l T o P a t h ] i s : C : \ P r o g r a m F i l e s ( x 8 6 ) \ S o p h o s \ S o p h o s A n t i - V i r u s \ 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 C h e c k i n g f o r p r o b l e m v e r s i o n s o f S A V I - I n s t a l l p a t h : C : \ P r o g r a m F i l e s ( x 8 6 ) \ S o p h o s \ S o p h o s A n t i - V i r u s \ 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 5 V e e x . d l l v e r s i o n ' 3 . 6 4 . 3 . 2 2 4 3 ' 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 5 I N F O : C h e c k i n g t h e v a l i d i t y o f t h e V D L m a n i f e s t f i l e . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 5 I N F O : T h e m a n i f e s t f i l e h a s b e e n s u c c e s s f u l l y v a l i d a t e d . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 5 I N F O : C h e c k i n g t h e v a l i d i t y o f t h e A p p F e e d m a n i f e s t f i l e . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 5 I N F O : T h e m a n i f e s t f i l e h a s b e e n s u c c e s s f u l l y v a l i d a t e d . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 P R O C E S S O R _ A R C H I T E C T U R E e n v i r o n m e n t v a r i a b l e i s : A M D 6 4 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ M a j o r U p d a t e = 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ D a t a O n l y U p d a t e = 1 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ O n A c c e s s D r i v e r U p d a t e = 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ B o o t D r i v e r U p d a t e = 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ C l a s s F i l t e r U p d a t e = 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ K M S D r i v e r U p d a t e = 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : M a n a g e d i n s t a l l ( f r o m S A U ) 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 U n a b l e t o Q I I P r o d u c t C o n f i g 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 P r o d u c t t y p e i n r e g i s t r y : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 C h e c k i n g t h e i n t e g r i t y o f t h e e x t a n t S A V i n s t a l l a t i o n 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 T h e i s a c o m p l e t e S A V i n s t a l l a t i o n . S k i p p i n g r e c o v e r y . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 U p d a t e V e r s i o n I n f o ( ) , S A U c a n ' t s u p p l y v e r s i o n i n f o - u s i n g m s i v e r s i o n 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : L o g g i n g s t a r t e d : p e r f o r m i n g m i n o r u p d a t e t o S o p h o s A n t i - V i r u s . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : B e g i n n i n g S h a r e d C u s t o m A c t i o n s . L o g g i n g w i l l a p p e a r i n C u s t o m A c t i o n l o g . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : R u n n i n g S e t U p d a t e B e g i n s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : R e t u r n V a l u e f r o m S e t U p d a t e B e g i n : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : R u n n i n g D e l e t e R u l e F i l e s ( I D E s ) s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R e t u r n V a l u e f r o m D e l e t e R u l e F i l e s ( I D E s ) : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R u n n i n g D e l e t e R u l e F i l e s ( H I P S C o n f i g ) s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R e t u r n V a l u e f r o m D e l e t e R u l e F i l e s ( H I P S C o n f i g ) : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R u n n i n g D e l e t e R u l e F i l e s ( b d l s ) s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R e t u r n V a l u e f r o m D e l e t e R u l e F i l e s ( b d l s ) : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R u n n i n g C o p y H o t U p d a t e F i l e s s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R e t u r n V a l u e f r o m C o p y H o t U p d a t e F i l e s : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R u n n i n g U p d a t e S A V I s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R e t u r n V a l u e f r o m U p d a t e S A V I : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R u n n i n g S e t S a v A d m i n U p d a t e C o m p l e t e s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R e t u r n V a l u e f r o m S e t S a v A d m i n U p d a t e C o m p l e t e : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R u n n i n g C o n f i g u r e S A V s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R e t u r n V a l u e f r o m C o n f i g u r e S A V : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R u n n i n g C o p y S A V S y n c F i l e s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R e t u r n V a l u e f r o m C o p y S A V S y n c F i l e : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R u n n i n g S e t U p d a t e F i n i s h e d s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R e t u r n V a l u e f r o m S e t U p d a t e F i n i s h e d : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R u n n i n g R u n A f t e r S c r i p t s s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R e t u r n V a l u e f r o m R u n A f t e r S c r i p t s : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : S h a r e d c u s t o m a c t i o n s s u c c e e d e d . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : U p d a t e t o S o p h o s A n t i - V i r u s s u c c e e d e d .
HI,
From taking a look at: "\Sophos Anti-Virus Major Install Log_160704_063841.txt".
This appears to be the issue:
MSI (s) (80:EC) [08:39:20:864]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIFCF7.tmp, Entrypoint: StartSAVServices
MSI (s) (80:20) [08:39:30:098]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI20FB.tmp, Entrypoint: CAQuietExec
CAQuietExec: The application has been successfully registered as a service
CAQuietExec: The service started
MSI (s) (80:78) [08:39:30:629]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI231E.tmp, Entrypoint: CAQuietExec
CAQuietExec: Error 0x8007042c: Command line returned an error.
CAQuietExec: Error 0x8007042c: CAQuietExec Failed
CustomAction SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
I.e. the custom action SwiFilterRegister appears to have failed.
There should be a custom action log file with the same time stamp at the major install log. That said I don't think it will log anything for that action. A quick look in a log I have just has:
2016-07-05 07:15:59 StartSAVServices: Action started
2016-07-05 07:15:59 StartSAVServices: Action succeeded
...no subsequent reference to SwiFilterRegister.
I would probably try running Process Monitor at the same time of an install and try and align this error with what's going on in a Process Monitor log. If you do need to contact support they will be grateful for the PML log and the MSI log file.
Hope it helps.
Regards,
Jak
