Hello!
I have a problem with a few machines not all, that they wont upadate. Errors occured on 28.6., 14.6., 12.5.
Solution is that I delete Cache folder on workstations and then its finished succesfuly.
Can I prevent this? Does anybody have ideas?
Sophos Anti-Virus Major Install Log_160704_063841.txtSophos AutoUpdate 5.2.0.276 install log 20160414 140530.txt
2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 I n f o : L o g g i n g s t a r t e d : i n s t a l l i n g / u p g r a d i n g S o p h o s A n t i - V i r u s 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 I n f o : I n s t a l l F r o m P a t h i s : C : \ P r o g r a m D a t a \ S o p h o s \ A u t o U p d a t e \ c a c h e \ s a v x p \ 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 I n f o : I n s t a l l T o P a t h i s : 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m a j o r v e r s i o n n u m b e r : 1 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m i n o r v e r s i o n n u m b e r : 6 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 I n f o : r e g i s t r y I n s t a l l T o [ o v e r r i d i n g I n s t a l l T o P a t h ] i s : C : \ P r o g r a m F i l e s ( x 8 6 ) \ S o p h o s \ S o p h o s A n t i - V i r u s \ 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 4 C h e c k i n g f o r p r o b l e m v e r s i o n s o f S A V I - I n s t a l l p a t h : C : \ P r o g r a m F i l e s ( x 8 6 ) \ S o p h o s \ S o p h o s A n t i - V i r u s \ 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 5 V e e x . d l l v e r s i o n ' 3 . 6 4 . 3 . 2 2 4 3 ' 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 5 I N F O : C h e c k i n g t h e v a l i d i t y o f t h e V D L m a n i f e s t f i l e . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 5 I N F O : T h e m a n i f e s t f i l e h a s b e e n s u c c e s s f u l l y v a l i d a t e d . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 5 I N F O : C h e c k i n g t h e v a l i d i t y o f t h e A p p F e e d m a n i f e s t f i l e . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 5 I N F O : T h e m a n i f e s t f i l e h a s b e e n s u c c e s s f u l l y v a l i d a t e d . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 P R O C E S S O R _ A R C H I T E C T U R E e n v i r o n m e n t v a r i a b l e i s : A M D 6 4 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ M a j o r U p d a t e = 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ D a t a O n l y U p d a t e = 1 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ O n A c c e s s D r i v e r U p d a t e = 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ B o o t D r i v e r U p d a t e = 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ C l a s s F i l t e r U p d a t e = 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ K M S D r i v e r U p d a t e = 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : M a n a g e d i n s t a l l ( f r o m S A U ) 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 U n a b l e t o Q I I P r o d u c t C o n f i g 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 P r o d u c t t y p e i n r e g i s t r y : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 C h e c k i n g t h e i n t e g r i t y o f t h e e x t a n t S A V i n s t a l l a t i o n 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 T h e i s a c o m p l e t e S A V i n s t a l l a t i o n . S k i p p i n g r e c o v e r y . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 U p d a t e V e r s i o n I n f o ( ) , S A U c a n ' t s u p p l y v e r s i o n i n f o - u s i n g m s i v e r s i o n 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : L o g g i n g s t a r t e d : p e r f o r m i n g m i n o r u p d a t e t o S o p h o s A n t i - V i r u s . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : B e g i n n i n g S h a r e d C u s t o m A c t i o n s . L o g g i n g w i l l a p p e a r i n C u s t o m A c t i o n l o g . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : R u n n i n g S e t U p d a t e B e g i n s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : R e t u r n V a l u e f r o m S e t U p d a t e B e g i n : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 6 I n f o : R u n n i n g D e l e t e R u l e F i l e s ( I D E s ) s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R e t u r n V a l u e f r o m D e l e t e R u l e F i l e s ( I D E s ) : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R u n n i n g D e l e t e R u l e F i l e s ( H I P S C o n f i g ) s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R e t u r n V a l u e f r o m D e l e t e R u l e F i l e s ( H I P S C o n f i g ) : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R u n n i n g D e l e t e R u l e F i l e s ( b d l s ) s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R e t u r n V a l u e f r o m D e l e t e R u l e F i l e s ( b d l s ) : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R u n n i n g C o p y H o t U p d a t e F i l e s s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R e t u r n V a l u e f r o m C o p y H o t U p d a t e F i l e s : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R u n n i n g U p d a t e S A V I s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R e t u r n V a l u e f r o m U p d a t e S A V I : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R u n n i n g S e t S a v A d m i n U p d a t e C o m p l e t e s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R e t u r n V a l u e f r o m S e t S a v A d m i n U p d a t e C o m p l e t e : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 1 9 I n f o : R u n n i n g C o n f i g u r e S A V s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R e t u r n V a l u e f r o m C o n f i g u r e S A V : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R u n n i n g C o p y S A V S y n c F i l e s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R e t u r n V a l u e f r o m C o p y S A V S y n c F i l e : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R u n n i n g S e t U p d a t e F i n i s h e d s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R e t u r n V a l u e f r o m S e t U p d a t e F i n i s h e d : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R u n n i n g R u n A f t e r S c r i p t s s h a r e d c u s t o m a c t i o n . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : R e t u r n V a l u e f r o m R u n A f t e r S c r i p t s : 0 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : S h a r e d c u s t o m a c t i o n s s u c c e e d e d . 2 0 1 6 - 0 6 - 2 3 0 7 : 1 5 : 2 0 I n f o : U p d a t e t o S o p h o s A n t i - V i r u s s u c c e e d e d .
HI,
From taking a look at: "\Sophos Anti-Virus Major Install Log_160704_063841.txt".
This appears to be the issue:
MSI (s) (80:EC) [08:39:20:864]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIFCF7.tmp, Entrypoint: StartSAVServices
MSI (s) (80:20) [08:39:30:098]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI20FB.tmp, Entrypoint: CAQuietExec
CAQuietExec: The application has been successfully registered as a service
CAQuietExec: The service started
MSI (s) (80:78) [08:39:30:629]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI231E.tmp, Entrypoint: CAQuietExec
CAQuietExec: Error 0x8007042c: Command line returned an error.
CAQuietExec: Error 0x8007042c: CAQuietExec Failed
CustomAction SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
I.e. the custom action SwiFilterRegister appears to have failed.
There should be a custom action log file with the same time stamp at the major install log. That said I don't think it will log anything for that action. A quick look in a log I have just has:
2016-07-05 07:15:59 StartSAVServices: Action started
2016-07-05 07:15:59 StartSAVServices: Action succeeded
...no subsequent reference to SwiFilterRegister.
I would probably try running Process Monitor at the same time of an install and try and align this error with what's going on in a Process Monitor log. If you do need to contact support they will be grateful for the PML log and the MSI log file.
Hope it helps.
Regards,
Jak
HI,
From taking a look at: "\Sophos Anti-Virus Major Install Log_160704_063841.txt".
This appears to be the issue:
MSI (s) (80:EC) [08:39:20:864]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIFCF7.tmp, Entrypoint: StartSAVServices
MSI (s) (80:20) [08:39:30:098]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI20FB.tmp, Entrypoint: CAQuietExec
CAQuietExec: The application has been successfully registered as a service
CAQuietExec: The service started
MSI (s) (80:78) [08:39:30:629]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI231E.tmp, Entrypoint: CAQuietExec
CAQuietExec: Error 0x8007042c: Command line returned an error.
CAQuietExec: Error 0x8007042c: CAQuietExec Failed
CustomAction SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
I.e. the custom action SwiFilterRegister appears to have failed.
There should be a custom action log file with the same time stamp at the major install log. That said I don't think it will log anything for that action. A quick look in a log I have just has:
2016-07-05 07:15:59 StartSAVServices: Action started
2016-07-05 07:15:59 StartSAVServices: Action succeeded
...no subsequent reference to SwiFilterRegister.
I would probably try running Process Monitor at the same time of an install and try and align this error with what's going on in a Process Monitor log. If you do need to contact support they will be grateful for the PML log and the MSI log file.
Hope it helps.
Regards,
Jak
