Hi,
I'm having issues getting AV installed on a W7 device (story of my life at the min)
is anyone able to cast their eyes over this? I've checked reg permission ect and i'm just not able to pin point the issue, below are all the return value 3
MSI (s) (B8:20) [14:35:12:961]: Executing op: ActionStart(Name=ExecXmlFileRollback,,)
MSI (s) (B8:20) [14:35:12:977]: Executing op: CustomActionSchedule(Action=ExecXmlFileRollback,ActionType=3329,Source=BinaryData,Target=ExecXmlFileRollback,CustomActionData=0C:\Program Files\Sophos\Sophos Anti-Virus\Instrumentation.mane?S+!2Rn1!WaT0!kEZ1!U+31!ZM60![mh0!/K^(!/;w)!|J^(!X1l/!O%X/!Q,c/!Umh0!yCS+!J%+.!o{O,!.P8*!(K^(!PI]+!?f*%!zL60!a1?1!f+31!bg^0!Qmh0!StE/![M60![mh0!)tE/!UM60!I2l/!g7H1!mQn1!ZM60!(1?1!IG-0!Pg^0!(I.-!P%X/!S7H1!Vsq0!%DS+!^F-0!h7H1!!/5+!.D%*!T%X/!K2l/!LtE/!v;w)!TM60!S+31!b1?1!S8u/!w;w)!Psq0!qD%*!_M60!rD%*!2J/*!4dV*!/J/*!7D%*!YFZ1!Qmh0!g1?1!X1l/!Y2l/!b7H1!LtE/!q;w)!k1?1!YK^(!mQn1!WaT0!a1?1!,Le1!Umh0!/K^(!Z7H1!dyz0!9D%*!qf^0!Mmh0!M8u/!V1?1!g1?1!pf^0!J%X/!asq0!bsq0!X7H1!f!X/!Zg^0!{Ke1!Umh0!1VD*!0J/*!3D%*!8||*!{Ke1!Umh0!Qsq0!j1?1!i1l/!Y2l/!b7H1!jK^(!mQn1!WaT0!a1?1!-Rn1!ZM60!/K^(!Z7H1!dyz0!9D%*!{Ke1!nLe1!zKe1!1;w)!a+31!kD%*!2J/*!1P8*!Z8I.!nH.-!1%X/!K2l/!LtE/!kL60!a1?1!StE/!O%X/!ZK^(!mQn1!WaT0!a1?1!-Rn1!+DS+!^F-0!h7H1!!/5+!.D%*!nLe1!z;w)!!^M*!rrq0!WA~/!1VD*!0J/*!0D%*!zN7-!ttr-!IG-0!Pg^0!VK^(!mQn1!WaT0!a1?1!)7H1!QtE/!F2l/!/K^(!Z7H1!dyz0!9D%*!w0?1!IG-0!Pg^0!R1?1!pf^
MSI (s) (B8:20) [14:35:12:977]: Executing op: ActionStart(Name=ExecXmlFile,,)
MSI (s) (B8:20) [14:35:12:977]: Executing op: CustomActionSchedule(Action=ExecXmlFile,ActionType=3073,Source=BinaryData,Target=ExecXmlFile,CustomActionData=10C:\Program Files\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@messageFileName]messageFileNameC:\Program Files\Sophos\Sophos Anti-Virus\Instrumentation.dll71/*/*/*/*[@parameterFileName]parameterFileNameC:\Program Files\Sophos\Sophos Anti-Virus\Instrumentation.dll10C:\Program Files\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@resourceFileName]resourceFileNameC:\Program Files\Sophos\Sophos Anti-Virus\Instrumentation.dll)
MSI (s) (B8:DC) [14:35:12:993]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI92EC.tmp, Entrypoint: ExecXmlFile
MSI (s) (B8:20) [14:35:13:086]: Executing op: ActionStart(Name=RollbackRegisterEventManifest,,)
MSI (s) (B8:20) [14:35:13:086]: Executing op: CustomActionSchedule(Action=RollbackRegisterEventManifest,ActionType=3393,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" um "C:\Program Files\Sophos\Sophos Anti-Virus\Instrumentation.man")
MSI (s) (B8:20) [14:35:13:086]: Executing op: ActionStart(Name=RegisterEventManifest,,)
MSI (s) (B8:20) [14:35:13:086]: Executing op: CustomActionSchedule(Action=RegisterEventManifest,ActionType=3073,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" im "C:\Program Files\Sophos\Sophos Anti-Virus\Instrumentation.man")
MSI (s) (B8:C8) [14:35:13:102]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI935A.tmp, Entrypoint: CAQuietExec
CAQuietExec: **** Warning: Publisher {788a31a2-9d77-4994-a1c5-6c3036f56141} is installed on
CAQuietExec: the system. Only new values would be added. If you want to update previous
MSI (s) (B8:20) [14:35:14:116]: Executing op: ActionStart(Name=CreateUserGroups,,)
CAQuietExec: settings, uninstall the manifest first.
MSI (s) (B8:20) [14:35:14:116]: Executing op: CustomActionSchedule(Action=CreateUserGroups,ActionType=1025,Source=BinaryData,Target=CreateUserGroups,CustomActionData=C:\ProgramData\Sophos\Sophos Anti-Virus\Config)
MSI (s) (B8:78) [14:35:14:116]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI9751.tmp, Entrypoint: CreateUserGroups
CustomAction CreateUserGroups returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (B8:20) [14:35:14:241]: User policy value 'DisableRollback' is 0
MSI (s) (B8:20) [14:35:14:241]: Machine policy value 'DisableRollback' is 0
Action ended 14:35:14: InstallFinalize. Return value 3.
MSI (s) (B8:20) [14:35:16:549]: Executing op: ActionStart(Name=RunErrorScript,,)
MSI (s) (B8:20) [14:35:16:549]: Executing op: CustomActionRollback(Action=RunErrorScript,ActionType=1345,Source=BinaryData,Target=RunErrorScripts,CustomActionData="C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49")
MSI (s) (B8:68) [14:35:16:549]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIA0DE.tmp, Entrypoint: RunErrorScripts
MSI (s) (B8:20) [14:35:16:565]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,)
MSI (s) (B8:20) [14:35:16:565]: Executing op: ActionStart(Name=RestoreMovedFiles,,)
MSI (s) (B8:20) [14:35:16:565]: Executing op: CustomActionRollback(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files\Sophos\Sophos Anti-Virus\)
MSI (s) (B8:60) [14:35:16:565]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIA0EE.tmp, Entrypoint: RestoreMovedFiles
MSI (s) (B8:20) [14:35:16:581]: Executing op: ActionStart(Name=SetUpdateFailed,,)
MSI (s) (B8:20) [14:35:16:581]: Executing op: CustomActionRollback(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,)
MSI (s) (B8:AC) [14:35:16:596]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIA0FF.tmp, Entrypoint: SetUpdateFailed
MSI (s) (B8:20) [14:35:16:596]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (B8:20) [14:35:16:596]: Error in rollback skipped. Return: 5
MSI (s) (B8:20) [14:35:16:612]: Note: 1: 2318 2:
MSI (s) (B8:20) [14:35:16:612]: No System Restore sequence number for this installation.
MSI (s) (B8:20) [14:35:16:612]: Unlocking Server
MSI (s) (B8:20) [14:35:16:643]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 14:35:16: INSTALL. Return value 3.
This thread was automatically locked due to age.
