This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Failed to install SAVXP: The MSI has failed [0x00000067]

Hello,

In the Sophos enterprise console I have the error: Failed to install SAVXP: The MSI has failed [0x00000067] on one of the endpoint computers.

I did some research and read over 5-10 discussions about this I think I tried all the solutions but I still didn't manage to solve this issue.

I tried reinstalling Sophos after I fully deleted it, there was not a single file on the computer named Sophos, after that I just added the computer back to the enterprise and protected it. but the error instantly appeared. I also tried to add cac.pem and mrinit.conf from a working endpoint to te affected one. I tried fixing the permissions of the windows folder in the registry.

I don't know if I missed something or fail to remember more solutions but I think this was about it...

I will add the customactions log and install log. but I also have found some issues myself.

in custom actions:

2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf00 with error: Acces denied.
 
2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf01 with error: Acces denied.
 
2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf02 with error: Acces denied.
 
2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf03 with error: Acces denied.
 
2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll.stf01 with error: Acces denied.
 
2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll.stf02 with error: Acces denied.
 
2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll.stf04 with error: Acces denied.
 
in the same folder:
 
2016-10-14 09:05:51 ForceDeleteFiles: Error deleting DesktopMessaging registry key. Returned error was: The system cant find the file specified.
 
2016-10-14 09:05:51 ForceDeleteFiles: Error deleting user pluging registry key. Returned error was: The system cant find the file specified.
 
in the install log:
 
Product: Sophos Anti-Virus -- Error 1722.There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor.  Action InstallClassFilterAMD64Win7, location: C:\Windows\SysWOW64\, command: "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhi "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\win7_amd64\SDCFILTER.INF"
 
also in the install log:
 
MSI (s) (40:D8) [09:05:51:223]: Error in rollback skipped. Return: 5
MSI (s) (40:D8) [09:05:51:227]: Note: 1: 2318 2: 
MSI (s) (40:D8) [09:05:51:228]: No System Restore sequence number for this installation.
MSI (s) (40:D8) [09:05:51:228]: Unlocking Server
MSI (s) (40:D8) [09:05:51:229]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 9:05:51: INSTALL. Return value 3.
 
 
I hope this will give a good image about what the issue is here. Because I have no idea anymore. (I translated some things in the logs above, in the logs I posted some text will be Dutch)
2016-10-14 09:05:31 ExtractClassicConfig: Action started

2016-10-14 09:05:31 ExtractClassicConfig: Action succeeded

2016-10-14 09:05:31 PreInstallChecks: Action started

2016-10-14 09:05:31 PreInstallChecks: Action succeeded

2016-10-14 09:05:31 SetBootDriverStartupProperty: Action started

2016-10-14 09:05:31 SetBootDriverStartupProperty: Boot driver: not installed.

2016-10-14 09:05:31 SetBootDriverStartupProperty: Action succeeded

2016-10-14 09:05:31 SetClassFilterPresentProperty: Action started

2016-10-14 09:05:31 SetClassFilterPresentProperty: Setting class filter present property to: 0

2016-10-14 09:05:31 SetClassFilterPresentProperty: Action succeeded

2016-10-14 09:05:32 SetDriverProperty: Action started

2016-10-14 09:05:32 SetDriverProperty: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2016-10-14 09:05:32 SetDriverProperty: Action succeeded

2016-10-14 09:05:32 SetProcessorProperties: Action started

2016-10-14 09:05:32 SetProcessorProperties: Action succeeded

2016-10-14 09:05:32 SetRestoreExcludedProcessesProperty: Action started

2016-10-14 09:05:32 SetRestoreExcludedProcessesProperty: SetRestoreExcludedProcessesProperty

2016-10-14 09:05:32 SetRestoreExcludedProcessesProperty: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2016-10-14 09:05:32 SetRestoreExcludedProcessesProperty: Action succeeded

2016-10-14 09:05:38 CheckRegForNullDACLs: Action started

2016-10-14 09:05:38 CheckRegForNullDACLs: Action succeeded

2016-10-14 09:05:38 WaitForSAVService: Action started

2016-10-14 09:05:38 WaitForSAVService: WaitForSAVService: Walking system processes...

2016-10-14 09:05:38 WaitForSAVService: WaitForSAVService: Finished walking system processes.

2016-10-14 09:05:38 WaitForSAVService: Action succeeded

2016-10-14 09:05:38 CheckUninstallDrivers: Action started

2016-10-14 09:05:38 CheckUninstallDrivers: IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess control. Returning false.

2016-10-14 09:05:38 CheckUninstallDrivers: IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess filter. Returning false.

2016-10-14 09:05:38 CheckUninstallDrivers: Action succeeded

2016-10-14 09:05:38 DeleteIDEs: Action started

2016-10-14 09:05:38 DeleteIDEs: Action succeeded

2016-10-14 09:05:38 DeleteBDLs: Action started

2016-10-14 09:05:38 DeleteBDLs: Action succeeded

2016-10-14 09:05:38 DeleteHIPSConfig: Action started

2016-10-14 09:05:38 DeleteHIPSConfig: Action succeeded

2016-10-14 09:05:38 UpdateSavAdapterDll: Action started

2016-10-14 09:05:48 UpdateSavAdapterDll: Action succeeded

2016-10-14 09:05:48 CopyOtherFiles: Action started

2016-10-14 09:05:48 CopyOtherFiles: CopyOtherFiles custom action - Copying other driver files

2016-10-14 09:05:48 CopyOtherFiles: Copying class filter source: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\win7_amd64\SDCFILTER.INF, target: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\

2016-10-14 09:05:48 CopyOtherFiles: Copying boot driver source: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_amd64\SOPHOSBOOTDRIVER.INF, target: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\

2016-10-14 09:05:48 CopyOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll detoured exists, proceeding to rename it & mark for delete.

2016-10-14 09:05:48 CopyOtherFiles: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2016-10-14 09:05:48 CopyOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll detoured exists, proceeding to rename it & mark for delete.

2016-10-14 09:05:48 CopyOtherFiles: Copying boot tasks source: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_amd64\SophosBootTasks.exe, target: C:\Windows\system32\

2016-10-14 09:05:48 CopyOtherFiles: Action succeeded

2016-10-14 09:05:48 RegisterBufferOverflowProtection: Action started

2016-10-14 09:05:48 RegisterBufferOverflowProtection: BopsUnregister: could not get short path to DLL. It will not be unregistered.

2016-10-14 09:05:48 RegisterBufferOverflowProtection: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.

2016-10-14 09:05:48 RegisterBufferOverflowProtection: BOPS path already exists

2016-10-14 09:05:48 RegisterBufferOverflowProtection: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2016-10-14 09:05:48 RegisterBufferOverflowProtection: BOPS path already exists

2016-10-14 09:05:48 RegisterBufferOverflowProtection: Action succeeded

2016-10-14 09:05:48 RestoreExcludedProcesses: Action started

2016-10-14 09:05:48 RestoreExcludedProcesses: RestoreExcludedProcesses

2016-10-14 09:05:48 RestoreExcludedProcesses: Empty excluded processes property. Nothing to be done.

2016-10-14 09:05:48 RestoreExcludedProcesses: Action succeeded

2016-10-14 09:05:51 RollbackUpdateSavAdapterDll: Action started

2016-10-14 09:05:51 RollbackUpdateSavAdapterDll: Action succeeded

2016-10-14 09:05:51 DeleteOtherFiles: Action started

2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf00 with error: Toegang geweigerd.



2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf01 with error: Toegang geweigerd.



2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf02 with error: Toegang geweigerd.



2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll.stf03 with error: Toegang geweigerd.



2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll.stf01 with error: Toegang geweigerd.



2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll.stf02 with error: Toegang geweigerd.



2016-10-14 09:05:51 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll.stf04 with error: Toegang geweigerd.



2016-10-14 09:05:51 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll detoured exists, proceeding to rename it & mark for delete.

2016-10-14 09:05:51 DeleteOtherFiles: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2016-10-14 09:05:51 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll detoured exists, proceeding to rename it & mark for delete.

2016-10-14 09:05:51 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.

2016-10-14 09:05:51 DeleteOtherFiles: Deleting config file folder

2016-10-14 09:05:51 DeleteOtherFiles: Failed to delete config folder, 2

2016-10-14 09:05:51 DeleteOtherFiles: Action succeeded

2016-10-14 09:05:51 ForceDeleteFiles: Action started

2016-10-14 09:05:51 ForceDeleteFiles: Error deleting DesktopMessaging registry key. Returned error was: Het systeem kan het opgegeven bestand niet vinden.



2016-10-14 09:05:51 ForceDeleteFiles: Error deleting user pluging registry key. Returned error was: Het systeem kan het opgegeven bestand niet vinden.



2016-10-14 09:05:51 ForceDeleteFiles: Action succeeded

2016-10-14 09:05:51 RunErrorScripts: Action started

2016-10-14 09:05:51 RunErrorScripts: Action succeeded

2016-10-14 09:05:51 RestoreMovedFiles: Action started

2016-10-14 09:05:51 RestoreMovedFiles: Action succeeded

2016-10-14 09:05:51 SetUpdateFailed: Action started

2016-10-14 09:05:51 SetUpdateFailed: Unable to create an instance of ComponentManager - SystemInformation cannot be informed of end of update

2016-10-14 09:05:51 SetUpdateFailed: Action succeeded

Sophos Anti-Virus Major Install Log_161014_070531.txt
 
 
 
 


This thread was automatically locked due to age.