westhusing
Level 6

Kaspersky, Windows 7 and Installshield 2010 don't mix

I'm testing an installation package for consumer use and have run into an issue where I'm being prevented from uninstalling or installing.

When I have Kaspersky 6.0.4.1212 running on Windows 7 Ultimate I cannot get an installation package to work.

Here's the installation log:
[CODE]=== Verbose logging started: 12/13/2009 12:25:10 Build type: SHIP UNICODE 5.00.7600.00 Calling process: C:\Users\plankswert\Desktop\Gadgets-28365.exe ===
MSI (c) (08:AC) [12:25:10:229]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Users\plankswert\AppData\Local\Downloaded Installations\{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}\Product.msi' against software restriction policy
MSI (c) (08:AC) [12:25:10:229]: SOFTWARE RESTRICTION POLICY: C:\Users\plankswert\AppData\Local\Downloaded Installations\{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}\Product.msi has a digital signature
MSI (c) (08:AC) [12:25:10:323]: SOFTWARE RESTRICTION POLICY: C:\Users\plankswert\AppData\Local\Downloaded Installations\{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}\Product.msi is permitted to run at the 'unrestricted' authorization level.
MSI (c) (08:AC) [12:25:10:323]: Cloaking enabled.
MSI (c) (08:AC) [12:25:10:323]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (08:AC) [12:25:10:323]: End dialog not enabled
MSI (c) (08:AC) [12:25:10:323]: Original package ==>
MSI (c) (08:AC) [12:25:10:323]: Package we're running from ==> C:\Users\plankswert\AppData\Local\Downloaded Installations\{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}\Product.msi
MSI (c) (08:AC) [12:25:10:323]: Transforming table Property.

MSI (c) (08:AC) [12:25:10:323]: Machine policy value 'DisableUserInstalls' is 0
MSI (c) (08:AC) [12:25:10:323]: APPCOMPAT: looking for appcompat database entry with ProductCode '{BB2D820C-76AF-4CEE-9AE0-70E64B2784DA}'.
MSI (c) (08:AC) [12:25:10:323]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (08:AC) [12:25:10:338]: MSCOREE not loaded loading copy from system32
MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'TransformsSecure' is 0
MSI (c) (08:AC) [12:25:10:338]: User policy value 'TransformsAtSource' is 0
MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'DisablePatch' is 0
MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'AllowLockdownPatch' is 0
MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'DisableLUAPatching' is 0
MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (c) (08:AC) [12:25:10:338]: APPCOMPAT: looking for appcompat database entry with ProductCode '{BB2D820C-76AF-4CEE-9AE0-70E64B2784DA}'.
MSI (c) (08:AC) [12:25:10:338]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (08:AC) [12:25:10:338]: Transforms are not secure.
MSI (c) (08:AC) [12:25:10:338]: Transforming table Property.

MSI (c) (08:AC) [12:25:10:338]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\plankswert\Desktop\.\install.log'.
MSI (c) (08:AC) [12:25:10:338]: No Command Line.
MSI (c) (08:AC) [12:25:10:338]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}'.
MSI (c) (08:AC) [12:25:10:338]: Product Code passed to Engine.Initialize: '(none)'
MSI (c) (08:AC) [12:25:10:338]: Product Code from property table before transforms: '{BB2D820C-76AF-4CEE-9AE0-70E64B2784DA}'
MSI (c) (08:AC) [12:25:10:338]: Product Code from property table after transforms: '{BB2D820C-76AF-4CEE-9AE0-70E64B2784DA}'
MSI (c) (08:AC) [12:25:10:338]: Product not registered: beginning first-time install
MSI (c) (08:AC) [12:25:10:338]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (c) (08:AC) [12:25:10:338]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (c) (08:AC) [12:25:10:338]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (c) (08:AC) [12:25:10:338]: User policy value 'SearchOrder' is 'nmu'
MSI (c) (08:AC) [12:25:10:338]: Adding new sources is allowed.
MSI (c) (08:AC) [12:25:10:338]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (c) (08:AC) [12:25:10:338]: Package name extracted from package path: 'Product.msi'
MSI (c) (08:AC) [12:25:10:338]: Package to be registered: 'Product.msi'
MSI (c) (08:AC) [12:25:10:338]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'DisableMsi' is 0
MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (c) (08:AC) [12:25:10:338]: User policy value 'AlwaysInstallElevated' is 0
MSI (c) (08:AC) [12:25:10:338]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (c) (08:AC) [12:25:10:338]: Running product '{BB2D820C-76AF-4CEE-9AE0-70E64B2784DA}' with elevated privileges: Product is assigned.
MSI (c) (08:AC) [12:25:10:338]: TRANSFORMS property is now:
MSI (c) (08:AC) [12:25:10:338]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\Favorites
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\Documents
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Recent
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\SendTo
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Templates
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Local
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\Pictures
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\Desktop
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (c) (08:AC) [12:25:10:338]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (c) (08:AC) [12:25:10:354]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation
MSI (c) (08:AC) [12:25:10:354]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (08:AC) [12:25:10:354]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Temporary'.
MSI (c) (08:AC) [12:25:10:354]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Users\plankswert\AppData\Local\Downloaded Installations\{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}\Product.msi'.
MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Users\plankswert\AppData\Local\Downloaded Installations\{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}\Product.msi'.
MSI (c) (08:AC) [12:25:10:354]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (c) (08:AC) [12:25:10:354]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (c) (08:AC) [12:25:10:354]: EEUI - Disabling MsiEmbeddedUI in quiet mode
=== Logging started: 12/13/2009 12:25:10 ===
MSI (c) (08:AC) [12:25:10:354]: Note: 1: 2205 2: C:\Users\plankswert\AppData\Local\Downloaded Installations\{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}\Product.msi 3: PatchPackage
MSI (c) (08:AC) [12:25:10:354]: Machine policy value 'DisableRollback' is 0
MSI (c) (08:AC) [12:25:10:354]: User policy value 'DisableRollback' is 0
MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (c) (08:AC) [12:25:10:354]: MsiOpenPackageEx is returning 0
MSI (c) (08:AC) [12:25:10:354]: MsiOpenPackage is returning 0
MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding INSTALLSHIELDSETUPLANGUAGE property. Its value is '1033'.
MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding SETUPEXEDIR property. Its value is 'C:\Users\plankswert\Desktop'.
MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Modifying SETUPEXENAME property. Its current value is 'setup.exe'. Its new value: 'Gadgets-28365.exe'.
MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding TRANSFORMS property. Its value is 'C:\Users\PLANKS~1\AppData\Local\Temp\{61508062-BF86-44AC-BC21-BC5486FDAC3B}\1033.MST'.
InstallShield 12:25:10: Status returned from summary info: 0
InstallShield 12:25:10: Status returned obtaining PID_TEMPLATE property: 0
InstallShield 12:25:10: Template summary for current package: Intel;0,1033,1036,1031,1040,1034
InstallShield 12:25:10: Package is 32-bit
MSI (c) (08:AC) [12:25:10:401]: PROPERTY CHANGE: Adding SUPPORTDIR property. Its value is 'C:\Users\PLANKS~1\AppData\Local\Temp\{D0AF9A14-02DD-48D8-8196-EF968FBFFC31}'.
MSI (c) (08:AC) [12:25:10:401]: PROPERTY CHANGE: Adding ISSETUPDRIVEN property. Its value is '1'.
InstallShield 12:25:10: Could not find setup.ini where expected (C:\Users\plankswert\AppData\Local\Downloaded Installations\{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}\). Defaulting to skin file setup.skn
InstallShield 12:25:10: Skin path for patch install: C:\Program Files\InstallShield Installation Information\{BB2D820C-76AF-4CEE-9AE0-70E64B2784DA}\setup.isn
InstallShield 12:25:10: Not using skins for this installation. Could not find skin file C:\Program Files\InstallShield Installation Information\{BB2D820C-76AF-4CEE-9AE0-70E64B2784DA}\setup.isn.
InstallShield 12:25:10: Using product language 1033
InstallShield 12:25:10: Extracting support file setup.inx to C:\Users\PLANKS~1\AppData\Local\Temp\{D0AF9A14-02DD-48D8-8196-EF968FBFFC31}\setup.inx
InstallShield 12:25:10: Extracting support file ISRT.dll to C:\Users\PLANKS~1\AppData\Local\Temp\{D0AF9A14-02DD-48D8-8196-EF968FBFFC31}\ISRT.dll
InstallShield 12:25:10: Extracting support file setup.exe to C:\Users\PLANKS~1\AppData\Local\Temp\{D0AF9A14-02DD-48D8-8196-EF968FBFFC31}\setup.exe
InstallShield 12:25:11: Extracting support file _isres_0x0409.dll to C:\Users\PLANKS~1\AppData\Local\Temp\{D0AF9A14-02DD-48D8-8196-EF968FBFFC31}\_isres_0x0409.dll
InstallShield 12:25:11: Failed to extract file _isres_0x0409.dll. Error = 0
InstallShield 12:25:11: Falling back to language 0 for current custom action
InstallShield 12:25:11: Extracting support file _isres_0x0000.dll to C:\Users\PLANKS~1\AppData\Local\Temp\{D0AF9A14-02DD-48D8-8196-EF968FBFFC31}\_isres_0x0000.dll
InstallShield 12:25:11: Failed to extract file _isres_0x0000.dll. Error = 0
InstallShield 12:25:11: Failed to extract support files, error is 7001
MSI (c) (08:AC) [12:25:11:836]: Leaked MSIHANDLE (10) of type 790541 for thread 2988
MSI (c) (08:AC) [12:25:11:836]: Leaked MSIHANDLE (9) of type 790537 for thread 2988
=== Verbose logging stopped: 12/13/2009 12:25:11 ===[/CODE]

Can anyone help me with this issue? Thanks.
Labels (1)
0 Kudos
2 Replies
joshstechnij
Level 10 Flexeran
Level 10 Flexeran

We have seen antivirus products block the extraction of some InstallScript engine files in the past (typically ISRT.dll) since the scanners seems to incorrectly flag some of the files as viruses. We have made an attempt to contact the vendors of these products in the past to prevent this from occurring, but I'm unsure what became of that.

It appears _isres.dll is being blocked in this particular case. Does this file extract when the virus scanner is disabled? If so, unfortunately, there aren't any code changes that we can make on our end to prevent this behavior from occurring, as the file(s) we are attempting to write to a temp location on the machine are actively blocked by the virus scanner from being written.
0 Kudos
westhusing
Level 6

Yes, it does extract if the virus scanner is off. You answered my question though. Thanks!
0 Kudos