awesthusing1.5524924010648228E12 asked a question.
Kaspersky, Windows 7 and Installshield 2010 don't mix
I'm testing an installation package for consumer use and have run into an issue where I'm being prevented from uninstalling or installing. When I have Kaspersky 6.0.4.1212 running on Windows 7 Ultimate I cannot get an installation package to work. Here's the installation log: [CODE]=== Verbose logging started: 12/13/2009 12:25:10 Build type: SHIP UNICODE 5.00.7600.00 Calling process: C:\Users\plankswert\Desktop\Gadgets-28365.exe === MSI (c) (08:AC) [12:25:10:229]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Users\plankswert\AppData\Local\Downloaded Installations\{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}\Product.msi' against software restriction policy MSI (c) (08:AC) [12:25:10:229]: SOFTWARE RESTRICTION POLICY: C:\Users\plankswert\AppData\Local\Downloaded Installations\{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}\Product.msi has a digital signature MSI (c) (08:AC) [12:25:10:323]: SOFTWARE RESTRICTION POLICY: C:\Users\plankswert\AppData\Local\Downloaded Installations\{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}\Product.msi is permitted to run at the 'unrestricted' authorization level. MSI (c) (08:AC) [12:25:10:323]: Cloaking enabled. MSI (c) (08:AC) [12:25:10:323]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (08:AC) [12:25:10:323]: End dialog not enabled MSI (c) (08:AC) [12:25:10:323]: Original package ==> MSI (c) (08:AC) [12:25:10:323]: Package we're running from ==> C:\Users\plankswert\AppData\Local\Downloaded Installations\{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}\Product.msi MSI (c) (08:AC) [12:25:10:323]: Transforming table Property. MSI (c) (08:AC) [12:25:10:323]: Machine policy value 'DisableUserInstalls' is 0 MSI (c) (08:AC) [12:25:10:323]: APPCOMPAT: looking for appcompat database entry with ProductCode '{BB2D820C-76AF-4CEE-9AE0-70E64B2784DA}'. MSI (c) (08:AC) [12:25:10:323]: APPCOMPAT: no matching ProductCode found in database. MSI (c) (08:AC) [12:25:10:338]: MSCOREE not loaded loading copy from system32 MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'TransformsSecure' is 0 MSI (c) (08:AC) [12:25:10:338]: User policy value 'TransformsAtSource' is 0 MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'DisablePatch' is 0 MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'AllowLockdownPatch' is 0 MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'DisableLUAPatching' is 0 MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'DisableFlyWeightPatching' is 0 MSI (c) (08:AC) [12:25:10:338]: APPCOMPAT: looking for appcompat database entry with ProductCode '{BB2D820C-76AF-4CEE-9AE0-70E64B2784DA}'. MSI (c) (08:AC) [12:25:10:338]: APPCOMPAT: no matching ProductCode found in database. MSI (c) (08:AC) [12:25:10:338]: Transforms are not secure. MSI (c) (08:AC) [12:25:10:338]: Transforming table Property. MSI (c) (08:AC) [12:25:10:338]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\plankswert\Desktop\.\install.log'. MSI (c) (08:AC) [12:25:10:338]: No Command Line. MSI (c) (08:AC) [12:25:10:338]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}'. MSI (c) (08:AC) [12:25:10:338]: Product Code passed to Engine.Initialize: '(none)' MSI (c) (08:AC) [12:25:10:338]: Product Code from property table before transforms: '{BB2D820C-76AF-4CEE-9AE0-70E64B2784DA}' MSI (c) (08:AC) [12:25:10:338]: Product Code from property table after transforms: '{BB2D820C-76AF-4CEE-9AE0-70E64B2784DA}' MSI (c) (08:AC) [12:25:10:338]: Product not registered: beginning first-time install MSI (c) (08:AC) [12:25:10:338]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'. MSI (c) (08:AC) [12:25:10:338]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 MSI (c) (08:AC) [12:25:10:338]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (c) (08:AC) [12:25:10:338]: User policy value 'SearchOrder' is 'nmu' MSI (c) (08:AC) [12:25:10:338]: Adding new sources is allowed. MSI (c) (08:AC) [12:25:10:338]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'. MSI (c) (08:AC) [12:25:10:338]: Package name extracted from package path: 'Product.msi' MSI (c) (08:AC) [12:25:10:338]: Package to be registered: 'Product.msi' MSI (c) (08:AC) [12:25:10:338]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'DisableMsi' is 0 MSI (c) (08:AC) [12:25:10:338]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (c) (08:AC) [12:25:10:338]: User policy value 'AlwaysInstallElevated' is 0 MSI (c) (08:AC) [12:25:10:338]: Product installation will be elevated because user is admin and product is being installed per-machine. MSI (c) (08:AC) [12:25:10:338]: Running product '{BB2D820C-76AF-4CEE-9AE0-70E64B2784DA}' with elevated privileges: Product is assigned. MSI (c) (08:AC) [12:25:10:338]: TRANSFORMS property is now: MSI (c) (08:AC) [12:25:10:338]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'. MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\Favorites MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\Documents MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Recent MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\SendTo MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Templates MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Local MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\Pictures MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\AppData\Roaming\Microsoft\Windows\Start Menu MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Users\plankswert\Desktop MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (c) (08:AC) [12:25:10:338]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts MSI (c) (08:AC) [12:25:10:338]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (c) (08:AC) [12:25:10:354]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation MSI (c) (08:AC) [12:25:10:354]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (c) (08:AC) [12:25:10:354]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Temporary'. MSI (c) (08:AC) [12:25:10:354]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Users\plankswert\AppData\Local\Downloaded Installations\{BECD2FF8-FF3F-4D11-B32C-33DF6E346C47}\Product.msi'. MSI (c) (08:AC) [12:25:10:354]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Users\plankswert\AppData\Local\Downloade
It appears _isres.dll is being blocked in this particular case. Does this file extract when the virus scanner is disabled? If so, unfortunately, there aren't any code changes that we can make on our end to prevent this behavior from occurring, as the file(s) we are attempting to write to a temp location on the machine are actively blocked by the virus scanner from being written.