locked
Problem Updating Forefront Client RRS feed

  • Question

  • Hi all, i've problem updating Forefront client on a server...

    Follow the log file:

    === Verbose logging started: 12/03/2009  09:42:31  Build type: SHIP UNICODE 3.01.4000.4042  Calling process: d:\2a5ed253bc29ba6b94c6f7\FCSInstall.exe ===
    MSI (c) (F8:48) [09:42:31:935]: Resetting cached policy values
    MSI (c) (F8:48) [09:42:31:935]: Machine policy value 'Debug' is 0
    MSI (c) (F8:48) [09:42:31:935]: ******* RunEngine:
               ******* Product: d:\2a5ed253bc29ba6b94c6f7\mp_ambits.msi
               ******* Action:
               ******* CommandLine: **********
    MSI (c) (F8:48) [09:42:31:951]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (F8:48) [09:42:31:951]: Grabbed execution mutex.
    MSI (c) (F8:48) [09:42:31:967]: Cloaking enabled.
    MSI (c) (F8:48) [09:42:31:967]: Attempting to enable all disabled priveleges before calling Install on Server
    MSI (c) (F8:48) [09:42:31:998]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (C8:B4) [09:42:32:013]: Grabbed execution mutex.
    MSI (s) (C8:FC) [09:42:32:013]: Resetting cached policy values
    MSI (s) (C8:FC) [09:42:32:013]: Machine policy value 'Debug' is 0
    MSI (s) (C8:FC) [09:42:32:013]: ******* RunEngine:
               ******* Product: d:\2a5ed253bc29ba6b94c6f7\mp_ambits.msi
               ******* Action:
               ******* CommandLine: **********
    MSI (s) (C8:FC) [09:42:32:013]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (C8:FC) [09:42:32:045]: File will have security applied from OpCode.
    MSI (s) (C8:FC) [09:42:32:107]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'd:\2a5ed253bc29ba6b94c6f7\mp_ambits.msi' against software restriction policy
    MSI (s) (C8:FC) [09:42:32:107]: SOFTWARE RESTRICTION POLICY: d:\2a5ed253bc29ba6b94c6f7\mp_ambits.msi has a digital signature
    MSI (s) (C8:FC) [09:42:32:263]: SOFTWARE RESTRICTION POLICY: d:\2a5ed253bc29ba6b94c6f7\mp_ambits.msi is permitted to run at the 'unrestricted' authorization level.
    MSI (s) (C8:FC) [09:42:32:263]: End dialog not enabled
    MSI (s) (C8:FC) [09:42:32:263]: Original package ==> d:\2a5ed253bc29ba6b94c6f7\mp_ambits.msi
    MSI (s) (C8:FC) [09:42:32:263]: Package we're running from ==> C:\WINDOWS\Installer\2fe25ec.msi
    MSI (s) (C8:FC) [09:42:32:263]: APPCOMPAT: looking for appcompat database entry with ProductCode '{67E4DA28-0D51-433E-97E6-3FE0E5FB1194}'.
    MSI (s) (C8:FC) [09:42:32:263]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (C8:FC) [09:42:32:263]: MSCOREE not loaded loading copy from system32
    MSI (s) (C8:FC) [09:42:32:295]: Machine policy value 'TransformsSecure' is 1
    MSI (s) (C8:FC) [09:42:32:295]: Machine policy value 'DisablePatch' is 0
    MSI (s) (C8:FC) [09:42:32:295]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (C8:FC) [09:42:32:295]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (C8:FC) [09:42:32:295]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (C8:FC) [09:42:32:295]: APPCOMPAT: looking for appcompat database entry with ProductCode '{67E4DA28-0D51-433E-97E6-3FE0E5FB1194}'.
    MSI (s) (C8:FC) [09:42:32:295]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (C8:FC) [09:42:32:295]: Transforms are not secure.
    MSI (s) (C8:FC) [09:42:32:295]: Note: 1: 2205 2:  3: Control
    MSI (s) (C8:FC) [09:42:32:295]: Command Line: INSTALLDIR=C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware REBOOT=ReallySuppress CURRENTDIRECTORY=d:\2a5ed253bc29ba6b94c6f7 CLIENTUILEVEL=3 CLIENTPROCESSID=1784
    MSI (s) (C8:FC) [09:42:32:295]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{912936AC-5902-4A41-960D-DC6463AD0C06}'.
    MSI (s) (C8:FC) [09:42:32:295]: Product Code passed to Engine.Initialize:           ''
    MSI (s) (C8:FC) [09:42:32:295]: Product Code from property table before transforms: '{67E4DA28-0D51-433E-97E6-3FE0E5FB1194}'
    MSI (s) (C8:FC) [09:42:32:295]: Product Code from property table after transforms:  '{67E4DA28-0D51-433E-97E6-3FE0E5FB1194}'
    MSI (s) (C8:FC) [09:42:32:295]: Product not registered: beginning first-time install
    MSI (s) (C8:FC) [09:42:32:295]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
    MSI (s) (C8:FC) [09:42:32:295]: Entering CMsiConfigurationManager::SetLastUsedSource.
    MSI (s) (C8:FC) [09:42:32:295]: User policy value 'SearchOrder' is 'nmu'
    MSI (s) (C8:FC) [09:42:32:295]: Adding new sources is allowed.
    MSI (s) (C8:FC) [09:42:32:295]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
    MSI (s) (C8:FC) [09:42:32:295]: Package name extracted from package path: 'mp_ambits.msi'
    MSI (s) (C8:FC) [09:42:32:295]: Package to be registered: 'mp_ambits.msi'
    MSI (s) (C8:FC) [09:42:32:295]: Note: 1: 2729
    MSI (s) (C8:FC) [09:42:32:295]: Note: 1: 2729
    MSI (s) (C8:FC) [09:42:32:295]: Note: 1: 2262 2: AdminProperties 3: -2147287038
    MSI (s) (C8:FC) [09:42:32:295]: Machine policy value 'DisableMsi' is 1
    MSI (s) (C8:FC) [09:42:32:295]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (C8:FC) [09:42:32:295]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (C8:FC) [09:42:32:295]: Product installation will be elevated because user is admin and product is being installed per-machine.
    MSI (s) (C8:FC) [09:42:32:295]: Running product '{67E4DA28-0D51-433E-97E6-3FE0E5FB1194}' with elevated privileges: Product is assigned.
    MSI (s) (C8:FC) [09:42:32:295]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware'.
    MSI (s) (C8:FC) [09:42:32:295]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
    MSI (s) (C8:FC) [09:42:32:295]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'd:\2a5ed253bc29ba6b94c6f7'.
    MSI (s) (C8:FC) [09:42:32:295]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
    MSI (s) (C8:FC) [09:42:32:295]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '1784'.
    MSI (s) (C8:FC) [09:42:32:295]: TRANSFORMS property is now:
    MSI (s) (C8:FC) [09:42:32:295]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
    MSI (s) (C8:FC) [09:42:32:326]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\Application Data
    MSI (s) (C8:FC) [09:42:32:326]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\Favorites
    MSI (s) (C8:FC) [09:42:32:342]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\NetHood
    MSI (s) (C8:FC) [09:42:32:342]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\My Documents
    MSI (s) (C8:FC) [09:42:32:342]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\PrintHood
    MSI (s) (C8:FC) [09:42:32:357]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\Recent
    MSI (s) (C8:FC) [09:42:32:357]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\SendTo
    MSI (s) (C8:FC) [09:42:32:373]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\Templates
    MSI (s) (C8:FC) [09:42:32:373]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Application Data
    MSI (s) (C8:FC) [09:42:32:388]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\Local Settings\Application Data
    MSI (s) (C8:FC) [09:42:32:388]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\My Documents\My Pictures
    MSI (s) (C8:FC) [09:42:32:388]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
    MSI (s) (C8:FC) [09:42:32:388]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Startup
    MSI (s) (C8:FC) [09:42:32:404]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs
    MSI (s) (C8:FC) [09:42:32:404]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu
    MSI (s) (C8:FC) [09:42:32:420]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Desktop
    MSI (s) (C8:FC) [09:42:32:420]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\Start Menu\Programs\Administrative Tools
    MSI (s) (C8:FC) [09:42:32:420]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\Start Menu\Programs\Startup
    MSI (s) (C8:FC) [09:42:32:435]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\Start Menu\Programs
    MSI (s) (C8:FC) [09:42:32:435]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\Start Menu
    MSI (s) (C8:FC) [09:42:32:435]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator.GNTIBR\Desktop
    MSI (s) (C8:FC) [09:42:32:451]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Templates
    MSI (s) (C8:FC) [09:42:32:451]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
    MSI (s) (C8:FC) [09:42:32:451]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
    MSI (s) (C8:FC) [09:42:32:467]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
    MSI (s) (C8:FC) [09:42:32:467]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (C8:FC) [09:42:32:467]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Goldnet'.
    MSI (s) (C8:FC) [09:42:32:467]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (C8:FC) [09:42:32:467]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Goldnet TI'.
    MSI (s) (C8:FC) [09:42:32:467]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\WINDOWS\Installer\2fe25ec.msi'.
    MSI (s) (C8:FC) [09:42:32:467]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'd:\2a5ed253bc29ba6b94c6f7\mp_ambits.msi'.
    MSI (s) (C8:FC) [09:42:32:467]: Note: 1: 2205 2:  3: PatchPackage
    MSI (s) (C8:FC) [09:42:32:467]: Machine policy value 'DisableRollback' is 0
    MSI (s) (C8:FC) [09:42:32:467]: User policy value 'DisableRollback' is 0
    MSI (s) (C8:FC) [09:42:32:467]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
    === Logging started: 12/03/2009  09:42:32 ===
    MSI (s) (C8:FC) [09:42:32:467]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
    MSI (s) (C8:FC) [09:42:32:467]: Doing action: INSTALL
    MSI (s) (C8:FC) [09:42:32:467]: Running ExecuteSequence
    MSI (s) (C8:FC) [09:42:32:467]: Doing action: AppSearch
    Action start 09:42:32: INSTALL.
    Action start 09:42:32: AppSearch.
    MSI (s) (C8:FC) [09:42:32:482]: PROPERTY CHANGE: Adding MSI_INSTALLED property. Its value is 'C:\WINDOWS\system32\msi.dll'.
    MSI (s) (C8:FC) [09:42:32:482]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB914811 3: 2
    MSI (s) (C8:FC) [09:42:32:482]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB914882 3: 2
    MSI (s) (C8:FC) [09:42:32:482]: PROPERTY CHANGE: Adding DRWATSON20PATH property. Its value is '**********'.
    MSI (s) (C8:FC) [09:42:32:482]: Doing action: FindRelatedProducts
    Action ended 09:42:32: AppSearch. Return value 1.
    Action start 09:42:32: FindRelatedProducts.
    MSI (s) (C8:FC) [09:42:32:498]: PROPERTY CHANGE: Adding OLDERFOUND property. Its value is '{436028CD-6476-4224-9274-8F0320F30FD1}'.
    MSI (s) (C8:FC) [09:42:32:498]: Doing action: LaunchConditions
    Action ended 09:42:32: FindRelatedProducts. Return value 1.
    Action start 09:42:32: LaunchConditions.
    MSI (s) (C8:FC) [09:42:32:498]: Doing action: ValidateProductID
    Action ended 09:42:32: LaunchConditions. Return value 1.
    Action start 09:42:32: ValidateProductID.
    MSI (s) (C8:FC) [09:42:32:498]: Doing action: SetARPInstallLocation
    Action ended 09:42:32: ValidateProductID. Return value 1.
    MSI (s) (C8:FC) [09:42:32:513]: PROPERTY CHANGE: Adding ARPINSTALLLOCATION property. Its value is 'C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware'.
    Action start 09:42:32: SetARPInstallLocation.
    MSI (s) (C8:FC) [09:42:32:513]: Doing action: CostInitialize
    Action ended 09:42:32: SetARPInstallLocation. Return value 1.
    MSI (s) (C8:FC) [09:42:32:513]: Machine policy value 'MaxPatchCacheSize' is 10
    Action start 09:42:32: CostInitialize.
    MSI (s) (C8:FC) [09:42:32:529]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'd:\'.
    MSI (s) (C8:FC) [09:42:32:529]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
    MSI (s) (C8:FC) [09:42:32:529]: Note: 1: 2205 2:  3: Patch
    MSI (s) (C8:FC) [09:42:32:529]: Note: 1: 2205 2:  3: PatchPackage
    MSI (s) (C8:FC) [09:42:32:529]: Note: 1: 2205 2:  3: MsiPatchHeaders
    MSI (s) (C8:FC) [09:42:32:529]: Note: 1: 2205 2:  3: __MsiPatchFileList
    MSI (s) (C8:FC) [09:42:32:529]: Note: 1: 2205 2:  3: PatchPackage
    MSI (s) (C8:FC) [09:42:32:529]: Note: 1: 2228 2:  3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId` 
    MSI (s) (C8:FC) [09:42:32:529]: Doing action: FileCost
    Action ended 09:42:32: CostInitialize. Return value 1.
    MSI (s) (C8:FC) [09:42:32:529]: Note: 1: 2205 2:  3: MsiAssembly
    MSI (s) (C8:FC) [09:42:32:529]: Note: 1: 2205 2:  3: Class
    MSI (s) (C8:FC) [09:42:32:529]: Note: 1: 2205 2:  3: Extension
    MSI (s) (C8:FC) [09:42:32:529]: Note: 1: 2205 2:  3: TypeLib
    Action start 09:42:32: FileCost.
    MSI (s) (C8:FC) [09:42:32:529]: Doing action: CostFinalize
    Action ended 09:42:32: FileCost. Return value 1.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
    MSI (s) (C8:FC) [09:42:32:545]: Note: 1: 2205 2:  3: Patch
    MSI (s) (C8:FC) [09:42:32:545]: Note: 1: 2205 2:  3: Condition
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'd:\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'd:\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'd:\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding System64Folder property. Its value is 'd:\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding ProgramFiles64Folder property. Its value is 'd:\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding CommonFiles64Folder property. Its value is 'd:\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding InfFolder property. Its value is 'C:\WINDOWS\Inf\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding WindowsPolicyFolder property. Its value is 'C:\WINDOWS\Inf\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding WindowsTasksFolder property. Its value is 'C:\WINDOWS\Tasks\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding DriverFolder property. Its value is 'C:\WINDOWS\system32\Drivers\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding CommonAppDataMicrosoftFolder property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding AppDataFolder1 property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding AppDataFolder2 property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding AppDataFolder3 property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding MsMpAppDataFolder property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding LocalCopyFolder property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\LocalCopy\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding SupportFolder property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Support\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding ScanLocationFolder property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding ScanHistoryFolder property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\History\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding ScanResultsFolder property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\History\Results\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding ResultsSystemFolder property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\History\Results\System\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding ScanResourceFolder property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\History\Results\Resource\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding QuickResultsFolder property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\History\Results\Quick\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding ScanContextsFolder property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\History\Contexts\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding QuarantineLocationFolder property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Quarantine\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding SignatureRootFolder property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Definition Updates\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding Updates property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Definition Updates\Updates\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding Default property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Definition Updates\Default\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding Backup property. Its value is 'C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Definition Updates\Backup\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding StartMenuShortcutFolder property. Its value is 'C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Forefront\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding HomeDir1 property. Its value is 'C:\Program Files\Microsoft Forefront\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding HomeDir2 property. Its value is 'C:\Program Files\Microsoft Forefront\Client Security\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding HomeDir3 property. Its value is 'C:\Program Files\Microsoft Forefront\Client Security\Client\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding HomeDir property. Its value is 'C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Modifying INSTALLDIR property. Its current value is 'C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware'. Its new value: 'C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding Symbols property. Its value is 'C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\Symbols\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding DRIVERS property. Its value is 'C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\Drivers\'.
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding MPFILTER property. Its value is 'C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\Drivers\mpfilter\'.
    MSI (s) (C8:FC) [09:42:32:545]: Target path resolution complete. Dumping Directory table...
    MSI (s) (C8:FC) [09:42:32:545]: Note: target paths subject to change (via custom actions or browsing)
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: TARGETDIR , Object: d:\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: USERPROFILE , Object: d:\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: ALLUSERSPROFILE , Object: d:\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: TempFolder , Object: C:\DOCUME~1\ADMINI~1.GNT\LOCALS~1\Temp\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: System64Folder , Object: d:\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: System16Folder , Object: C:\WINDOWS\system\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: StartMenuFolder , Object: C:\Documents and Settings\All Users\Start Menu\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: ProgramFiles64Folder , Object: d:\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: LocalAppDataFolder , Object: C:\Documents and Settings\Administrator.GNTIBR\Local Settings\Application Data\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: CommonFilesFolder , Object: C:\Program Files\Common Files\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: CommonFiles64Folder , Object: d:\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: AppDataFolder , Object: C:\Documents and Settings\Administrator.GNTIBR\Application Data\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: WindowsFolder , Object: C:\WINDOWS\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: InfFolder , Object: C:\WINDOWS\Inf\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: WindowsPolicyFolder , Object: C:\WINDOWS\Inf\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: WindowsTasksFolder , Object: C:\WINDOWS\Tasks\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: SystemFolder , Object: C:\WINDOWS\system32\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: DriverFolder , Object: C:\WINDOWS\system32\Drivers\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: CommonAppDataFolder , Object: C:\Documents and Settings\All Users\Application Data\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: CommonAppDataMicrosoftFolder , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: AppDataFolder1 , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: AppDataFolder2 , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: AppDataFolder3 , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: MsMpAppDataFolder , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: LocalCopyFolder , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\LocalCopy\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: SupportFolder , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Support\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: ScanLocationFolder , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: ScanHistoryFolder , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\History\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: ScanResultsFolder , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\History\Results\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: ResultsSystemFolder , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\History\Results\System\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: ScanResourceFolder , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\History\Results\Resource\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: QuickResultsFolder , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\History\Results\Quick\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: ScanContextsFolder , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Scans\History\Contexts\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: QuarantineLocationFolder , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Quarantine\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: SignatureRootFolder , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Definition Updates\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: Updates , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Definition Updates\Updates\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: Default , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Definition Updates\Default\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: Backup , Object: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\Definition Updates\Backup\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: ProgramMenuFolder , Object: C:\Documents and Settings\All Users\Start Menu\Programs\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: StartMenuShortcutFolder , Object: C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Forefront\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: HomeDir1 , Object: C:\Program Files\Microsoft Forefront\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: HomeDir2 , Object: C:\Program Files\Microsoft Forefront\Client Security\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: HomeDir3 , Object: C:\Program Files\Microsoft Forefront\Client Security\Client\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: HomeDir , Object: C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: Symbols , Object: C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\Symbols\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: DRIVERS , Object: C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\Drivers\
    MSI (s) (C8:FC) [09:42:32:545]: Dir (target): Key: MPFILTER , Object: C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\Drivers\mpfilter\
    MSI (s) (C8:FC) [09:42:32:545]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
    MSI (s) (C8:FC) [09:42:32:560]: Note: 1: 2205 2:  3: MsiAssembly
    MSI (s) (C8:FC) [09:42:32:560]: Note: 1: 2228 2:  3: MsiAssembly 4:  SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`,  `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE  `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
    Action start 09:42:32: CostFinalize.
    MSI (s) (C8:FC) [09:42:34:123]: Skipping action: SetFindFileParams (condition is false)
    MSI (s) (C8:FC) [09:42:34:123]: Skipping action: FindGDIPlusFile (condition is false)
    MSI (s) (C8:FC) [09:42:34:123]: Skipping action: GDIPlusError (condition is false)
    MSI (s) (C8:FC) [09:42:34:123]: Doing action: MigrateFeatureStates
    Action ended 09:42:32: CostFinalize. Return value 1.
    Action start 09:42:34: MigrateFeatureStates.
    MSI (s) (C8:FC) [09:42:34:154]: Doing action: InstallValidate
    Action ended 09:42:34: MigrateFeatureStates. Return value 0.
    Action start 09:42:34: InstallValidate.
    MSI (s) (C8:FC) [09:42:34:154]: Feature: MSMPService; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MSASCuiExe; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: AVPlugin; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpEngine_Default; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpAS_Sigs_Base_Default; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpAS_Sigs_Delta_Default; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpAV_Sigs_Base_Default; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpAV_Sigs_Delta_Default; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: HelpFileChm; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpSoftExDll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MsMpResDll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MsMpComDllPreVista; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: EventDll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MPFILTER; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: OfficeAVDll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpRtMonDll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpService; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpSvcDll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpClientDll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpUtilDll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MsMpLicsDll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpAsDescDll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpCmdRunExe; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MpSigDwn; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: StartupKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: RtpEventSourceKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: RtpEventMessageFileRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: RtpParameterMessageFileRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: RtpEventTypeFlagRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: SoftwareExplorersShellCommandObjectKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: SoftwareExplorersLinkNameRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: SoftwareExplorersInfoTipRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: SoftwareExplorersLinkIconRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: SoftwareExplorersCommandRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: SoftwareExplorersAttributesRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: SoftwareExplorersNamespaceKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: SoftwareExplorersNameRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MsMpComDllVista; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (C8:FC) [09:42:34:154]: Component: MsMpComAppIdRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: MalwareProtectionKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: InstallLocationRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: ProductUpdateAvailableRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: RealTimeProtectionKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: CheckpointsKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: ScanKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: AutoCleanAfterScanRegistry; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (C8:FC) [09:42:34:154]: Component: AutomaticUpdatesRegistry; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (C8:FC) [09:42:34:154]: Component: QuarantineKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: ReportingKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: SoftwareExplorersKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: SignatureUpdatesKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:154]: Component: SpyNetKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: SpyNetReportingRegistry; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (C8:FC) [09:42:34:170]: Component: SpyNetReportingLocationRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: ThreatsKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: ThreatIDDefaultActionKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: ThreatTypeDefaultActionKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: ThreatSeverityDefaultActionKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: ExclusionsKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: ExclusionsExtensionsKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: ExclusionsPathsKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: ExclusionsProcessesKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: UXConfigurationKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MiscellaneousConfigurationKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: OfficeAV1Registry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: OfficeAV2Registry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: OfficeAV3Registry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: OfficeAV8Registry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: OfficeAV4Registry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: OfficeAV5Registry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: OfficeAV6Registry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: OfficeAV7Registry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: OfficeAvPolicyKeyRegistry_PreVista; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: OfficeAvPolicyKeyRegistry_Vista; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (C8:FC) [09:42:34:170]: Component: SampleSubmissionEventKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: SampleSubmissionEventMessageFileRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: SampleSubmissionTypesSupportedRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MinimalSafeBootKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MinimalSafeBootEntryRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: NetworkSafeBootKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: NetworkSafeBootEntryRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: EventSourceKeyRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: ServiceEventMessageFileRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: ServiceParameterMessageFileRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: EventTypeFlagRegistry; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MSASCuiExeManifestRemoval; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MpQuarantineLocation; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MpSupportLocation; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MpLocalCopyLocation; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MpScheduledJobs_Scan; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MpScheduledJobs_SignatureUpdate; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: InstallDirLocation; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MpAppDataLocation; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MpSignatureLocation; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MpSignatureLocationBackup; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MpSignatureLocationDefault; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MpSignatureLocationUpdates; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: MpScanLocation; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __MSASCuiExe65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __MPFILTER65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __StartupKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __RtpEventSourceKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __RtpEventMessageFileRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __RtpParameterMessageFileRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __RtpEventTypeFlagRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SoftwareExplorersShellCommandObjectKeyRe65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SoftwareExplorersLinkNameRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SoftwareExplorersInfoTipRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SoftwareExplorersLinkIconRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SoftwareExplorersCommandRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SoftwareExplorersAttributesRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SoftwareExplorersNamespaceKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SoftwareExplorersNameRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __MsMpComDllPreVista65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __MsMpComDllVista65; Installed: Null;   Request: Local;   Action: Null
    MSI (s) (C8:FC) [09:42:34:170]: Component: __MsMpComAppIdRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __MalwareProtectionKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __InstallLocationRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __ProductUpdateAvailableRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __RealTimeProtectionKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __CheckpointsKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __ScanKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __AutoCleanAfterScanRegistry65; Installed: Null;   Request: Local;   Action: Null
    MSI (s) (C8:FC) [09:42:34:170]: Component: __AutomaticUpdatesRegistry65; Installed: Null;   Request: Local;   Action: Null
    MSI (s) (C8:FC) [09:42:34:170]: Component: __QuarantineKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __ReportingKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SoftwareExplorersKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SignatureUpdatesKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SpyNetKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SpyNetReportingRegistry65; Installed: Null;   Request: Local;   Action: Null
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SpyNetReportingLocationRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __ThreatsKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __ThreatIDDefaultActionKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __ThreatTypeDefaultActionKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __ThreatSeverityDefaultActionKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __ExclusionsKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __ExclusionsExtensionsKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __ExclusionsPathsKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __ExclusionsProcessesKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __UXConfigurationKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __MiscellaneousConfigurationKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __OfficeAVDll65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __OfficeAV1Registry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __OfficeAV2Registry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __OfficeAV3Registry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __OfficeAV8Registry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __OfficeAV4Registry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __OfficeAV5Registry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __OfficeAV6Registry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __OfficeAV7Registry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __OfficeAvPolicyKeyRegistry_PreVista65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __OfficeAvPolicyKeyRegistry_Vista65; Installed: Null;   Request: Local;   Action: Null
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SampleSubmissionEventKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SampleSubmissionEventMessageFileRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __SampleSubmissionTypesSupportedRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __MinimalSafeBootKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __MinimalSafeBootEntryRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __NetworkSafeBootKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __NetworkSafeBootEntryRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __EventSourceKeyRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __ServiceEventMessageFileRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __ServiceParameterMessageFileRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Component: __EventTypeFlagRegistry65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (C8:FC) [09:42:34:170]: Note: 1: 2205 2:  3: BindImage
    MSI (s) (C8:FC) [09:42:34:170]: Note: 1: 2205 2:  3: ProgId
    MSI (s) (C8:FC) [09:42:34:170]: Note: 1: 2205 2:  3: PublishComponent
    MSI (s) (C8:FC) [09:42:34:170]: Note: 1: 2205 2:  3: SelfReg
    MSI (s) (C8:FC) [09:42:34:170]: Note: 1: 2205 2:  3: Extension
    MSI (s) (C8:FC) [09:42:34:170]: Note: 1: 2205 2:  3: Font
    MSI (s) (C8:FC) [09:42:34:170]: Note: 1: 2205 2:  3: Class
    MSI (s) (C8:FC) [09:42:34:185]: Note: 1: 2205 2:  3: _RemoveFilePath
    MSI (s) (C8:FC) [09:42:34:467]: Note: 1: 2318 2: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\LocalCopy\{00BC64CE-CE85-4497-B9D2-48647FDCAA1F}-{1B35E400-1DBA-48DC-9FA4-29C17E78235B}-{128F37F3-67B3-44F6-8207-1C9E8C6870ED}-{12FCD505-2B7C-4AE2-8975-2DE7504EF857}-pyrhegj.d
    DEBUG: Error 2318:  File does not exist: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\LocalCopy\{00BC64CE-CE85-4497-B9D2-48647FDCAA1F}-{1B35E400-1DBA-48DC-9FA4-29C17E78235B}-{128F37F3-67B3-44F6-8207-1C9E8C6870ED}-{12FCD505-2B7C-4AE2-8975-2DE7504EF857}-pyrhegj.d
    MSI (s) (C8:FC) [09:42:34:467]: Product: Microsoft Forefront Client Security Antimalware Service -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2318. The arguments are: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\LocalCopy\{00BC64CE-CE85-4497-B9D2-48647FDCAA1F}-{1B35E400-1DBA-48DC-9FA4-29C17E78235B}-{128F37F3-67B3-44F6-8207-1C9E8C6870ED}-{12FCD505-2B7C-4AE2-8975-2DE7504EF857}-pyrhegj.d, ,

    Action ended 09:42:34: InstallValidate. Return value 3.
    Action ended 09:42:34: INSTALL. Return value 3.
    MSI (s) (C8:FC) [09:42:34:498]: Cleaning up uninstalled install packages, if any exist
    MSI (s) (C8:FC) [09:42:34:498]: MainEngineThread is returning 1603
    === Logging stopped: 12/03/2009  09:42:34 ===
    MSI (c) (F8:48) [09:42:34:607]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (c) (F8:48) [09:42:34:623]: MainEngineThread is returning 1603
    === Verbose logging stopped: 12/03/2009  09:42:34 ===


    Regards,

    Emerson Moraes
    Thursday, March 12, 2009 3:15 PM

All replies

  • Hi Emerson,

    I believe the issue you are having is related to the MSI trying to remove this file:

    C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\LocalCopy\{00BC64CE-CE85-4497-B9D2-48647FDCAA1F}-{1B35E400-1DBA-48DC-9FA4-29C17E78235B}-{128F37F3-67B3-44F6-8207-1C9E8C6870ED}-{12FCD505-2B7C-4AE2-8975-2DE7504EF857}-pyrhegj.d

    In this case it is failing because the path name has exceeded the maximum amount of characters. Because this is an issue with the Win32 API trying to delete this file through the command shell or explorer.exe will not work. To fix this issue from a Vista or Window 7 computer map a drive to the C$ admin share of the computer that is having trouble installing the update. Using the remote share navigate to \Documents and Settings\All Users\Application Data\Microsoft\Microsoft Forefront\Client Security\Client\Antimalware\LocalCopy\ and delete the contents of this Directory. After completing this please try and rerun the installation.

    If this doesn’t resolve your issue you may want to consider opening up a support Case With Microsoft Product Support. You can start that process here http://support.microsoft.com/

    Thanks

    Chris

    Monday, April 19, 2010 4:49 PM