[wix-users] OfficeScan Virus pop-up while installing Custom BA Setup in XP

Tue Oct 10 03:55:43 PDT 2017

Hi,

Thanks for the update. Now I signed the MSI and setup like mentioned in
below link with proper digital certificate.
http://wixtoolset.org/documentation/manual/v3/overview/insignia.html

But still getting same issue. WiX Burn creating the below registry entry at
the time of installation. The Anti-virus consider this as malware
activities and blocks the setup.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{GUID}

Please share any solution for this.

On Fri, Aug 4, 2017 at 4:39 PM, Kaveesh Dashora <kaveeshd at googlemail.com>
wrote:

> You need a code signing certificate...
>
> See here for more details on code signing.
>
> https://msdn.microsoft.com/en-us/library/ms537361(v=vs.85).aspx
>
> On 04-Aug-2017 3:44 PM, "Periyasamy Chinnu" <biggodannauniv at gmail.com>
> wrote:
>
> > Thanks for the reply.
> >
> > I done the following, but still getting same error.
> >
> > 1. Created pfx key in my development machine
> > 2. Signed the installer using insignia by adding command in project file.
> > 3. Imported the certificate(from .pfx file) under "Trusted Root
> Certication
> > Authorities\Local Computer" using IE->Internet
> > Options->Content->Certificates option in issue reproducing machine(Win
> XP).
> > 4. In installer properties window, digital signature information is
> showing
> > as "The digital signature is OK"
> > 5. Now trying to install the setup, but still getting same error.
> >
> > Is anything I missed or my approach is wrong? Please advise.
> >
> > On Fri, Aug 4, 2017 at 1:56 PM, Kaveesh Dashora <kaveeshd at googlemail.com
> >
> > wrote:
> >
> > > Try signing the installer. Use insignia for signing.
> > >
> > > On 04-Aug-2017 12:58 PM, "Periyasamy Chinnu" <biggodannauniv at gmail.com
> >
> > > wrote:
> > >
> > > > Hi,
> > > >
> > > > Created Burn based installer using WiX v3.11. On installation trigger
> > > Trend
> > > > Micro OfficeScan and it says "*OfficeScan detected a behavior
> > monitoring
> > > > policy violation and blocked the process(es)*" in *Windows XP*
> machine.
> > > The
> > > > virus checker terminates the installer immediately and leaves an
> entry
> > in
> > > > the Installed Programs control panel list even though the software is
> > not
> > > > installed.
> > > >
> > > > I also created installer with InstallShield. The setup created using
> > > > InstallShield is installed without virus issue.
> > > >
> > > > Please share any suggestion for this?
> > > >
> > > > Here is the installer Log:
> > > >
> > > > [1394:13A0][2017-08-04T12:17:57]i300: Apply begin
> > > > [15E8:0520][2017-08-04T12:17:58]i358: Pausing automatic updates.
> > > > [15E8:0520][2017-08-04T12:17:58]i359: Paused automatic updates.
> > > > [15E8:0520][2017-08-04T12:17:58]i360: Creating a system restore
> point.
> > > > [15E8:0520][2017-08-04T12:18:27]i361: Created a system restore
> point.
> > > > [15E8:0520][2017-08-04T12:18:27]i370: Session begin, registration
> key:
> > > > SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{
> > > > 56cf970e-b524-4bc7-ad7e-8675e1b708e1},
> > > > options: 0x7, disable resume: No
> > > > [15E8:0520][2017-08-04T12:18:32]i000: Caching bundle from:
> > > > 'C:\DOCUME~1\USERO~1\LOCALS~1\Temp\{0DC68D50-CC8C-4E86-8739-
> > > > 024AAEE30E46}\.be\MyMBAInstaller.exe'
> > > > to: 'C:\Documents and Settings\All Users\Application Data\Package
> > > > Cache\{56cf970e-b524-4bc7-ad7e-8675e1b708e1}\MyMBAInstaller.exe'
> > > > [15E8:0520][2017-08-04T12:18:33]i320: Registering bundle dependency
> > > > provider: {56cf970e-b524-4bc7-ad7e-8675e1b708e1}, version: 1.0.0.0
> > > > [15E8:0520][2017-08-04T12:18:33]i371: Updating session, registration
> > > key:
> > > > SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{
> > > > 56cf970e-b524-4bc7-ad7e-8675e1b708e1},
> > > > resume: Active, restart initiated: No, disable resume: No
> > > > [1394:13A0][2017-08-04T12:18:33]e000: Error 0x800700e8: Failed to
> > write
> > > > message type to pipe.
> > > > [1394:13A0][2017-08-04T12:18:33]e000: Error 0x800700e8: Failed to
> > write
> > > > send message to pipe.
> > > > [1394:13A0][2017-08-04T12:18:33]e000: Error 0x800700e8: Failed to
> send
> > > > BURN_ELEVATION_MESSAGE_TYPE_PROCESS_DEPENDENT_REGISTRATION message
> to
> > > > per-machine process.
> > > > [1394:13A0][2017-08-04T12:18:33]e000: Error 0x800700e8: Failed to
> > > execute
> > > > dependent registration action.
> > > > [1394:13A0][2017-08-04T12:18:33]e000: Error 0x800700e8: Failed to
> > write
> > > > message type to pipe.
> > > > [1394:13A0][2017-08-04T12:18:33]e000: Error 0x800700e8: Failed to
> > write
> > > > send message to pipe.
> > > > [1394:13A0][2017-08-04T12:18:33]e000: Error 0x800700e8: Failed to
> send
> > > > message to per-machine process.
> > > > [1394:13A0][2017-08-04T12:18:33]e000: Error 0x800700e8: Failed to
> save
> > > > engine state in per-machine process.
> > > > [1394:13A0][2017-08-04T12:18:33]e501: The state file could not be
> > saved,
> > > > error: 0x12f7d0. Continuing...
> > > > [1394:13C4][2017-08-04T12:18:35]e000: Error 0x800700e8: Failed to
> > write
> > > > message type to pipe.
> > > > [1394:13C4][2017-08-04T12:18:35]e000: Error 0x800700e8: Failed to
> > write
> > > > send message to pipe.
> > > > [1394:13C4][2017-08-04T12:18:35]e000: Error 0x800700e8: Failed to
> send
> > > > BURN_ELEVATION_MESSAGE_TYPE_CACHE_OR_LAYOUT_CONTAINER_OR_PAYLOAD
> > message
> > > > to
> > > > per-machine process.
> > > > [1394:13C4][2017-08-04T12:18:35]e314: Failed to cache payload:
> > > > MyMBAMSIPackage.msi from working path:
> > > > C:\DOCUME~1\USERO~1\LOCALS~1\Temp\{0DC68D50-CC8C-4E86-8739-
> > > > 024AAEE30E46}\MyMBAMSIPackage.msi,
> > > > error: 0x800700e8.
> > > > [1394:13C4][2017-08-04T12:18:35]e349: Application requested retry of
> > > > payload: MyMBAMSIPackage.msi, encountered error: 0x800700e8.
> > Retrying...
> > > > [1394:13C4][2017-08-04T12:18:39]e000: Error 0x800700e8: Failed to
> > write
> > > > message type to pipe.
> > > > [1394:13C4][2017-08-04T12:18:39]e000: Error 0x800700e8: Failed to
> > write
> > > > send message to pipe.
> > > > [1394:13C4][2017-08-04T12:18:39]e000: Error 0x800700e8: Failed to
> send
> > > > BURN_ELEVATION_MESSAGE_TYPE_CACHE_OR_LAYOUT_CONTAINER_OR_PAYLOAD
> > message
> > > > to
> > > > per-machine process.
> > > > [1394:13C4][2017-08-04T12:18:39]e314: Failed to cache payload:
> > > > MyMBAMSIPackage.msi from working path:
> > > > C:\DOCUME~1\USERO~1\LOCALS~1\Temp\{0DC68D50-CC8C-4E86-8739-
> > > > 024AAEE30E46}\MyMBAMSIPackage.msi,
> > > > error: 0x800700e8.
> > > > [1394:13C4][2017-08-04T12:18:39]e349: Application requested retry of
> > > > payload: MyMBAMSIPackage.msi, encountered error: 0x800700e8.
> > Retrying...
> > > > [1394:13C4][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed to
> > write
> > > > message type to pipe.
> > > > [1394:13C4][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed to
> > write
> > > > send message to pipe.
> > > > [1394:13C4][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed to
> send
> > > > BURN_ELEVATION_MESSAGE_TYPE_CACHE_OR_LAYOUT_CONTAINER_OR_PAYLOAD
> > message
> > > > to
> > > > per-machine process.
> > > > [1394:13C4][2017-08-04T12:18:43]e314: Failed to cache payload:
> > > > MyMBAMSIPackage.msi from working path:
> > > > C:\DOCUME~1\USERO~1\LOCALS~1\Temp\{0DC68D50-CC8C-4E86-8739-
> > > > 024AAEE30E46}\MyMBAMSIPackage.msi,
> > > > error: 0x800700e8.
> > > > [1394:13C4][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed to
> > write
> > > > message type to pipe.
> > > > [1394:13C4][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed to
> > write
> > > > send message to pipe.
> > > > [1394:13C4][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed to
> send
> > > > BURN_ELEVATION_MESSAGE_TYPE_CACHE_CLEANUP message to per-machine
> > > process.
> > > > [1394:13A0][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed while
> > > > caching, aborting execution.
> > > > [1394:13A0][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed to
> > write
> > > > message type to pipe.
> > > > [1394:13A0][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed to
> > write
> > > > send message to pipe.
> > > > [1394:13A0][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed to
> send
> > > > message to per-machine process.
> > > > [1394:13A0][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed to
> end
> > > > session in per-machine process.
> > > > [1394:13A0][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed to
> > write
> > > > message type to pipe.
> > > > [1394:13A0][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed to
> > write
> > > > send message to pipe.
> > > > [1394:13A0][2017-08-04T12:18:43]e000: Error 0x800700e8: Failed to
> send
> > > > message to per-machine process.
> > > > [1394:13A0][2017-08-04T12:18:43]i399: Apply complete, result:
> > > 0x800700e8,
> > > > restart: None, ba requested restart:  No
> > > >
> > > > ____________________________________________________________________
> > > > WiX Toolset Users Mailing List provided by FireGiant
> > > > http://www.firegiant.com/
> > > >
> > >
> > > ____________________________________________________________________
> > > WiX Toolset Users Mailing List provided by FireGiant
> > > http://www.firegiant.com/
> > >
> >
> > ____________________________________________________________________
> > WiX Toolset Users Mailing List provided by FireGiant
> > http://www.firegiant.com/
> >
>
> ____________________________________________________________________
> WiX Toolset Users Mailing List provided by FireGiant
> http://www.firegiant.com/
>