The problem is the same customized Msi is behaving differently when installed. There are two scenarios

1. The customized Msi installs with all the below mentioned registry entries with required values

In this scenario the “Virus Console shortcut” window has 6 tasks ( 2 additional being Scan All Fixed Disks and AutoUpdate). There is no problem with this shortcut as the registry entry
[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\Vshield\E-Mail Scan\ActionOptions]
szMoveFolder = Quarantine


The problem is with the shortcut Virusscan On-Demand scan, once this shortcut is clicked the application self heals and finally the shortcut launches flushing the above registry entry “szMoveFolder” thus leaving the Move To Folder in the “On Delivery Email scan” task in the Virusscan Console.

FYI

Eventlog shows the application is in search of

EventId 1004

HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Enterprise\CurrentVersion\Tasks\{818C7543-358A-4C84-899A-14334EMS4BGS}\ \dwProgramHeuristicsLevel does not exist.
Component - DefaultOnDemandScanTask_REG
Feature - OnDemandScanner

2. The customized Msi installs with all the below mentioned registry entries but no values
In this scenario the “Virus Console shortcut” window has 4 tasks as in the original media, but the “szMoveFolder” ( path as mentioned above) registry value is blank. I tried to create a script that edits the registry and adds value to the “szMoveFolder” as Quarantine.This seems to work

As both these scenarios are being caused by the same customized Msi and we are not sure on which installation which scenario occurs.

The only notable change I remember doing in the customization is deleting a component – RemoveCurrentUser_REG having HKCU entry.

Key: HKCU\SOFTWARE\Network Associates\TVD\Shared Components\On Demand Scanner Name : ‘-‘
‘-‘ Uninstall Only
Key: HKCU\SOFTWARE\Network Associates\TVD\VirusScan Enterprise Name: ‘-‘
‘-‘ Uninstall Only
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Answers

0
Are we talking about McAfee VirusScan 8.0i?
How did you customize the msi, with the McAfee Installation Designer?
I'd recommend that absolutely!
We had problems with the virus signature update mechanism when customizing the msi another way...
Answered 08/31/2005 by: rpfenninger
Second Degree Green Belt

Please log in to comment
0
Ya. It's McAfee Virusscan 8.0i

We customized using Installshield.
Can u elaborate on virus signature update.....?
Answered 09/01/2005 by: charan
Orange Belt

Please log in to comment
0
We've had the problem that we had to update the virus signature at least once manually so that the scheduled updates worked properly. The error message in the event viewer said something like 'could not save the scheduler information'.

Now we customized the installation with the McAfee Installation Designer together with a consultant from a McAfee Partner. Unfortunately he had very little desktop engineering know-how. So we ended up with the whole directory structure to put to our source directory instead of just the msi. However, better that way than having problems with the anti virus.
Answered 09/01/2005 by: rpfenninger
Second Degree Green Belt

Please log in to comment
0
Hi charan:

I believe you have customised the MSI using installshield , I believe that's not considered as a best practise for repackaging. As rpf mentioned about Mcafee Installation Designer kindly use it to customised the installation.
Answered 09/02/2005 by: wiseapp
Second Degree Green Belt

Please log in to comment
0
rpfenninger, We are having the exact same problem error and all. I did use McAfee Installation Designer. Even when I manually update the PC some still do not seem to update automatically. However 90% of the other machines are just fine.... Do you recall what all you did?

Thanks!!
Answered 09/21/2005 by: mnfazer
Yellow Belt

Please log in to comment
Answer this question or Comment on this question for clarity