Software Deployment

The problem is the same customized Msi is behaving differently when installed. There are two scenarios

1. The customized Msi installs with all the below mentioned registry entries with required values

In this scenario the “Virus Console shortcut” window has 6 tasks ( 2 additional being Scan All Fixed Disks and AutoUpdate). There is no problem with this shortcut as the registry entry
[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\Vshield\E-Mail Scan\ActionOptions]
szMoveFolder = Quarantine


The problem is with the shortcut Virusscan On-Demand scan, once this shortcut is clicked the application self heals and finally the shortcut launches flushing the above registry entry “szMoveFolder” thus leaving the Move To Folder in the “On Delivery Email scan” task in the Virusscan Console.

FYI

Eventlog shows the application is in search of

EventId 1004

HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Enterprise\CurrentVersion\Tasks\{818C7543-358A-4C84-899A-14334EMS4BGS}\ \dwProgramHeuristicsLevel does not exist.
Component - DefaultOnDemandScanTask_REG
Feature - OnDemandScanner

2. The customized Msi installs with all the below mentioned registry entries but no values
In this scenario the “Virus Console shortcut” window has 4 tasks as in the original media, but the “szMoveFolder” ( path as mentioned above) registry value is blank. I tried to create a script that edits the registry and adds value to the “szMoveFolder” as Quarantine.This seems to work

As both these scenarios are being caused by the same customized Msi and we are not sure on which installation which scenario occurs.

The only notable change I remember doing in the customization is deleting a component – RemoveCurrentUser_REG having HKCU entry.

Key: HKCU\SOFTWARE\Network Associates\TVD\Shared Components\On Demand Scanner Name : ‘-‘
‘-‘ Uninstall Only
Key: HKCU\SOFTWARE\Network Associates\TVD\VirusScan Enterprise Name: ‘-‘
‘-‘ Uninstall Only