CPM Deployment fails for XP systems that were in-place upgrades

Usage and Config Security
1

(imported topic written by JasonBigham91)

The entire client site is done; over 90 nodes. There are 4 that simply fail every time for Trend CPM deployment with an informative “-13 = Unknown Error” in the logs.

One thing I noted is these machines were clearly upgraded in place at some point in the past, as they all have a C:\winnt folder with everything you would expect OS wise, but the c:\windows folders is all but empty (also expected for an in-place OS upgrade).

Any ideas if the Trend CPM deployment would fail given the above?

2

(imported comment written by JasonBigham91)

InstallResult

StartTime=2010/03/12 08:52:58

Status=3

Error=-13

InstallShieldErr=0

FinishTime=2010/03/12 08:54:56

3

(imported comment written by JasonBigham91)

3-12-2010

08:53:46

Operating system is Windows NT.

OSMAJOR => 5.1

OSMINOR => 5.1

WINMAJOR => 5.1

WINMINOR => 5.1

SRCDIR => C:\Temp\ClnExtor\CPM\Disk1\

SUPPORTDIR => C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\

WINDIR => C:\WINNT\

WINSYSDIR => C:\WINNT\system32\

Initialize SUPPORTDIR files

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\CpmConfig_import_10.ini

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\CpmConfig_import_15.ini

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\CPM_default.reg

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\CPM_import_10.reg

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\CPM_import_15.reg

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\default.pal

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\DIFxData.ini

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\FontData.ini

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\isrt.dll

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\license.txt

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\Ofcscan_import_10.ini

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\Ofcscan_import_15.ini

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\PfwDefaultRules.ini

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\ServerHandle.dll

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\setup.inx

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\SetupIO.dll

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\SetUtil.dll

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\StringTable-0009-English.ips

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\tmdbg20.dll

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\TmUninst.dll

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\tmuninst.exe

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}\tmuninst.ptn

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}_IsRes.dll

C:\WINNT\TEMP{6B9490AB-8283-4711-B35F-1A5A3F6EA52E}{149F977D-A1C1-474D-B553-722A536436E7}_ISUser.dll

…

4

(imported comment written by JasonBigham91)

3-12-2010

08:54:14

Operating system is Windows NT.

OSMAJOR => 5.1

OSMINOR => 5.1

WINMAJOR => 5.1

WINMINOR => 5.1

SRCDIR => C:\Temp\ClnExtor\PCCNT\DISK1\

SUPPORTDIR => C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\

WINDIR => C:\WINNT\

WINSYSDIR => C:\WINNT\system32\

Initialize SUPPORTDIR files

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\default.pal

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\DIFxData.ini

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\FontData.ini

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\HWCheck.dll

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\isrt.dll

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\license.txt

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\OVScan.dll

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\Pwd.dll

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\ScanMsg.dll

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\ServerHandle.dll

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\setup.inx

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\SetupIO.dll

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\SetUtil.dll

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\StringTable-0009-English.ips

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\tmdbg20.dll

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}_IsRes.dll

C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}_ISUser.dll

CheckRequirements

nvMajor=5, nvMinor=1

CheckRequirements

XP Platform. Check is it need to reboot.

CheckRequirements

Load one DLL => Path : C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\ Fname : SETUTIL.DLL

InternalCopyOneFile

Copy One file=> SRCDIR : C:\Temp\ClnExtor\PCCNT\DISK1\ TARDIR : C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\ SRCFNAME : OFCSCAN.INI TARFNAME : OFCSCAN.INI

InternalCopyOneFile

Load one DLL => Path : C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\ Fname : SETUPIO.DLL

InternalCopyOneFile

StandAlone version => SRCDIR : C:\Temp\ClnExtor\PCCNT\DISK1…

InternalCopyOneFile

CMDLINE : -008

InternalCopyOneFile

Copy One file=> SRCDIR : C:\Temp\ClnExtor\PCCNT\DISK1… TARDIR : C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\ SRCFNAME : OFCSCAN.INI TARFNAME : OFCSCAN.INI

InternalCopyOneFile

Load one DLL => Path : C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\ Fname : SETUPIO.DLL

InternalCopyOneFile

Load one DLL => Path : C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\ Fname : serverhandle.dll

Has AntiVirus installed

-1

Has AntiVirus installed

1, 1

InternalCopyOneFile

Load one DLL => Path : C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\ Fname : hwcheck.dll

InternalCopyOneFile

Boot drive => C:\

InternalCopyOneFile

Default Path => C:\Program Files\Trend Micro\OfficeScan Client

InternalCopyOneFile

User-specific Path => C:\Program Files\Trend Micro\OfficeScan Client

InternalCopyOneFile

Client Deploy port => 21112

InternalCopyOneFile

PrescanNotAbort flag set from parameter

CheckOldVersionOrExist

Load one DLL => Path : C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\ Fname : SETUPIO.DLL

CheckOldVersionOrExist

Load one DLL => Path : C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\ Fname : SETUPIO.DLL

InternalCopyOneFile

Copy One file=> SRCDIR : C:\Temp\ClnExtor\PCCNT\DISK1…\ADMIN TARDIR : C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\ SRCFNAME : tmdbg20.dll TARFNAME : tmdbg20.dll

InternalCopyOneFile

Load one DLL => Path : C:\WINNT\TEMP{5048AEBD-C193-48BB-81E0-3B74E29D5391}{6A8804AF-A6E7-4775-BAA3-E11E76A8EF50}\ Fname : SETUPIO.DLL

InternalCopyOneFile

Old product found => Norton AntiVirus 2002 NT

InternalCopyOneFile

Key checking expire

5

(imported comment written by JasonBigham91)

cmnunins_CommonUninstall.cpp(55) 03/12 08:54:53 79c-dac

Uninstall==>Product1

http://TrendOfficeScan95Client_V3.1x

Uninstall == 0

cmnunins_CommonUninstall.cpp(55) 03/12 08:54:53 79c-dac

Uninstall==>Product2

http://TrendOfficeScan95Client_V3.5

Uninstall == 0

cmnunins_CommonUninstall.cpp(55) 03/12 08:54:53 79c-dac

Uninstall==>Product3

http://TrendOfficeScanNTClient_V3.1x

Uninstall == 0

cmnunins_CommonUninstall.cpp(55) 03/12 08:54:53 79c-dac

Uninstall==>Product4

http://TrendOfficeScanNTClient_V3.5

Uninstall == 0

cmnunins_CommonUninstall.cpp(55) 03/12 08:54:53 79c-dac

Uninstall==>Product5

PccillinCorpNTClient

Uninstall == 0

cmnunins_CommonUninstall.cpp(55) 03/12 08:54:53 79c-dac

Uninstall==>Product6

PccillinCorp95Client

Uninstall == 0

cmnunins_CommonUninstall.cpp(55) 03/12 08:54:53 79c-dac

Uninstall==>Product7

http://TrendOfficeScanNTClient_V6.5

Uninstall == 0

cmnunins_CommonUninstall.cpp(55) 03/12 08:54:53 79c-dac

Uninstall==>Product8

http://TrendOfficeScanNTClient_V7.0

Uninstall == 0

cmnunins_CommonUninstall.cpp(55) 03/12 08:54:53 79c-dac

Uninstall==>Product9

http://TrendOfficeScanNTClient_V8.0

Uninstall == 0

cmnunins_CommonUninstall.cpp(55) 03/12 08:54:53 79c-dac

Uninstall==>Product10

http://TrendOfficeScanNTClient_V8.0SP1

Uninstall == 0

cmnunins_CommonUninstall.cpp(55) 03/12 08:54:53 79c-dac

Uninstall==>Product11

http://TrendOfficeScanNTClient_V10.0

Uninstall == 0

cmnunins_Uninstall.cpp(566) 03/12 08:54:53 79c-dac

In–CUninstall::DoUninstall(C:\Temp\ClnExtor\CmnUnins.ini, Product12)

cmnunins_Uninstall.cpp(575) 03/12 08:54:53 79c-dac

CUninstall::DoUninstall==>Product Name = TrendOfficeScanNTClient_V8.0SP1

cmnunins_Uninstall.cpp(613) 03/12 08:54:53 79c-dac

In–CUninstall::CheckProgramExist()

cmnunins_Uninstall.cpp(635) 03/12 08:54:53 79c-dac

CUninstall::CheckProgramExist==>szProgramFileRegPath(SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion), szProgramFileRegValue(Application Path)

cmnunins_Uninstall.cpp(641) 03/12 08:54:53 79c-dac

CUninstall::CheckProgramExist==>Common_RegReadValue error = 2, throw exception

cmnunins_Uninstall.cpp(650) 03/12 08:54:53 79c-dac

CUninstall::CheckProgramExist==>GetPrivateProfileString(CheckFile1) have nothing, only check registry

cmnunins_Uninstall.cpp(661) 03/12 08:54:53 79c-dac

Out–CUninstall::CheckProgramExist()

cmnunins_Uninstall.cpp(336) 03/12 08:54:53 79c-dac

In–CUninstall::UnloadProgram

cmnunins_Uninstall.cpp(373) 03/12 08:54:53 79c-dac

CUninstall::UnloadProgram==>FindWindow(PCCNTClassName,) return NULL

cmnunins_Uninstall.cpp(373) 03/12 08:54:53 79c-dac

CUninstall::UnloadProgram==>FindWindow(PCCNTMONCLASS,) return NULL

cmnunins_Uninstall.cpp(373) 03/12 08:54:53 79c-dac

CUninstall::UnloadProgram==>FindWindow(PCCNT_UPDATE32,) return NULL

cmnunins_Uninstall.cpp(366) 03/12 08:54:53 79c-dac

CUninstall::UnloadProgram==>Class and Name == NULL, return

…

6

(imported comment written by JasonBigham91)

03/12 08:53:11

0c18-047c

ClnExtor.ini path : C:\Temp\ClnExtor\ClnExtor.ini -

http://cp_ClientExtractor.cpp(2086)

03/12 08:53:11

0c18-047c

bPackAll : 1 -

http://cp_ClientExtractor.cpp(1512)

03/12 08:53:11

0c18-047c

bDelTemp : 1 -

http://cp_ClientExtractor.cpp(1515)

03/12 08:53:11

0c18-047c

nPlatform : 0 -

http://cp_ClientExtractor.cpp(1519)

03/12 08:53:11

0c18-047c

bSilent : 1 -

http://cp_ClientExtractor.cpp(1522)

03/12 08:53:11

0c18-047c

bMsiPack : 1 -

http://cp_ClientExtractor.cpp(1525)

03/12 08:53:11

0c18-047c

bUpdateAgent : 0 -

http://cp_ClientExtractor.cpp(1528)

03/12 08:53:11

0c18-047c

bIsPackTypeUpdate : 0 -

http://cp_ClientExtractor.cpp(1532)

03/12 08:53:11

0c18-047c

bPrescan : 0 -

http://cp_ClientExtractor.cpp(1535)

03/12 08:53:11

0c18-047c

bDelTemp : 1 -

http://cp_ClientExtractor.cpp(2095)

03/12 08:53:11

0c18-047c

Zip path = C:\Temp\ClnExtor\OfcZip.Zip -

http://cp_ClientExtractor.cpp(1813)

03/12 08:53:11

0c18-047c

unZip Open (nZipRtn = 0) -

http://cp_ClientExtractor.cpp(1816)

03/12 08:53:11

0c18-047c

Zip extract to = C:\Temp\ClnExtor -

http://cp_ClientExtractor.cpp(1817)

03/12 08:53:44

0c18-047c

unZip Extract (nZipRtn = 0) -

http://cp_ClientExtractor.cpp(1820)

03/12 08:53:44

0c18-047c

szSourcePath = C:\Temp\ClnExtor\ADMIN\tmdbg20.dll -

http://cp_ClientExtractor.cpp(1850)

…

7

(imported comment written by JasonBigham91)

Another workstation with this vague error message. Any way to manually install?

I can download the Trend demo direct from Trend and it installs fine on the “unknown error” machines. I can install any other piece of software too. Only CPM deployments fail.

8

(imported comment written by JasonBigham91)

Create a file named “ofcdebug.ini” and place it in the root of the system drive (i.e. c:)

http://esupport.trendmicro.com/4/How-do-users-manually-create-Ofcdebugini-in-OfficeScan-Corporate-Editi.aspx

Using NOTEPAD, add the following to ofcdebug.ini:

debug

DebugLog=c:\ofcdebug.log

DebugLevel=9

Redeploy Trend/CPM (you may have to do this via the extracted Zip files I mention below to get log data)

After failure, review c:\ofcdebug.log

Search for “Uninstall key found” - In my case, I found the CPM installer was failing due to an orphaned registry key (AVG7 was in fact NOT installed though)

02/06 12:39:59 0dd0-09cc (4)

CTMUninstMgr::SearchProduct

Uninstall key found HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall - uninst_TmUninstMgr.cpp(232)

Delete “offending” registry keys. Search the entire registry for others, such as Grisoft, AVG7 or AVG8 and nuke them all. I assume you know what you are doing by editing the registry…

I then extracted the Trend install files from the ClnExtor.ZIP file left behind from failed install. Mine was in C:\Temp\ at some point and I grabbed it when I saw it. You may need to grab it while the install is in progress, as it may get deleted after install failure. I may of got it this way too; I honestly don’t recall at this point:

http://software.bigfix.com/download/bes/cpm/TMCPMInstaller_x64_1.6.0.1055_en.exe

Via commandline:

TMCPMInstaller_x64_1.6.0.1055_en.exe -i “c:\Program Files\TrendMicro”

Go find the zip file…

I launched the “Autopccp.exe” file to initiate the install (from the extracted ClnExtor.ZIP). This worked for 2 or the 3 machines that would not install today. The 3rd worked by launching a CPM install via the BigFix console.

I also deleted any Trend Micro folders or registry keys I found before trying to install CPM again.

Delete ofcdebug.ini when you finally have CPM \ Trend installed.

Seems the orphaned AVG registry keys were the issue every time, even though AVG was uninstalled from these workstations long ago.

9

(imported comment written by JasonBigham91)

Attached is a sample ofcdebug.log.

As you can see, what the Trend installer looks for is a bit more detailed than what the CPM Deployment Fixlet does. BigFix needs to fix their CPM pre-check.

10

(imported comment written by SystemAdmin)

Thanks for this info. It looks like you resolved some of the install problems I have been having as well! I found an AVG uninstall registry entry. I have no idea why AVG was ever there, but that doesn’t really matter at this point.

Thanks again!