Jump to content

Yoann

Members
  • Posts

    4
  • Joined

  • Last visited

Reputation

0 Neutral
  1. Indeed, without typos before converting to HEX, it works much better. thank you very much
  2. Hello THask. Thanks for the answer, but it does'nt work. If I search in the registry, I find my agent : Running your command, here is the LOG file: === Verbose logging started: 19/07/2023 08:41:38 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\WINDOWS\system32\msiexec.exe === MSI (c) (14:80) [08:41:38:120]: Resetting cached policy values MSI (c) (14:80) [08:41:38:121]: Machine policy value 'Debug' is 0 MSI (c) (14:80) [08:41:38:121]: ******* RunEngine: ******* Product: {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B} ******* Action: ******* CommandLine: ********** MSI (c) (14:80) [08:41:38:121]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (14:80) [08:41:38:121]: Grabbed execution mutex. MSI (c) (14:80) [08:41:38:125]: Cloaking enabled. MSI (c) (14:80) [08:41:38:125]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (14:80) [08:41:38:128]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (C0:B4) [08:41:38:139]: Running installation inside multi-package transaction {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B} MSI (s) (C0:B4) [08:41:38:139]: Grabbed execution mutex. MSI (s) (C0:E8) [08:41:38:142]: Resetting cached policy values MSI (s) (C0:E8) [08:41:38:142]: Machine policy value 'Debug' is 0 MSI (s) (C0:E8) [08:41:38:142]: ******* RunEngine: ******* Product: {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B} ******* Action: ******* CommandLine: ********** MSI (s) (C0:E8) [08:41:38:142]: Machine policy value 'DisableUserInstalls' is 0 MSI (s) (C0:E8) [08:41:38:142]: Setting cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:142]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:142]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:142]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:142]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:142]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:142]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:144]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038 MSI (s) (C0:E8) [08:41:38:148]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:148]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:148]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:148]: SRSetRestorePoint skipped for this transaction. MSI (s) (C0:E8) [08:41:38:148]: Creating MSIHANDLE (1) of type 790542 for thread 7912 MSI (s) (C0:E8) [08:41:38:148]: MSCOREE not loaded loading copy from system32 MSI (s) (C0:E8) [08:41:38:155]: End dialog not enabled MSI (s) (C0:E8) [08:41:38:155]: Original package ==> C:\WINDOWS\Installer\3c03.msi MSI (s) (C0:E8) [08:41:38:156]: Package we're running from ==> C:\WINDOWS\Installer\3c03.msi MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:157]: APPCOMPAT: Uninstall Flags override found. MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:157]: APPCOMPAT: Uninstall VersionNT override found. MSI (s) (C0:E8) [08:41:38:157]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:157]: APPCOMPAT: Uninstall ServicePackLevel override found. MSI (s) (C0:E8) [08:41:38:158]: APPCOMPAT: looking for appcompat database entry with ProductCode '{2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}'. MSI (s) (C0:E8) [08:41:38:158]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (C0:E8) [08:41:38:158]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:158]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:158]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:158]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:158]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:161]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:162]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:162]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:162]: Machine policy value 'DisablePatch' is 0 MSI (s) (C0:E8) [08:41:38:162]: Machine policy value 'AllowLockdownPatch' is 0 MSI (s) (C0:E8) [08:41:38:162]: Machine policy value 'DisableLUAPatching' is 0 MSI (s) (C0:E8) [08:41:38:162]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:162]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:162]: Machine policy value 'DisableFlyWeightPatching' is 0 MSI (s) (C0:E8) [08:41:38:162]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active MSI (s) (C0:E8) [08:41:38:163]: APPCOMPAT: looking for appcompat database entry with ProductCode '{2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}'. MSI (s) (C0:E8) [08:41:38:163]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (C0:E8) [08:41:38:163]: Transforms are not secure. MSI (s) (C0:E8) [08:41:38:163]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'c:\nag_uninst.log'. MSI (s) (C0:E8) [08:41:38:163]: Command Line: REBOOT=ReallySuppress KLUNINSTPASSWD=xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00 REMOVE=ALL CURRENTDIRECTORY=c:\ CLIENTUILEVEL=3 CLIENTPROCESSID=12308 MSI (s) (C0:E8) [08:41:38:163]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{B226E648-5478-4A8F-94E2-44534DA4CF90}'. MSI (s) (C0:E8) [08:41:38:163]: Product Code passed to Engine.Initialize: '{2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}' MSI (s) (C0:E8) [08:41:38:163]: Product Code from property table before transforms: '{2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}' MSI (s) (C0:E8) [08:41:38:163]: Product Code from property table after transforms: '{2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}' MSI (s) (C0:E8) [08:41:38:163]: Product registered: entering maintenance mode MSI (s) (C0:E8) [08:41:38:163]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:163]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine. MSI (s) (C0:E8) [08:41:38:163]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:163]: Product {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B} is admin assigned: LocalSystem owns the publish key. MSI (s) (C0:E8) [08:41:38:163]: Product {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B} is managed. MSI (s) (C0:E8) [08:41:38:163]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:163]: MSI_LUA: Credential prompt not required, user is an admin MSI (s) (C0:E8) [08:41:38:163]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'. MSI (s) (C0:E8) [08:41:38:163]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'. MSI (s) (C0:E8) [08:41:38:163]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:163]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:163]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 MSI (s) (C0:E8) [08:41:38:164]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:164]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:164]: Package name retrieved from configuration data: 'Kaspersky Network Agent.msi' MSI (s) (C0:E8) [08:41:38:164]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (s) (C0:E8) [08:41:38:164]: Machine policy value 'DisableMsi' is 0 MSI (s) (C0:E8) [08:41:38:164]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (C0:E8) [08:41:38:164]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (C0:E8) [08:41:38:164]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:164]: Product {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B} is admin assigned: LocalSystem owns the publish key. MSI (s) (C0:E8) [08:41:38:164]: Product {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B} is managed. MSI (s) (C0:E8) [08:41:38:164]: Running product '{2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B}' with elevated privileges: Product is assigned. MSI (s) (C0:E8) [08:41:38:164]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'. MSI (s) (C0:E8) [08:41:38:164]: PROPERTY CHANGE: Adding KLUNINSTPASSWD property. Its value is 'xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00'. MSI (s) (C0:E8) [08:41:38:164]: PROPERTY CHANGE: Adding REMOVE property. Its value is 'ALL'. MSI (s) (C0:E8) [08:41:38:164]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'c:\'. MSI (s) (C0:E8) [08:41:38:164]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'. MSI (s) (C0:E8) [08:41:38:164]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '12308'. MSI (s) (C0:E8) [08:41:38:164]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0 MSI (s) (C0:E8) [08:41:38:167]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. Its value is 'dc513c91447464429743e30782844539'. MSI (s) (C0:E8) [08:41:38:167]: RESTART MANAGER: Session opened. MSI (s) (C0:E8) [08:41:38:167]: TRANSFORMS property is now: MSI (s) (C0:E8) [08:41:38:167]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1036'. MSI (s) (C0:E8) [08:41:38:167]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '300'. MSI (s) (C0:E8) [08:41:38:170]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming MSI (s) (C0:E8) [08:41:38:170]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\Favorites MSI (s) (C0:E8) [08:41:38:171]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (s) (C0:E8) [08:41:38:172]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\Documents MSI (s) (C0:E8) [08:41:38:172]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (s) (C0:E8) [08:41:38:173]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Recent MSI (s) (C0:E8) [08:41:38:173]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\SendTo MSI (s) (C0:E8) [08:41:38:174]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Templates MSI (s) (C0:E8) [08:41:38:174]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (s) (C0:E8) [08:41:38:174]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Local MSI (s) (C0:E8) [08:41:38:175]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\Pictures MSI (s) (C0:E8) [08:41:38:176]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (C0:E8) [08:41:38:176]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (C0:E8) [08:41:38:177]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (s) (C0:E8) [08:41:38:177]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (s) (C0:E8) [08:41:38:178]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (s) (C0:E8) [08:41:38:178]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (C0:E8) [08:41:38:179]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (C0:E8) [08:41:38:180]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (s) (C0:E8) [08:41:38:180]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Start Menu MSI (s) (C0:E8) [08:41:38:181]: SHELL32::SHGetFolderPath returned: C:\Users\adminyp\Desktop MSI (s) (C0:E8) [08:41:38:181]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (s) (C0:E8) [08:41:38:182]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts MSI (s) (C0:E8) [08:41:38:182]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (s) (C0:E8) [08:41:38:186]: MSI_LUA: Setting AdminUser property to 1 because the product is already installed managed and per-machine MSI (s) (C0:E8) [08:41:38:186]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (s) (C0:E8) [08:41:38:186]: Using cached product context: machine assigned for product: ADEB42927D0EFAD42A42052D0E1BF2B5 MSI (s) (C0:E8) [08:41:38:186]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Service Informatique'. MSI (s) (C0:E8) [08:41:38:186]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Eduyyyyyyyy'. MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding Installed property. Its value is '00:00:00'. MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\WINDOWS\Installer\3c03.msi'. MSI (s) (C0:E8) [08:41:38:186]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\WINDOWS\Installer\3c03.msi'. MSI (s) (C0:E8) [08:41:38:186]: Machine policy value 'MsiDisableEmbeddedUI' is 0 MSI (s) (C0:E8) [08:41:38:186]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install MSI (s) (C0:E8) [08:41:38:186]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (C0:E8) [08:41:38:187]: Machine policy value 'DisableRollback' is 0 MSI (s) (C0:E8) [08:41:38:187]: User policy value 'DisableRollback' is 0 MSI (s) (C0:E8) [08:41:38:187]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. === Début de l'écriture dans le journal : 19/07/2023 08:41:38 === MSI (s) (C0:E8) [08:41:38:187]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038 MSI (s) (C0:E8) [08:41:38:187]: PROPERTY CHANGE: Adding Preselected property. Its value is '1'. MSI (s) (C0:E8) [08:41:38:187]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes. MSI (s) (C0:E8) [08:41:38:200]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'. MSI (s) (C0:E8) [08:41:38:200]: Doing action: INSTALL Début de l'action 08:41:38 : INSTALL. MSI (s) (C0:E8) [08:41:38:200]: Running ExecuteSequence MSI (s) (C0:E8) [08:41:38:200]: Doing action: SetSetupPath MSI (s) (C0:E8) [08:41:38:212]: Creating MSIHANDLE (2) of type 790542 for thread 7912 MSI (s) (C0:F0) [08:41:38:213]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI250D.tmp, Entrypoint: SetSetupPath MSI (s) (C0:EC) [08:41:38:213]: Generating random cookie. MSI (s) (C0:EC) [08:41:38:224]: Created Custom Action Server with PID 13004 (0x32CC). MSI (s) (C0:E0) [08:41:38:253]: Running as a service. MSI (s) (C0:E0) [08:41:38:261]: Hello, I'm your 32bit Impersonated custom action server. MSI (s) (C0!C0) [08:41:38:358]: PROPERTY CHANGE: Adding SetupDir property. Its value is 'C:\WINDOWS\Installer\'. MSI (s) (C0!C0) [08:41:38:358]: PROPERTY CHANGE: Adding SetupLog property. Its value is 'C:\WINDOWS\Installer\setup.log'. MSI (s) (C0!C0) [08:41:38:358]: PROPERTY CHANGE: Adding SetupRep property. Its value is 'C:\WINDOWS\Installer\setup.rep'. MSI (s) (C0:F0) [08:41:38:360]: Closing MSIHANDLE (2) of type 790542 for thread 7912 Début de l'action 08:41:38 : SetSetupPath. MSI (s) (C0:E8) [08:41:38:362]: Doing action: AppSearch Action terminé 08:41:38 : SetSetupPath. Valeur retournée 1. Début de l'action 08:41:38 : AppSearch. MSI (s) (C0:E8) [08:41:38:362]: PROPERTY CHANGE: Adding OS_SUPPORTS_UI property. Its value is 'C:\WINDOWS\explorer.exe'. MSI (s) (C0:E8) [08:41:38:363]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SYSTEM\CurrentControlSet\Services\npf 3: 2 MSI (s) (C0:E8) [08:41:38:363]: Doing action: FindRelatedProducts Action terminé 08:41:38 : AppSearch. Valeur retournée 1. MSI (s) (C0:E8) [08:41:38:363]: Skipping FindRelatedProducts action: not run in maintenance mode Début de l'action 08:41:38 : FindRelatedProducts. MSI (s) (C0:E8) [08:41:38:363]: Skipping action: SetNagentFoundProperty (condition is false) MSI (s) (C0:E8) [08:41:38:363]: Skipping action: SetFirstInstall (condition is false) MSI (s) (C0:E8) [08:41:38:363]: Skipping action: SetMajorUpgrade (condition is false) MSI (s) (C0:E8) [08:41:38:363]: Skipping action: SetMinorUpgrade (condition is false) MSI (s) (C0:E8) [08:41:38:363]: Doing action: CheckIfPatchServiceRunning Action terminé 08:41:38 : FindRelatedProducts. Valeur retournée 0. MSI (s) (C0:E8) [08:41:38:368]: Creating MSIHANDLE (3) of type 790542 for thread 7912 MSI (s) (C0:78) [08:41:38:368]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI25BA.tmp, Entrypoint: CheckIfPatchServiceRunningCA MSI (s) (C0:78) [08:41:38:425]: Closing MSIHANDLE (3) of type 790542 for thread 7912 Début de l'action 08:41:38 : CheckIfPatchServiceRunning. MSI (s) (C0:E8) [08:41:38:426]: Doing action: LaunchConditions Action terminé 08:41:38 : CheckIfPatchServiceRunning. Valeur retournée 1. Début de l'action 08:41:38 : LaunchConditions. MSI (s) (C0:E8) [08:41:38:428]: Skipping action: CheckRequirements (condition is false) MSI (s) (C0:E8) [08:41:38:428]: Doing action: GetUninstallPwd Action terminé 08:41:38 : LaunchConditions. Valeur retournée 1. MSI (s) (C0:E8) [08:41:38:432]: Creating MSIHANDLE (4) of type 790542 for thread 7912 MSI (s) (C0:74) [08:41:38:432]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI25FA.tmp, Entrypoint: GetUninstallPwd MSI (s) (C0!EC) [08:41:38:491]: PROPERTY CHANGE: Adding PWDINSSHASH property. Its value is '7723368E00AA05E03E6D9F2398020396'. MSI (s) (C0:74) [08:41:38:492]: Closing MSIHANDLE (4) of type 790542 for thread 7912 Début de l'action 08:41:38 : GetUninstallPwd. MSI (s) (C0:E8) [08:41:38:495]: Skipping action: UpgradeUninstallPwdError_SilentMode (condition is false) MSI (s) (C0:E8) [08:41:38:495]: Doing action: CheckUninstallPwd_SilentMode Action terminé 08:41:38 : GetUninstallPwd. Valeur retournée 1. MSI (s) (C0:E8) [08:41:38:498]: Creating MSIHANDLE (5) of type 790542 for thread 7912 MSI (s) (C0:B4) [08:41:38:498]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI2639.tmp, Entrypoint: CheckUninstallPwd_SilentMode Début de l'action 08:41:38 : CheckUninstallPwd_SilentMode. MSI (s) (C0:B4) [08:41:38:558]: Closing MSIHANDLE (5) of type 790542 for thread 7912 CustomAction CheckUninstallPwd_SilentMode returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox) Action terminé 08:41:38 : CheckUninstallPwd_SilentMode. Valeur retournée 3. Action terminé 08:41:38 : INSTALL. Valeur retournée 3. Property(S): UpgradeCode = {B9518725-0B76-4793-A409-C6794442FB50} Property(S): OS_SUPPORTS_UI = C:\WINDOWS\explorer.exe Property(S): USESSL = 1 Property(S): OPENUDPPORT = 1 Property(S): KLNAG_PTCH_ALLOW_APPLY_NONAPROVED_PATCHES = 1 Property(S): LAUNCHPROGRAM = 1 Property(S): GATEWAYMODE = 0 Property(S): SERVERPORT = 14000 Property(S): SERVERSSLPORT = 13000 Property(S): UDPPORT = 15000 Property(S): WIXUI_INSTALLDIR = INSTALLDIR Property(S): CERTSELECTION = GetOnFirstConnection Property(S): PWDINSSHASH = 7723368E00AA056D9F2398020396AABBCCDD Property(S): ERROR_CERT_NOT_SELECTED = Aucun certificat du Serveur d'administration n'est sélectionné. Property(S): ERROR_EMPTY_PASSWORD = Le mot de passe de désinstallation n'est pas indiqué. Property(S): ProgramFilesFolder = C:\Program Files (x86)\ Property(S): SystemFolder = C:\WINDOWS\SysWOW64\ Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\ Property(S): VersionNT = 603 Property(S): Installed = 00:00:00 Property(S): Manufacturer = Kaspersky Property(S): ProductCode = {2924BEDA-E0D7-4DAF-A224-50D2E0B12F5B} Property(S): ProductLanguage = 1036 Property(S): ProductName = Agent d'administration de Kaspersky Security Center Property(S): ProductVersion = 14.0.0.10902 Property(S): ERROR_BOOTSTRAPPER_NEEDS = Pour installer l'application, il faut lancer le fichier setup.exe. Property(S): KSNPROXYSERVICE_NAME = ksnproxy Property(S): KSNPROXYSERVICE_DISPLAY_NAME = Serveur proxy Kaspersky Security Network Property(S): KSNPROXYSERVICE_DESCRIPTION = Le service KSN proxy retransforme les demandes adressées à Kaspersky Security Network et met en cache les réponses. Property(S): UpdaterName = Composant de mise à jour de Kaspersky Security Center Property(S): KLMON_SERVICE_DISPLAY = Surveillance du réseau Property(S): KLNPF_SERVICE_DISPLAY = Pilote WinPcap Property(S): NAGENTSERVICE_NAME = klnagent Property(S): NAGENTSERVICE_DISPLAY_NAME = Agent d'administration de Kaspersky Security Center Property(S): NAGENTSERVICE_DESCRIPTION = L'Agent d'administration assure l'interaction entre le Serveur d'administration et les applications Kaspersky installées sur les appareils. Property(S): NSACSERVICE_NAME = klnsacwsrv Property(S): NSACSERVICE_DISPLAY_NAME = Portail d'autorisation de Kaspersky Property(S): NSACSERVICE_DESCRIPTION = Portail Internet d'authentification d'accès Property(S): InstallerProject = Nagent Property(S): KLNAG_KEL_NAME = Journal des événements Kaspersky Property(S): KLAdmins = Administrateurs de Kaspersky Security Center 14 Property(S): KLOperators = Opérateurs de Kaspersky Security Center 14 Property(S): START_MENU_FLDR_OLD_NAME = Kaspersky Security Center Property(S): START_MENU_FLDR_ACTUAL_NAME = Kaspersky Security Center Property(S): DEDICATED_ACCOUNT_DESCRIPTION = Compte utilisateur désigné pour l'Agent d'administration. Property(S): DEDICATED_SERVICE_ACCOUNT_FULL_NAME = Compte utilisateur désigné pour l'Agent d'administration Property(S): ALLUSERS = 1 Property(S): ARPSYSTEMCOMPONENT = 1 Property(S): ARPNOMODIFY = 1 Property(S): ARPNOREPAIR = 1 Property(S): ARPHELPLINK = https://support.kaspersky.com/fr Property(S): ARPURLUPDATEINFO = https://www.kaspersky.fr/downloads Property(S): ARPPRODUCTICON = setup2.ico Property(S): ARPHELPTELEPHONE = http://support.kaspersky.com/support/business_support_contacts Property(S): INSTALLLEVEL = 5 Property(S): LANGID = fr Property(S): ProductName_GEN = Agent d'administration de Kaspersky Security Center Property(S): ProductName_ACC = Agent d'administration de Kaspersky Security Center Property(S): ProductName_DAT = Agent d'administration de Kaspersky Security Center Property(S): ProductName_ART = Agent d'administration de Kaspersky Security Center Property(S): ProductName_GEN_ART = Agent d'administration de Kaspersky Security Center Property(S): ProductName_ACC_ART = Agent d'administration de Kaspersky Security Center Property(S): ProductName_DAT_ART = Agent d'administration de Kaspersky Security Center Property(S): MSIENFORCEUPGRADECOMPONENTRULES = 1 Property(S): MSIRESTARTMANAGERCONTROL = DisableShutdown Property(S): REINSTALLMODE = vomus Property(S): ERROR_REBOOT_NEEDED = Vous devez redémarrer l'appareil pour terminer l'installation. Property(S): INT_PRODUCT_NAME = 1103 Property(S): INT_PRODUCT_VER = 1.0.0.0 Property(S): ALLOWNETBIOS = 1 Property(S): COMPRESSTRAFFIC = 1 Property(S): ERROR_SUCCESS = 0 Property(S): ERROR_INCOMPATIBLE_OS = Impossible d'installer l'application. Le système d'exploitation %1 n'est pas pris en charge. Property(S): ERROR_INCOMPATIBLE_INSTALLER = Impossible d'installer les applications. La version actuelle de Windows Installer %1 n'est pas prise en charge par cette application. Property(S): ERROR_PRIVILEGES = Impossible d'installer l'application. Le compte utilisateur %1 ne possède pas de privilèges nécessaires. Property(S): ERROR_NEWER_VERSION = L'application ne peut pas être installée. Une version plus récente de l'Agent d'administration (%1) a été détectée. Property(S): ERROR_AK_NAGENT_FOUND = L'Agent d'administration est déjà installé comme partie intégrante du Serveur d'administration. Property(S): ERROR_FATAL = Une erreur inattendue est apparue : %1. Property(S): ERROR_NAGENT_REG = Une erreur inattendue est apparue à l'enregistrement de l'Agent d'administration. Property(S): ERROR_STOP_SERVICE = Échec de l'arrêt du service %1. Essayez de l'arrêter manuellement, puis redémarrez l'installation. Property(S): ERROR_STOP_SERVICES = Impossible d'arrêter certains services de l'Agent d'administration : %1. Essayez de l'arrêter manuellement, puis redémarrez l'installation. Property(S): ERROR_B2B_UPGRADE = L'Agent d'administration a été installé à l'origine en mode B2B Cloud. Vous ne pouvez le mettre à niveau qu'en mode B2B Cloud uniquement. Property(S): ERROR_NOTB2B_UPGRADE = L'Agent d'administration n'a pas été installé à l'origine en mode B2B Cloud. Vous ne pouvez pas le mettre à niveau en mode B2B Cloud. Property(S): ERROR_NAGENT_INFO = Impossible d'obtenir les informations sur l'instance de l'Agent d'administration installée. Vous pouvez essayer de la désinstaller manuellement, puis de relancer l'installation. Tous les paramètres de l'Agent d'administration seront perdus. Property(S): ERROR_NAGENT_BACKUP = Impossible de sauvegarder les données de l'instance d'Agent d'administration installée. Assurez-vous que les chemins d'accès %1 et %2 sont accessibles, et que l'espace libre pour la sauvegarde est suffisant. Property(S): ERROR_NAGENT_JUNCTION = Assurez-vous que le chemin %1 est un lien symbolique vers le dossier %2, et non un chemin d'accès physique. Property(S): ERROR_NAGENT_KESENCRYPT = Les disques ou les fichiers de cet appareil sont chiffrés. Pour installer l'Agent d'administration sous Kaspersky Security Center Cloud Console, vous devez d'abord déchiffrer l'appareil et désactiver le chiffrement des données pour cet appareil en utilisant la stratégie Kaspersky Endpoint Security for Windows. Property(S): ERROR_NAGENT_MIGRATIONONPWD = Upgrade of Network Agent with changing installation mode is not supported if it is password-protected to uninstall. Property(S): DefaultUIFont = WixUI_Font_Normal Property(S): DefaultUITitle = Agent d'administration de Kaspersky Security Center Property(S): ErrorDialog = ErrorDlg Property(S): ERROR_GATEWAY_ADDRESS_EMPTY = Aucune adresse de passerelle de connexion n'est indiquée. Property(S): ERROR_GATEWAY_ADDRESS_INVALID = L'adresse de la passerelle contient des caractères inadmissibles. Property(S): ERROR_GATEWAY_ADDRESS_INVALID_FMT = L'adresse de la passerelle contient des caractères non valides. Les caractères non autorisés sont : %s Property(S): ERROR_SERVER_ADDRESS_EMPTY = Nom du Serveur d'administration n'est pas indiqué. Property(S): ERROR_SERVER_ADDRESS_INVALID = Le nom du Serveur d'administration contient des caractères non valides. Property(S): ERROR_SERVER_PORT_EMPTY = Le nom du port du Serveur d'administration n'est pas indiqué. Property(S): ERROR_SERVER_PORT_INVALID = Numéro de port du Serveur d'administration non valide. La valeur doit être comprise entre 1 et 65 535. Property(S): ERROR_SERVER_SSL_PORT_EMPTY = Le nom du port SSL du Serveur d'administration n'est pas indiqué. Property(S): ERROR_SERVER_SSL_PORT_INVALID = Numéro de port SSL du serveur d'administration non valide. La valeur doit être comprise entre 1 et 65 535. Property(S): ERROR_SERVER_PORT_EQ_SSL_PORT = Le port et le port SSL du Serveur d'administration doivent être différents. Property(S): ERROR_SERVER_UDP_PORT_EMPTY = Le port UDP de l'Agent d'administration n'est pas indiqué. Property(S): ERROR_SERVER_UDP_PORT_INVALID = Le numéro du port UDP de l'agent d'administration est incorrect. La valeur doit être comprise entre 1 et 65 535. Property(S): ERROR_SERVER_TAGLENGTH_TOOLONG = La longueur du tag ne peut pas être supérieure à 255 caractères. Property(S): ERROR_SERVER_TAGNAME_WRONGSYMBOL = Les caractères suivants ne sont pas autorisés dans un nom de tag : "*<>?\:| Property(S): ERROR_PROXY_ADDRESS_EMPTY = L'adresse du serveur proxy n'est pas définie. Property(S): ERROR_PROXY_ADDRESS_INVALID = Le nom du serveur proxy contient des caractères interdits. Property(S): ERROR_PROXY_PORT_EMPTY = Le port du serveur proxy n'est pas défini. Property(S): ERROR_PROXY_PORT_INVALID = Le numéro du port du serveur proxy est incorrect. La valeur doit être comprise entre 1 et 65535. Property(S): ERROR_PROXY_ACCOUNT_EMPTY = Le nom du compte utilisateur n'est pas indiqué. Property(S): ERROR_PROXY_ACCOUNT_INVALID = Nom du compte utilisateur incorrect. Property(S): ERROR_WRONG_UNINST_PWD = Mot de passe de désinstallation incorrect. Property(S): ERROR_EULA_ISNOT_ACCEPTED = Le Contrat de licence utilisateur final n'a pas été accepté. Property(S): ERROR_PPOLICY_ISNOT_ACCEPTED = La Politique de confidentialité n'est pas acceptée. Property(S): WARNING_OLD_NPF_DRIVER = La bibliothèque WinPcap n'a pas été installée parce qu'une version antérieure de la bibliothèque WinPcap a été détectée sur l'appareil. Property(S): SecureCustomProperties = FOUND_NEWER_PRODUCT;FOUNDNAGENT_LESS_V6;FOUNDNAGENT_V6;FOUNDNAGENT_V6_MSI;FOUNDNAGENT_V8;FOUNDNAGENT_V9;FOUNDSERVER_LESS_V9;FOUNDSERVER_V9 Property(S): MsiHiddenProperties = ExtractNagentBases;RollbackExtractNagentBases Property(S): MsiLogFileLocation = c:\nag_uninst.log Property(S): PackageCode = {B226E648-5478-4A8F-94E2-44534DA4CF90} Property(S): ProductState = 5 Property(S): ProductToBeRegistered = 1 Property(S): REBOOT = ReallySuppress Property(S): KLUNINSTPASSWD=xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00xx00 Property(S): REMOVE = ALL Property(S): CURRENTDIRECTORY = c:\ Property(S): CLIENTUILEVEL = 3 Property(S): CLIENTPROCESSID = 12308 Property(S): MsiRestartManagerSessionKey = dc513c91447464429743e30782844539 Property(S): PRODUCTLANGUAGE = 1036 Property(S): VersionDatabase = 300 Property(S): VersionMsi = 5.00 Property(S): VersionNT64 = 603 Property(S): WindowsBuild = 9600 Property(S): ServicePackLevel = 0 Property(S): ServicePackLevelMinor = 0 Property(S): MsiNTProductType = 1 Property(S): WindowsFolder = C:\WINDOWS\ Property(S): WindowsVolume = C:\ Property(S): System64Folder = C:\WINDOWS\system32\ Property(S): RemoteAdminTS = 1 Property(S): TempFolder = C:\Users\adminyp\AppData\Local\Temp\ Property(S): ProgramFiles64Folder = C:\Program Files\ Property(S): CommonFiles64Folder = C:\Program Files\Common Files\ Property(S): AppDataFolder = C:\Users\adminyp\AppData\Roaming\ Property(S): FavoritesFolder = C:\Users\adminyp\Favorites\ Property(S): NetHoodFolder = C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Network Shortcuts\ Property(S): PersonalFolder = C:\Users\adminyp\Documents\ Property(S): PrintHoodFolder = C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\ Property(S): RecentFolder = C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\Recent\ Property(S): SendToFolder = C:\Users\adminyp\AppData\Roaming\Microsoft\Windows\SendTo\ Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\ Property(S): CommonAppDataFolder = C:\ProgramData\ Property(S): LocalAppDataFolder = C:\Users\adminyp\AppData\Local\ Property(S): MyPicturesFolder = C:\Users\adminyp\Pictures\ Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\ Property(S): DesktopFolder = C:\Users\Public\Desktop\ Property(S): FontsFolder = C:\WINDOWS\Fonts\ Property(S): GPTSupport = 1 Property(S): OLEAdvtSupport = 1 Property(S): ShellAdvtSupport = 1 Property(S): MsiAMD64 = 6 Property(S): Msix64 = 6 Property(S): Intel = 6 Property(S): PhysicalMemory = 7862 Property(S): VirtualMemory = 4858 Property(S): AdminUser = 1 Property(S): MsiTrueAdminUser = 1 Property(S): LogonUser = AdminYP Property(S): UserSID = S-1-5-21-2507263096-1611601412-3754082935-8008 Property(S): UserLanguageID = 1036 Property(S): ComputerName = EDU008065 Property(S): SystemLanguageID = 1036 Property(S): ScreenX = 1024 Property(S): ScreenY = 768 Property(S): CaptionHeight = 23 Property(S): BorderTop = 1 Property(S): BorderSide = 1 Property(S): TextHeight = 16 Property(S): TextInternalLeading = 3 Property(S): ColorBits = 32 Property(S): TTCSupport = 1 Property(S): Time = 08:41:38 Property(S): Date = 19/07/2023 Property(S): MsiNetAssemblySupport = 4.8.9032.0 Property(S): MsiWin32AssemblySupport = 6.3.22621.963 Property(S): RedirectedDllSupport = 2 Property(S): MsiRunningElevated = 1 Property(S): Privileged = 1 Property(S): USERNAME = Service Informatique Property(S): COMPANYNAME = Educ@Rennes Property(S): DATABASE = C:\WINDOWS\Installer\3c03.msi Property(S): OriginalDatabase = C:\WINDOWS\Installer\3c03.msi Property(S): UILevel = 2 Property(S): Preselected = 1 Property(S): ACTION = INSTALL Property(S): SetupDir = C:\WINDOWS\Installer\ Property(S): SetupLog = C:\WINDOWS\Installer\setup.log Property(S): SetupRep = C:\WINDOWS\Installer\setup.rep MSI (s) (C0:E8) [08:41:38:582]: Note: 1: 1725 MSI (s) (C0:E8) [08:41:38:582]: Application : Agent d'administration de Kaspersky Security Center -- La suppression a échoué. MSI (s) (C0:E8) [08:41:38:582]: Windows Installer a supprimé le produit. Nom du produit : Agent d'administration de Kaspersky Security Center. Version du produit : 14.0.0.10902. Langue du produit : 1036. Fabricant : Kaspersky. Réussite de la suppression ou état d’erreur : 1603. MSI (s) (C0:E8) [08:41:38:582]: Closing MSIHANDLE (1) of type 790542 for thread 7912 MSI (s) (C0:E8) [08:41:38:584]: Deferring clean up of packages/files, if any exist MSI (s) (C0:E8) [08:41:38:584]: MainEngineThread is returning 1603 MSI (s) (C0:B4) [08:41:38:586]: RESTART MANAGER: Session closed. MSI (s) (C0:B4) [08:41:38:586]: No System Restore sequence number for this installation. === Fin de l'écriture dans le journal : 19/07/2023 08:41:38 === MSI (s) (C0:B4) [08:41:38:586]: User policy value 'DisableRollback' is 0 MSI (s) (C0:B4) [08:41:38:586]: Machine policy value 'DisableRollback' is 0 MSI (s) (C0:B4) [08:41:38:587]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (C0:B4) [08:41:38:587]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (C0:B4) [08:41:38:587]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (C0:B4) [08:41:38:587]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (s) (C0:B4) [08:41:38:587]: Destroying RemoteAPI object. MSI (s) (C0:EC) [08:41:38:587]: Custom Action Manager thread ending. MSI (c) (14:80) [08:41:38:588]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (14:80) [08:41:38:589]: MainEngineThread is returning 1603 === Verbose logging stopped: 19/07/2023 08:41:38 === It shows several errors and no uninstallation I tried to reboot, with no results. If you have an idea ... Thanks
  3. Hello everyone. I need to uninstall Kaspersky EndPoint Security v 11.5.0.590 + Kaspersky Security Center v 14.0.0.10902 administration agent via Microsoft Endpoint Configuration Manager. Use the command : msiexec.exe /x {xxxxxxx3EB} /qn KLLOGIN=yyyy KLPASSWD=zzzz Kaspersky uninstalls just fine, but my administration agent is password-protected, which I have, but I can't find the argument to add to the command : MsiExec.exe /x {wwwww12F5B} /qn Does anyone have an idea to help me out? Thanks a lot.
×
×
  • Create New...