Firefox 2.0.0.8 install hangs, Status: Cleaning Old Firefox

[t.born]

During install of the msi paket for Firefox for 2.0.0.8 from Frontmotion the installation hangs at the beginning at
Status: Cleaning Old Firefox
and the Cancel button does not work. This has never happend with one of the other msi pakets for Firefox from Frontmotion.

Here are the last lines of the log:

Code: Select all

SI (s) (D8:88) [13:51:43:698]: Executing op: ODBCDriverManager(,BinaryType=1)
MSI (s) (D8:88) [13:51:43:698]: Executing op: ActionStart(Name=TotalFirefoxRemoval,Description=Cleaning Old Firefox,)
Action 13:51:43: TotalFirefoxRemoval. Cleaning Old Firefox
MSI (s) (D8:88) [13:51:43:698]: Executing op: CustomActionSchedule(Action=TotalFirefoxRemoval,ActionType=3073,Source=BinaryData,Target=TotalFirefoxRemoval,CustomActionData=C:\Programme\Mozilla Firefox\)
Action 13:55:59: CancelDlg. Dialog created
MSI (c) (B0:54) [13:56:01:003]: PROPERTY CHANGE: Adding UserPressedYesOnCancelDlg property. Its value is 'YES'.

The reason seems to be a access denied on a RegEumKey in the registry for the key:

Code: Select all

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FEF2C100-2CA4-4A6A-A535-07B46117B323}

The strange thing is that group SYSTEM under which msiexec.exe is running has full access rights.

The key in question is the uninstall key from McAfee Host Intrusion Prevention. And the Host Intrusion Prevention service denies even read access to this key. After stopping the service the installation works!

[DraconPern]

Hum... I'll take a look and see what's happening here. The 'Cleaning Old Firefox' functionality works by searching for the uninstall entry. Since it has to look at each entry I guess it stopped because it couldn't read that key. Still kind of odd...

[t.born]

Procmon from Sysinternals shows that the msiexec.exe which installs the Firefox MSI paket gets an Access Denied for RegEnumKey but keeps on trying and so we get an infinite loop. Therefore cpu load goes to 30 percent.

Ist ist possible to read

Code: Select all

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FEF2C100-2CA4-4A6A-A535-07B46117B323}

itself but nothing under this key for msiexec.exe, it is the same with all other applications. The name of the McAfee Host Intrusion Prevention Service is FireSvc.exe. We opened a case with the McAfee support but it seems that it is not possible to create an exception rule so that FireSvc.exe allows other applications to read its (FireSvc.exe) uninstall key.