MSI doesn't write to RunOnce because it is a system service that came installed in the operating system. Pretty much all bootstrappers/chainers will write to RunOnce if they need to do a reboot and come back afterwards. Burn goes one step further to ensure robustness and registers up front.
We'll need to teach this anti-virus program about Burn. Fortunately big programs, like Visual Studio, are using Burn and if it kills them I hope we can muster some change. On Wed, Jan 11, 2012 at 11:50 PM, NIkolaj Steensgaard <n...@panorama9.com>wrote: > On 01/11/2012 01:23 PM, Peter Hull wrote: > > > > Hi Nikolaj! > > > > Could you comment on whether your installer was signed (the bundle and > the actual engine which is unpacked out of it - see this link > https://sourceforge.net/mailarchive/forum.php?thread_name=CAHdHTVc1c2h3QuYsiXWcR8A1Xtk38Z3W2KCyAvuP3hMjYqKAiA%40mail.gmail.com&forum_name=wix-users) > Yes the Bundle is signed with Thawte code signing certificate and also > the engine ( msi ) included is signed with same certificate. > > > > I'm glad someone else has seen this problem, especially as you have more > control over your environment than I do! > Me 2 as it is quite a problem not being able to install a exe created > from Wix 3.6. > Does anyone have a Idea how to debug this issue ? > > The MSI itself does not write to the RunOnce as far as i know .... > > > > Peter > > > > > >> Date: Wed, 11 Jan 2012 12:16:37 +0100 > >> From: n...@panorama9.com > >> To: wix-users@lists.sourceforge.net > >> Subject: [WiX-users] Reopen Burn triggers virus checker - ID: 3431068 > >> > >> We have built a EXE with Wix 3.6 beta which are detected by Trend Micro > >> as "Malware behavior" and > >> we are looking for the reason for this. > >> > >> This is the log entry from Trend Micro > >> > --------------------------------------------------------------------------------------------------------------------------- > >> Malware behavior blocking Terminate Registry High > >> C:\Documents and Settings\administrator.ADTEST\Local > >> > Settings\Temp\{044fc46d-90ff-4769-9c96-28a774dcbd7a}\.be\copy-yvxrlsay.iz2-P9Agent.exe > >> > >> > >> Write > >> > HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\{044fc46d-90ff-4769-9c96-28a774dcbd7a} > >> > >> > --------------------------------------------------------------------------------------------------------------------------- > >> > >> Snip from previous case: > >> > --------------------------------------------------------------------------------------------------------------------------- > >> Burn-based installers trigger Trend OfficeScan (v.10.5) when they write > >> to the RunOnce registry key. > >> The virus checker terminates the installer immediately. > >> > --------------------------------------------------------------------------------------------------------------------------- > >> > >> We have a complete testing enviroment where we can tweak, monitor and > >> reproduce this error and are more than > >> willing to assist in debugging this issue. > >> > >> Please let me know anything we can provide to debug and solve this > >> > >> Regards > >> > >> Nikolaj Steensgaard > >> > >> > >> > ------------------------------------------------------------------------------ > >> Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a > complex > >> infrastructure or vast IT resources to deliver seamless, secure access > to > >> virtual desktops. With this all-in-one solution, easily deploy virtual > >> desktops for less than the cost of PCs and save 60% on VDI > infrastructure > >> costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox > >> _______________________________________________ > >> WiX-users mailing list > >> WiX-users@lists.sourceforge.net > >> https://lists.sourceforge.net/lists/listinfo/wix-users > > > > > ------------------------------------------------------------------------------ > > Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex > > infrastructure or vast IT resources to deliver seamless, secure access to > > virtual desktops. With this all-in-one solution, easily deploy virtual > > desktops for less than the cost of PCs and save 60% on VDI infrastructure > > costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox > > _______________________________________________ > > WiX-users mailing list > > WiX-users@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/wix-users > > > > ------------------------------------------------------------------------------ > RSA(R) Conference 2012 > Mar 27 - Feb 2 > Save $400 by Jan. 27 > Register now! > http://p.sf.net/sfu/rsa-sfdev2dev2 > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > -- virtually, Rob Mensching - http://RobMensching.com LLC ------------------------------------------------------------------------------ RSA(R) Conference 2012 Mar 27 - Feb 2 Save $400 by Jan. 27 Register now! http://p.sf.net/sfu/rsa-sfdev2dev2 _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
