8 Replies Latest reply on Mar 1, 2007 9:37 AM by CiscoKid-FL

    Every VMware product I try to install terminates immediately

    CiscoKid-FL Novice

      For some reason no matter what product, even the tools and support apps will not install, you might see the slightest splash screen for the product but always just terminates and leaves no clues to what went wrong.

       

      The only clue I have is that its only VMware installs that do it, I mean all even the APIs, Conversion Tool, Server, Player, Workstation, the whole lot just flashes and quits.

       

      I have done ALL things, to resolve this issue, but this problem does not yield, and I cant have that.

       

      Its too strange to just 'Reload' the computer and try again, I want to know why???   Something is common to all of them......

       

      Not for the faint of heart, I get down to ProcMon and Debug and I WATCH the computer, but it is as if something just terminates the attempt.

       

      I hope that this makes sense to someone, please help!!

       

      Windows XP is the host OS, and it did ONCE work many many moons ago (the very first stuff made), the system HAS had VMware soft on it before, but none of it works now...

       

      Any takers?

        • 1. Re: Every VMware product I try to install terminates immediately
          williambishop Master

          Definately time for a rebuild. Sounds like windows rot.

          • 2. Re: Every VMware product I try to install terminates immediately
            CiscoKid-FL Novice

            What method of Rebuild to you propose?

            • 4. Re: Every VMware product I try to install terminates immediately
              CiscoKid-FL Novice

              Windows Installer is up to v3

               

              The registry checks out, it itself is not corrupt.

               

              I have run all the MS tools to fix the reg, but none report a problem.

               

              I did see something wierd with the file access of the install applications....

              • 5. Re: Every VMware product I try to install terminates immediately
                CiscoKid-FL Novice

                Windows Installer is up to v3

                 

                The registry checks out, it itself is not corrupt.

                 

                I have run all the MS tools to fix the reg, but none report a problem.

                 

                I did see something wierd with the file access of the install applications....

                • 6. Re: Every VMware product I try to install terminates immediately
                  CiscoKid-FL Novice

                  I wanted to assure everyone that my OS is just fine so to speak, that it was something 'else', but in doing so I figured out my own problem, but this is just too wierd:

                   

                  OK I have a couple of logs of what the application and the computer is doing when the install launches, and I noticed a wierd thing when I looked at EVERY process not just the installer:

                   

                  File System Events:

                   

                  434     9:17:34 PM     VMware-console-:5128     OPEN     C:\WINDOWS\SYSTEM32\SHLWAPI.DLL     SUCCESS     Options: Open  Access: Execute     

                  435     9:17:34 PM     VMware-console-:5128     OPEN     C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.2600.2982_X-WW_AC3F9C03\COMCTL32.DLL     SUCCESS     Options: Open  Access: Execute     

                  436     9:17:34 PM     VMware-console-:5128     OPEN     C:\WINDOWS\SYSTEM32\OLE32.DLL     SUCCESS     Options: Open  Access: Execute     

                  437     9:17:34 PM     VMware-console-:5128     OPEN     C:\WINDOWS\SYSTEM32\OLEAUT32.DLL     SUCCESS     Options: Open  Access: Execute     

                  438     9:17:34 PM     VMware-console-:5128     OPEN     C:\WINDOWS\SYSTEM32\IMM32.DLL     SUCCESS     Options: Open  Access: Execute     

                  439     9:17:34 PM     iexplore.exe:2804     READ     C:\DOCUME1\cisco\LOCALS1\Temp\fla53F.tmp     END OF FILE     Offset: 2272892 Length: 11     

                  440     9:17:34 PM     VMware-console-:5128     OPEN     C:\Documents and Settings\cisco\Desktop     SUCCESS     Options: Open Directory  Access: 00100020     

                  441     9:17:34 PM     iexplore.exe:2804     READ     C:\DOCUME1\cisco\LOCALS1\Temp\fla53F.tmp     END OF FILE     Offset: 2272892 Length: 11     

                  442     9:17:35 PM     iexplore.exe:2804     READ     C:\DOCUME1\cisco\LOCALS1\Temp\fla53F.tmp     END OF FILE     Offset: 2272892 Length: 11     

                  443     9:17:35 PM     VMware-console-:5128     QUERY INFORMATION     C:\Documents and Settings\cisco\Desktop\VMware-console-1.0.1-29996.exe.Local\     NOT FOUND     Attributes: Error     

                  444     9:17:35 PM     VMware-console-:5128     QUERY INFORMATION     C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03     SUCCESS     Attributes: D     

                  445     9:17:35 PM     VMware-console-:5128     OPEN     C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03     SUCCESS     Options: Open Directory  Access: 00100020     

                  446     9:17:35 PM     VMware-console-:5128     OPEN     C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll     SUCCESS     Options: Open  Access: 00100020     

                  447     9:17:35 PM     trillian.exe:3432     OPEN     C:\Program Files\Trillian\users\default\cache\     SUCCESS     Options: Open Directory  Access: 00100001     

                  448     9:17:35 PM     trillian.exe:3432     DIRECTORY     C:\Program Files\Trillian\users\default\cache\     NO SUCH FILE     FileBothDirectoryInformation: pending_aim.ini     

                  449     9:17:35 PM     trillian.exe:3432     CLOSE     C:\Program Files\Trillian\users\default\cache\     SUCCESS          

                  450     9:17:35 PM     iexplore.exe:2804     READ     C:\DOCUME1\cisco\LOCALS1\Temp\fla53F.tmp     END OF FILE     Offset: 2272892 Length: 11     

                  451     9:17:35 PM     FixCamera.exe:5820     QUERY INFORMATION     C:\Documents and Settings\cisco\Desktop\VMware-console-1.0.1-29996.exe     BUFFER OVERFLOW     FileNameInformation     

                  452     9:17:35 PM     FixCamera.exe:5820     QUERY INFORMATION     C:\Documents and Settings\cisco\Desktop\VMware-console-1.0.1-29996.exe     SUCCESS     FileNameInformation     

                  453     9:17:35 PM     VMware-console-:5128     CLOSE     C:\Documents and Settings\cisco\Desktop     SUCCESS          

                  454     9:17:35 PM     VMware-console-:5128     CLOSE     C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03     SUCCESS          

                  455     9:17:35 PM     VMware-console-:5128     CLOSE     C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll     SUCCESS          

                   

                   

                   

                  Things are going along good thru 451 and a wierd thing happens, another application starts to query the executable, and it panics the installer and  bails out.

                   

                   

                   

                   

                  And during the same time in the Registry;

                   

                   

                  Registry Events:

                  1496     86.74621582     FixCamera.exe:5820     EnumerateValue     HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\EPSON Stylus CX3800 Series (from YOUR-F78BF48CE2)     SUCCESS     "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACA.EXE /P49 "EPSON Stylus CX3800 Series (from YOUR-F78BF48CE2)" /O5 "TS001" /M "Stylus CX3800""     

                  1497     86.74622345     explorer.exe:1368     CloseKey     HKCU\Software\Classes\*     SUCCESS          

                  1498     86.74642944     VMware-console-:5128     OpenKey     HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\VMware-console-1.0.1-29996.exe     NOT FOUND          

                  1499     86.74643707     explorer.exe:1368     CloseKey     HKCR\AllFilesystemObjects     SUCCESS          

                  1500     86.76599121     FixCamera.exe:5820     EnumerateValue     HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\FixCamera     SUCCESS     "C:\WINDOWS\FixCamera.exe"     

                  1501     86.76600647     VMware-console-:5128     OpenKey     HKLM\System\CurrentControlSet\Control\Terminal Server     SUCCESS     Access: 0x20019      

                  1502     86.76601410     iexplore.exe:2804     QueryValue     HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached\{871C5380-42A0-1069-A2EA-08002B30309D} \{000214E6-0000-0000-C000-000000000046} 0x401     NOT FOUND          

                  1503     86.76615143     iexplore.exe:2804     QueryValue     HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached\{871C5380-42A0-1069-A2EA-08002B30309D} \{000214E6-0000-0000-C000-000000000046} 0x401     SUCCESS     01 00 00 00 38 00 36 00 ...     

                   

                   

                  FixCamera injects itself into the Run Key and the install just checks to see if the enviroment is configured for Terminal Server then the shell extentions fire off...

                   

                   

                  I have always looked at the one process VMware-install (did not matter what product) but now I can tell that my FixCamera.exe program has changed into a viral one, I actually have one called FixCamera.exe that I wrote for a special project, but I guess their is a virus of the same name.

                   

                   

                  Who knew???   It is quite odd that the FixCamera.exe attacks VMware stuff, but it does (I think)

                   

                   

                  Bottom Line,  its gone (FixCamera), I rebuilt my version, and now life is good.

                   

                   

                   

                  Thank you esiebert7625 for sparking the chain of events!

                  • 7. Re: Every VMware product I try to install terminates immediately
                    esiebert7625 Guru
                    vExpert

                    Glad it worked out for you, those types of problems are never fun or easy to fix....

                    • 8. Re: Every VMware product I try to install terminates immediately
                      CiscoKid-FL Novice

                      For anyone in the future that may read this and has similar issues with 'other' things:

                       

                      It turns out that the virus named FixCamera.exe actually chokes on the name of the executables that VMware uses, the way the name is causes a buffer overflow error in the virus, and since the virus grabbed the executable, eventually both bomb out, and no install takes place.

                       

                      So this virus is not some VMware specific virus, it just cant handle the filename of the executable.

                       

                      Good thing, because a very 'good' A/V and various online virus scans and spyware software missed it.

                       

                      So thank you VMware for well formed long filenames!!

                       

                      Because hell or high water, I was going to get your software to run on that box!