Installing Old Software - Registry Tracing?

Soldato
Joined
14 Dec 2005
Posts
12,488
Location
Bath
I have some old software that I need to install. Unfortunately the vendor isn't interested in making any new version :(.

The installer doesn't like to install in Program Files (x86), but that's not a big issue as I can just install it in regular Program Files.

The problem is that the installer looks for specific things in the operating environment. The manual says that the software requires "Microsoft Internet Explorer 5.0 or later, Netscape Navigator or Communicator 4.78 or later." :p Unfortunately, however they wrote the checks in the installer don't seem to work properly these days :(.

If I run the installer on a regular PC, it comes up saying that Internet Explorer could not be found, and installation cannot continue. Despite the fact that the PC actually has IE 11 installed. To make the software install, I have to roll back Windows Updates all the way to IE 8 :eek:.

Once the software is installed, I can re-apply the Windows Updates and get back to IE 11. The software will still run fine. It is only the installer that needs old IE.


So I am presuming that somewhere in the installer, it looks at the Registry or Program Files to check if IE is installed. And whatever entry it is looking for is not present with IE 11.

What I'd like to do is to find a way of tracing where the installer is looking in the Registry or Program Files, and then spoofing this entry.

Any ideas if this is possible?
 
Process Monitor will let you see what files and registry entries an application is trying to access. You can download it here. You would need to run this, then run your installer and set a filter on that application.

This may not help though as it will really depend on just how the installer was built.
 
do you know what packager it uses, installshield, wise?

have you run the installer msi or exe with the /? switch to see if it has installer options.
 
In the bad old days, used to use a program from Microsoft called SYSDIFF, which tracked all File and Registry changes when installing a package, allowing you to lift and shift it onto multiple machines.

Must be something like that in this decade :)
 
Thanks for the replies :).

It's an installshield exe. The /? switch does nothing :(.


I ran it with Process Monitor logging. Even with it filtered to the installer it still generates thousands of entries! Filtering down further to only those with a result that's not a success gives the following entries over the duration before it exits:

Code:
"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"13:34:02.3421508","_INS5576._MP","4732","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer","REPARSE","Desired Access: Query Value"
"13:34:02.3421985","_INS5576._MP","4732","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations","NAME NOT FOUND","Length: 144"
"13:34:02.3422393","_INS5576._MP","4732","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer","NAME NOT FOUND","Desired Access: Query Value"
"13:34:02.3433885","_INS5576._MP","4732","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses","NAME NOT FOUND","Desired Access: Read"
"13:34:02.3561582","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3561796","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3561998","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3562192","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3562381","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3562570","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3562761","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3562947","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3563136","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3563320","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3563501","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3563677","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3563856","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3564029","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3564203","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3564376","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3564550","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3564720","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3564891","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3565060","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3565223","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3565386","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3565550","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3565710","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3565869","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3566024","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.3566101","_INS5576._MP","4732","ReadFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_ISTMP0.DIR\license.txt","END OF FILE","Offset: 3,242, Length: 4,096"
"13:34:02.7895917","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a"
"13:34:02.7896404","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:02.7899599","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:02.7901479","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:02.7919891","_ISDEL.EXE","3440","CreateFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_INS5576._MP","SHARING VIOLATION","Desired Access: Generic Read/Write, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: n/a"
"13:34:05.7888660","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a"
"13:34:05.7889760","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:05.7896843","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:05.7900058","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:05.7933447","_ISDEL.EXE","3440","CreateFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_INS5576._MP","SHARING VIOLATION","Desired Access: Generic Read/Write, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: n/a"
"13:34:08.7996001","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a"
"13:34:08.7996986","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:08.8003855","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:08.8007021","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:08.8040155","_ISDEL.EXE","3440","CreateFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_INS5576._MP","SHARING VIOLATION","Desired Access: Generic Read/Write, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: n/a"
"13:34:11.8104112","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a"
"13:34:11.8105212","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:11.8112308","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:11.8115536","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:11.8149987","_ISDEL.EXE","3440","CreateFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_INS5576._MP","SHARING VIOLATION","Desired Access: Generic Read/Write, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: n/a"
"13:34:14.8211514","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a"
"13:34:14.8212594","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:14.8219613","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:14.8222841","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:14.8256582","_ISDEL.EXE","3440","CreateFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_INS5576._MP","SHARING VIOLATION","Desired Access: Generic Read/Write, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: n/a"
"13:34:17.8319294","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a"
"13:34:17.8320386","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:17.8327232","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:17.8330462","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:17.8363995","_ISDEL.EXE","3440","CreateFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_INS5576._MP","SHARING VIOLATION","Desired Access: Generic Read/Write, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: n/a"
"13:34:19.5623649","_INS5576._MP","4732","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses","NAME NOT FOUND","Desired Access: Read"
"13:34:19.5651644","_INS5576._MP","4732","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths","REPARSE","Desired Access: Maximum Allowed"
"13:34:19.5652142","_INS5576._MP","4732","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE","REPARSE","Desired Access: Maximum Allowed"
"13:34:19.5657679","_INS5576._MP","4732","CreateFileMapping","C:\Program Files\Internet Explorer\iexplore.exe","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: "
"13:34:19.5703349","_INS5576._MP","4732","CreateFileMapping","C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: "
"13:34:19.5710195","_INS5576._MP","4732","CreateFileMapping","C:\Program Files\Internet Explorer\iexplore.exe","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: "
"13:34:19.5713744","_INS5576._MP","4732","CreateFileMapping","C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: "
"13:34:19.5729045","_INS5576._MP","4732","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses","NAME NOT FOUND","Desired Access: Read"
"13:34:20.8494575","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a"
"13:34:20.8495595","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:20.8502201","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:20.8505396","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:20.8538515","_ISDEL.EXE","3440","CreateFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_INS5576._MP","SHARING VIOLATION","Desired Access: Generic Read/Write, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: n/a"
"13:34:23.8550446","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a"
"13:34:23.8551405","_ISDEL.EXE","3440","CreateFile","C:\stopthis.now","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:23.8557794","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:23.8560764","_ISDEL.EXE","3440","CreateFile","C:\Windows\_INS33IS._MP","NAME NOT FOUND","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"13:34:23.8591268","_ISDEL.EXE","3440","CreateFile","C:\Users\Westyfield2\AppData\Local\Temp\_ISTMP1.DIR\_INS5576._MP","SHARING VIOLATION","Desired Access: Generic Read/Write, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: n/a"
 
Last edited:
If possible use command line options or 3rd party software to extract the installer payload and repackage with a more recent installation package.
 
As above, or if not any chance you can post the installer, or trust it me? I might be able to tweak it to remove the checks - depends what it was built in mind :).
 
Here's what the installer folder has inside:
installer.png



As above, or if not any chance you can post the installer, or trust it me? I might be able to tweak it to remove the checks - depends what it was built in mind :).
Thanks :)
Here's the last version they made:
http://www.softpedia.com/get/Internet/WebCam/WebView-Livescope-Viewer.shtml

Properties says its InstallShield 5.52
 
Not forgotton about this - had a go last night but couldn't get it to work properly :D.

Will try and do it tonight however :).
 
Well I know that certain firewalls comodo for one if you put it in paranoid mode tells you everytime a new .exe is trying to execute such and such a system process or modify this or that registry key and ask if you want to allow it.

I once run an installer through a debugger to monitor the process step by step and monitor what registry keys were being read etc so I could manually add the key it was looking for. It worked but took an age as there are hundreds if not thousands of instructions executed.

I later found out all you had to do was run the program in compatibility mode and it installed no problem lol.
 
Not forgotton about this - had a go last night but couldn't get it to work properly :D.

Will try and do it tonight however :).

No worries. Thanks :).

Well I know that certain firewalls comodo for one if you put it in paranoid mode tells you everytime a new .exe is trying to execute such and such a system process or modify this or that registry key and ask if you want to allow it.

I once run an installer through a debugger to monitor the process step by step and monitor what registry keys were being read etc so I could manually add the key it was looking for. It worked but took an age as there are hundreds if not thousands of instructions executed.

I later found out all you had to do was run the program in compatibility mode and it installed no problem lol.
I wish it was just as simple as using compatibility mode :p.

But yeah, when you run Process Monitor it's scary to see how much stuff is always happening!
 
I tried to repackage the installer using a few tools, most didn't seem to like your set-up file at all. One of the ones which did work, and did produce a repackaged MSI was WinINSTALL LE (free) however I did it on an XP VM (my Windows 7 VM has decided to die :/). Basically it monitors which files get changed and which registry files and created and modified and uses this to repackage a new MSI installer doing away with the old setup. However the resultant MSI installed fine on my Windows 8 machine but just errored with "class not registered" when opening the app post-install.

Might be worth you trying this yourself - downgrade to IE8, run this set-up packager to take a snap-shot of your machine, let it run the installer capturing all the changes, then take the post-install snapshot and generate the MSI (it's all 99% automated) and see if it works for you.

Is there any reason you can't run this in your own XP VM BTW? It seems to install and run on there without issue.
 
I tried to repackage the installer using a few tools, most didn't seem to like your set-up file at all. One of the ones which did work, and did produce a repackaged MSI was WinINSTALL LE (free) however I did it on an XP VM (my Windows 7 VM has decided to die :/). Basically it monitors which files get changed and which registry files and created and modified and uses this to repackage a new MSI installer doing away with the old setup. However the resultant MSI installed fine on my Windows 8 machine but just errored with "class not registered" when opening the app post-install.

Might be worth you trying this yourself - downgrade to IE8, run this set-up packager to take a snap-shot of your machine, let it run the installer capturing all the changes, then take the post-install snapshot and generate the MSI (it's all 99% automated) and see if it works for you.

Is there any reason you can't run this in your own XP VM BTW? It seems to install and run on there without issue.

Thanks. I'll give that a try.

The only reason I'm not using an XP VM is quite simply that the program doesn't need it. I can install it in Win7 64bit as-long as I have IE8, and then upgrade to IE11 and everything works fine :).

The reason for posting this thread is that I'm concerned what happens when I can't downgrade the IE version before installing :(. Win8 for example can only be downgraded to IE10, but that's too new for the program to install.
 
WhatChanged from here is good for this too. I have to deal with legacy software all the time at work and it can be a real PITA
 
One of the ones which did work, and did produce a repackaged MSI was WinINSTALL LE (free) however I did it on an XP VM (my Windows 7 VM has decided to die :/).

IT WORKS :D

If I create the MSI in a Win7 x86 VM (with IE8), it will only work on x86 copies of Windows. It will install on x64, but throws up an error and doesn't work properly.

If I create the MSI in a Win7 x64 VM (with IE8), it works on x64 copies of Windows. I have now successfully installed it on a Win8 x64 PC (with IE11) and it runs fine :cool:.

Thanks for your help :).

WhatChanged from here is good for this too. I have to deal with legacy software all the time at work and it can be a real PITA

Will bookmark that :).
 
IT WORKS :D
If I create the MSI in a Win7 x86 VM (with IE8), it will only work on x86 copies of Windows. It will install on x64, but throws up an error and doesn't work properly.

If I create the MSI in a Win7 x64 VM (with IE8), it works on x64 copies of Windows. I have now successfully installed it on a Win8 x64 PC (with IE11) and it runs fine :cool:.

Thanks for your help :).

Awesome. I suggest you keep both MSI's then :). I wonder if that was my issue: I created it on an x86 VM and tried to install it again on an x64 PC.

By the way you can open the created MSI with the WinINSTALL program to tweak various things - e.g., where to install, what shortcuts to create, what registry keys it creates etc.
 
Back
Top Bottom