NOD32 v4.0 / Windows Server 2008 install problem

I'm trying to install NOD32 Business v4.0.437 on a Windows 2008 64bit server, but the installation fails with this message:

The installer has insufficient privileges to modify this file: C:\ProgramData\ESET\ESET NOD32 Antivirus\EHttpSrv.xml.


There was previously a v2.7 installed on the system, which was uninstalled.

I am running as Administrator.

 

Re: NODE32 v4.0 / Windows Server 2008 install problem

Don't run 4.x on any servers yet... there are serious issues yet to be resolved.

Best version appears to be 3.0.684...

 

Re: NODE32 v4.0 / Windows Server 2008 install problem

I don't think that there are any 64 bit v3.0 versions out there.

Would the best solution be to go down to the v2.7 ?

 

Re: NODE32 v4.0 / Windows Server 2008 install problem

Sure, there's 64-bit versions of V3

http://www.eset.com/download/business-64bit.php

I agree, avoid V4 for servers. On desktops it's fine but on servers it *might* be fine or it *might* be a total nightmare (I've experienced both scenarios).

V3 is the safest.



Jim

 

Re: NODE32 v4.0 / Windows Server 2008 install problem

You said that there was a 2.7 previous version of NOD in that machine?

regedit > delete the Eset folder > Install the 3.0 and there you go.

 

I've got the same error message on with the v3 packages.

Haven't done the reget stuff yet. Could you specify a little bit more in detail which registry settings I should delete?

I do have a ESET Remote Administrator Console running on the server which I do not want to destroy by deleting important settings in the registry.

 

If you have registry key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ehdrv
delete it in safe mode. Then try to run installer again.

 

The 2 registry entries to delete should be:

-HKEY_CURRENT_USER\Software\ESET\ESET Security
-HKEY_LOCAL_MACHINE\Software\ESET\ESET Security

These are the 2 entries that hold the settings that may be keeping you from installing.

 

I could delete the settings in the -HKEY_CURRENT_USER, but not was not allowed to delete the other one.

Anyway I gave it a try, but I still get the same error.

Could there be some services running which do prevent me from installing?

I found 3 services which could be important.

1. ESET RA HTTP SErver
2. ESET Remote Administration Server
3. ESET Service

 

Disable "ESET service" prior to doing whatever to ESET v4

Additionally , when removing it , these two might be helpful:
http://kb.eset.com/esetkb/index?page=content&id=SOLN2267&actp=LIST_RECENT

http://kb.eset.com/esetkb/index?page=content&id=SOLN558&actp=LIST_POPULAR


Once the problematic installation stuff is removed , you could install EAV v3.0.684 on this x64 Windows Server 2008.

 

ESET Service is not running, but I tried to disable it.

Didn't work though - Access is denied.

 

... ESET Uninstaller ... in Safe Mode ...

 

Most probably ESET SelfDefence driver is active, which prohibits to delete ESET registry keys and files. Therefore you should delete ESET keys in safe mode, where drivers are off. Delete key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ehdrv
and try to run installer in normal mode.

If still unsuccessful, contact ESET Support, you should be provided with Uninstaller tool.

 

Thank you very much, I think I have a working NOD32 v3 installation on my Windows 2008 64bit server now.

At least installation seemed to work, and the system is running.

 

Test your installation with Eicar test file
http://www.eicar.org/anti_virus_test_file.htm

so that you are sure it works. Eicar is free and virus free - just a test tool.

You could also try http://www.misec.net/trojansimulator/

 

We are also experiencing troubles with v 4.x on Windows 2008 64bit...

Is there any more information available on when this should be fixed?

It indeed seems to be the new self defence feature....