kis 2021一直安装失败

fyxqjy

win7 64位系统，提示是可能感染病毒

zwl2828

尝试使用 Kaspersky Rescue Disk 清理计算机后再安装。

下载地址：
https://www.kaspersky.com.cn/downloads/thank-you/free-rescue-disk

启动盘制作步骤：
https://support.kaspersky.com/14226#block1

fyxqjy

zwl2828 发表于 2020-9-18 06:30
尝试使用 Kaspersky Rescue Disk 清理计算机后再安装。

下载地址：

下载太慢了

huang1111

hello

进入“msconfig”，“服务”栏，隐藏系统服务，对其余服务进行禁用
“启动”栏，关闭应用程序的自启，随后重启计算机，安装程序

fyxqjy

huang1111 发表于 2020-9-20 10:08
hello

进入“msconfig”，“服务”栏，隐藏系统服务，对其余服务进行禁用

没用

henry217

zwl2828 发表于 2020-9-18 06:30
尝试使用 Kaspersky Rescue Disk 清理计算机后再安装。

下载地址：

10kb/s ,如何去下载？

Wesly.Zhang

Hello，

• 请到在资源管理器的地址栏中键入“C:\ProgramData”不带引号并且回车，进入后删除“Kaspersky Lab Setup Files”文件夹。如果没有此文件夹的，继续看下去。
• 请到在资源管理器的地址栏中键入“%temp%”不带引号并且回车，进入删除其中的所有文件与文件夹，保留该窗口不要关闭。
• 运行产品安装程序直到错误窗口出现，此时先不要点击关闭该错误窗口，此时先不要点击关闭该错误窗口，此时先不要点击关闭该错误窗口，重要的事情说三遍！接着看下去！
• 再次回到 “%temp%” 临时文件夹后查找以下三种类似特征的文件，将最新生成的安装日志打包上传到这里。
  

kl-install-yyyy-mm-dd-hh-mm-ss.log
kl-setup-yyyy-mm-dd-hh-mm-ss.log
Kl-preinstall-yyyy-mm-dd-hh-mm-ss.log

尤其是kl-install开头的文件主要能够检查安装过程对系统的操作发生的导致安装失败的错误所需要的log分析文件，一般分析这个文件查找安装问题（查找 Return value 3 的过程就是问题所在）。
kl-setup开头的文件用来检查安装程序本身的运行情况，各种GUI交互情况记录。一般用不到它。
Kl-preinstall开头的文件主要用来记录安装开始（预安装）前，比如安装程序下载某些东西，检查某些网络资源时的活动情况状态的记录。它的工作结束后会交由生成kl-install开头的log文件记录正式安装情况。

MSI*.log

*号表示任意长度字符。

我们需要以上所有涉及到的log文件供分析安装过程哪里出错导致安装失败的。

fyxqjy

Wesly.Zhang 发表于 2020-9-21 17:19
Hello，

没有Kl-preinstall这个，其他两个在附件

Wesly.Zhang

fyxqjy 发表于 2020-9-21 23:31
没有Kl-preinstall这个，其他两个在附件

Hello，

安装日志kl-install-2020-09-21-23-27-45_KIS.21.1.15.500.log告诉我们以下内容：

InstallDriversDeferred:  Entering InstallDriversDeferred in C:\Windows\Installer\MSI86B.tmp, version 1.3.0.328
InstallDriversDeferred (14f4:1490) [23:27:53:567]: The type was not specified for driver 'mklif.sys_601_X64'.
InstallDriversDeferred (14f4:1490) [23:27:53:577]:  - Installing filter driver 'mklif.sys_601_X64' from 'C:\Users\sandy\AppData\Local\Temp\drv109.tmp\klif.inf'.
InstallDriversDeferred (14f4:1490) [23:27:53:578]: Actual inf section is 'DefaultInstall.NTAMD64'.
InstallDriversDeferred (14f4:1490) [23:27:54:332]: The queue has started to commit.
InstallDriversDeferred (14f4:1490) [23:27:54:332]: A subqueue 0 has started. Count 2
InstallDriversDeferred (14f4:1490) [23:27:54:333]: New source media is needed 'C:\Users\sandy\AppData\Local\Temp\drv109.tmp' 'klif.sys' 1024.
InstallDriversDeferred (14f4:1490) [23:27:54:333]: A file copy 'C:\Users\sandy\AppData\Local\Temp\drv109.tmp\klif.sys'->'C:\Windows\system32\DRIVERS\klif.sys' operation has started.
InstallDriversDeferred (14f4:1490) [23:27:54:339]: A file copying 'C:\Users\sandy\AppData\Local\Temp\drv109.tmp\klif.sys'->'C:\Windows\system32\DRIVERS\klif.sys' operation has ended.
InstallDriversDeferred (14f4:1490) [23:27:54:340]: A file copy 'C:\Users\sandy\AppData\Local\Temp\drv109.tmp\klflt.sys'->'C:\Windows\system32\DRIVERS\klflt.sys' operation has started.
InstallDriversDeferred (14f4:1490) [23:27:54:345]: A file copying 'C:\Users\sandy\AppData\Local\Temp\drv109.tmp\klflt.sys'->'C:\Windows\system32\DRIVERS\klflt.sys' operation has ended.
InstallDriversDeferred (14f4:1490) [23:27:54:345]: A subqueue 0 has ended.
InstallDriversDeferred (14f4:1490) [23:27:54:345]: The queue has finished committing.
InstallDriversDeferred (14f4:1490) [23:27:54:388]: The StartType of service 'KLIF' changed to '3'.
InstallDriversDeferred (14f4:1490) [23:27:54:390]: The registry key 'SYSTEM\CurrentControlSet\Services\KLIF\Parameters' created.
InstallDriversDeferred (14f4:1490) [23:27:54:390]: The registry value 'SysPatch' installed. Data '#1'.
InstallDriversDeferred (14f4:1490) [23:27:54:391]: The registry key 'SYSTEM\CurrentControlSet\Services\KLIF\Parameters' created.
InstallDriversDeferred (14f4:1490) [23:27:54:391]: The registry value 'ProcHash' installed. Data '#1'.
InstallDriversDeferred (14f4:1490) [23:27:54:392]: The registry key 'SYSTEM\CurrentControlSet\Services\KLIF\Parameters' created.
InstallDriversDeferred (14f4:1490) [23:27:54:392]: The registry value 'BootBlockEnabled' installed. Data '#1'.
InstallDriversDeferred (14f4:1490) [23:27:54:393]: StartService: 'KLIF'
InstallDriversDeferred (14f4:1490) [23:27:54:789]: StartService: 'klflt'
InstallDriversDeferred (14f4:1490) [23:27:54:790]: The service 'klflt' is already running.
InstallDriversDeferred (14f4:1490) [23:27:54:793]: The service KLIF exist.
InstallDriversDeferred (14f4:1490) [23:27:54:794]: The service KLIF is not marked for deletion.
InstallDriversDeferred (14f4:1490) [23:27:54:834]: Inf file 'C:\Users\sandy\AppData\Local\Temp\drv109.tmp\klif.inf' verification result: 0x80092003.
InstallDriversDeferred (14f4:1490) [23:27:54:835]: The filter driver 'mklif.sys_601_X64' was successfully installed.
MSI (s) (00:7C) [23:27:54:840]: Executing op: ActionStart(Name=SetServiceLSPCategory,,)
InstallDriversDeferred (14f4:14f8) [23:27:54:837]: InstallDriversDeferred: finished. Return value 0.
MSI (s) (00:7C) [23:27:54:840]: Executing op: CustomActionSchedule(Action=SetServiceLSPCategory,ActionType=11345,Source=C:\Users\sandy\AppData\Local\Temp\{997BA511-EDB6-4F94-830A-04A3E79B0548}\msi_misc.dll,Target=**********,CustomActionData=**********)
MSI (s) (00:10) [23:27:54:841]: Invoking remote custom action. DLL: C:\Users\sandy\AppData\Local\Temp\{997BA511-EDB6-4F94-830A-04A3E79B0548}\msi_misc.dll, Entrypoint: SetLSPApplicationCategory
Action start 23:27:54: SetLSPApplicationCategory.
MSI (X) (XX:XX) [23:27:54:842]: SetLSPApplicationCategory: setting LSP category for application C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.1\avp.exe failed
MSI (s) (00:7C) [23:27:54:843]: Executing op: ActionStart(Name=RbCheckDriverAvailable,,)
Action ended 23:27:54: SetLSPApplicationCategory. Return value 1.
MSI (s) (00:7C) [23:27:54:843]: Executing op: CustomActionSchedule(Action=RbCheckDriverAvailable,ActionType=11601,Source=C:\Users\sandy\AppData\Local\Temp\{997BA511-EDB6-4F94-830A-04A3E79B0548}\msi_misc.dll,Target=**********,CustomActionData=**********)
MSI (s) (00:7C) [23:27:54:844]: Executing op: ActionStart(Name=CheckDriverAvailable,,)
MSI (s) (00:7C) [23:27:54:844]: Executing op: CustomActionSchedule(Action=CheckDriverAvailable,ActionType=11281,Source=C:\Users\sandy\AppData\Local\Temp\{997BA511-EDB6-4F94-830A-04A3E79B0548}\msi_misc.dll,Target=**********,CustomActionData=**********)
MSI (s) (00:C8) [23:27:54:845]: Invoking remote custom action. DLL: C:\Users\sandy\AppData\Local\Temp\{997BA511-EDB6-4F94-830A-04A3E79B0548}\msi_misc.dll, Entrypoint: CheckDriverAvailable
Action start 23:27:54: CheckDriverAvailable.
MSI (X) (XX:XX) [23:27:54:845]: Major upgrade is not set
MSI (X) (XX:XX) [23:27:54:846]: GetValue ProductType, result: kis
MSI (X) (XX:XX) [23:27:54:846]: KIS-family product found
MSI (X) (XX:XX) [23:27:54:847]: system_interceptors::driver_connection::DriverConnection::DriverConnection Separate heap is 0
MSI (X) (XX:XX) [23:27:54:987]: system_interceptors::driver_connection::DriverConnection::DriverConnection KIS Atom found.
MSI (X) (XX:XX) [23:27:54:988]: system_interceptors::driver_connection::helpers::TraceServiceState  service state = 4
MSI (X) (XX:XX) [23:27:54:989]: system_interceptors::driver_connection::helpers::TraceServiceState  service start type = 3
MSI (X) (XX:XX) [23:27:54:989]: system_interceptors::driver_connection::helpers::TraceServiceState  service win32ExitCode = 0
MSI (X) (XX:XX) [23:27:54:989]: system_interceptors::driver_connection::DriverConnection::DriverConnection DriverConnection failed for: \Device\HarddiskVolume2\Users\sandy\AppData\Local\Temp\{997BA511-EDB6-4F94-830A-04A3E79B0548}\msi_misc.dll
MSI (X) (XX:XX) [23:27:54:990]: Exception during object construction: CheckResultFailedException - Can't establish connection to the driver.: 0x8000004a (Not matched). At C:\a\c\d_00000000\s\component\system_interceptors\source\driver_connection\source\driver_connection.cpp(266)
MSI (X) (XX:XX) [23:27:54:991]: si        GetDriverConnection failed
MSI (X) (XX:XX) [23:27:54:991]: sd_rules        CheckResultFailedException - 0x80000072 (Unknown exception). At c:\a\c\d_00000000\s\product\kavkis\ppp_platform\src\self_defence_rules\rules_scenarios.h(49)
MSI (X) (XX:XX) [23:27:54:992]: CheckDriverAvailable failed: CheckResultFailedException
Action ended 23:27:54: CheckDriverAvailable. Return value 3.

现在需要你回答如下问题，产品的安装包是从哪里下载的，是否是一个测试版本的安装包，有没有启动 secure boot 功能？有程序在阻止安装程序检查驱动与 avp.exe 测试驱动连接通信。

以下方法将有助于你排查问题，请下载最新版本的产品：

首先，请在安装失败后，重启计算机，然后使用卡巴斯基卸载工具清理系统：，系统清理后请将在桌面自动生成的 清理日志log 文件打包后重启计算机。重启计算机后，请您到 C:\WINDOWS\system32\Drivers 文件夹下检查是否存在 kl 开头的驱动文件，比如 klif.sys，klflt.sys 这两个文件，如果存在请尝试删除它们，如果它们删除不了，请您执行 chkdsk c: /f 来对磁盘C错误进行检查，检查完成后请重新删除它们。

其次从这里下载最新版本的产品进行安装：https://bbs.kafan.cn/thread-2177353-1-1.html
再次，执行安装看是否存在还存在问题。

fyxqjy

Wesly.Zhang 发表于 2020-9-22 10:00
Hello，

安装日志kl-install-2020-09-21-23-27-45_KIS.21.1.15.500.log告诉我们以下内容：

安装包kaba365下载的，非测试版，secure boot没开，系统原先有火绒