Solved

Cisco VPN Client Being Uninstalled on Startup

Posted on 2010-11-19
9
1,676 Views
Last Modified: 2012-05-10
We use a Cisco VPN Client (v5.0.3) to connect to our corporate network. A user came to use today saying their VPN client was missing. We had a look, and couldn't find it, so reinstalled. However, when we rebooted after installing, the installer launches again, and tries to uninstall the client. We have to click cancel to stop the uninstall from happening.

We've checked in the registry at HKCU\Software\Microsoft\WIndows\CurrentVersion\Run & RunOnce & in HKLM\Software\Microsoft\WIndows\CurrentVersion\Run & RunOnce, however there is nothing in there to launch the uninstall. We've also check the Startup items, and MSConfig, there appears to be nothing trying to launch the uninstallation.

When the uninstall is happening it looks like it's the standard MSIEXEC process that's running, and is probably running with the Cisco setup vpnclient_setup.msi.

Where else could the uninstall be being launched from?

Ben
0
Comment
Question by:bjblackmore
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
9 Comments
 
LVL 2

Expert Comment

by:saus
ID: 34173378
if you instal lthe same client on another PC - the same behaviour or only on that specific PC ?
0
 

Author Comment

by:bjblackmore
ID: 34173945
Hi,

Thanks for the reply.

We currently have this on about a dozen of our users laptops, and this is the only one presenting with this issue.

I've just uninstalled and rebooted, and the installer has launched on startup. THere is definitely something somewhere running the installer, which if it's not already installed, installs the client, but if it is already installed, it uninstalls it!
0
 
LVL 33

Expert Comment

by:MikeKane
ID: 34174351
If this is the only one doing this, I would use systernals autoruns to check all possible startup items....
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

I imagine this behavior doesn't happen in safe mode.   HAve you tried MSConfig and use a selective startup?  

0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 66

Expert Comment

by:johnb6767
ID: 34178567
Any chance theres a Windows Installer sourced error in the Event Log? Might be trying to do a first run config for the user, and then it bombs, and decides it is best to leave the os?

Also, Process Monitor can enable boot logging, so you can see whats happening, in more detail that you probably even want to know............

Troubleshooting with Process Monitor
http://blogs.technet.com/b/askperf/archive/2007/06/01/troubleshooting-with-process-monitor.aspx

Options>Select Enable Boot Logging, and reboot.... After reboot, launch Procmon to compile the logs.....

Then you can look at the view, think you set it to Process Tree, and search for your MSIexec command that is being called....
0
 

Accepted Solution

by:
bjblackmore earned 0 total points
ID: 34179621
Seem to have sorted the problem by manually uninstalling the vpn client, then rebooting, then after windows logged on the installer ran again, but this time it installed the vpn client rather than uninstalled, this time when I rebooted again and windows logged on it didn't launch the installer!

There must have been something somewhere launching the installer that got removed when it was successfully installed!
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 34180531
Login script?
0
 

Expert Comment

by:tdodd72
ID: 34180567
I am just wondering if this machine is in a Organizational unit that is having a GPO pushed to it.
0
 

Author Comment

by:bjblackmore
ID: 34232895
No login script or group policy being applied, also this was a laptop and the behaviour was happening both on and off the network!
0
 

Author Closing Comment

by:bjblackmore
ID: 34272774
Resolved problem myself
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
Concerto Cloud Services, a provider of fully managed private, public and hybrid cloud solutions, announced today it was named to the 20 Coolest Cloud Infrastructure Vendors Of The 2017 Cloud  (http://www.concertocloud.com/about/in-the-news/2017/02/0…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question