Failed during the removal the SEP client with error code 1603.

Article:TECH180344

Created: 2012-01-31

Updated: 2012-08-26

Article URL http://www.symantec.com/docs/TECH180344

Article Type
Technical Solution

Product(s)

Show all

Languages

Show all

Problem

- The customer need remove the SEP client on some machines or servers, but during the removal the SEP client failed and start a rollback with error code = 1603.

Error

MSI (s) (B4:30) [14:11:12:277]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC360.tmp, Entrypoint: StopSMC
stopProtectedService: Attempting to stop SmcService
stopProtectedService: Unloading BASH driver...
stopProtectedService: Failed to unload BASH with HRESULT=0x80070005
CustomAction StopSMC returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (B4:C0) [14:11:12:667]: User policy value 'DisableRollback' is 0
MSI (s) (B4:C0) [14:11:12:667]: Machine policy value 'DisableRollback' is 0
Action ended 14:11:12: InstallFinalize. Return value 3.

Environment

Windows 2008 R2 - x64

Cause

You need remove the SEP client on some machines, but cannot use the cleanwipe utility for removal of SEP clients.

Solution

- Follow the procedures bellow and tried remove the SEP client again after stop the SEP services.

1- Open CMD

2 - Type the command lines:

taskkill /pid smc.exe /f
taskkill /pid ccSvcHst.exe /f

3 - Waiting the SEP client stop the services and try remove it again.

NOTE: The SC command line did not worked for stop the SEP services. <sc stop SepMasterService>