Video Screencast Help

How to remove SEP in Safe Mode

Created: 17 Feb 2012 • Updated: 17 Feb 2012 | 3 comments
Language Translations
Shulk's picture
+9 9 Votes
Login to vote

Problem

It might happen that after an upgrade/installation of a SEP Client on an infected computer, the computer can no longer boot in normal mode but can boot in Safe Mode or Safe Mode with Networking.

You might then use the SERT to clean up the computer but if it fails, you might try the solution below.

Solution

1. Boot into Safe Mode,

2. Create the following registry key: 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver 

(If you also want it available in Safe Mode w/ Networking, add the "msiserver" key under the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ key found here as well)

3. Edit the "(Default)" value in the new "msiserver" registry key, and enter "Service" in the "Value Data" box. Click OK, and close the registry editor.

4. Reboot back into Safe Mode, and the Windows Installer service should now run and allow you to add or remove programs in Safe Mode.

Comments 3 CommentsJump to latest comment

Symantec World's picture

Useful Information Shulk.

Regards, M.R

0
Login to vote
Shulk's picture

Thanks a lot. Hope it might help.

Shulk.

0
Login to vote
SUPPORT-2-SUPPORT's picture

Nice One and thanks for sharing.

Regards,

S2S

 

Please don't forget to mark your thread solved with whatever answer helped you.

0
Login to vote