install LU manually first and then run the setup again.

It happens when there is some changes occured due to virus in Registry. You must be getting an Error 1722. Check this

http://entsearch.symantec.com/search?p=R&srid=S10%...

Ajit

When i try to install liveupdate the installation hangs saying "Updating system settings" and "C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE" process is running

bye
orso

Have you tried pulling out your hdd, put it in enclosure and then try to full scan that first on another PC with updated virus definition of SEP and after that when you move back your hdd, try to install first a lower version of symantec antivirus, let say for e.g SAV 10 then after successful installation try to upgrade to SEP... This works for me, hope in your case too.

good luck!!

""InstallLiveUpdate
LUCA: InstallLiveUpdate enter.
LUCA: C:\DOCUME~1\u918\LOCALS~1\Temp\POTYUBUT\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206
Action ended 16.00.43: InstallFinalize. Return value 3.""

The solution is there in this given post.It is the same error.

In addition you can Delete these two folders
\Program files\Symantec\Liveupdate
\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate

Reboot the computer then installation again
https://www-secure.symantec.com/connect/forums/ins...

Go To do
"C:\Documents and Settings\All Users\Application Data "  and delete symantec  folder
then go to
"C:\Program Files\Common Files"  and delete symantec shared folder
then go to
"C:\Program Files "  and delete symantec folder.

check for host file for any illegal entry.

scan the pc with malware bytes antimalware kit and then try to install sep I think it should go fine

-Uninstall live update
-Delete the live update folder in C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate
-Reinstall Live update First and then start the installation of Symantec endpoint

This is happenining due to virus in registry.
Cleanwipe tool must work.
Have you done full scan using SEP 11.0.

Orso,

Seems like the problem is with liveudpate being specific,
I would like u to get LU 3.4
from the below link

ftp://ftp.symantec.com/public/english_us_canada/li...

delted all the earlier instances for 3.3
install a fresh copy of LU 3.4
then try installing SEPM
please let me know the results. Hope this helps good day!

On the beginning check in Control Panel if you do not have LU installed.
If yes... uninstall restart the machine and try to install SEP.

If LU is not installed and You do not have any other Symantec applications on that machine, call us an ask for Clean Wipe tool.

When using the msi to install to remote computers, SEP11.04 will rollback the installation.  Here are two partial sections for the Return Value 3 error.

MSI (s) (28:FC) [09:00:04:326]: Executing op: ActionStart(Name=CacheInstallPrep.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5,Description=Creating install cache,)
ADMINMOVEFILES: Compressed C:\WINDOWS\TEMP\VYXXSKAQ\Cache\
MSI (s) (28:FC) [09:00:04:326]: Executing op: CustomActionSchedule(Action=CacheInstallPrep.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5,ActionType=17409,Source=BinaryData,Target=CacheInstallPrep,CustomActionData={D689B418-235A-4290-A0A5-A75E490E0351}|\\altiris-svr\msi\SYMANTEC\|C:\WINDOWS\TEMP\VYXXSKAQ\Cache\)
MSI (s) (28:C8) [09:00:04:342]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI6E.tmp, Entrypoint: CacheInstallPrep
AgentMainCA: Directory C:\WINDOWS\TEMP\VYXXSKAQ\Cache\ already exists
AgentMainCA: Created Directory C:\WINDOWS\TEMP\VYXXSKAQ\Cache\
MSI (s) (28:FC) [09:00:10:654]: Executing op: ActionStart(Name=irbDeleteFiles.6500F9C2_37EA_4F25_A4DE_6211026D9C01,,)
AgentMainCA: Copying \\altiris-svr\msi\SYMANTEC\Symantec AntiVirus.msi to C:\WINDOWS\TEMP\VYXXSKAQ\Cache\Symantec AntiVirus.msi
MSI (s) (28:FC) [09:00:10:654]: Executing op: CustomActionSchedule(Action=irbDeleteFiles.6500F9C2_37EA_4F25_A4DE_6211026D9C01,ActionType=3329,Source=BinaryData,Target=_InstallRollbackDeleteFiles@4,)
MSI (s) (28:FC) [09:00:10:654]: Executing op: ActionStart(Name=StopCcSetMgrOnOverOrBrokenInstall_R.D3A883B9_8F94_4E7D_96B6_852388CE5647,,)
MSI (s) (28:FC) [09:00:10:654]: Executing op: CustomActionSchedule(Action=StopCcSetMgrOnOverOrBrokenInstall_R.D3A883B9_8F94_4E7D_96B6_852388CE5647,ActionType=1281,Source=BinaryData,Target=_StopCcSetMgrOnOverOrBrokenInstall_Rol@4,)
MSI (s) (28:FC) [09:00:10:717]: Executing op: ActionStart(Name=StopCcSetMgrOnOverOrBrokenInstall.D3A883B9_8F94_4E7D_96B6_852388CE5647,,)
MSI (s) (28:FC) [09:00:10:717]: Executing op: CustomActionSchedule(Action=StopCcSetMgrOnOverOrBrokenInstall.D3A883B9_8F94_4E7D_96B6_852388CE5647,ActionType=1025,Source=BinaryData,Target=_StopCcSetMgrOnOverOrBrokenInstall@4,)
MSI (s) (28:FC) [09:00:10:857]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI6F.tmp, Entrypoint: _StopCcSetMgrOnOverOrBrokenInstall@4
2009-08-20-09-00-11-232 : ccLib::CRegistry::Open(101) : RegOpenKeyEx() != ERROR_SUCCESS, Software\Symantec\InstalledApps, 0x00000002

MSIASSERT - 2009-08-20-09-00-11-279 : CInstalledApps::GetInstAppsDirectory() : reg.Open() == FALSE
:
MSIASSERT - 2009-08-20-09-00-11-342 : CInstalledApps::GetCCDirectory() : GetInstAppsDirectory() == false
:
2009-08-20-09-00-11-404 : CInstalledApps::GetSymSharedDirectory() : "C:\Program Files\Common Files\Symantec Shared"

2009-08-20-09-00-11-467 : CInstalledApps::GetCCDirectory() : "C:\Program Files\Common Files\Symantec Shared"

MSIASSERT - 2009-08-20-09-00-11-545 : cc::StopServiceAndDepAtAnyCost(366) : Unable to openService ccSetMgr. Error=1060:
MSI (s) (28:FC) [09:00:11:560]: Executing op: ActionStart(Name=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,,)
MSIASSERT - StopCcSetMgrOnOverOrBrokenInstall: Unable to stop ccSetMgr:
MSI (s) (28:FC) [09:00:11:560]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3329,Source=BinaryData,Target=UnInstallLiveUpdate,CustomActionData=C:\WINDOWS\TEMP\VYXXSKAQ\LiveUpdate\lucheck.exe)
MSI (s) (28:FC) [09:00:11:560]: Executing op: ActionStart(Name=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,,)
MSI (s) (28:FC) [09:00:11:560]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3073,Source=BinaryData,Target=InstallLiveUpdate,CustomActionData=C:\WINDOWS\TEMP\VYXXSKAQ\LiveUpdate\lucheck.exe)
MSI (s) (28:14) [09:00:11:592]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI70.tmp, Entrypoint: InstallLiveUpdate
LUCA: InstallLiveUpdate enter.
LUCA: C:\WINDOWS\TEMP\VYXXSKAQ\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 2089877569
MSI (s) (28:FC) [09:00:11:951]: User policy value 'DisableRollback' is 0
MSI (s) (28:FC) [09:00:11:951]: Machine policy value 'DisableRollback' is 0
Action ended 9:00:11: InstallFinalize. Return value 3.

***********************Second section of error*****************
MSI (s) (28:FC) [09:00:22:951]: Executing op: ActionStart(Name=SetOneTimeUpdateCookie_RB.93C43188_D2F5_461E_B42B_C3A2A318345C,,)
MSI (s) (28:FC) [09:00:22:951]: Executing op: CustomActionRollback(Action=SetOneTimeUpdateCookie_RB.93C43188_D2F5_461E_B42B_C3A2A318345C,ActionType=1281,Source=BinaryData,Target=SetOneTimeUpdateCookie_RB,)
MSI (s) (28:C4) [09:00:22:966]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI7B.tmp, Entrypoint: SetOneTimeUpdateCookie_RB
MSI (s) (28:FC) [09:00:22:998]: Executing op: ActionStart(Name=DisableCancelButton.93C43188_D2F5_461E_B42B_C3A2A318345C,,)
MSI (s) (28:FC) [09:00:22:998]: Executing op: ActionStart(Name=stopSP.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1,,)
MSI (s) (28:FC) [09:00:22:998]: Executing op: ActionStart(Name=restoreSPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1,,)
MSI (s) (28:FC) [09:00:23:013]: Executing op: CustomActionRollback(Action=restoreSPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1,ActionType=3329,Source=BinaryData,Target=restoreSPState,CustomActionData=0)
MSI (s) (28:B8) [09:00:23:013]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI7C.tmp, Entrypoint: restoreSPState
restoreSPState: called
restoreSPState: calling loadEventManagerDLLs
loadEventManagerDLLs: called
serviceIsRunning: OpenService FAILED with error 1060
LoadEvtMgrDll: ccEvtMgr is not running
serviceIsRunning: OpenService FAILED with error 1060
SendReload: ccEvtMgr is not running
loadEventManagerDLLs: FAILED to send reload event
loadEventManagerDLLs: exiting
restoreSPState: Changing service configuration to SERVICE_DEMAND START for SPBBCSvc
modifyServiceConfiguration: OpenService() FAILED with error 1060
restoreSPState: Unable to modify configuration for SPBBCSvc
restoreSPState: Value of szSPState "0"
restoreSPState: SPState is NOT set to 1. NOT Calling startSP
restoreSPState: exiting
MSI (s) (28:FC) [09:00:23:404]: Executing op: ActionStart(Name=checkMSXMLVersion.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1,,)
MSI (s) (28:FC) [09:00:23:404]: Executing op: ActionStart(Name=RB_cleanupFolder.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1,,)
MSI (s) (28:FC) [09:00:23:404]: Executing op: CustomActionRollback(Action=RB_cleanupFolder.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1,ActionType=1345,Source=BinaryData,Target=cleanupFolder,)
MSI (s) (28:B0) [09:00:23:419]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI7D.tmp, Entrypoint: cleanupFolder
InstSymProtect::cleanupFolder() -> called
DeleteFolderIfNoFileExists: Driver file is not present.
DeleteFolder: FAILED to delete directory C:\Program Files\Common Files\Symantec Shared\SPBBC
DeleteFolderIfNoFileExists: SHDeleteFolder FAILED
InstSymProtect::cleanupFolder() -> DeleteFolderIfNoFileExists FAILED
MSI (s) (28:FC) [09:00:23:435]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (28:FC) [09:00:23:435]: Error in rollback skipped. Return: 5
cleanupFolder:  exiting
MSI (s) (28:FC) [09:00:23:466]: No System Restore sequence number for this installation.
MSI (s) (28:FC) [09:00:23:466]: Unlocking Server
MSI (s) (28:FC) [09:00:23:466]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 9:00:23: INSTALL. Return value 3.

There are two "Return value 3" sections.  There are no Symantec folders on the computer and I deleted registry entries for Norton Antivirus Corporate Edition 7.5.  Liveupdate is not listed in Add/remove programs list.
I am not quite sure what the problem is from these two sections.
Can anyone decipher these errors?

I had an issue like this a while back. Cleanwipe failed to remove some of the Registry keys from an earlier SEP install. Make sure you have searched the entire registry for any remaining keys. If nothing is found it might be easier to reload the OS and start over.

Regards,
Thomas

1. Check if Event Log is Started and set as automatic  in services.msc. If this service is stopped, then,
2. Download eventlog.dll file and copy it in C:\WINDOWS\system32
3. Start the Event Log services and install SEP11