Endpoint Protection

I've got over 100 clients running Endpoint 11 MR 4.  For some reason I have been unable to fully install the client on one of my machines.  During the installation, I get a message box that says, "Error 1911 Could Not Register Type Library for file C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe"

Initially I thought that this could be caused by an older Symantec client installation that didn't fully uninstall itself.  I have run NoNAV and Clean Wipe on the machine, but I still can't install the client. 

Does anyone have any idea what might be causing this problem?   Unfortunately, I am unable to reformat this machine (for various reasons beyond my control).  It is running XP SP2.

Thanks in advance for your suggestions.

With some research that looks like a DLL problem when it's not getting registered.

Try and note when the error is popping up.

Couple a seconds before that, Hit on the cancel button but do not confirm it.

Run the following in the cmd prompt

for /f %a in ('dir /b "c:\program files\common files\symantec shared\*.dll"') do regsvr32 /s %a

and

for /f %a in ('dir /b "c:\program files\symantec\symantec endpoint protection\*.dll"') do regsvr32 /s %a


Click no for the cancel of the install.

Does it proceed?

Forgot to mention, navigate to that directory before like the endpoint directory and the symantec shared.

From last few moths the trend of threat is to disable automatic updates ,Disable Antivirus and if it is not installed Disable it from installing.
So i would suggest either use NSS to scan it firstor Run a online scan.

If it is threat then there is high chance that it will be either Sality or a Rootkit.

Hi Sandeep
If it is genuine error then it should be available on Symantec Knowledgebase. I found it no where.

It's of course a genuine error, But more from a packaging perspective.

Probably someone who has worked on wise, install shield should be able to explain.

I did a pretty thorough checkout of this system by examining all the typical malware launch points and I'm pretty confident it is clean.  I won't be able to try Sandeep's suggestion until next week (this pc is running a critical 24/7 operation).  I will post the results. 

Have you involve support team for this issue I think if this is bug so they can fix in MP2.

This noncritical error does not prevent the proper installation of your SEP program. Click Ignore, and continue to install your Norton program. For more information go to the following link:

http://service1.symantec.com/SUPPORT/sharedtech.nsf/0/8b1645ba39de4baa652570b3006637ab?OpenDocument&seg=ag&lg=en&ct=us

Yes we can ignore the error, but then the antivirus component of Endpoint doesn't work. 

Disco, Can you upload the SEP_INST.LOG?

I think you should try the "Norton removal tool" once.

Do not try any removal tool.As it will reboot your computer that too more than once i would suggest you to follow lenthy but safe manual removal doc.
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007073018014248?Open&src=ent_gold_nam

and as sandeep said
We cannot come to final conclusion of any install failure without looking at SEP_INST.log

Plese upload the log file.

If you're uninstalling - doesn't Symantec have an unintsall tool for such a case?
And is there a sort of cheat sheet for all the error codes?

H Snadeep

i had worked upon it and talked the Symantec Analyst, they suggested to run a windows Update.

You can check with Windows Update also.

Request you to attach the log file.