Endpoint Protection

 View Only
  • 1.  Install SEP 11 rollback , please help !!!

    Posted Aug 30, 2009 08:15 AM
      |   view attached
    I try to intall SEP 11 on my PC but can not ..It's RollBack... in SEP_INST.LOG Return value 3 as below...
    - Return value 3 ..part 1
    MSI (s) (A4:80) [18:45:43:468]: Executing op: CustomActionSchedule(Action=MSIAddWFPAppException_RB.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5,ActionType=3329,Source=BinaryData,Target=MSIRemoveWFPAppException,CustomActionData=SMC Service;C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC Service;C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE;Symantec Email;C:\Program Files\Common Files\Symantec Shared\ccApp.exe;)
    MSI (s) (A4:80) [18:45:43:484]: Executing op: ActionStart(Name=LU_Register_Decomposer_ABI.Rol.611D9A69_39FC_4998_998E_1ECADF28A979,,)
    MSI (s) (A4:80) [18:45:43:484]: Executing op: CustomActionSchedule(Action=LU_Register_Decomposer_ABI.Rol.611D9A69_39FC_4998_998E_1ECADF28A979,ActionType=1281,Source=BinaryData,Target=_LURollbackDecomposerABI@4,)
    MSI (s) (A4:80) [18:45:43:484]: Executing op: ActionStart(Name=LU_Register_Decomposer_ABI.611D9A69_39FC_4998_998E_1ECADF28A979,,)
    MSI (s) (A4:80) [18:45:43:484]: Executing op: CustomActionSchedule(Action=LU_Register_Decomposer_ABI.611D9A69_39FC_4998_998E_1ECADF28A979,ActionType=1025,Source=BinaryData,Target=_LURegisterDecomposerABI@4,)
    MSI (s) (A4:DC) [18:45:43:484]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI75.tmp, Entrypoint: _LURegisterDecomposerABI@4
    -- DECABI_LOGGING --   Enter LURegisterDecomposerABI()
    -- DECABI_LOGGING --   GetDecomposerABIProperties Registry created.
    -- DECABI_LOGGING --   GetDecABIDirectory() -- failed to get Installed Apps key from registry.
    -- DECABI_LOGGING --   Decomposer ABI DLL version is: not installed
    -- DECABI_LOGGING --   Decomposer ABI not registered with LiveUpdate.
    -- DECABI_LOGGING --   Decomposer ABI version registered with LiveUpdate is: not installed
    -- DECABI_LOGGING --   Decomposer ABI sequence number registered with LiveUpdate is: not installed
    -- DECABI_LOGGING --   For rollback using Decomposer ABI custom action  property: sizeof= 130 not installed:not installed
    -- DECABI_LOGGING --   LiveUpdate registration failed. (HRESULT=-2144731115)
    MSI (s) (A4:80) [18:45:44:390]: User policy value 'DisableRollback' is 0
    MSI (s) (A4:80) [18:45:44:390]: Machine policy value 'DisableRollback' is 0
    Action ended 18:45:44: InstallFinalize. Return value 3.
    MSI (s) (A4:80) [18:45:45:875]: Executing op: Header(Signature=1397708873,Version=301,Timestamp=991859980,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
    MSI (s) (A4:80) [18:45:45:875]: Executing op: DialogInfo(Type=0,Argument=1033)
    MSI (s) (A4:80) [18:45:45:875]: Executing op: DialogInfo(Type=1,Argument=Symantec Endpoint Protection)
    MSI (s) (A4:80) [18:45:45:875]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
    MSI (s) (A4:80) [18:45:45:875]: Executing op: RegisterBackupFile(File=C:\Config.Msi\221ea.rbf)
    MSI (s) (A4:80) [18:45:45:875]: Executing op: ActionStart(Name=LU_Register_Decomposer_ABI.611D9A69_39FC_4998_998E_1ECADF28A979,,)
    MSI (s) (A4:80) [18:45:45:875]: Executing op: ProductInfo(ProductKey={D689B418-235A-4290-A0A5-A75E490E0351},ProductName=Symantec Endpoint Protection,PackageName=Symantec AntiVirus.msi,Language=1033,Version=184553578,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={8E81776A-E189-42D6-ADB7-7DC8AA55E09F},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0)
    MSI (s) (A4:80) [18:45:45:890]: Executing op: ActionStart(Name=LU_Register_Decomposer_ABI.Rol.611D9A69_39FC_4998_998E_1ECADF28A979,,)
    MSI (s) (A4:80) [18:45:45:890]: Executing op: CustomActionRollback(Action=LU_Register_Decomposer_ABI.Rol.611D9A69_39FC_4998_998E_1ECADF28A979,ActionType=1281,Source=BinaryData,Target=_LURollbackDecomposerABI@4,)
    MSI (s) (A4:34) [18:45:45:890]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI76.tmp, Entrypoint: _LURollbackDecomposerABI@4
    -- DECABI_LOGGING --   Enter LURollbackDecomposerABI()
    -- DECABI_LOGGING --   Decomposer ABI Rollback property version = not installed
    -- DECABI_LOGGING --   Decomposer ABI Rollback property sequence_number = not installed
    -- DECABI_LOGGING --   Rollback of LiveUpdate un-registration succeeded.
    MSI (s) (A4:80) [18:45:45:968]: Executing op: ActionStart(Name=MSIAddWFPAppException_RB.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5,,)
    MSI (s) (A4:80) [18:45:45:968]: Executing op: CustomActionRollback(Action=MSIAddWFPAppException_RB.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5,ActionType=3329,Source=BinaryData,Target=MSIRemoveWFPAppException,CustomActionData=SMC Service;C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC Service;C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE;Symantec Email;C:\Program Files\Common Files\Symantec Shared\ccApp.exe;)
    MSI (s) (A4:98) [18:45:45:984]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI77.tmp, Entrypoint: MSIRemoveWFPAppException
    WinFWConfigCA: MSIChangeWFPAppException: CustomActionData dwlen 223, SMC Service;C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC Service;C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE;Symantec Email;C:\Program Files\Common Files\Symantec Shared\ccApp.exe;.
    WinFWConfigCA: MSIChangeWFPAppException: strName SMC Service, strPath C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe.
    WinFWConfigCA: MSIModifyWFPAppException: strExceptionName = SMC Service.
    WinFWConfigCA: MSIModifyWFPAppException: strFilePath = C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe.
    WinFWConfigCA: WindowsFirewallModifyApp: fwProcessImageFileName=C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe fwName=SMC Service
    WinFWConfigCA: WindowsFirewallAppIsEnabled: Authorized application C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe is enabled in the firewall.
    WinFWConfigCA: WindowsFirewallModifyApp: Application C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe has now been removed from the firewall.
    WinFWConfigCA: MSIChangeWFPAppException: strName SNAC Service, strPath C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE.
    WinFWConfigCA: MSIModifyWFPAppException: strExceptionName = SNAC Service.
    WinFWConfigCA: MSIModifyWFPAppException: strFilePath = C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE.
    WinFWConfigCA: WindowsFirewallModifyApp: fwProcessImageFileName=C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE fwName=SNAC Service
    WinFWConfigCA: WindowsFirewallAppIsEnabled: Authorized application C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE is enabled in the firewall.
    WinFWConfigCA: WindowsFirewallModifyApp: Application C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE has now been removed from the firewall.
    WinFWConfigCA: MSIChangeWFPAppException: strName Symantec Email, strPath C:\Program Files\Common Files\Symantec Shared\ccApp.exe.
    WinFWConfigCA: MSIModifyWFPAppException: strExceptionName = Symantec Email.
    WinFWConfigCA: MSIModifyWFPAppException: strFilePath = C:\Program Files\Common Files\Symantec Shared\ccApp.exe.
    WinFWConfigCA: WindowsFirewallModifyApp: fwProcessImageFileName=C:\Program Files\Common Files\Symantec Shared\ccApp.exe fwName=Symantec Email
    WinFWConfigCA: WindowsFirewallAppIsEnabled: Authorized application C:\Program Files\Common Files\Symantec Shared\ccApp.exe is enabled in the firewall.
    WinFWConfigCA: WindowsFirewallModifyApp: Application C:\Program Files\Common Files\Symantec Shared\ccApp.exe has now been removed from the firewall.
    MSI (s) (A4:80) [18:45:46:484]: Executing op: ActionStart(Name=MSIAddWFPAppException.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5,,)
    MSI (s) (A4:80) [18:45:46:484]: Executing op: ActionStart(Name=ApplyCustomPolicies.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5,,)
    MSI (s) (A4:80) [18:45:46:484]: Executing op: ActionStart(Name=InstallCcSettingsFiles_Rol.D3A883B9_8F94_4E7D_96B6_852388CE5647,,)
    MSI (s) (A4:80) [18:45:46:484]: Executing op: CustomActionRollback(Action=InstallCcSettingsFiles_Rol.D3A883B9_8F94_4E7D_96B6_852388CE5647,ActionType=3329,Source=BinaryData,Target=_RemoveCcSettingsFiles@4,CustomActionData=C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\)
    MSI (s) (A4:3C) [18:45:46:500]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI78.tmp, Entrypoint: _RemoveCcSettingsFiles@4
    MSIRESULT PASS - RemoveCcSettingsFiles: Preparing to delete ccSettings files:
    DAT path='C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat'
    BAK path='C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.bak':
    DeleteFileNowOrAfterReboot:  Nothing to delete; file 'C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat' is not on the system
    DeleteFileNowOrAfterReboot:  _taccess( 'C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat' ) failed with errno=2
    DeleteFileNowOrAfterReboot:  Nothing to delete; file 'C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.bak' is not on the system
    DeleteFileNowOrAfterReboot:  _taccess( 'C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.bak' ) failed with errno=2
    MSI (s) (A4:80) [18:45:46:812]: Executing op: ActionStart(Name=irbExtDeleteOriginalDatFile.9DDC0E81_9620_4441_B4F7_FD077F55D6D2,,)
    MSI (s) (A4:80) [18:45:46:812]: Executing op: CustomActionRollback(Action=irbExtDeleteOriginalDatFile.9DDC0E81_9620_4441_B4F7_FD077F55D6D2,ActionType=3329,Source=BinaryData,Target=_iDeleteOriginalDatFiles@4,CustomActionData=/Product:Symantec Endpoint Protection /Version:11.0.4202.75)
    MSI (s) (A4:C4) [18:45:46:828]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI79.tmp, Entrypoint: _iDeleteOriginalDatFiles@4
    1: InstAPca.dll: Inside DeleteOriginalDatFiles() (in MSI)
     
    1: srtUnin.dll: Inside CInstallEvents::DeleteOriginalDatFiles()
     
    1: srtUnin.dll:   Calling SRTSPVer:10.2.10.2  Installed SRTSPVer:10.2.10.2  Data:/Product:Symantec Endpoint Protection /Version:11.0.4202.75
     
    1: srtUnin.dll:   File already gone: C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\srtspso.dat
     
    1: srtUnin.dll:   File already gone: C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\srtspsp.dat
     
    1: srtUnin.dll:   File already gone: C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\srtspse.dat
     
    1: srtUnin.dll:   File already gone: C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\srtspske.dat
     
    1: InstAPca.dll:   Returned successfully from callout dll.
     
    MSI (s) (A4:80) [18:45:47:171]: Executing op: ActionStart(Name=irbExtUnloadEMPlugin.9DDC0E81_9620_4441_B4F7_FD077F55D6D2,,)
    MSI (s) (A4:80) [18:45:47:171]: Executing op: CustomActionRollback

    --Return Value 3 Part 2
    MSI (s) (A4:80) [18:45:43:468]: Executing op: CustomActionSchedule(Action=MSIAddWFPAppException_RB.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5,ActionType=3329,Source=BinaryData,Target=MSIRemoveWFPAppException,CustomActionData=SMC Service;C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC Service;C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE;Symantec Email;C:\Program Files\Common Files\Symantec Shared\ccApp.exe;)
    MSI (s) (A4:80) [18:45:43:484]: Executing op: ActionStart(Name=LU_Register_Decomposer_ABI.Rol.611D9A69_39FC_4998_998E_1ECADF28A979,,)
    MSI (s) (A4:80) [18:45:43:484]: Executing op: CustomActionSchedule(Action=LU_Register_Decomposer_ABI.Rol.611D9A69_39FC_4998_998E_1ECADF28A979,ActionType=1281,Source=BinaryData,Target=_LURollbackDecomposerABI@4,)
    MSI (s) (A4:80) [18:45:43:484]: Executing op: ActionStart(Name=LU_Register_Decomposer_ABI.611D9A69_39FC_4998_998E_1ECADF28A979,,)
    MSI (s) (A4:80) [18:45:43:484]: Executing op: CustomActionSchedule(Action=LU_Register_Decomposer_ABI.611D9A69_39FC_4998_998E_1ECADF28A979,ActionType=1025,Source=BinaryData,Target=_LURegisterDecomposerABI@4,)
    MSI (s) (A4:DC) [18:45:43:484]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI75.tmp, Entrypoint: _LURegisterDecomposerABI@4
    -- DECABI_LOGGING --   Enter LURegisterDecomposerABI()
    -- DECABI_LOGGING --   GetDecomposerABIProperties Registry created.
    -- DECABI_LOGGING --   GetDecABIDirectory() -- failed to get Installed Apps key from registry.
    -- DECABI_LOGGING --   Decomposer ABI DLL version is: not installed
    -- DECABI_LOGGING --   Decomposer ABI not registered with LiveUpdate.
    -- DECABI_LOGGING --   Decomposer ABI version registered with LiveUpdate is: not installed
    -- DECABI_LOGGING --   Decomposer ABI sequence number registered with LiveUpdate is: not installed
    -- DECABI_LOGGING --   For rollback using Decomposer ABI custom action  property: sizeof= 130 not installed:not installed
    -- DECABI_LOGGING --   LiveUpdate registration failed. (HRESULT=-2144731115)
    MSI (s) (A4:80) [18:45:44:390]: User policy value 'DisableRollback' is 0
    MSI (s) (A4:80) [18:45:44:390]: Machine policy value 'DisableRollback' is 0
    Action ended 18:45:44: InstallFinalize. Return value 3.
    MSI (s) (A4:80) [18:45:45:875]: Executing op: Header(Signature=1397708873,Version=301,Timestamp=991859980,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
    MSI (s) (A4:80) [18:45:45:875]: Executing op: DialogInfo(Type=0,Argument=1033)
    MSI (s) (A4:80) [18:45:45:875]: Executing op: DialogInfo(Type=1,Argument=Symantec Endpoint Protection)
    MSI (s) (A4:80) [18:45:45:875]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
    MSI (s) (A4:80) [18:45:45:875]: Executing op: RegisterBackupFile(File=C:\Config.Msi\221ea.rbf)
    MSI (s) (A4:80) [18:45:45:875]: Executing op: ActionStart(Name=LU_Register_Decomposer_ABI.611D9A69_39FC_4998_998E_1ECADF28A979,,)
    MSI (s) (A4:80) [18:45:45:875]: Executing op: ProductInfo(ProductKey={D689B418-235A-4290-A0A5-A75E490E0351},ProductName=Symantec Endpoint Protection,PackageName=Symantec AntiVirus.msi,Language=1033,Version=184553578,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={8E81776A-E189-42D6-ADB7-7DC8AA55E09F},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0)
    MSI (s) (A4:80) [18:45:45:890]: Executing op: ActionStart(Name=LU_Register_Decomposer_ABI.Rol.611D9A69_39FC_4998_998E_1ECADF28A979,,)
    MSI (s) (A4:80) [18:45:45:890]: Executing op: CustomActionRollback(Action=LU_Register_Decomposer_ABI.Rol.611D9A69_39FC_4998_998E_1ECADF28A979,ActionType=1281,Source=BinaryData,Target=_LURollbackDecomposerABI@4,)
    MSI (s) (A4:34) [18:45:45:890]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI76.tmp, Entrypoint: _LURollbackDecomposerABI@4
    -- DECABI_LOGGING --   Enter LURollbackDecomposerABI()
    -- DECABI_LOGGING --   Decomposer ABI Rollback property version = not installed
    -- DECABI_LOGGING --   Decomposer ABI Rollback property sequence_number = not installed
    -- DECABI_LOGGING --   Rollback of LiveUpdate un-registration succeeded.
    MSI (s) (A4:80) [18:45:45:968]: Executing op: ActionStart(Name=MSIAddWFPAppException_RB.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5,,)
    MSI (s) (A4:80) [18:45:45:968]: Executing op: CustomActionRollback(Action=MSIAddWFPAppException_RB.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5,ActionType=3329,Source=BinaryData,Target=MSIRemoveWFPAppException,CustomActionData=SMC Service;C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC Service;C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE;Symantec Email;C:\Program Files\Common Files\Symantec Shared\ccApp.exe;)
    MSI (s) (A4:98) [18:45:45:984]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI77.tmp, Entrypoint: MSIRemoveWFPAppException
    WinFWConfigCA: MSIChangeWFPAppException: CustomActionData dwlen 223, SMC Service;C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC Service;C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE;Symantec Email;C:\Program Files\Common Files\Symantec Shared\ccApp.exe;.
    WinFWConfigCA: MSIChangeWFPAppException: strName SMC Service, strPath C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe.
    WinFWConfigCA: MSIModifyWFPAppException: strExceptionName = SMC Service.
    WinFWConfigCA: MSIModifyWFPAppException: strFilePath = C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe.
    WinFWConfigCA: WindowsFirewallModifyApp: fwProcessImageFileName=C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe fwName=SMC Service
    WinFWConfigCA: WindowsFirewallAppIsEnabled: Authorized application C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe is enabled in the firewall.
    WinFWConfigCA: WindowsFirewallModifyApp: Application C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe has now been removed from the firewall.
    WinFWConfigCA: MSIChangeWFPAppException: strName SNAC Service, strPath C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE.
    WinFWConfigCA: MSIModifyWFPAppException: strExceptionName = SNAC Service.
    WinFWConfigCA: MSIModifyWFPAppException: strFilePath = C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE.
    WinFWConfigCA: WindowsFirewallModifyApp: fwProcessImageFileName=C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE fwName=SNAC Service
    WinFWConfigCA: WindowsFirewallAppIsEnabled: Authorized application C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE is enabled in the firewall.
    WinFWConfigCA: WindowsFirewallModifyApp: Application C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE has now been removed from the firewall.
    WinFWConfigCA: MSIChangeWFPAppException: strName Symantec Email, strPath C:\Program Files\Common Files\Symantec Shared\ccApp.exe.
    WinFWConfigCA: MSIModifyWFPAppException: strExceptionName = Symantec Email.
    WinFWConfigCA: MSIModifyWFPAppException: strFilePath = C:\Program Files\Common Files\Symantec Shared\ccApp.exe.
    WinFWConfigCA: WindowsFirewallModifyApp: fwProcessImageFileName=C:\Program Files\Common Files\Symantec Shared\ccApp.exe fwName=Symantec Email
    WinFWConfigCA: WindowsFirewallAppIsEnabled: Authorized application C:\Program Files\Common Files\Symantec Shared\ccApp.exe is enabled in the firewall.
    WinFWConfigCA: WindowsFirewallModifyApp: Application C:\Program Files\Common Files\Symantec Shared\ccApp.exe has now been removed from the firewall.
    MSI (s) (A4:80) [18:45:46:484]: Executing op: ActionStart(Name=MSIAddWFPAppException.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5,,)
    MSI (s) (A4:80) [18:45:46:484]: Executing op: ActionStart(Name=ApplyCustomPolicies.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5,,)
    MSI (s) (A4:80) [18:45:46:484]: Executing op: ActionStart(Name=InstallCcSettingsFiles_Rol.D3A883B9_8F94_4E7D_96B6_852388CE5647,,)
    MSI (s) (A4:80) [18:45:46:484]: Executing op: CustomActionRollback(Action=InstallCcSettingsFiles_Rol.D3A883B9_8F94_4E7D_96B6_852388CE5647,ActionType=3329,Source=BinaryData,Target=_RemoveCcSettingsFiles@4,CustomActionData=C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\)
    MSI (s) (A4:3C) [18:45:46:500]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI78.tmp, Entrypoint: _RemoveCcSettingsFiles@4
    MSIRESULT PASS - RemoveCcSettingsFiles: Preparing to delete ccSettings files:
    DAT path='C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat'
    BAK path='C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.bak':
    DeleteFileNowOrAfterReboot:  Nothing to delete; file 'C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat' is not on the system
    DeleteFileNowOrAfterReboot:  _taccess( 'C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat' ) failed with errno=2
    DeleteFileNowOrAfterReboot:  Nothing to delete; file 'C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.bak' is not on the system
    DeleteFileNowOrAfterReboot:  _taccess( 'C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.bak' ) failed with errno=2
    MSI (s) (A4:80) [18:45:46:812]: Executing op: ActionStart(Name=irbExtDeleteOriginalDatFile.9DDC0E81_9620_4441_B4F7_FD077F55D6D2,,)
    MSI (s) (A4:80) [18:45:46:812]: Executing op: CustomActionRollback(Action=irbExtDeleteOriginalDatFile.9DDC0E81_9620_4441_B4F7_FD077F55D6D2,ActionType=3329,Source=BinaryData,Target=_iDeleteOriginalDatFiles@4,CustomActionData=/Product:Symantec Endpoint Protection /Version:11.0.4202.75)
    MSI (s) (A4:C4) [18:45:46:828]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI79.tmp, Entrypoint: _iDeleteOriginalDatFiles@4
    1: InstAPca.dll: Inside DeleteOriginalDatFiles() (in MSI)
     
    1: srtUnin.dll: Inside CInstallEvents::DeleteOriginalDatFiles()
     
    1: srtUnin.dll:   Calling SRTSPVer:10.2.10.2  Installed SRTSPVer:10.2.10.2  Data:/Product:Symantec Endpoint Protection /Version:11.0.4202.75
     
    1: srtUnin.dll:   File already gone: C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\srtspso.dat
     
    1: srtUnin.dll:   File already gone: C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\srtspsp.dat
     
    1: srtUnin.dll:   File already gone: C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\srtspse.dat
     
    1: srtUnin.dll:   File already gone: C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\srtspske.dat
     
    1: InstAPca.dll:   Returned successfully from callout dll.
     
    MSI (s) (A4:80) [18:45:47:171]: Executing op: ActionStart(Name=irbExtUnloadEMPlugin.9DDC0E81_9620_4441_B4F7_FD077F55D6D2,,)
    MSI (s) (A4:80) [18:45:47:171]: Executing op: CustomActionRollback

    Attachment(s)

    zip
    SEP_INST.zip   290 KB 1 version


  • 2.  RE: Install SEP 11 rollback , please help !!!

    Posted Aug 30, 2009 10:41 AM
    Try installing live update first and then install sep.


  • 3.  RE: Install SEP 11 rollback , please help !!!

    Posted Aug 30, 2009 10:49 AM
    If this doesn't help they delete the folder "symantec" in C:\Documents and Settings\All Users\Application Data

    then delete the folder "symantec shared" in C:\Program Files\Common Files

    then delete the folder "symantec" or symantec antivirus" in C:\Program Files

    then  type %temp%  in star t>Run and hit enter.
     now delete all the temporary files here .

    and install SEP now and just before that check whether registry is opening or not if not the istall "unhook.inf" .

    better scan with nss.exe before installing sep.


  • 4.  RE: Install SEP 11 rollback , please help !!!

    Posted Aug 30, 2009 11:46 AM
    Try the step in  sequence:

    1.Uninstall Live update ( If it is there in Add Remove program)

    2. Delete the following folders (if they exist):
      C:\Program Files\Symantec
      C:\Program Files\Symantec Antivirus
      C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate


    3.  Install LiveUpdate by running the following file from CD1: \SEP\LUSETUP.EXE

    4. Install Symantec Endpoint Protection. from CD 1\SEP Folder\Setup.exe ( as an unmanged Client )


    http://service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/3c408fd413456b9088257377004a6fba?OpenDocument

    Follow the steps to make the Client managed

    How to change a Symantec Endpoint Protection client from unmanaged to managed
     
    1.Copy of the file Sylink.xml from the server from C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent\
    2. On the client computer , click Start > Run, type smc -stop, and click OK.
    3. Copy the Sylink.xml into the C:\Program Files\Symantec\Symantec Endpoint Protection folder, and replace any existing Sylink.xml file.
    4. Click Start > Run, type smc -start, and click OK.




  • 5.  RE: Install SEP 11 rollback , please help !!!

    Posted Sep 01, 2009 07:32 AM

    1. Use Cleanwipe & remove SEP.

    2. Delete the Symantec folders mentioned above by Bijay.Swain

    3. Open My Computer -> Tools -> Folder Options -> Click View Tab

    4. Scroll down the advanced settings's & uncheck "Use Simple file Sharing"

    Try to install SEP unmanaged client. After installation replace the Sylink file & make it managed.


    Regards...
    Ramji Iyyer



  • 6.  RE: Install SEP 11 rollback , please help !!!

    Posted Nov 22, 2009 10:20 AM
    1. Check if Event Log is Started and set as automatic  in services.msc. If this service is stopped, then,
    2. Download eventlog.dll file and copy it in C:\WINDOWS\system32
    3. Start the Event Log and install SEP11

    Regards,
    Guru
    Symantec Certified Specialist