Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

SEP11 install does not complete with rolling back action

Updated: 17 Aug 2010 | 6 comments
aspandya's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

Need help to install SEP11 ...

Get rolling back action at the end

Did everything to disable UAC, reboot, install LiveUpdate, reboot, install SEP
No luck

Comments

aspandya's picture
17
Jul
2010
0 Votes 0
Login to vote

Had SEP11 installed, but LiveUpdate stopped working.
So did an uninstall ...

Then used Norton Removal Tool etc.

Now re-install of SEP11 does not work as per post above.

Will appreciate any help

Is there a SEP11 removal tool ?

aspandya's picture
17
Jul
2010
0 Votes 0
Login to vote

one of the sections in the MSI1a9c5 (SEP_log) is

LUCA: InstallLiveUpdate enter.
MSI (s) (D0:D8) [01:17:42:321]: Closing MSIHANDLE (5257) of type 790531 for thread 3800
MSI (s) (D0:D8) [01:17:42:321]: Creating MSIHANDLE (5258) of type 790531 for thread 3800
LUCA: C:\Users\ANIL~1.HP-\AppData\Local\Temp\RPJRVSPP\LiveUpdate\lucheck.exe
MSI (s) (D0:D8) [01:17:42:321]: Closing MSIHANDLE (5258) of type 790531 for thread 3800
MSI (s) (D0:D8) [01:18:10:526]: Creating MSIHANDLE (5259) of type 790531 for thread 3800
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206
MSI (s) (D0:D8) [01:18:10:526]: Closing MSIHANDLE (5259) of type 790531 for thread 3800
CustomAction InstallLiveUpdate.479D9157_6569_48B2_97C9_6F35A45064AC returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (D0:E0) [01:18:10:526]: Closing MSIHANDLE (5256) of type 790536 for thread 4284
Action ended 1:18:10: InstallFinalize. Return value 3.

---

Another section with return value 3 ...

MSI (s) (D0:BC) [01:18:40:556]: Entering MsiProvideAssembly. AssemblyName: Microsoft.VC80.MFC,type="win32",version="8.0.50727.762",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86", AppContext: , InstallMode: -4
MSI (s) (D0:BC) [01:18:40:556]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D0:BC) [01:18:40:571]: MsiProvideAssembly is returning: 1607
MSI (s) (D0:BC) [01:18:40:961]: Note: 1: 2318 2:  
MSI (s) (D0:BC) [01:18:40:961]: Calling SRSetRestorePoint API. dwRestorePtType: 13, dwEventType: 103, llSequenceNumber: 63, szDescription: "".
MSI (s) (D0:BC) [01:18:40:977]: The call to SRSetRestorePoint API succeeded. Returned status: 0.
MSI (s) (D0:BC) [01:18:40:977]: Unlocking Server
MSI (s) (D0:BC) [01:18:41:024]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 1:18:41: INSTALL. Return value 3.

-----

Last section with Return Value 3.

Property(S): MSIRemoveWFPAppException_RB.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = SMC Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC64 Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE;Symantec Email;C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe;
Property(S): MSIRemoveWFPAppException.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = SMC Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC64 Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE;Symantec Email;C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe;
Property(S): MSIAddWFPAppException_RB.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = SMC Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe;SNAC64 Service;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE;Symantec Email;C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe;
MSI (s) (D0:BC) [01:18:41:460]: MainEngineThread is returning 1603
MSI (s) (D0:E4) [01:18:41:460]: User policy value 'DisableRollback' is 0
MSI (s) (D0:E4) [01:18:41:460]: Machine policy value 'DisableRollback' is 0
MSI (s) (D0:E4) [01:18:41:460]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (D0:E4) [01:18:41:460]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (D0:E4) [01:18:41:460]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (D0:E4) [01:18:41:460]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (s) (D0:E4) [01:18:41:460]: Restoring environment variables
MSI (s) (D0:E4) [01:18:41:460]: Destroying RemoteAPI object.
MSI (s) (D0:48) [01:18:41:460]: Custom Action Manager thread ending.
MSI (c) (5C:94) [01:18:41:460]: Back from server. Return value: 1603
MSI (c) (5C:94) [01:18:41:460]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (c) (5C:94) [01:18:41:460]: PROPERTY CHANGE: Deleting SECONDSEQUENCE property. Its current value is '1'.
Action ended 1:18:41: ExecuteAction. Return value 3.
MSI (c) (5C:94) [01:18:41:460]: Doing action: SetupCompleteError
Action 1:18:41: SetupCompleteError.
Action start 1:18:41: SetupCompleteError.
Action 1:18:41: SetupCompleteError. Dialog created
Action ended 1:18:47: SetupCompleteError. Return value 2.
Action ended 1:18:47: INSTALL. Return value 3.

----

End comments ....

Property(C): MsiLogFileLocation = C:\Users\A~1.HP-\AppData\Local\Temp\MSI1a9c5.LOG
Property(C): SourcedirProduct = {530992D4-DDBA-4F68-8B0D-FF50AC57531B}
Property(C): CLIENT_LANGUAGE = English
Property(C): FEATURESTATECHANGE = 1
Property(C): OutOfDiskSpace = 0
Property(C): OutOfNoRbDiskSpace = 0
Property(C): PrimaryVolumeSpaceAvailable = 0
Property(C): PrimaryVolumeSpaceRequired = 0
Property(C): PrimaryVolumeSpaceRemaining = 0
=== Logging stopped: 7/17/2010  1:18:47 ===
MSI (c) (5C:94) [01:18:47:669]: Note: 1: 1708
MSI (c) (5C:94) [01:18:47:669]: Product: Symantec Endpoint Protection -- Installation operation failed.

MSI (c) (5C:94) [01:18:47:685]: Windows Installer installed the product. Product Name: Symantec Endpoint Protection. Product Version: 11.0.5002.333. Product Language: 1033. Manufacturer: Symantec Corporation. Installation success or error status: 1603.

MSI (c) (5C:94) [01:18:47:685]: Grabbed execution mutex.
MSI (c) (5C:94) [01:18:47:685]: Cleaning up uninstalled install packages, if any exist
MSI (c) (5C:94) [01:18:47:685]: MainEngineThread is returning 1603
=== Verbose logging stopped: 7/17/2010  1:18:47 ===

---
Thanks

aspandya's picture
17
Jul
2010
0 Votes 0
Login to vote
AravindKM's picture
17
Jul
2010
0 Votes 0
Login to vote

Delete following folders if present
C:\Program Files\Symantec
C:\Program Data\Symantec
C:\Program Files\Symantec AntiVirus
C:\Program Files\Common Files\Symantec Shared
C:\Documents and Settings\All Users\Application Data\Symantec
 
Also delete following reg keys
HKLM\Software\symantec
HKCU\Software\symantec
Install SEP and try..

If not helps pls attach the SEP_inst.log which will be present in %temp%.Which is the OS?

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

AravindKM's picture
17
Jul
2010
0 Votes 0
Login to vote

Installation of Symantec Endpoint Protection Client rolls back with error LUCHECK.EXE returned 206

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

aspandya's picture
17
Jul
2010
0 Votes 0
Login to vote

I did the changes you suggested above AravindKM, but that did not resolve the issue.

BTW: I have Windows 7 on my laptop as mentioned above.

Delete following folders if present
C:\Program Files\Symantec
C:\Program Data\Symantec
C:\Program Files\Symantec AntiVirus
C:\Program Files\Common Files\Symantec Shared
C:\Documents and Settings\All Users\Application Data\Symantec
      This last one is C:\ProgramData\All Users\Symantec in Windows 7
 
Also delete following reg keys
HKLM\Software\symantec
HKCU\Software\symantec
Install SEP and try..

----

ISSUE really RESOLVED by the following action :

The registry change suggested by this link, helped resolve my issue
about LUCHECK.EXE error 206

http://service1.symantec.com/support/ent-security....

Solution:

In the registry,

Find

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
value=%APPDATA%

and change it to

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
value=%USERPROFILE%\AppData\Roaming

Install SEP client again.

------------

Thanks