Endpoint Protection

Dear Sir or Madam:

When I attempt to install SEP 11.0 through my MSI file,but I couldn't competed installed the event logs indicate the following error:

Event ID 11708

"product symantect-installation operationfailed .for more infor see help and support ecnter at...

I am operation windtows sp 3 and full upgrade.that is new thinkpad laptop. I don't know why i unable to install symantec SEP on my computer

Best Regards

David Wang

What version of SEP are you installing? What is the client OS? Please see these KB's that mention your error.

Symantec Endpoint Protection 11.0 error: Stops during installation with Event ID 11708

http://www.symantec.com/business/support/index?page=content&id=TECH102633&actp=search&viewlocale=en_US&searchid=1287597290985

Windows 7 / 2008 R2 - SEP Client installation rolls back

http://www.symantec.com/business/support/index?page=content&id=TECH97223&actp=search&viewlocale=en_US&searchid=1287597290985

Best,

Thomas

Go to start and type Run

In Run window type %temp%

Look for a file called SEP_Inst.log

In the log file search for Return Value 3

Copy and paste 6-7 lines before this line

Get all the instance of Return Value 3

Module: ImagePath=C:\WINDOWS\system32\SHELL32.dll

Module: ImagePath=C:\WINDOWS\system32\msi.dll

Module: ImagePath=C:\WINDOWS\system32\USER32.dll

Module: ImagePath=C:\WINDOWS\system32\SXS.DLL

MSI (s) (EC:00) [08:51:03:050]: User policy value 'DisableRollback' is 0

MSI (s) (EC:00) [08:51:03:050]: Machine policy value 'DisableRollback' is 0

Action ended 8:51:03: InstallFinalize. Return value 3.

InstSymProtect::cleanupFolder() -> DeleteFolderIfNoFileExists FAILED

MSI (s) (EC:00) [08:52:02:659]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)

MSI (s) (EC:00) [08:52:02:659]: Error in rollback skipped.         Return: 5

cleanupFolder:  exiting

MSI (s) (EC:00) [08:52:02:706]: No System Restore sequence number for this installation.

MSI (s) (EC:00) [08:52:02:706]: Unlocking Server

MSI (s) (EC:00) [08:52:02:706]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.

Action ended 8:52:02: INSTALL. Return value 3.us.

thanks you help

Hi:

I was use Sep_support tool scan on my computer and save a report as attachment.please rename file name bejn0150t..jpg to *.SDBZ.Possible help to solve the problem.

thank you in advance

David Wang
 

the logs you attached does not show any error , can you copy full set of logs.

Usually it is seen the installation fails becuase of LU issue. let know if this URL helps

http://www.symantec.com/business/support/index?page=content&id=TECH122691&locale=en_US

Can you please paste the complete log file?

=== Verbose logging started: 10/21/2010  11:53:41  Build type: SHIP UNICODE 3.01.4001.5512  Calling process: C:\WINDOWS\system32\MSIEXEC.EXE ===
MSI (c) (BC:6C) [11:53:41:720]: Resetting cached policy values
MSI (c) (BC:6C) [11:53:41:720]: Machine policy value 'Debug' is 0
MSI (c) (BC:6C) [11:53:41:720]: ******* RunEngine:
           ******* Product: C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\Symantec AntiVirus.msi
           ******* Action:
           ******* CommandLine: **********
MSI (c) (BC:6C) [11:53:41:720]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (BC:6C) [11:53:41:720]: Grabbed execution mutex.
MSI (c) (BC:6C) [11:53:41:783]: Cloaking enabled.
MSI (c) (BC:6C) [11:53:41:783]: Attempting to enable all disabled priveleges before calling Install on Server
MSI (c) (BC:6C) [11:53:41:798]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (C4:F8) [11:53:41:814]: Grabbed execution mutex.
MSI (s) (C4:D8) [11:53:41:814]: Resetting cached policy values
MSI (s) (C4:D8) [11:53:41:814]: Machine policy value 'Debug' is 0
MSI (s) (C4:D8) [11:53:41:814]: ******* RunEngine:
           ******* Product: C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\Symantec AntiVirus.msi
           ******* Action:
           ******* CommandLine: **********
MSI (s) (C4:D8) [11:53:41:814]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (C4:D8) [11:53:41:829]: File will have security applied from OpCode.
MSI (s) (C4:D8) [11:53:41:892]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\Symantec AntiVirus.msi' against software restriction policy
MSI (s) (C4:D8) [11:53:41:892]: Note: 1: 2262 2: DigitalSignature 3: -2147287038
MSI (s) (C4:D8) [11:53:41:892]: SOFTWARE RESTRICTION POLICY: C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\Symantec AntiVirus.msi is not digitally signed
MSI (s) (C4:D8) [11:53:41:892]: SOFTWARE RESTRICTION POLICY: C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\Symantec AntiVirus.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (C4:D8) [11:53:41:892]: End dialog not enabled
MSI (s) (C4:D8) [11:53:41:892]: Original package ==> C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\Symantec AntiVirus.msi
MSI (s) (C4:D8) [11:53:41:892]: Package we're running from ==> C:\WINDOWS\Installer\1b30c1.msi
MSI (s) (C4:D8) [11:53:41:908]: APPCOMPAT: looking for appcompat database entry with ProductCode '{3C1AE512-3C37-44FA-BA42-ABB721EC5B1D}'.
MSI (s) (C4:D8) [11:53:41:908]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (C4:D8) [11:53:41:908]: MSCOREE not loaded loading copy from system32
MSI (s) (C4:D8) [11:53:41:908]: Machine policy value 'TransformsSecure' is 0
MSI (s) (C4:D8) [11:53:41:908]: User policy value 'TransformsAtSource' is 0
MSI (s) (C4:D8) [11:53:41:908]: Machine policy value 'DisablePatch' is 0
MSI (s) (C4:D8) [11:53:41:908]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (C4:D8) [11:53:41:908]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (C4:D8) [11:53:41:908]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (C4:D8) [11:53:41:908]: APPCOMPAT: looking for appcompat database entry with ProductCode '{3C1AE512-3C37-44FA-BA42-ABB721EC5B1D}'.
MSI (s) (C4:D8) [11:53:41:908]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (C4:D8) [11:53:41:908]: Transforms are not secure.
MSI (s) (C4:D8) [11:53:41:908]: Command Line: REBOOT=ReallySuppress IDCENABLE=0 SETUPEXEDIR=C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec CURRENTDIRECTORY=C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec CLIENTUILEVEL=3 CLIENTPROCESSID=6588
MSI (s) (C4:D8) [11:53:41:908]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{F31EC5C3-CF46-426C-B1B1-FDC8FD8020A1}'.
MSI (s) (C4:D8) [11:53:41:908]: Product Code passed to Engine.Initialize:           ''
MSI (s) (C4:D8) [11:53:41:908]: Product Code from property table before transforms: '{3C1AE512-3C37-44FA-BA42-ABB721EC5B1D}'
MSI (s) (C4:D8) [11:53:41:908]: Product Code from property table after transforms:  '{3C1AE512-3C37-44FA-BA42-ABB721EC5B1D}'
MSI (s) (C4:D8) [11:53:41:908]: Product not registered: beginning first-time install
MSI (s) (C4:D8) [11:53:41:908]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (C4:D8) [11:53:41:908]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (C4:D8) [11:53:41:908]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (C4:D8) [11:53:41:908]: Adding new sources is allowed.
MSI (s) (C4:D8) [11:53:41:908]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (C4:D8) [11:53:41:908]: Package name extracted from package path: 'Symantec AntiVirus.msi'
MSI (s) (C4:D8) [11:53:41:908]: Package to be registered: 'Symantec AntiVirus.msi'
MSI (s) (C4:D8) [11:53:41:908]: Note: 1: 2729
MSI (s) (C4:D8) [11:53:41:923]: Note: 1: 2729
MSI (s) (C4:D8) [11:53:41:923]: PROPERTY CHANGE: Adding IsAdminPackage property. Its value is '1'.
MSI (s) (C4:D8) [11:53:41:923]: Machine policy value 'DisableMsi' is 0
MSI (s) (C4:D8) [11:53:41:923]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (C4:D8) [11:53:41:923]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (C4:D8) [11:53:41:923]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (C4:D8) [11:53:41:923]: Running product '{3C1AE512-3C37-44FA-BA42-ABB721EC5B1D}' with elevated privileges: Product is assigned.
MSI (s) (C4:D8) [11:53:41:923]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (C4:D8) [11:53:41:923]: PROPERTY CHANGE: Modifying IDCENABLE property. Its current value is '1'. Its new value: '0'.
MSI (s) (C4:D8) [11:53:41:923]: PROPERTY CHANGE: Adding SETUPEXEDIR property. Its value is 'C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec'.
MSI (s) (C4:D8) [11:53:41:923]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec'.
MSI (s) (C4:D8) [11:53:41:923]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (C4:D8) [11:53:41:923]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '6588'.
MSI (s) (C4:D8) [11:53:41:923]: TRANSFORMS property is now:
MSI (s) (C4:D8) [11:53:41:923]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '301'.
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\Application Data
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\Favorites
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\NetHood
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\My Documents
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\PrintHood
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\Recent
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\SendTo
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\Templates
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Application Data
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\Local Settings\Application Data
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\My Documents\My Pictures
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Startup
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Desktop
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\Start Menu\Programs\Administrative Tools
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\Start Menu\Programs\Startup
MSI (s) (C4:D8) [11:53:41:923]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\Start Menu\Programs
MSI (s) (C4:D8) [11:53:41:939]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\Start Menu
MSI (s) (C4:D8) [11:53:41:939]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\xwangd\Desktop
MSI (s) (C4:D8) [11:53:41:939]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Templates
MSI (s) (C4:D8) [11:53:41:939]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
MSI (s) (C4:D8) [11:53:41:939]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (C4:D8) [11:53:41:939]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Nordex'.
MSI (s) (C4:D8) [11:53:41:939]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'NORDEX'.
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\WINDOWS\Installer\1b30c1.msi'.
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\Symantec AntiVirus.msi'.
MSI (s) (C4:D8) [11:53:41:939]: Note: 1: 2205 2:  3: PatchPackage
MSI (s) (C4:D8) [11:53:41:939]: Machine policy value 'DisableRollback' is 0
MSI (s) (C4:D8) [11:53:41:939]: User policy value 'DisableRollback' is 0
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
=== Logging started: 10/21/2010  11:53:41 ===
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (C4:D8) [11:53:41:939]: Doing action: INSTALL
MSI (s) (C4:D8) [11:53:41:939]: Running ExecuteSequence
MSI (s) (C4:D8) [11:53:41:939]: Doing action: CommonAppDataFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2
Action start 11:53:41: INSTALL.
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding CommonAppDataFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2 property. Its value is 'C:\Documents and Settings\All Users\Application Data\'.
Action start 11:53:41: CommonAppDataFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2.
MSI (s) (C4:D8) [11:53:41:939]: Doing action: System16Folder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2
Action ended 11:53:41: CommonAppDataFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2. Return value 1.
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding System16Folder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2 property. Its value is 'C:\WINDOWS\system\'.
Action start 11:53:41: System16Folder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2.
MSI (s) (C4:D8) [11:53:41:939]: Doing action: SystemFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2
Action ended 11:53:41: System16Folder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2. Return value 1.
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding SystemFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2 property. Its value is 'C:\WINDOWS\system32\'.
Action start 11:53:41: SystemFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2.
MSI (s) (C4:D8) [11:53:41:939]: Doing action: ProgramFilesFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2
Action ended 11:53:41: SystemFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2. Return value 1.
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding ProgramFilesFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2 property. Its value is 'C:\Program Files\'.
Action start 11:53:41: ProgramFilesFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2.
MSI (s) (C4:D8) [11:53:41:939]: Doing action: CommonFilesFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2
Action ended 11:53:41: ProgramFilesFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2. Return value 1.
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding CommonFilesFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2 property. Its value is 'C:\Program Files\Common Files\'.
Action start 11:53:41: CommonFilesFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2.
MSI (s) (C4:D8) [11:53:41:939]: Doing action: CommonFilesFolder.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1
Action ended 11:53:41: CommonFilesFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2. Return value 1.
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding CommonFilesFolder.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1 property. Its value is 'C:\Program Files\Common Files\'.
Action start 11:53:41: CommonFilesFolder.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1.
MSI (s) (C4:D8) [11:53:41:939]: Doing action: ProgramFilesFolder.93C43188_D2F5_461E_B42B_C3A2A318345C
Action ended 11:53:41: CommonFilesFolder.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1. Return value 1.
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding ProgramFilesFolder.93C43188_D2F5_461E_B42B_C3A2A318345C property. Its value is 'C:\Program Files\'.
Action start 11:53:41: ProgramFilesFolder.93C43188_D2F5_461E_B42B_C3A2A318345C.
MSI (s) (C4:D8) [11:53:41:939]: Doing action: CommonFilesFolder.AE34FE77_F4D6_42C5_A0D4_A58BE72B0219
Action ended 11:53:41: ProgramFilesFolder.93C43188_D2F5_461E_B42B_C3A2A318345C. Return value 1.
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding CommonFilesFolder.AE34FE77_F4D6_42C5_A0D4_A58BE72B0219 property. Its value is 'C:\Program Files\Common Files\'.
Action start 11:53:41: CommonFilesFolder.AE34FE77_F4D6_42C5_A0D4_A58BE72B0219.
MSI (s) (C4:D8) [11:53:41:939]: Doing action: CommonFilesFolder.611D9A69_39FC_4998_998E_1ECADF28A979
Action ended 11:53:41: CommonFilesFolder.AE34FE77_F4D6_42C5_A0D4_A58BE72B0219. Return value 1.
MSI (s) (C4:D8) [11:53:41:939]: PROPERTY CHANGE: Adding CommonFilesFolder.611D9A69_39FC_4998_998E_1ECADF28A979 property. Its value is 'C:\Program Files\Common Files\'.
Action start 11:53:41: CommonFilesFolder.611D9A69_39FC_4998_998E_1ECADF28A979.
MSI (s) (C4:D8) [11:53:41:939]: Doing action: WindowsFolder.D2730D3F_3C41_5884_FF1F_C8B3B9A1E18E
Action ended 11:53:41: CommonFilesFolder.611D9A69_39FC_4998_998E_1ECADF28A979. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding WindowsFolder.D2730D3F_3C41_5884_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\'.
Action start 11:53:41: WindowsFolder.D2730D3F_3C41_5884_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: SystemFolder.D2730D3F_3C41_5884_FF1F_C8B3B9A1E18E
Action ended 11:53:41: WindowsFolder.D2730D3F_3C41_5884_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding SystemFolder.D2730D3F_3C41_5884_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\system32\'.
Action start 11:53:41: SystemFolder.D2730D3F_3C41_5884_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: WindowsFolder.74FD3CE6_2A8D_0E9C_FF1F_C8B3B9A1E18E
Action ended 11:53:41: SystemFolder.D2730D3F_3C41_5884_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding WindowsFolder.74FD3CE6_2A8D_0E9C_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\'.
Action start 11:53:41: WindowsFolder.74FD3CE6_2A8D_0E9C_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: SystemFolder.74FD3CE6_2A8D_0E9C_FF1F_C8B3B9A1E18E
Action ended 11:53:41: WindowsFolder.74FD3CE6_2A8D_0E9C_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding SystemFolder.74FD3CE6_2A8D_0E9C_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\system32\'.
Action start 11:53:41: SystemFolder.74FD3CE6_2A8D_0E9C_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: WindowsFolder.68B7C6D9_1DF2_54C1_FF1F_C8B3B9A1E18E
Action ended 11:53:41: SystemFolder.74FD3CE6_2A8D_0E9C_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding WindowsFolder.68B7C6D9_1DF2_54C1_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\'.
Action start 11:53:41: WindowsFolder.68B7C6D9_1DF2_54C1_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: SystemFolder.68B7C6D9_1DF2_54C1_FF1F_C8B3B9A1E18E
Action ended 11:53:41: WindowsFolder.68B7C6D9_1DF2_54C1_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding SystemFolder.68B7C6D9_1DF2_54C1_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\system32\'.
Action start 11:53:41: SystemFolder.68B7C6D9_1DF2_54C1_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: WindowsFolder.9BAE13A2_E7AF_D6C3_FF1F_C8B3B9A1E18E
Action ended 11:53:41: SystemFolder.68B7C6D9_1DF2_54C1_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding WindowsFolder.9BAE13A2_E7AF_D6C3_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\'.
Action start 11:53:41: WindowsFolder.9BAE13A2_E7AF_D6C3_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: SystemFolder.9BAE13A2_E7AF_D6C3_FF1F_C8B3B9A1E18E
Action ended 11:53:41: WindowsFolder.9BAE13A2_E7AF_D6C3_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding SystemFolder.9BAE13A2_E7AF_D6C3_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\system32\'.
Action start 11:53:41: SystemFolder.9BAE13A2_E7AF_D6C3_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E
Action ended 11:53:41: SystemFolder.9BAE13A2_E7AF_D6C3_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\'.
Action start 11:53:41: WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E
Action ended 11:53:41: WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\system32\'.
Action start 11:53:41: SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E
Action ended 11:53:41: SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\'.
Action start 11:53:41: WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E
Action ended 11:53:41: WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\system32\'.
Action start 11:53:41: SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: CommonFilesFolder.58B3CBD8_773E_456F_B761_5F9C67C2E7B1
Action ended 11:53:41: SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding CommonFilesFolder.58B3CBD8_773E_456F_B761_5F9C67C2E7B1 property. Its value is 'C:\Program Files\Common Files\'.
Action start 11:53:41: CommonFilesFolder.58B3CBD8_773E_456F_B761_5F9C67C2E7B1.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: CommonFilesFolder.BF6FF7BD_CEB9_4E46_A42A_F2D66B1408DE
Action ended 11:53:41: CommonFilesFolder.58B3CBD8_773E_456F_B761_5F9C67C2E7B1. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding CommonFilesFolder.BF6FF7BD_CEB9_4E46_A42A_F2D66B1408DE property. Its value is 'C:\Program Files\Common Files\'.
Action start 11:53:41: CommonFilesFolder.BF6FF7BD_CEB9_4E46_A42A_F2D66B1408DE.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: CommonFilesFolder.36948328_55DA_46B6_83BE_D004EF7F2582
Action ended 11:53:41: CommonFilesFolder.BF6FF7BD_CEB9_4E46_A42A_F2D66B1408DE. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding CommonFilesFolder.36948328_55DA_46B6_83BE_D004EF7F2582 property. Its value is 'C:\Program Files\Common Files\'.
Action start 11:53:41: CommonFilesFolder.36948328_55DA_46B6_83BE_D004EF7F2582.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: CommonFilesFolder.538DD692_7153_4092_B920_08C862D08386
Action ended 11:53:41: CommonFilesFolder.36948328_55DA_46B6_83BE_D004EF7F2582. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding CommonFilesFolder.538DD692_7153_4092_B920_08C862D08386 property. Its value is 'C:\Program Files\Common Files\'.
Action start 11:53:41: CommonFilesFolder.538DD692_7153_4092_B920_08C862D08386.
MSI (s) (C4:D8) [11:53:41:954]: Doing action: CommonAppDataFolder.538DD692_7153_4092_B920_08C862D08386
Action ended 11:53:41: CommonFilesFolder.538DD692_7153_4092_B920_08C862D08386. Return value 1.
MSI (s) (C4:D8) [11:53:41:954]: PROPERTY CHANGE: Adding CommonAppDataFolder.538DD692_7153_4092_B920_08C862D08386 property. Its value is 'C:\Documents and Settings\All Users\Application Data\'.
Action start 11:53:41: CommonAppDataFolder.538DD692_7153_4092_B920_08C862D08386.
MSI (s) (C4:D8) [11:53:41:970]: Doing action: WindowsFolder.66332652_9C28_58B1_FF1F_C8B3B9A1E18E
Action ended 11:53:41: CommonAppDataFolder.538DD692_7153_4092_B920_08C862D08386. Return value 1.
MSI (s) (C4:D8) [11:53:41:970]: PROPERTY CHANGE: Adding WindowsFolder.66332652_9C28_58B1_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\'.
Action start 11:53:41: WindowsFolder.66332652_9C28_58B1_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:970]: Doing action: SystemFolder.66332652_9C28_58B1_FF1F_C8B3B9A1E18E
Action ended 11:53:41: WindowsFolder.66332652_9C28_58B1_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:970]: PROPERTY CHANGE: Adding SystemFolder.66332652_9C28_58B1_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\system32\'.
Action start 11:53:41: SystemFolder.66332652_9C28_58B1_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:970]: Doing action: WindowsFolder.97F81AF1_0E47_DC99_FF1F_C8B3B9A1E18E
Action ended 11:53:41: SystemFolder.66332652_9C28_58B1_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:970]: PROPERTY CHANGE: Adding WindowsFolder.97F81AF1_0E47_DC99_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\'.
Action start 11:53:41: WindowsFolder.97F81AF1_0E47_DC99_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:970]: Doing action: SystemFolder.97F81AF1_0E47_DC99_FF1F_C8B3B9A1E18E
Action ended 11:53:41: WindowsFolder.97F81AF1_0E47_DC99_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:970]: PROPERTY CHANGE: Adding SystemFolder.97F81AF1_0E47_DC99_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\system32\'.
Action start 11:53:41: SystemFolder.97F81AF1_0E47_DC99_FF1F_C8B3B9A1E18E.
MSI (s) (C4:D8) [11:53:41:970]: Doing action: CommonAppDataFolder.DD672C28_4216_4DEF_980E_970B569C3C55
Action ended 11:53:41: SystemFolder.97F81AF1_0E47_DC99_FF1F_C8B3B9A1E18E. Return value 1.
MSI (s) (C4:D8) [11:53:41:970]: PROPERTY CHANGE: Adding CommonAppDataFolder.DD672C28_4216_4DEF_980E_970B569C3C55 property. Its value is 'C:\Documents and Settings\All Users\Application Data\'.
Action start 11:53:41: CommonAppDataFolder.DD672C28_4216_4DEF_980E_970B569C3C55.
MSI (s) (C4:D8) [11:53:41:970]: Doing action: ProgramFilesFolder.DD672C28_4216_4DEF_980E_970B569C3C55
Action ended 11:53:41: CommonAppDataFolder.DD672C28_4216_4DEF_980E_970B569C3C55. Return value 1.
MSI (s) (C4:D8) [11:53:41:970]: PROPERTY CHANGE: Adding ProgramFilesFolder.DD672C28_4216_4DEF_980E_970B569C3C55 property. Its value is 'C:\Program Files\'.
Action start 11:53:41: ProgramFilesFolder.DD672C28_4216_4DEF_980E_970B569C3C55.
MSI (s) (C4:D8) [11:53:41:970]: Doing action: SystemFolder.DD672C28_4216_4DEF_980E_970B569C3C55
Action ended 11:53:41: ProgramFilesFolder.DD672C28_4216_4DEF_980E_970B569C3C55. Return value 1.
MSI (s) (C4:D8) [11:53:41:970]: PROPERTY CHANGE: Adding SystemFolder.DD672C28_4216_4DEF_980E_970B569C3C55 property. Its value is 'C:\WINDOWS\system32\'.
Action start 11:53:41: SystemFolder.DD672C28_4216_4DEF_980E_970B569C3C55.
MSI (s) (C4:D8) [11:53:41:970]: Doing action: CommonFilesFolder.DD672C28_4216_4DEF_980E_970B569C3C55
Action ended 11:53:41: SystemFolder.DD672C28_4216_4DEF_980E_970B569C3C55. Return value 1.
MSI (s) (C4:D8) [11:53:41:970]: PROPERTY CHANGE: Adding CommonFilesFolder.DD672C28_4216_4DEF_980E_970B569C3C55 property. Its value is 'C:\Program Files\Common Files\'.
Action start 11:53:41: CommonFilesFolder.DD672C28_4216_4DEF_980E_970B569C3C55.
MSI (s) (C4:D8) [11:53:41:970]: Doing action: SystemFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01
Action ended 11:53:41: CommonFilesFolder.DD672C28_4216_4DEF_980E_970B569C3C55. Return value 1.
MSI (s) (C4:D8) [11:53:41:970]: PROPERTY CHANGE: Adding SystemFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01 property. Its value is 'C:\WINDOWS\system32\'.
Action start 11:53:41: SystemFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01.
MSI (s) (C4:D8) [11:53:41:970]: Doing action: CommonFilesFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01
Action ended 11:53:41: SystemFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01. Return value 1.
MSI (s) (C4:D8) [11:53:41:970]: PROPERTY CHANGE: Adding CommonFilesFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01 property. Its value is 'C:\Program Files\Common Files\'.
Action start 11:53:41: CommonFilesFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01.
MSI (s) (C4:D8) [11:53:41:970]: Doing action: CommonAppDataFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01
Action ended 11:53:41: CommonFilesFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01. Return value 1.
MSI (s) (C4:D8) [11:53:41:970]: PROPERTY CHANGE: Adding CommonAppDataFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01 property. Its value is 'C:\Documents and Settings\All Users\Application Data\'.
Action start 11:53:41: CommonAppDataFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01.
MSI (s) (C4:D8) [11:53:41:970]: Doing action: ProgramFilesFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01
Action ended 11:53:41: CommonAppDataFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01. Return value 1.
MSI (s) (C4:D8) [11:53:41:970]: PROPERTY CHANGE: Adding ProgramFilesFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01 property. Its value is 'C:\Program Files\'.
Action start 11:53:41: ProgramFilesFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01.
MSI (s) (C4:D8) [11:53:41:970]: Doing action: System16Folder.6500F9C2_37EA_4F25_A4DE_6211026D9C01
Action ended 11:53:41: ProgramFilesFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01. Return value 1.
MSI (s) (C4:D8) [11:53:41:970]: PROPERTY CHANGE: Adding System16Folder.6500F9C2_37EA_4F25_A4DE_6211026D9C01 property. Its value is 'C:\WINDOWS\system\'.
Action start 11:53:41: System16Folder.6500F9C2_37EA_4F25_A4DE_6211026D9C01.
MSI (s) (C4:D8) [11:53:41:986]: Doing action: CommonFilesFolder.14DD7176_DF3C_4FFC_B723_66069FF29729
Action ended 11:53:41: System16Folder.6500F9C2_37EA_4F25_A4DE_6211026D9C01. Return value 1.
MSI (s) (C4:D8) [11:53:41:986]: PROPERTY CHANGE: Adding CommonFilesFolder.14DD7176_DF3C_4FFC_B723_66069FF29729 property. Its value is 'C:\Program Files\Common Files\'.
Action start 11:53:41: CommonFilesFolder.14DD7176_DF3C_4FFC_B723_66069FF29729.
MSI (s) (C4:D8) [11:53:41:986]: Doing action: LocateSourceDir.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5
Action ended 11:53:41: CommonFilesFolder.14DD7176_DF3C_4FFC_B723_66069FF29729. Return value 1.
MSI (s) (C4:A4) [11:53:42:001]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSICC.tmp, Entrypoint: LocateSourceDir
MSI (s) (C4:C4) [11:53:42:001]: Generating random cookie.
MSI (s) (C4:C4) [11:53:42:001]: Created Custom Action Server with PID 492 (0x1EC).
MSI (s) (C4:F4) [11:53:42:033]: Running as a service.
MSI (s) (C4:F4) [11:53:42:033]: Hello, I'm your 32bit Impersonated custom action server.
Action start 11:53:41: LocateSourceDir.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5.
AgentMainCA: SourceDir=
MSI (s) (C4!FC) [11:53:42:079]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\'.
AgentMainCA: OriginalDatabase=C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\Symantec AntiVirus.msi
MSI (s) (C4:D8) [11:53:42:079]: Doing action: SetInstallStateFailed.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5
Action ended 11:53:42: LocateSourceDir.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5. Return value 1.
MSI (s) (C4:DC) [11:53:42:079]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSICD.tmp, Entrypoint: SetInstallStateFailed
Action start 11:53:42: SetInstallStateFailed.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5.
MSI (s) (C4:D8) [11:53:43:048]: Doing action: CheckAndFixccSettings.D3A883B9_8F94_4E7D_96B6_852388CE5647
Action ended 11:53:43: SetInstallStateFailed.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5. Return value 1.
MSI (s) (C4:EC) [11:53:43:064]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSICE.tmp, Entrypoint: _CheckAndFixccSettings@4
Action start 11:53:43: CheckAndFixccSettings.D3A883B9_8F94_4E7D_96B6_852388CE5647.
MSIASSERT - CheckAndFixccSettings: ccSetDLL is -1:
MSIASSERT - CheckAndFixccSettings: ccSetMgrEXE is -1:
MSI (s) (C4:D8) [11:53:43:126]: Doing action: AppSearch
Action ended 11:53:43: CheckAndFixccSettings.D3A883B9_8F94_4E7D_96B6_852388CE5647. Return value 1.
Action start 11:53:43: AppSearch.
MSI (s) (C4:D8) [11:53:43:126]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2
MSI (s) (C4:D8) [11:53:43:126]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2
MSI (s) (C4:D8) [11:53:43:126]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2
MSI (s) (C4:D8) [11:53:43:126]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Intel\LANDesk\Virusprotect6\CurrentVersion 3: 2
MSI (s) (C4:D8) [11:53:43:126]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC 3: 2
MSI (s) (C4:D8) [11:53:43:126]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Sygate Technologies, Inc.\Sygate Personal Firewall 3: 2
MSI (s) (C4:D8) [11:53:43:126]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC 3: 2
MSI (s) (C4:D8) [11:53:43:126]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC 3: 2
MSI (s) (C4:D8) [11:53:43:126]: PROPERTY CHANGE: Adding SDIDATFOUND.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 property. Its value is 'C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\sdi.dat'.
MSI (s) (C4:D8) [11:53:43:126]: PROPERTY CHANGE: Adding SERDEFDATFOUND.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 property. Its value is 'C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\serdef.dat'.
MSI (s) (C4:D8) [11:53:43:126]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC 3: 2
MSI (s) (C4:D8) [11:53:43:126]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Sygate Technologies, Inc.\Sygate Personal Firewall 3: 2
MSI (s) (C4:D8) [11:53:43:142]: PROPERTY CHANGE: Adding SPMXMLFOUND.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 property. Its value is 'C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\SyLink.xml'.
MSI (s) (C4:D8) [11:53:43:142]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Sygate Technologies, Inc.\Sygate Personal Firewall\SYLINK\SyLink 3: 2
MSI (s) (C4:D8) [11:53:43:142]: PROPERTY CHANGE: Adding SYMRASMAN_REGPATH1 property. Its value is 'C:\WINDOWS\System32\rastls.dll'.
MSI (s) (C4:D8) [11:53:43:142]: PROPERTY CHANGE: Adding SYMRASMAN_REGPATH2 property. Its value is 'C:\WINDOWS\System32\rastls.dll'.
MSI (s) (C4:D8) [11:53:43:142]: PROPERTY CHANGE: Adding RASMAN_PATH property. Its value is 'C:\WINDOWS\system32\rastls.dll'.
MSI (s) (C4:D8) [11:53:43:142]: PROPERTY CHANGE: Adding SNACNP_HWPROVIDER_REGVALUE property. Its value is 'SnacNp,RDPNP,LanmanWorkstation,WebClient'.
MSI (s) (C4:D8) [11:53:43:142]: PROPERTY CHANGE: Adding SNACNP_PROVIDER_REGVALUE property. Its value is 'SnacNp,RDPNP,LanmanWorkstation,WebClient'.
MSI (s) (C4:D8) [11:53:43:142]: PROPERTY CHANGE: Adding SYMRASMAN_REGPATH3 property. Its value is 'C:\WINDOWS\System32\rastls.dll'.
MSI (s) (C4:D8) [11:53:43:142]: PROPERTY CHANGE: Adding SYMRASMAN_REGPATH4 property. Its value is 'C:\WINDOWS\System32\rastls.dll'.
MSI (s) (C4:D8) [11:53:43:142]: PROPERTY CHANGE: Adding SYMRASMAN_REGPATH5 property. Its value is 'C:\WINDOWS\System32\rastls.dll'.
MSI (s) (C4:D8) [11:53:43:142]: PROPERTY CHANGE: Adding SYMRASMAN_REGPATH6 property. Its value is 'C:\WINDOWS\System32\rastls.dll'.
MSI (s) (C4:D8) [11:53:43:142]: PROPERTY CHANGE: Adding SYMRASMAN_REGPATH7 property. Its value is 'C:\WINDOWS\System32\rastls.dll'.
MSI (s) (C4:D8) [11:53:43:157]: PROPERTY CHANGE: Adding SYMRASMAN_REGPATH8 property. Its value is 'C:\WINDOWS\System32\rastls.dll'.
MSI (s) (C4:D8) [11:53:43:157]: PROPERTY CHANGE: Adding WZCSVC_INSTALLED property. Its value is 'Wireless Zero Configuration'.
MSI (s) (C4:D8) [11:53:43:157]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV 3: 2
MSI (s) (C4:D8) [11:53:43:157]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\INTEL\LANDesk\VirusProtect6\CurrentVersion 3: 2
MSI (s) (C4:D8) [11:53:43:157]: Note: 1: 1402 2: HKEY_CLASSES_ROOT\AppID\{A79DB36D-6218-48e6-9EC9-DCBA9A39BF0F} 3: 2
MSI (s) (C4:D8) [11:53:43:157]: Note: 1: 1402 2: HKEY_CLASSES_ROOT\AppID\{A79DB36D-6218-48e6-9EC9-DCBA9A39BF0F} 3: 2
MSI (s) (C4:D8) [11:53:43:157]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\EXCHNG32.EXE 3: 2
MSI (s) (C4:D8) [11:53:43:157]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Intel\LANDesk\Virusprotect6\CurrentVersion\Storages\MicrosoftExchangeClient 3: 2
MSI (s) (C4:D8) [11:53:43:157]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Intel\LANDesk\Virusprotect6\CurrentVersion 3: 2
MSI (s) (C4:D8) [11:53:43:157]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\notes.exe 3: 2
MSI (s) (C4:D8) [11:53:43:157]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Intel\LANDesk\Virusprotect6\CurrentVersion\Storages\LotusNotes 3: 2
MSI (s) (C4:D8) [11:53:43:157]: PROPERTY CHANGE: Adding OUTLOOKFOUND property. Its value is 'C:\Program Files\Microsoft Office\Office12\'.
MSI (s) (C4:D8) [11:53:43:157]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Symantec\InstalledApps 3: 2
MSI (s) (C4:D8) [11:53:43:157]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\TSE 3: 2
MSI (s) (C4:D8) [11:53:43:157]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC 3: 2
MSI (s) (C4:D8) [11:53:43:157]: PROPERTY CHANGE: Adding EXPLORERCHECK property. Its value is 'C:\WINDOWS\explorer.exe'.
MSI (s) (C4:D8) [11:53:43:173]: PROPERTY CHANGE: Adding IE6FOUND property. Its value is 'C:\WINDOWS\system32\shdocvw.dll'.
MSI (s) (C4:D8) [11:53:43:173]: PROPERTY CHANGE: Adding NAMECREATION83 property. Its value is '#0'.
MSI (s) (C4:D8) [11:53:43:173]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7} 3: 2
MSI (s) (C4:D8) [11:53:43:173]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus Corporate Edition 3: 2
MSI (s) (C4:D8) [11:53:43:173]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2
MSI (s) (C4:D8) [11:53:43:173]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2
MSI (s) (C4:D8) [11:53:43:173]: PROPERTY CHANGE: Adding SETAIDFOUND property. Its value is 'C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\SetAid.ini'.
MSI (s) (C4:D8) [11:53:43:173]: PROPERTY CHANGE: Adding SHDOCVW property. Its value is 'C:\WINDOWS\system32\shdocvw.dll'.
MSI (s) (C4:D8) [11:53:43:173]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV 3: 2
MSI (s) (C4:D8) [11:53:43:173]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\WholeSecurity Inc.\Confidence Online(tm) Server 3: 2
MSI (s) (C4:D8) [11:53:43:173]: Skipping action: checkInstallBlocksIE.87654321_4321_4321_4321_210987654321 (condition is false)
MSI (s) (C4:D8) [11:53:43:173]: Doing action: ChkExistCCInstalledAppsCcWebWnd.58B3CBD8_773E_456F_B761_5F9C67C2E7B1
Action ended 11:53:43: AppSearch. Return value 1.
MSI (s) (C4:E8) [11:53:43:204]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSICF.tmp, Entrypoint: _CheckExistingCCInstalledAppsCcWebWnd@4
Action start 11:53:43: ChkExistCCInstalledAppsCcWebWnd.58B3CBD8_773E_456F_B761_5F9C67C2E7B1.
MSIRESULT !!FAILED!! - CheckExistingCCInstalledApps: Unable to open key. Return:2:
MSI (s) (C4:D8) [11:53:43:235]: Doing action: CheckServicesInstalled.C609CF46_1171_49F3_A937_F9F402B507DF
Action ended 11:53:43: ChkExistCCInstalledAppsCcWebWnd.58B3CBD8_773E_456F_B761_5F9C67C2E7B1. Return value 1.
MSI (s) (C4:6C) [11:53:43:251]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSID0.tmp, Entrypoint: _CheckServicesInstalled@4
Action start 11:53:43: CheckServicesInstalled.C609CF46_1171_49F3_A937_F9F402B507DF.
MSI (s) (C4!E0) [11:53:43:282]: PROPERTY CHANGE: Adding SERVICESALREADYINSTALLED property. Its value is '0'.
MSI (s) (C4:D8) [11:53:43:282]: Doing action: GetExistingCCInstalledApps.538DD692_7153_4092_B920_08C862D08386
Action ended 11:53:43: CheckServicesInstalled.C609CF46_1171_49F3_A937_F9F402B507DF. Return value 1.
MSI (s) (C4:BC) [11:53:43:298]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSID1.tmp, Entrypoint: _GetExistingCCInstalledApps@4
Action start 11:53:43: GetExistingCCInstalledApps.538DD692_7153_4092_B920_08C862D08386.
MSIRESULT !!FAILED!! - CheckExistingCCInstalledApps: Unable to open key. Return:2:
MSI (s) (C4:D8) [11:53:43:313]: Doing action: MSIValidateTrial
Action ended 11:53:43: GetExistingCCInstalledApps.538DD692_7153_4092_B920_08C862D08386. Return value 1.
MSI (s) (C4:5C) [11:53:43:329]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSID2.tmp, Entrypoint: MSIValidateTrial
Action start 11:53:43: MSIValidateTrial.
MSI (s) (C4:D8) [11:53:43:345]: Skipping action: iNoClientTypeDefined.6500F9C2_37EA_4F25_A4DE_6211026D9C01 (condition is false)
MSI (s) (C4:D8) [11:53:43:345]: Skipping action: preLaunchCond.87654321_4321_4321_4321_210987654321 (condition is false)
MSI (s) (C4:D8) [11:53:43:345]: Doing action: IsRebootRequiredOSAutoUpdate.B754A361_3344_430B_92FF_8F9A227A6B90
Action ended 11:53:43: MSIValidateTrial. Return value 1.
MSI (s) (C4:78) [11:53:43:345]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSID3.tmp, Entrypoint: IsRebootRequiredOSAutoUpdate
MSI (s) (C4!50) [11:53:43:360]: PROPERTY CHANGE: Adding REBOOTREQUIREDOSAUTOUPDATE property. Its value is '1'.
Action start 11:53:43: IsRebootRequiredOSAutoUpdate.B754A361_3344_430B_92FF_8F9A227A6B90.
MSI (s) (C4:D8) [11:53:43:360]: Skipping action: iNoClientTypeDefined.9DDC0E81_9620_4441_B4F7_FD077F55D6D2 (condition is false)
MSI (s) (C4:D8) [11:53:43:360]: Doing action: LaunchConditions
Action ended 11:53:43: IsRebootRequiredOSAutoUpdate.B754A361_3344_430B_92FF_8F9A227A6B90. Return value 1.
Action start 11:53:43: LaunchConditions.
MSI (s) (C4:D8) [11:53:43:360]: Product: Symantec Endpoint Protection -- Symantec Endpoint Protection has detected that there are pending system changes that require a reboot.  Please reboot the system and rerun the installation.

Symantec Endpoint Protection has detected that there are pending system changes that require a reboot.  Please reboot the system and rerun the installation.
Action ended 11:53:43: LaunchConditions. Return value 3.
Action ended 11:53:43: INSTALL. Return value 3.
Property(S): DiskPrompt = [1]
Property(S): UpgradeCode = {24BF7A02-B60A-494B-843A-793BBC77DED4}
Property(S): VersionNT = 501
Property(S): AdminToolsFolder = C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\
Property(S): AppDataFolder = C:\Documents and Settings\xwangd\Application Data\
Property(S): CommonAppDataFolder = C:\Documents and Settings\All Users\Application Data\
Property(S): CommonFilesFolder = C:\Program Files\Common Files\
Property(S): SystemFolder = C:\WINDOWS\system32\
Property(S): DesktopFolder = C:\Documents and Settings\All Users\Desktop\
Property(S): FavoritesFolder = C:\Documents and Settings\xwangd\Favorites\
Property(S): FontsFolder = C:\WINDOWS\Fonts\
Property(S): LocalAppDataFolder = C:\Documents and Settings\xwangd\Local Settings\Application Data\
Property(S): MyPicturesFolder = C:\Documents and Settings\xwangd\My Documents\My Pictures\
Property(S): PersonalFolder = C:\Documents and Settings\xwangd\My Documents\
Property(S): ProgramFilesFolder = C:\Program Files\
Property(S): ProgramMenuFolder = C:\Documents and Settings\All Users\Start Menu\Programs\
Property(S): TempFolder = C:\DOCUME~1\xwangd\LOCALS~1\Temp\
Property(S): SendToFolder = C:\Documents and Settings\xwangd\SendTo\
Property(S): StartMenuFolder = C:\Documents and Settings\All Users\Start Menu\
Property(S): StartupFolder = C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Property(S): System16Folder = C:\WINDOWS\system\
Property(S): SourceDir = C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\
Property(S): TemplateFolder = C:\Documents and Settings\All Users\Templates\
Property(S): WindowsFolder = C:\WINDOWS\
Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1]
Property(S): CommonFilesFolder.14DD7176_DF3C_4FFC_B723_66069FF29729 = C:\Program Files\Common Files\
Property(S): SystemFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01 = C:\WINDOWS\system32\
Property(S): CommonFilesFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01 = C:\Program Files\Common Files\
Property(S): CommonAppDataFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01 = C:\Documents and Settings\All Users\Application Data\
Property(S): ProgramFilesFolder.6500F9C2_37EA_4F25_A4DE_6211026D9C01 = C:\Program Files\
Property(S): System16Folder.6500F9C2_37EA_4F25_A4DE_6211026D9C01 = C:\WINDOWS\system\
Property(S): APPS_TEST = 1
Property(S): SYMNETBUILDNUM.6500F9C2_37EA_4F25_A4DE_6211026D9C01 = 7.2.5.9
Property(S): CommonAppDataFolder.DD672C28_4216_4DEF_980E_970B569C3C55 = C:\Documents and Settings\All Users\Application Data\
Property(S): ProgramFilesFolder.DD672C28_4216_4DEF_980E_970B569C3C55 = C:\Program Files\
Property(S): SystemFolder.DD672C28_4216_4DEF_980E_970B569C3C55 = C:\WINDOWS\system32\
Property(S): CommonFilesFolder.DD672C28_4216_4DEF_980E_970B569C3C55 = C:\Program Files\Common Files\
Property(S): Date = 10/21/2010
Property(S): WindowsFolder.97F81AF1_0E47_DC99_FF1F_C8B3B9A1E18E = C:\WINDOWS\
Property(S): SystemFolder.97F81AF1_0E47_DC99_FF1F_C8B3B9A1E18E = C:\WINDOWS\system32\
Property(S): ALLUSERS = 1
Property(S): WindowsFolder.66332652_9C28_58B1_FF1F_C8B3B9A1E18E = C:\WINDOWS\
Property(S): SystemFolder.66332652_9C28_58B1_FF1F_C8B3B9A1E18E = C:\WINDOWS\system32\
Property(S): SDIDATFOUND.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\sdi.dat
Property(S): SERDEFDATFOUND.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\serdef.dat
Property(S): SPMXMLFOUND.1CBEC0D3_E547_4E51_828B_44B9C47C0EA5 = C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\SyLink.xml
Property(S): CACHEINSTALL = 1
Property(S): CMC_PRODUCT_BUILD = #0
Property(S): CMC_PRODUCT_VERSION = 0.0
Property(S): DELAYED_REBOOT_NEEDED = 0
Property(S): HaveUninstallPassword = 1
Property(S): MIGRATESETTINGS = 1
Property(S): REBOOT = ReallySuppress
Property(S): ProductVersion = 11.0.6005.562
Property(S): ProductCode = {3C1AE512-3C37-44FA-BA42-ABB721EC5B1D}
Property(S): CommonFilesFolder.538DD692_7153_4092_B920_08C862D08386 = C:\Program Files\Common Files\
Property(S): CommonAppDataFolder.538DD692_7153_4092_B920_08C862D08386 = C:\Documents and Settings\All Users\Application Data\
Property(S): CCVER = 106.5.1.6
Property(S): CCAPPINSTALLING.18376EA1_A7B1_41ED_A75C_CD6FAB0434AA = 1
Property(S): CommonFilesFolder.36948328_55DA_46B6_83BE_D004EF7F2582 = C:\Program Files\Common Files\
Property(S): CommonFilesFolder.BF6FF7BD_CEB9_4E46_A42A_F2D66B1408DE = C:\Program Files\Common Files\
Property(S): CommonFilesFolder.58B3CBD8_773E_456F_B761_5F9C67C2E7B1 = C:\Program Files\Common Files\
Property(S): WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E = C:\WINDOWS\
Property(S): SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E = C:\WINDOWS\system32\
Property(S): WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E = C:\WINDOWS\
Property(S): SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E = C:\WINDOWS\system32\
Property(S): LUCONFIGURED = 1
Property(S): WindowsFolder.9BAE13A2_E7AF_D6C3_FF1F_C8B3B9A1E18E = C:\WINDOWS\
Property(S): SystemFolder.9BAE13A2_E7AF_D6C3_FF1F_C8B3B9A1E18E = C:\WINDOWS\system32\
Property(S): WindowsFolder.68B7C6D9_1DF2_54C1_FF1F_C8B3B9A1E18E = C:\WINDOWS\
Property(S): SystemFolder.68B7C6D9_1DF2_54C1_FF1F_C8B3B9A1E18E = C:\WINDOWS\system32\
Property(S): WindowsFolder.74FD3CE6_2A8D_0E9C_FF1F_C8B3B9A1E18E = C:\WINDOWS\
Property(S): SystemFolder.74FD3CE6_2A8D_0E9C_FF1F_C8B3B9A1E18E = C:\WINDOWS\system32\
Property(S): WindowsFolder.D2730D3F_3C41_5884_FF1F_C8B3B9A1E18E = C:\WINDOWS\
Property(S): SystemFolder.D2730D3F_3C41_5884_FF1F_C8B3B9A1E18E = C:\WINDOWS\system32\
Property(S): SYMRASMAN_REGPATH1 = C:\WINDOWS\System32\rastls.dll
Property(S): SYMRASMAN_REGPATH2 = C:\WINDOWS\System32\rastls.dll
Property(S): RASMAN_PATH = C:\WINDOWS\system32\rastls.dll
Property(S): SNACNP_HWPROVIDER_REGVALUE = SnacNp,RDPNP,LanmanWorkstation,WebClient
Property(S): SNACNP_PROVIDER_REGVALUE = SnacNp,RDPNP,LanmanWorkstation,WebClient
Property(S): SYMRASMAN_REGPATH3 = C:\WINDOWS\System32\rastls.dll
Property(S): SYMRASMAN_REGPATH4 = C:\WINDOWS\System32\rastls.dll
Property(S): SYMRASMAN_REGPATH5 = C:\WINDOWS\System32\rastls.dll
Property(S): SYMRASMAN_REGPATH6 = C:\WINDOWS\System32\rastls.dll
Property(S): SYMRASMAN_REGPATH7 = C:\WINDOWS\System32\rastls.dll
Property(S): SYMRASMAN_REGPATH8 = C:\WINDOWS\System32\rastls.dll
Property(S): WZCSVC_INSTALLED = Wireless Zero Configuration
Property(S): WindowsVolume = C:\
Property(S): CommonFilesFolder.611D9A69_39FC_4998_998E_1ECADF28A979 = C:\Program Files\Common Files\
Property(S): MinimumVersion = 1.2.5
Property(S): IDCENABLE = 0
Property(S): IDCDATASERVER = exftpp.symantec.com
Property(S): IDCDATALOC = /incoming
Property(S): IDCDEPLOYMENT = Local
Property(S): IDCEXTRAINFO = 0
Property(S): HIGHCONTRAST = 0
Property(S): SYMFORCEFAIL = 0
Property(S): HITYPE.CE633825_BB8F_4C40_8B94_769CF5D8253E = 0
Property(S): LOCATIONSENSOR.CE633825_BB8F_4C40_8B94_769CF5D8253E = 0
Property(S): REVERSEDNS.CE633825_BB8F_4C40_8B94_769CF5D8253E = 0
Property(S): CommonFilesFolder.AE34FE77_F4D6_42C5_A0D4_A58BE72B0219 = C:\Program Files\Common Files\
Property(S): ProgramFilesFolder.93C43188_D2F5_461E_B42B_C3A2A318345C = C:\Program Files\
Property(S): OUTLOOKFOUND = C:\Program Files\Microsoft Office\Office12\
Property(S): EMAILTOOLSADDED = 0
Property(S): EMAILTOOLSREMOVED = 0
Property(S): BB_NO_LU = 1
Property(S): CC_NO_LU = 1
Property(S): DONT_REGISTER_WITH_LIVEUPDATE = 1
Property(S): EARLY_PROTECTION = 0
Property(S): FILE_PROTECTION = 0
Property(S): MSI_SECURITY_STATE = 2
Property(S): PROCESS_PROTECTION = 1
Property(S): PROTECT_CC_VER_TRUST = 1
Property(S): REG_PROTECTION = 0
Property(S): SAV_INSTALL = 1
Property(S): SYKNAPPS_PRODUCT_ID = SAV
Property(S): SYMPROTECTDISABLED = 0
Property(S): WSCAVALERT = 1
Property(S): WSCAVUPTODATE = 30
Property(S): WSCCONTROL = 0
Property(S): CommonFilesFolder.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1 = C:\Program Files\Common Files\
Property(S): SP_ENABLE = 1
Property(S): LUMONIKER.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1 = {A771BA64-95B4-4651-ADD0-7D24258AB4BD}
Property(S): BB_DRIVER.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1 = -1
Property(S): PROCESS_STARTUP_PRIORITY_MGR = 0
Property(S): CommonAppDataFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2 = C:\Documents and Settings\All Users\Application Data\
Property(S): System16Folder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2 = C:\WINDOWS\system\
Property(S): SystemFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2 = C:\WINDOWS\system32\
Property(S): ProgramFilesFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2 = C:\Program Files\
Property(S): CommonFilesFolder.9DDC0E81_9620_4441_B4F7_FD077F55D6D2 = C:\Program Files\Common Files\
Property(S): SRTSPBUILDNUM.9DDC0E81_9620_4441_B4F7_FD077F55D6D2 = 10.3.3.4
Property(S): LANG = LANG1033
Property(S): EXPLORERCHECK = C:\WINDOWS\explorer.exe
Property(S): IE6FOUND = C:\WINDOWS\system32\shdocvw.dll
Property(S): NAMECREATION83 = #0
Property(S): SETAIDFOUND = C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\SetAid.ini
Property(S): SHDOCVW = C:\WINDOWS\system32\shdocvw.dll
Property(S): DISABLEDEFENDER = 1
Property(S): ENABLEAUTOPROTECT = 1
Property(S): ISCHECKFORPRODUCTUPDATES = 0
Property(S): RUNLIVEUPDATE = 1
Property(S): Managed_Client_Type = Unmanaged
Property(S): NewProperty1 = 0
Property(S): UnmanTxt = 0
Property(S): ManTxt = 0
Property(S): _BrowseProperty = 0
Property(S): WindowsDefenderText = 0
Property(S): AgreeToLicense = No
Property(S): _IsMaintenance = Change
Property(S): RestartManagerOption = CloseRestart
Property(S): IDCHeaderText = 0
Property(S): SetupType = Typical
Property(S): _IsSetupTypeMin = Typical
Property(S): Display_IsBitmapDlg = 1
Property(S): SAVRebootPromptText = You must restart your system for the configuration changes made to [2] to take effect. Click Yes to restart now or No if you plan to restart later.
Property(S): INSTALLLEVEL = 100
Property(S): ADDSTARTMENUICON = 1
Property(S): APPTYPE = 105
Property(S): ARPCONTACT = Technical Support
Property(S): ARPHELPLINK = http://www.symantec.com/enterprise/support
Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe
Property(S): ARPURLINFOABOUT = http://www.symantec.com
Property(S): ARPURLUPDATEINFO = http://www.symantec.com
Property(S): COPYSYLINK = 1
Property(S): DWUSLINK = CEBCB0D89E3BD7AFEEAC57E849EB978F098B978FDEEB30AFCE6C877FEECBE07FEEFB803FF9AC
Property(S): DefaultUIFont = Tahoma8
Property(S): DialogCaption = InstallShield for Windows Installer
Property(S): DisplayNameCustom = Custom
Property(S): DisplayNameMinimal = Minimal
Property(S): DisplayNameTypical = Typical
Property(S): ErrorDialog = SetupError
Property(S): IDSCLIENTTYPE = Enterprise
Property(S): IS_PROGMSG_XML_COSTING = Costing XML files...
Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s...
Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes...
Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s...
Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes...
Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s...
Property(S): InstallChoice = AR
Property(S): LICENSEDOVERUNLICENSED = 0
Property(S): MSIENFORCEUPGRADECOMPONENTRULES = 1
Property(S): MSIFILTERREBOOTMODE_ALREADYSETPROPS = NAVCORP8X;NAVSERVER8X;SYMTDISYS_INSTALLED
Property(S): MSIFILTERREBOOTMODE_FILENAMEEXCLUSIONS = msxml3.dll
Property(S): MSIRESTARTMANAGERCONTROL = Disable
Property(S): Manufacturer = Symantec Corporation
Property(S): MsiHiddenProperties = SERVERGROUPPASS;CONSOLEPASSWORD;MSIServerPKIStandAlone.65CE4DDA_36B1_4B17_8E59_E63AE84B286A
Property(S): MsiLogging = iwearmopvx
Property(S): NonAdminManagedClientBlurb = 0
Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s
Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools...
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions...
Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool
Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools...
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions...
Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools...
Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions...
Property(S): ProductLanguage = 1033
Property(S): ProductName = Symantec Endpoint Protection
Property(S): ProductType = SAV
Property(S): ProgressType0 = install
Property(S): ProgressType1 = Installing
Property(S): ProgressType2 = installed
Property(S): ProgressType3 = installs
Property(S): RebootYesNo = Yes
Property(S): ReinstallModeText = omus
Property(S): SAV10UNINSTALLFIXRUN = 0
Property(S): SESSIONID = 0
Property(S): SHOWLAUNCHPROGRAM = 0
Property(S): SNDUNINSTALLREBOOTOVERRIDE = 1
Property(S): SRTSPCLIENTTYPE = Enterprise
Property(S): SYMNETCLIENTTYPE = Enterprise
Property(S): SecureCustomProperties = SHDOCVW;NAVCORP8X;NAV2003FOUND;NAV2003FOUNDB;NAV2004FOUND;NAV2008FOUND;NSW2006FOUND;NORTON360FOUND;NAVSERVER8X;SAV9FOUND;MAJORVERSION;MINORVERSION;OSVER_PLATFORMID;NEWERFOUND;OLDERFOUND;SNACFOUND;NEWERSNACFOUND;SCSFOUND;RUNLIVEUPDATE;SCFFOUND;KEPLERPLUSFOUND;SSCOLDFOUND;COPYTARGETFOLDER;SERVERNAME;SAV10FOUND;VIRUSDEFFOLDER;SAV10UNINSTALLFIXRUN;DISABLEDEFENDER;SESSIONID;LEGACYSPAAGENT_NM;LEGACYSPAAGENT_M;LEGACYSPAPERSONAL_NM;LEGACYSPAPERSONAL_M;MSIFILTERREBOOTMODE_FILENAMEEXCLUSIONS;MSIFILTERREBOOTMODE_ALREADYSETPROPS;SCS3FOUND;SCS2FOUND;NIS2003FOUND;NIS2004FOUND;HAMLETPLUSFOUND;AMSFOUND;LEGACYSEA_M;LEGACYSEA_NM;CLIENTTYPEREG;LEGACYCOHFOUND;LEGACYNCOFOUND;PREHAMLETFOUND;WSCONFONLINE;IE6FOUND;INSTALLCACHETEMPDIR;MIGRATIONFOLDER;IPSDEFFOLDER;POLICYTEMPFOLDER;SNACNP_HWPROVIDER_REGVALUE;SNACNP_PROVIDER_REGVALUE;SYMRASMAN_REGPATH1;SYMRASMAN_REGPATH2;SYMRASMAN_REGPATH3;SYMRASMAN_REGPATH4;SYMRASMAN_REGPATH5;SYMRASMAN_REGPATH6;SYMRASMAN_REGPATH7;SYMRASMAN_REGPATH8;SYMRASMAN_REGPATH9;WZCSVC_INSTALLED;SYMTEMPDIRBASE;SETUPEXEDIR;LIVEUPDATE.FF07F38E_78C2_412E_B858_64488E808644;LUTEMPFOLDER.FF07F38E_78C2_412E_B858_64488E808644;CLEANUPTEMPDIRS.B754A361_3344_430B_92FF_8F9A227A6B90;CREATETEMPDIRS_RB.B754A361_3344_430B_92FF_8F9A227A6B90;LEGACYNCO2FOUND;SAVCLIENT8XFOUND;SAVCORP7XFOUND;LUCONFIGURED;LEGACYSEA_NM1;LEGACYSEA_NM2;LEGACYSPA_NM2;LEGACYCOHCLIENTFOUND;SCFFOUND_M;ORGINAL_REBOOT_PROP;REENABLEWINFIREWALL.AFD7E729_F6AF_4E0F_912C_CF8E6A1326EF;NSW2007_2008FOUND;INSTALLDIR;CLOCKWORKS_SAV_MR6_FOUND;CLOCKWORKS_SCS_MR6_FOUND;TRIALWAREFOUND;EXPLORERCHECK;DELAYED_REBOOT_NEEDED;HAMLETSTMFOUND;PREMR1SEPFOUND;PRECZFOUND;PREMR2SEPFOUND;PREMR3SEPFOUND;NORTON2009FOUND;NORTON360V2FOUND;DUALINSTALLFOUND
Property(S): SyLinkAlwaysConnect = 0
Property(S): UNLICENSEDOVERLICENSED = 0
Property(S): VALIDFEATURESELECTIONS = 0
Property(S): VALIDTRIAL = 0
Property(S): ValidInstallDir = 1
Property(S): ISReleaseFlags = RELEASE,NotLIC,ENGLISH
Property(S): Privileged = 1
Property(S): REBOOTREQUIREDOSAUTOUPDATE = 1
Property(S): SERVICESALREADYINSTALLED = 0
Property(S): ACTION = INSTALL
Property(S): UILevel = 2
Property(S): OriginalDatabase = C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec\Symantec AntiVirus.msi
Property(S): DATABASE = C:\WINDOWS\Installer\1b30c1.msi
Property(S): COMPANYNAME = NORDEX
Property(S): USERNAME = Nordex
Property(S): RedirectedDllSupport = 2
Property(S): MsiWin32AssemblySupport = 5.1.2600.5512
Property(S): MsiNetAssemblySupport = 2.0.50727.3053
Property(S): Time = 11:53:43
Property(S): TTCSupport = 1
Property(S): ColorBits = 16
Property(S): TextHeight = 16
Property(S): BorderSide = 1
Property(S): BorderTop = 1
Property(S): CaptionHeight = 26
Property(S): ScreenY = 800
Property(S): ScreenX = 1280
Property(S): SystemLanguageID = 1033
Property(S): ComputerName = BEJN0150T
Property(S): UserLanguageID = 1033
Property(S): UserSID = S-1-5-21-1220945662-484763869-725345543-13262
Property(S): LogonUser = xwangd
Property(S): AdminUser = 1
Property(S): VirtualMemory = 3445
Property(S): PhysicalMemory = 1972
Property(S): Intel = 6
Property(S): ShellAdvtSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): GPTSupport = 1
Property(S): RecentFolder = C:\Documents and Settings\xwangd\Recent\
Property(S): PrintHoodFolder = C:\Documents and Settings\xwangd\PrintHood\
Property(S): NetHoodFolder = C:\Documents and Settings\xwangd\NetHood\
Property(S): RemoteAdminTS = 1
Property(S): MsiNTProductType = 1
Property(S): ServicePackLevelMinor = 0
Property(S): ServicePackLevel = 3
Property(S): WindowsBuild = 2600
Property(S): VersionMsi = 3.01
Property(S): VersionDatabase = 301
Property(S): CLIENTPROCESSID = 6588
Property(S): CLIENTUILEVEL = 3
Property(S): CURRENTDIRECTORY = C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec
Property(S): SETUPEXEDIR = C:\DOCUME~1\xwangd\LOCALS~1\Temp\Symantec
Property(S): IsAdminPackage = 1
Property(S): PackagecodeChanging = 1
Property(S): ProductState = -1
Property(S): PackageCode = {F31EC5C3-CF46-426C-B1B1-FDC8FD8020A1}
MSI (s) (C4:D8) [11:53:43:423]: Note: 1: 1708
MSI (s) (C4:D8) [11:53:43:423]: Product: Symantec Endpoint Protection -- Installation operation failed.

MSI (s) (C4:D8) [11:53:43:423]: Cleaning up uninstalled install packages, if any exist
MSI (s) (C4:D8) [11:53:43:423]: MainEngineThread is returning 1603
MSI (s) (C4:F8) [11:53:43:438]: Destroying RemoteAPI object.
MSI (s) (C4:C4) [11:53:43:438]: Custom Action Manager thread ending.
=== Logging stopped: 10/21/2010  11:53:43 ===
MSI (c) (BC:6C) [11:53:43:438]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (c) (BC:6C) [11:53:43:438]: MainEngineThread is returning 1603
=== Verbose logging stopped: 10/21/2010  11:53:43 ===

try the steps in the URL and let know if it fixes...

http://www.symantec.com/business/support/index?page=content&id=TECH103109&locale=en_US

Symantec Endpoint Protection has detected that there are pending system changes that require a reboot.  Please reboot the system and rerun the installation.
Action ended 11:53:43: LaunchConditions. Return value 3.
Action ended 11:53:43: INSTALL. Return value 3.
 

From the logs

MSI (s) (C4:D8) [11:53:43:360]: Product: Symantec Endpoint Protection -- Symantec Endpoint Protection has detected that there are pending system changes that require a reboot. Please reboot the system and rerun the installation.

Symantec Endpoint Protection has detected that there are pending system changes that require a reboot. Please reboot the system and rerun the installation.
Action ended 11:53:43: LaunchConditions. Return value 3.
Action ended 11:53:43: INSTALL. Return value 3.
Property(S): DiskPrompt = [1]

Try this

Symantec Endpoint Protection (SEP) 11 client installation fails with the message "Pending system changes that require a reboot have been detected"

Thanks you help:

first I couldn't find key value "pendingfilerenameoperations" only find out a key on HKEYLM\system\currentcontrolset001\backuprestore\keynotto restore\

Second I didn't find any key or values or data match "rebootrequired" exists registry editor

Remove that key and try to install.

You have to check

HKEYLM\system\currentcontrolset001\

and

HKEYLM\system\currentcontrolset\

hi:

I have check

HKEYLM\system\currentcontrolset001\ and

HKEYLM\system\currentcontrolset003\ and

HKEYLM\system\currentcontrolset\

and didn't find key match "pendingfilerenameoperations" and "rebootrequired".reinstall have same problem.How can I do now.

Pls attach latest logs....

Hi my friend:

Please find enclosed log file and please rename to  SEP_INST.Log.thanks you help

i'm not able to get the logs

can you please send it to rafeeq.d@gmail.com ?? 

Email sending

did had a look, unfortunately i could not find the error, not message saying it is installed

Delete

C:\Program Files\Common Files\Symantec Shared

C:\Program Files\Symantec

C:\Documents and Settings\All Users\Application Data\Symantec

In Registry delete

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec

Reboot your machine then try installing SEP again

create a new user; 

login with the new user account; install sep

The problem may be related to some corrupted os files.Try by running sfc /scannow from the command prompt 

Dear Sirs:

I was try del all symantec folder and in registry delete and logon as a new user,also run sfc/scannow from prompt.didn't helpful.all detail are as the attachment.

now I will try reinstall windows sp2,no any drive to install symantec SEP, hope it work if you have any resolution,please reply .

thank you in advance

David Wang

Attachment(s)

2010-10-25.zip   830 KB 1 version

Dear Sirs:

I've been walking on the brink of collapse, I still failed.

Installation environment:

windows sp2 and install windows update and NIC drive. I couldn't understand why?

So you Re-imaged your Machine and SEP installation still failed ??

Scan your machine with Malwarebytes or something before installing SEP.

And post the new logs.

Hi:

yes it is still failed. but I couldn't understand why I need scan my new system?

I was installed system from my CD which one usually for the new system. windows update from the Microsoft official website.how the virous?

try installing any other different version of Symantec Endpoint

new log file

Attachment(s)

2010-10-25_0.zip   393 KB 1 version

thanks you reply

so far, I only have a MSI package,nothing else.

Check the permission? are u installing locall or remote to the box?

install it locally. check this document for permission

http://service1.symantec.com/SUPPORT/ent-security.nsf/56a352136542087e882573410063494c/3f862957b21b671588256c620077a200?OpenDocument

Hi:

I was logon the computer as domain user and in the adminstrators group. I will have full permission for my harddisk.still not work

hope you reply

Did you check the DCOM permission?

are u able to install SAV 10.X or any other version of SEP 11.0.X ???

Hi:

yes, I have check the DCOM permission and add administrator and myself to the group

sorry,as I said I only have this MSI file.

go to 

https://fileconnect.symantec.com/

put the serial number, download new copy of sep 11.0.6 Xplat CD1

run the setup.exe from SEP folder

let me know if it suceeds

Dear Sirs:

that is really bad news,the install still failed. what I have done:

1.download new version11.0.6100.645 and run setup to install it,the failed detail are as the picture faile.jpg

2.I was run chkdsk/f  in safe mode and reboot computer ,no error on the harddisk

3.download nortonsecuritscan.exe the detail are as the picture scan.jpg

thank you in advance.

Attachment(s)

permanent share.zip   846 KB 1 version

did you try installing Liveupdate first and then symantec endpoint protection?

did u run cleanwipe tool on this machine?

hi:

yes,I did and liveupdate install success but SEP failed again

what is cleanwipe tool? Could you provide like to me? thanks 

 You need to call symantec support to get this tool.

Hi:

I was download it from website and message is "cleanwipe is going to accomplish a restart of the system next" what is next step? restart computer and try install it again?

https://www-secure.symantec.com/connect/articles/how-troubleshoot-failed-install-sep-or-sepm

Yes , restart the computer

yes; reboot it

Hi:

I was restart my computer and try install it now

MSI (s) (28:94) [18:13:47:201]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (28:94) [18:13:47:201]: Error in rollback skipped. Return: 5
MSI (s) (28:94) [18:13:47:232]: Calling SRSetRestorePoint API. dwRestorePtType: 13, dwEventType: 103, llSequenceNumber: 17, szDescription: "".
MSI (s) (28:94) [18:13:47:248]: The call to SRSetRestorePoint API succeeded. Returned status: 0.
MSI (s) (28:94) [18:13:47:248]: Unlocking Server
MSI (s) (28:94) [18:13:47:467]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 18:13:47: INSTALL. Return value 3.

MSI (s) (28:94) [18:13:47:811]: MainEngineThread is returning 1603
MSI (s) (28:60) [18:13:47:811]: User policy value 'DisableRollback' is 0
MSI (s) (28:60) [18:13:47:811]: Machine policy value 'DisableRollback' is 0
MSI (s) (28:60) [18:13:47:811]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (28:60) [18:13:47:811]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (28:60) [18:13:47:811]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (28:60) [18:13:47:811]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (s) (28:60) [18:13:47:811]: Restoring environment variables
MSI (c) (F4:1C) [18:13:47:811]: Back from server. Return value: 1603
MSI (c) (F4:1C) [18:13:47:811]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (c) (F4:1C) [18:13:47:811]: PROPERTY CHANGE: Deleting SECONDSEQUENCE property. Its current value is '1'.
Action ended 18:13:47: ExecuteAction. Return value 3.

MSI (s) (28:94) [18:13:47:811]: MainEngineThread is returning 1603
MSI (s) (28:60) [18:13:47:811]: User policy value 'DisableRollback' is 0
MSI (s) (28:60) [18:13:47:811]: Machine policy value 'DisableRollback' is 0
MSI (s) (28:60) [18:13:47:811]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (28:60) [18:13:47:811]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (28:60) [18:13:47:811]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (28:60) [18:13:47:811]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (s) (28:60) [18:13:47:811]: Restoring environment variables
MSI (c) (F4:1C) [18:13:47:811]: Back from server. Return value: 1603
MSI (c) (F4:1C) [18:13:47:811]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (c) (F4:1C) [18:13:47:811]: PROPERTY CHANGE: Deleting SECONDSEQUENCE property. Its current value is '1'.
Action ended 18:13:47: ExecuteAction. Return value 3.
MSI (c) (F4:1C) [18:13:47:811]: Doing action: SetupCompleteError
Action 18:13:47: SetupCompleteError.
Action start 18:13:47: SetupCompleteError.
Action 18:13:47: SetupCompleteError. Dialog created
Action ended 18:14:15: SetupCompleteError. Return value 2.

do you see any orphaned value in \Rollback\Scripts2

http://blogs.msdn.com/b/astebner/archive/2004/08/06/210300.aspx

Try this if this helps

1. Open Device Manager

2. Click View. Select show hidden devices, then click Non-Plug and Play Drivers.

3. Is there a SPBBCDrv line item? If so, right click on it and select Uninstall  

4. Reboot the machine, then try to install the SEP client.

What version is the tool? Did you get the Cleanwipe tool from Symantec? If not, I would never download the tool from a non-trusted source.

Thomas

thanks you reply

1.I didn't find any orphaned value in \Rollback\Scripts2

2.I didn't find a SPBBCDrv line item on the device manger.

so what I have done:

1.first I format my harddisk and install Win7 on it.

2.install driver for Chipset,Video,Sound and NIC

3.Install setup.exe from SEP folder and successed.

so it proves that my hardware with symantec not conflict. I couldn't understand why? Was I must update my system to Win7 for the symantec?

thank you in advance.

please help analyse this log,where is failed?

I have install windows sp2 and windowsinstaller-kb893803 and NIC driver.Why?why?why?

thank you in advance

Attachment(s)

SEP_INST_28.zip   484 KB 1 version

from a working machine search this file MSVCR71.dll 

replace it to windows32

Didn't work.

At times I have seen that if there is a threat on the system , it would not allow you to install SEP. Please run SERT.
https://www-secure.symantec.com/connect/videos/symantec-endpoint-recovery-tool-sert

thank very much all support

the problem has been solved,the case that my driver was infected. thanks again

The Driver for what was infected ? I had suggested you earlier to run Malwarebytes on the System ...