Endpoint Protection

Hello, first time posting here.

I have a W7 64-bit Ultimate and got a copy of unmanaged SEP11 from my school. It all worked out fine until few days ago. The LiveUpdate stop working with error messages and could not obatin updates at all. After tried repair option in the installation, still no luck of getting it to work. So I uninstalled them (both SEP and LiveUpdate) from Control Panel and rebooted the computer. Was hoping the reinstallation will fix the problem but somehoe it's not going good at all.

During the reinstallation, at first it went really fast and well (i7 CPU, 4gb RAM), but toward the very end when it almost finished the installtion, the whole process retracted itself. I saw the process green bar from 100% droped to 0% in seconds!

So I thought I must did something wrong during the uninstallation, I download the Cleanwipe tool and went through the whole process. Rebooted the computer afterward and performed reinstallation again.

Same thing happened again.

If anyone has a fix or know what's going on, please reply. Your help is deeply appreciated.

Please go to run and type %temp%
 
Look for a file called SEP_inst.log
 
In the log file look for return value 3  and paste 6-7 lines before that
 
We need all the instances for the Return value 3

What is the version of SEP being installed?


Title: 'SEP installation fails in Windows 7 and Windows 2008 R2'
Document ID: 2010020115105548
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2010020115105548?Open&seg=ent

Remove the directories for liveupdate and reinstall the product.

c:\program data\symantec\liveupdate
c:\program files(x86)\symantec\liveupdate

Parchand, thanks for you reply.
I found two "Return Value 3" in that log file.
I have attached it to this reply, please take a look.
Thanks for your help.

OS = Windows 7 Ultimate 64-bit
SEP = 11.0.5 (64-bit)

Tried "workaround 1". Deleted registry key and re-boot. But, problem still exist.

Thanks, iofractal for your reply.

Tried deleting those directories then re-install. But, same problem still exist.

Install Liveupdate first then reboot the machine  and then install SEP.

As far as the logs are concerned , i was  not able to find any errors

Installation of Symantec Endpoint Protection Client rolls back with error LUCHECK.EXE returned 206


Form your log file.SO try above doc.Also try by installing liveupdate first..
UCA: C:\Users\Max\AppData\Local\Temp\VQEDKPXE\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206

Prachand and AravindKM,

I have tried, but installation still rolls back on me.
Problem still exist.
I guess, I better prepare to reinstall my machine.

I am having the same issue of install role back with SAV Corp Edition.  I have tried uninstalling and deleting all the symantec folders as well as using the symantec NoNAV utility to delete everything.  It seems like there is a permission problem with me starting the service, even though I am in the Domain Admins group.  I have been working on this all day.  I can't install the server or the client.  I have added myself to the log on as service security setting also.  Problems started when the definitions were not updating on clients and we restarted the symantec services.

This is from event viewer

the symantec antivirus service terminated with the following error: the environment is incorrect

Troubleshooting Symantec AntiVirus Corporate Edition and Symantec Endpoint Protection installations: Checking rights and permissions

I found this after trying to install service pack 2 for server 2003 and it failed.  It said it couldn't verify the update.inf file and to make sure cryptographic service was running. I ran through a bunch of suggestions on that error message.  Part of the solutions I tried had me verify the security certificates and I saw this in the certificate info  "cryptographic operation failed due to a local security option setting"  so I search microsoft for that and found this article that fixed my problem, I hope it helps your problem too.

http://support.microsoft.com/kb/555374

I also did most of this stuff too, it apparently helps because I tried just the fix from above on the second domain controller and the "safer" key wasn't there already and the service pack 2 would run.

http://support.microsoft.com/kb/822798

p-dub, thanks for your help. I wish your fix is the answer to this problem.
Too bad, I already restored my computer with disk image. Everything work fine now and hopefully this problem won't show up again.
What bothers me is that I was having the same problem as you're, the liveupdate would stop working. After you uninstall then reinstall the SEP, the whole thing stop working.

AravindKM might be offer more insights on this problem.

Anyway, thank you all.

Sorry you had to resort to this. I marked this as the solution even though there wasn't really one : ( 

Anyway if the problems happens again I would be more than welcome to remove the "solved" mark so you can get back to the problem.

Thanks
Grant

Still not working for me.


MSIASSERT - 2010-06-01-18-10-16-112 : cc::StopServiceAndDepAtAnyCost(366) : Unable to openService ccSetMgr. Error=1060:
MSIASSERT - StopCcSetMgrOnOverOrBrokenInstall: Unable to stop ccSetMgr:
MSI (s) (A0:30) [18:10:16:116]: Executing op: ActionStart(Name=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,,)
Action 18:10:16: InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644.
MSI (s) (A0:30) [18:10:16:119]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate_RB.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3329,Source=BinaryData,Target=UnInstallLiveUpdate,CustomActionData=C:\Users\NOMAAN~1\AppData\Local\Temp\KFIVPGYC\LiveUpdate\lucheck.exe)
MSI (s) (A0:30) [18:10:16:124]: Executing op: ActionStart(Name=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,,)
Action 18:10:16: InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644.
MSI (s) (A0:30) [18:10:16:126]: Executing op: CustomActionSchedule(Action=InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644,ActionType=3073,Source=BinaryData,Target=InstallLiveUpdate,CustomActionData=C:\Users\NOMAAN~1\AppData\Local\Temp\KFIVPGYC\LiveUpdate\lucheck.exe)
MSI (s) (A0:60) [18:10:16:131]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIECA4.tmp, Entrypoint: InstallLiveUpdate
LUCA: InstallLiveUpdate enter.
LUCA: C:\Users\NOMAAN~1\AppData\Local\Temp\KFIVPGYC\LiveUpdate\lucheck.exe
LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 206
CustomAction InstallLiveUpdate.FF07F38E_78C2_412E_B858_64488E808644 returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 18:10:31: InstallFinalize. Return value 3.

Attached is a snapshot of the error i get.

Try the following.  Back up the registry first.  One of the following may resolve it for you.

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
- Change the value=%APPDATA% to value=%USERPROFILE%\AppData\
- Change the value=%APPDATA% to value=%USERPROFILE%\AppData\Roaming
- Change the value=%USERPROFILE%\AppData\ to value=%APPDATA%

Delete following folders if present
C:\Program Files\Symantec
C:\Program Files\Symantec AntiVirus
C:\Program Files\Common Files\Symantec Shared
C:\Documents and Settings\All Users\Application Data\Symantec
 
Also delete following reg keys
HKLM\Software\symantec
HKCU\Software\symantec
Install SEP and try..

I did the "Registry folder redirection" as suggested by Sandra and it worked.

The key changed was this one:
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
- Change the value=%APPDATA% to value=%USERPROFILE%\AppData\

Thanks Sandra!

What was wrong though? Why wasnt it reinstalling initially?

Nomaan

Glad it worked.  This may explain a little:

http://service1.symantec.com/support/ent-security.nsf/docid/2010012509092648

In the future, please open a new thread (instead of posting to a thread already marked as solved) so that when you get an answer that resolves it for you, you can mark that post as the Solution. :)

sandra