Endpoint Protection

 View Only
  • 1.  SEP installation failed

    Posted Mar 27, 2012 08:19 AM
      |   view attached

    Hello, I am trying to install Symantec Endpoint Protection on one of our customer's notebook lenovo thinkpad T410 with Windows XP and it still fails. I tried versions 11.0.6200 and 11.0.7101 and neither works. Liveupdate is not there. We used CleanWipe several times with no success. Silent installation just finishes but nothing is installed, so I removed /qb from setup.ini CmdLine= so I see what error message will it do and it made and after running setup.exe it did something and then

    "The wizard was interrupted before Symantec Endpoint Protection could be completely installed..."

    See the logfile if there is anything which would explain this. User is not really happy if we had to reimage the whole system just because of this :-\

    Attachment(s)

    zip
    SEP_INST.zip   192 KB 1 version


  • 2.  RE: SEP installation failed

    Posted Mar 27, 2012 08:40 AM

     

    1: SNDLOG 2: Redirins.dll: Inside InstallRollbackDeleteFiles() - A Rollback must have occurred during install.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\persist.dat
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\SymNeti1000.log
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\SymNeti1001.log
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\SymNeti1002.log
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\SymNeti1003.log
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\SymNeti1004.log
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\SymNeti1005.log
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\firewall.rul
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\tparent.dat
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\tmodule.dat
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\LocationMap.dat
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\sndcon.log
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\sndids.log
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\snddbg.log
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\sndsys.log
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\sndalrt.log
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\sndfw.log
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\validate.dat
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\validate.bak
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\persist.bak
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\firewall.bak
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    1: SNDLOG 2: Redirins.dll: C:\Program Files\Common Files\Symantec Shared\SNDinst.exe
     
    1: SNDLOG 2: Redirins.dll: 
     
    1: SNDLOG 2: Redirins.dll: File not found.
     
    MSI (s) (C4:28) [14:08:25:843]: Executing op: ActionStart
     
     
    Check these links:-
     
     


  • 3.  RE: SEP installation failed

    Posted Mar 27, 2012 08:42 AM

    Seems to be an issue with MSI.

    check if you have SP3 on this machine and see if you can fix the MSI and then try again.

     

    Hope this helps.



  • 4.  RE: SEP installation failed

    Posted Mar 27, 2012 10:42 AM

    Hi this is live update issue  , analysis from logs below . 

    InstallLiveUpdate
    LUCA: InstallLiveUpdate enter.
    LUCA: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\NKLRSIYT\LiveUpdate\lucheck.exe
    LUCA: InstallLiveUpdate : CreateProcessAndWait( LUCHECK.EXE ) returned 100
    Action ended 14:08:25: InstallFinalize. Return value 3.

     

    You may try below :-

    1. Remove Sep client if instance found in add remove
    2. Remove all folders for SEP client from c:\program file\
    3. c:\program data
    4. c:\users\local roaming
    5. and Liveupdate from add remove and folder too from c:\ program file
    6. from registry remove pending file rename registry key
    7. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SessionManager and locate
      PendingFileRenameOperations delete this key or rename it
    8. Reboot the machine and then run the set up

     

     

    Remove Sep folders from c:\programfiles\commonfiles too

    Missed it .



  • 5.  RE: SEP installation failed

    Posted Mar 27, 2012 11:15 AM

    Try the step in  sequence:

    1.Uninstall Live update ( If it is there in Add Remove program)

    2. Delete the following folders (if they exist):
      C:\Program Files\Symantec
      C:\Program Files\Symantec Antivirus
      C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate

    3.  Install LiveUpdate by running the following file from CD1: \SEP\LUSETUP.EXE

    4. Install Symantec Endpoint Protection. from CD 1\SEP Folder\Setup.exe ( as an unmanged Client )

    To fix issue with Installer try this

    https://www-secure.symantec.com/connect/articles/error-windows-installer-service-could-not-be-accessed-when-installing-symantec-endpoint-pr-0

    If nothing works, then here is the solution for you

    https://www-secure.symantec.com/connect/forums/sep-client-fails-install-due-liveupdate-install-failure

    Use cleanwipe to remove SEP and then install

    https://www-secure.symantec.com/connect/forums/how-get-cleanwipe-tool



  • 6.  RE: SEP installation failed

    Posted Mar 28, 2012 02:08 AM

    Hi Vitez,

    Try to install the new version of SEP 12.1 RU1.



  • 7.  RE: SEP installation failed

    Posted Mar 28, 2012 03:22 AM

    We prepare a build package with all the options selected for our standard client, and this is posted on our distribution point as a zipfile. I have seen the error "The wizard was interrupted before Symantec Endpoint Protection could be completely installed..." several times, and the most common reasons are:

    1) attempting to run the installer from within the zipfile

    2) unzipping the installer to a file path which is too long (128 characters?) and/or too deep (8 folder levels)

    both circumstances above will begin installing normally, then roll back with a notification that the wizard was interrupted.



  • 8.  RE: SEP installation failed

    Posted Mar 28, 2012 04:20 AM
    Step 1: Unregister and re-register the Windows Installer Click Start, click Run, type MSIEXEC /UNREGISTER, and then click OK. Even if you do this correctly, it may look like nothing occurs. 2. Click Start, click Run, type MSIEXEC /REGSERVER, and then click OK. Even if you do this correctly, it may look like nothing occurs, or you may briefly see an hourglass. Then try to run the Install again. If it works good else come to the next step Step 2: Verify the DCOM permissions This method involves changing the DCOM default impersonation level to Identify, removing the Msisip.dll file, To do this, follow these steps: To verify Distributed COM properties 1. On the Windows taskbar, click Start > Run. 2. Type the following, and then click OK: dcomcnfg 3. Do one of the following, depending on your operating system: · In Windows XP/2003, click Component Services > Computers > My Computer. Then right-click My Computer and click Properties. · In all other versions of Windows, go on to the next step. 4. On the Default Security or Default COM Security tab, under Default Access Permissions, click Edit Default. 5. Verify that Administrators, Interactive, and System accounts are set to Allow Access, and then click OK. 6. Under Default Launch Permissions, click Edit Default. 7. Verify that the Administrators, Interactive, and System accounts are set to Allow Launch, and click OK. 8. Do one of the following, depending on your operating system: · In Windows XP/2003, skip the two following steps. · In all other versions of Windows, go on to the next step. 9. In the Default Configuration Permissions section, click Edit Default. 10. In the Registry Key Permissions window, verify that the following are set to Full Control, and then click OK: CREATOR OWNER ...\Administrators SYSTEM 11. On the Default Properties tab, verify that Default Impersonation Level is set to Identify. 12. Click Apply, and then click OK. 13. Restart the computer for the changes to take effect. Then try to run the Install again. If it works good else come to the next step Step 3: Verify the registry permissions Click Start, click Run, then type Regedt32. For each of the registry hives, follow these steps: Select the hive. For Windows XP, on the Edit menu, click Permissions. For Windows 2000 and Windows NT 4, on the Security menu, click Permissions. Verify that the SYSTEM account has been added and that it has Full control. If it does not, add the SYSTEM account with Full control. Step 4: Give Full Control permission to the SYSTEM account Start Windows Explorer, right-click the computer's root hard drive, and then click Properties. Click the Security tab, and then click Add. In the Select Users, Computers, or Groups dialog box, click the SYSTEM account, click Add, and then click OK. Under Allow, click to select the Full Control check box, and then click OK. Click the TEMP folder and then verify that the SYSTEM account has full control. Please update if this resolved the issue


  • 9.  RE: SEP installation failed

    Posted Mar 28, 2012 05:28 AM

    LUSETUP.EDXE just flashes with some extraction progress bar and then nothing happens...and we cannot run task manager now :-]



  • 10.  RE: SEP installation failed
    Best Answer

    Posted Mar 28, 2012 10:46 AM

    It was suspicious that I could not run task manager, so I downloaded portable SuperAntispyware and ran a scan. It was infected with something! There were a lot of registry entries using debugger function to redirect process launches into some other malicious process, so probably this also collided with the SEP installation. I am very glad I found out what the problem was. Unfortunatelly I don't have the scan log to show you the specific malware found...