Dear All,
I'm trying to install SEP 11.0.7000.975 on a Win 2003 SP2 server. The previous installation crashed, a couple of moduls was not running, so I completely removed it.
Ran the built-in uninstaller, CleanWipe, also performed the steps on the below link:
http://www.symantec.com/business/support/index?page=content&id=TECH102261
So thoretically no remnant of the old installation should exist on the machine.
However it still keeps rolling back, after isntalling virus definitions the status is: 'Removing backup files', right after it the 'Rolling back' action is starting. I've spent hours of googling this issue and I tried every single suggestion.
E.g.:
- Check for infections. Installed AVG, Spybot, MBAM, TDSSKiller etc. to scan for any threat. Nothing found, machine seems clean.
- Check if Event Log is Started and set as automatic in services.msc. It's running fine.
- Making sure that the value of 'HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders' is '%USERPROFILE%\Application Data'.
So I'm out of ideas. I searched for 'return value 3' in SEP_INST.LOG. Please see around 30 lines above it:
ADMINMOVEFILES: Removed folder: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1\MARGBVDQ\IPSDefs\
WriteCcSettingsTables: SetOneTimeUpdateCookie_RB.93C43188_D2F5_461E_B42B_C3A2A318345C
MSI (s) (B4:B8) [22:26:24:607]: Executing op: ActionStart(Name=SetOneTimeUpdateCookie_RB.93C43188_D2F5_461E_B42B_C3A2A318345C,,)
MSI (s) (B4:B8) [22:26:24:607]: Executing op: CustomActionRollback(Action=SetOneTimeUpdateCookie_RB.93C43188_D2F5_461E_B42B_C3A2A318345C,ActionType=1281,Source=BinaryData,Target=SetOneTimeUpdateCookie_RB,)
MSI (s) (B4:14) [22:26:24:654]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI191.tmp, Entrypoint: SetOneTimeUpdateCookie_RB
WriteCcSettingsTables: DisableCancelButton.93C43188_D2F5_461E_B42B_C3A2A318345C
MSI (s) (B4:B8) [22:26:25:622]: Executing op: ActionStart(Name=DisableCancelButton.93C43188_D2F5_461E_B42B_C3A2A318345C,,)
WriteCcSettingsTables: stopSP.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1
MSI (s) (B4:B8) [22:26:25:622]: Executing op: ActionStart(Name=stopSP.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1,,)
WriteCcSettingsTables: restoreSPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1
MSI (s) (B4:B8) [22:26:25:622]: Executing op: ActionStart(Name=restoreSPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1,,)
MSI (s) (B4:B8) [22:26:25:622]: Executing op: CustomActionRollback(Action=restoreSPState.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1,ActionType=3329,Source=BinaryData,Target=restoreSPState,CustomActionData=0)
MSI (s) (B4:F4) [22:26:25:638]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI192.tmp, Entrypoint: restoreSPState
restoreSPState: called
restoreSPState: calling loadEventManagerDLLs
loadEventManagerDLLs: called
serviceIsRunning: OpenService FAILED with error 1060
LoadEvtMgrDll: ccEvtMgr is not running
serviceIsRunning: OpenService FAILED with error 1060
SendReload: ccEvtMgr is not running
loadEventManagerDLLs: FAILED to send reload event
loadEventManagerDLLs: exiting
restoreSPState: Changing service configuration to SERVICE_DEMAND START for SPBBCSvc
modifyServiceConfiguration: OpenService() FAILED with error 1060
restoreSPState: Unable to modify configuration for SPBBCSvc
restoreSPState: Value of szSPState "0"
restoreSPState: SPState is NOT set to 1. NOT Calling startSP
restoreSPState: exiting
WriteCcSettingsTables: checkMSXMLVersion.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1
MSI (s) (B4:B8) [22:26:25:950]: Executing op: ActionStart(Name=checkMSXMLVersion.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1,,)
WriteCcSettingsTables: RB_cleanupFolder.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1
MSI (s) (B4:B8) [22:26:25:950]: Executing op: ActionStart(Name=RB_cleanupFolder.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1,,)
MSI (s) (B4:B8) [22:26:25:950]: Executing op: CustomActionRollback(Action=RB_cleanupFolder.0723A1DC_DEB6_4A50_874F_3A2D2C99A1C1,ActionType=1345,Source=BinaryData,Target=cleanupFolder,)
MSI (s) (B4:D0) [22:26:25:966]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI193.tmp, Entrypoint: cleanupFolder
InstSymProtect::cleanupFolder() -> called
DeleteFolderIfNoFileExists: Driver file is not present.
DeleteFolder: FAILED to delete directory C:\Program Files\Common Files\Symantec Shared\SPBBC
DeleteFolderIfNoFileExists: SHDeleteFolder FAILED
InstSymProtect::cleanupFolder() -> DeleteFolderIfNoFileExists FAILED
cleanupFolder: exiting
MSI (s) (B4:B8) [22:26:26:341]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (B4:B8) [22:26:26:341]: Error in rollback skipped. Return: 5
MSI (s) (B4:B8) [22:26:26:356]: No System Restore sequence number for this installation.
MSI (s) (B4:B8) [22:26:26:356]: Unlocking Server
MSI (s) (B4:B8) [22:26:26:372]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 22:26:26: InstallFinalize. Return value 3.
In case the entire log is needed to diagnose my issue, please let me know.
Thank you for your help in advance.
fishmong3r