Endpoint Protection

 View Only

How to remove SEP in Safe Mode 

Feb 17, 2012 04:23 AM

Problem

It might happen that after an upgrade/installation of a SEP Client on an infected computer, the computer can no longer boot in normal mode but can boot in Safe Mode or Safe Mode with Networking.

You might then use the SERT to clean up the computer but if it fails, you might try the solution below.

Solution

1. Boot into Safe Mode,

2. Create the following registry key: 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver 

(If you also want it available in Safe Mode w/ Networking, add the "msiserver" key under the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ key found here as well)

3. Edit the "(Default)" value in the new "msiserver" registry key, and enter "Service" in the "Value Data" box. Click OK, and close the registry editor.



4. Reboot back into Safe Mode, and the Windows Installer service should now run and allow you to add or remove programs in Safe Mode.

Statistics
0 Favorited
2 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Comments

Oct 10, 2017 07:03 AM

shulk,

This article help me very much, thanks a lot.

Jul 08, 2016 09:20 AM

shulk, 

This article just saved me. Thank you

Feb 24, 2012 04:22 AM

Nice One and thanks for sharing.

Feb 22, 2012 12:26 PM

Thanks a lot. Hope it might help.

Shulk.

Feb 22, 2012 03:55 AM

Useful Information Shulk.

Related Entries and Links

No Related Resource entered.