CollectProcessInfo: Dumping info for Pid=3872 ImagePath=\Device\HarddiskVolume2\Windows\System32\msiexec.exe
Dumping module information for the process
CollectProcessInfo: Dumping info for Pid=3916 ImagePath=\Device\HarddiskVolume2\Windows\System32\msiexec.exe
Dumping module information for the process
CollectProcessInfo: Dumping info for Pid=3956 ImagePath=C:\Windows\syswow64\MsiExec.exe
Dumping module information for the process
Module: ImagePath=C:\Windows\syswow64\RpcRtRemote.dll
Module: ImagePath=C:\Windows\system32\rsaenh.dll
Module: ImagePath=C:\Windows\syswow64\CRYPTSP.dll
Module: ImagePath=C:\Windows\syswow64\WINSPOOL.DRV
Module: ImagePath=C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\COMCTL32.DLL
Module: ImagePath=C:\Windows\AppPatch\AcLayers.DLL
Module: ImagePath=C:\Windows\AppPatch\AcGenral.DLL
Module: ImagePath=C:\Windows\syswow64\msi.dll
Module: ImagePath=C:\Windows\syswow64\MPR.dll
Module: ImagePath=C:\Windows\syswow64\dwmapi.dll
Module: ImagePath=C:\Windows\syswow64\profapi.dll
Module: ImagePath=C:\Windows\syswow64\USERENV.dll
Module: ImagePath=C:\Windows\syswow64\sfc_os.DLL
Module: ImagePath=C:\Windows\syswow64\sfc.dll
Module: ImagePath=C:\Windows\syswow64\VERSION.dll
Module: ImagePath=C:\Windows\syswow64\MSACM32.dll
Module: ImagePath=C:\Windows\syswow64\samcli.dll
Module: ImagePath=C:\Windows\syswow64\UxTheme.dll
Module: ImagePath=C:\Windows\system32\apphelp.dll
Module: ImagePath=C:\Windows\syswow64\WINMM.dll
Module: ImagePath=C:\Windows\syswow64\CRYPTBASE.dll
Module: ImagePath=C:\Windows\syswow64\SspiCli.dll
Module: ImagePath=C:\Windows\syswow64\OLEAUT32.dll
Module: ImagePath=C:\Windows\syswow64\ole32.dll
Module: ImagePath=C:\Windows\syswow64\SHLWAPI.dll
Module: ImagePath=C:\Windows\syswow64\MSCTF.dll
Module: ImagePath=C:\Windows\syswow64\MSASN1.dll
Module: ImagePath=C:\Windows\syswow64\ADVAPI32.dll
Module: ImagePath=C:\Windows\syswow64\kernel32.dll
Module: ImagePath=C:\Windows\syswow64\KERNELBASE.dll
Module: ImagePath=C:\Windows\syswow64\CFGMGR32.dll
Module: ImagePath=C:\Windows\syswow64\iertutil.dll
Module: ImagePath=C:\Windows\syswow64\LPK.dll
Module: ImagePath=C:\Windows\syswow64\USP10.dll
Module: ImagePath=C:\Windows\syswow64\SHELL32.dll
Module: ImagePath=C:\Windows\syswow64\CRYPT32.dll
Module: ImagePath=C:\Windows\syswow64\DEVOBJ.dll
Module: ImagePath=C:\Windows\syswow64\USER32.dll
Module: ImagePath=C:\Windows\syswow64\SETUPAPI.dll
Module: ImagePath=C:\Windows\SysWOW64\sechost.dll
Module: ImagePath=C:\Windows\syswow64\msvcrt.dll
Module: ImagePath=C:\Windows\syswow64\RPCRT4.dll
Module: ImagePath=C:\Windows\syswow64\GDI32.dll
Module: ImagePath=C:\Windows\system32\IMM32.DLL
Module: ImagePath=C:\Windows\syswow64\CLBCatQ.DLL
Module: ImagePath=C:\Windows\syswow64\urlmon.dll
Module: ImagePath=C:\Windows\SysWOW64\ntdll.dll
CustomAction WriteCcServiceRegistry.D9F570F7_4F5A_41B0_9D99_89851EE85080 returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 12:15:33: InstallFinalize. Return value 3.
MSI (s) (20:C8) [12:15:33:265]: User policy value 'DisableRollback' is 0
MSI (s) (20:C8) [12:15:33:265]: Machine policy value 'DisableRollback' is 0
MSI (s) (20:C8) [12:15:33:372]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1026187744,LangId=1033,Platform=589824,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (20:C8) [12:15:33:372]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (20:C8) [12:15:33:373]: Executing op: DialogInfo(Type=1,Argument=Symantec Endpoint Protection)
MSI (s) (20:C8) [12:15:33:374]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
Action 12:15:33: Rollback. Rolling back action:
Rollback: WriteCcServiceRegistry.D9F570F7_4F5A_41B0_9D99_89851EE85080
MSI (s) (20:C8) [12:15:33:380]: Executing op: ActionStart(Name=WriteCcServiceRegistry.D9F570F7_4F5A_41B0_9D99_89851EE85080,,)
MSI (s) (20:C8) [12:15:33:380]: Executing op: ProductInfo(ProductKey={0A2163CB-4F47-44AA-A219-36133260CF17},ProductName=Symantec Endpoint Protection,PackageName=Symantec AntiVirus Win64.msi,Language=1033,Version=184555381,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={E9A7949E-550F-4C61-8355-862A8E73C2C5},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
Rollback: WriteCcServiceRegistryRol.D9F570F7_4F5A_41B0_9D99_89851EE85080
MSI (s) (20:C8) [12:15:33:382]: Executing op: ActionStart(Name=WriteCcServiceRegistryRol.D9F570F7_4F5A_41B0_9D99_89851EE85080,,)
MSI (s) (20:C8) [12:15:33:384]: Executing op: CustomActionRollback(Action=WriteCcServiceRegistryRol.D9F570F7_4F5A_41B0_9D99_89851EE85080,ActionType=3329,Source=BinaryData,Target=_DeleteCcServiceEntries@4,CustomActionData=C:\Users\ADMINI~1\AppData\Local\Temp\CCI33FD.tmp)
MSI (s) (20:74) [12:15:33:390]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIE9B3.tmp, Entrypoint: _DeleteCcServiceEntries@4
Action 12:15:33: DeleteCcServiceEntries. Removing service configuration.
MSIRESULT PASS - ccMSIUtil::GetSettingsFromFile: strFileName == 'C:\Users\ADMINI~1\AppData\Local\Temp\CCI33FD.tmp':
2010-09-10-12-15-33-406 : ccSym::CInstanceFactoryImpl::addFactory(1036) : Registered factory for {740AB61D-8B4A-46CC-9D82-86F72E055477} (use count 1)
2010-09-10-12-15-33-408 : ccSym::CInstanceFactoryImpl::addFactory(1036) : Registered factory for {9958D891-C319-4C6C-BEB9-F9BFB37EA493} (use count 1)
2010-09-10-12-15-33-410 : ccSym::CInstanceFactoryImpl::addFactory(1036) : Registered factory for {3F05A321-43B7-4578-93C8-CDC5F64A149A} (use count 1)
2010-09-10-12-15-33-411 : ccSym::CInstanceFactoryImpl::addFactory(1036) : Registered factory for {31324564-3B13-4533-8999-33990688F5A9} (use count 1)
2010-09-10-12-15-33-414 : CInstalledApps::GetInstAppsDirectory() : "Common Client", "C:\Program Files (x86)\Common Files\Symantec Shared"
2010-09-10-12-15-33-415 : CInstalledApps::GetCCDirectory() : "C:\Program Files (x86)\Common Files\Symantec Shared"
2010-09-10-12-15-33-417 : CInstalledApps::GetInstAppsDirectory() : "Common Client", "C:\Program Files (x86)\Common Files\Symantec Shared"
2010-09-10-12-15-33-418 : CInstalledApps::GetCCDirectory() : "C:\Program Files (x86)\Common Files\Symantec Shared"
MSIASSERT - DeleteServiceEntries: Couldn't create service manager. sr == 0x80010303:
MSIASSERT - DeleteCcServiceEntries: DeleteServiceEntries == false. Collecting info:
CheckServiceState: called for service 'ccSetMgr'
CheckServiceState: ServiceType=32
CurrentState=1
ControlAccepted=0
Win32ExitCode=0
ServiceSpecificExitCode=0
CheckPoint=0
WaitHint=0