HPSA says Symantec Critical System Protection Agent is not installed yet the person who wrote the script didn’t add any logic to check for a newer version of HIDS. Nontheless, one connects to the server and finds out SCSP version 5.2.4.294 is installed when 5.2.4 is expected. Eh – so we’ll just go ahead and attempt to remove the application, and or downgrade to the expected version and everything will be good. Thats of course until this little message pops up.
- “Symantec Critical System Protection Agent – InstallShield Wizard”: Error! Cannot install a previous version of agent over a newer version.
- Followed swiftly by an application event id# 1040 with the following: Beginning a Windows Installer transaction: C:\Users{~~}\agent.msi. Client Process Id: 8164.
- Dont try to uninstall from appwiz.cpl because you will get the same error.
- check for the following services: Symantec Critical System Protection Agent (SISIPSService.exe), Symantec Critical System Protection IDS Agent (SISIDSService.exe) and Symantec Critical System Protection Utility (SISIPSUtil.exe)
- if the above services do not exist either as a running process or via services.msc then your install is broken and you need to reinstall with the proper cirtificate or remove and apply the package/application again.
- error appears to be comming from: HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC
- Solution: rename the following key – HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Intrusion Security\Agent or simply delete the “Version” key under -> HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Intrusion Security\Agent\IPS
1: *** *****************************************************************************
1: *** InitialLookupsAlways() -> begin.
1: *** *****************************************************************************
1: *** SetVersionInfo() -> begin.
MSI (s) (C8!60) []: PROPERTY CHANGE: Modifying ProductVersion property. Its current value is ’5.2.4.294′. Its new value: ’5.2.4′.
MSI (s) (C8!60) []: PROPERTY CHANGE: Adding ProductVersionLong property. Its value is ’5.2.4.294′.. 1: *** Version: 5.2.4.294
1: *** SetVersionInfo() -> end.
1: *** ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~