HPSA says Symantec Critical System Protection
Agent is not installed yet the person who wrote
the script didn't add any logic to check for a
newer version of HIDS. Nontheless, one connects
to the server and finds out SCSP version
5.2.4.294 is installed when 5.2.4 is expected.
Eh - so we'll just go ahead and attempt to
remove the application, and or downgrade to the
expected version and everything will be good.
Thats of course until this little message pops
up.
- "Symantec Critical System Protection
Agent - InstallShield Wizard": Error! Cannot
install a previous version of agent over a
newer version.
- Followed swiftly by an application event
id# 1040 with the following: Beginning a
Windows Installer transaction:
C:\Users{~~}\agent.msi.
Client Process Id: 8164.
- Dont try to uninstall from appwiz.cpl
because you will get the same error.
- check for the following services:
Symantec Critical System Protection Agent (SISIPSService.exe),
Symantec Critical System Protection IDS
Agent (SISIDSService.exe) and Symantec
Critical System Protection Utility (SISIPSUtil.exe)
- if the above services do not exist
either as a running process or via
services.msc then your install is broken and
you need to reinstall with the proper
cirtificate or remove and apply the
package/application again.
- error appears to be comming from: HKLM\SOFTWARE\Symantec\Symantec
Endpoint Protection\SMC
- Solution: rename the following key -
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Intrusion
Security\Agent or simply delete the
"Version" key under -> HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Intrusion
Security\Agent\IPS
1: ***
*****************************************************************************
1: *** InitialLookupsAlways() -> begin.
1: ***
*****************************************************************************
1: *** SetVersionInfo() -> begin.
MSI (s) (C8!60) []: PROPERTY CHANGE: Modifying
ProductVersion property. Its current value is
'5.2.4.294'. Its new value: '5.2.4'.
MSI (s) (C8!60) []: PROPERTY CHANGE: Adding
ProductVersionLong property. Its value is
'5.2.4.294'..
1: *** Version: 5.2.4.294
1: *** SetVersionInfo() -> end.
1: ***
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
