Endpoint agent installation error and roll back

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

The Endpoint Agent installation failed and rolls back.

In the installation.log file you can see wither of the following two errors:

1. INFO: opening HKEY_USERS 'S-1-5-21-624012844-1664813860-2015929664-115140\Software\Microsoft\Windows\CurrentVersion\DIFxApp\Components\{542C5CFC-6700-492C-ACB8-963D2BD58D56}' (User's SID: 'S-1-5-21-624012844-1664813860-2015929664-115140') ...
   INFO:   ENTER:  DriverPackageInstallW
   INFO:   Installing INF file "C:\WINDOWS\system32\DRVSTORE\sfsctrx_D2D8842D818A4B998EF919D2E13FB9A40BCB2F64\sfsctrx.inf" of Type 5.
   INFO:   installing class filter 'C:\WINDOWS\system32\DRVSTORE\sfsctrx_D2D8842D818A4B998EF919D2E13FB9A40BCB2F64\sfsctrx.inf'
   ERROR:  The driver installation failed. Attempting to undo system changes ... (Error code 0x65B: Error de una función durante la ejecución.)
   INFO:   Driver store reference information does not exist for service 'SFsCtrx'. So, no undo for this service.
   INFO:   Unable to revert to a previous driver store for service 'SFsCtrx'.
   INFO:   Will attempt to uninstall the driver.
   ERROR:  Error unable to open service 'SFsCtrx' to delete it because of error 0x424
   INFO:   RETURN: DriverPackageInstallW  (0x65B)
   ERROR encountered while installing driver package C:\Program Files\Manufacturer\Endpoint Agent\sfsctrx\sfsctrx.inf
   InstallDriverPackages failed with error 0x65B
   RETURN: InstallDriverPackages() 1627 (0x65B)
   
   
2. ERROR:  Error unable to open service 'vnwcd' to delete it because of error 0x424

Resolution

For #1:
You have to find this registry key and delete it:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SFsCtrx

Once this key is deleted the installation procedure will complete successfully.

For #2:
Deleting the registry key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\vnwcd".
Once this key is deleted the installation procedure will complete successfully.