Cannot uninstall the MSI of cybereason

Question

We are trying to uninstall cybereason sensor agent from our Windows Server 2012 Server.

We see the below error.

i301: Applying execute package: CybereasonActiveProbe64.msi, action: Uninstall, path: (null), arguments: ' MSIFASTINSTALL="7" INSTALLDIR="C:\Program Files\Cybereason ActiveProbe\" AP_MSI_BLOB="*****" AP_AV_DB_ZIP_FILE_PATH="*****" AV_SIGNATURE_PATH="*****" AP_AV_MODE="" AP_SA_DETECT_MODE="" AP_SA_PREVENT_MODE="" AP_UNINSTALL_CODE="*****" AP_STATE="" AP_BLOCKING_SERVICE="" AP_APP_CTRL="" AP_CRS_SERVICE_MODE="" AP_SKIP_IAT_HOOKING="" AP_DISABLE_FILE_LISTING="" AP_BACKUP_CANARIES="" AM_SDK_LICENSE="" AM_SDK_CLOUD_ID="" AM_UPDATE_URL_GLOBAL="" ANTI_MALWARE="" AP_DISABLE_AUDIT_COLLECTION="" EP_LISTEN_PORT="39378" SA_LISTEN_PORT="40270" AP_POWERSHELL_SERVICE_MODE="" AP_SHELLCODE_SCANNER="" AP_DELAY_RAND_ENABLE="" AP_DELAY_RAND_START="" AP_DELAY_RAND_END="" AP_ENABLE_NON_EXE_FILES="" WIX_BUNDLE_ID="{0e04c369-f76e-46c1-81d8-bd6fcc07bb5f}" AI_SCAN_DOTNET="" AP_PUBLISH_RESEARCH_DATA="" AP_ZMQ_CUSTOM_OFFSET="" AP_AV_NETWORK_PROTECT="" AP_AV_FILTER_EXTENSIONS="" AP_AV_UPDATE_INTERVAL="" AP_PUBLISH_GRACE_PERIOD_MSEC="" AP_POLICIES_INITIAL_POLICY_ID="" AP_POLICIES_KEEP_SENSOR_CONFIGURATION="" AP_AV_BLOCK="" DNS_PUBLISH_CACHE_QUERIES="" EXISTING_SENSOR_VERSION="19.1.92.0" EXISTING_SENSOR_PRODUCTKEY="{0e04c369-f76e-46c1-81d8-bd6fcc07bb5f}"'
[3120:3608][2021-02-05T06:02:28]e000: Error 0x80070643: Failed to uninstall MSI package.
[3120:3608][2021-02-05T06:02:28]e000: Error 0x80070643: Failed to execute MSI package.
[3F9C:3A20][2021-02-05T06:02:28]e000: Error 0x80070643: Failed to configure per-machine MSI package.

Please help to troubleshoot the issue and help to uninstall this package.

1- We have rebooted the server and tried to uninstall- same issue.

2- We have stopped the agent services and tried to uninstall- same issue.

Please let us know how to proceed.

Answer 1

Hi,

First, let's check whether this issue is caused by third party or Windows. Please perform a clean boot then try to uninstall the MSI. If the package is uninstalled successfully, some third party programs or services was preventing the uninstallation. If the package couldn't be uninstalled, we can continue the troubleshooting.

Please download this troubleshooter. If the troubleshooter doesn't work in Server 2012 or it fails to solve the issue, let's try other possible solutions.

Error 0x80070643 might be caused by corrupted .NET framework. Please uninstall and reinstall .NET and check whether the issue persists. We can also try to uninstall the package in Safe mode.

Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.

----------

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.