Three biggest causes of this:

1.  Check for registry keys named TTOOL_UNINSTALL or  containing  
"wintool" or "TTOOL."  Remove all references to any of them, you may  
have to change permissions on the registry keys to delete them.

2.  If Norton Internet Security was EVER installed on the machine it  
has a nasty habit of leaving registry keys behind.  We use a tool  
that we got from Cisco called CCATroubleshooting.exe that displays  
what the agent will find.  We then search the registry for the  
version string of NIS that the tool finds and then remove all keys  
associated with it.  I can't redistribute the tool, but perhaps if  
you ask cisco...

3.  We had a problem where No AV was detected by CCATroubleshooting.   
We worked with Cisco and they released updated Norton DLL's for use  
with the Agent and they fixed the problem.  I do not know if they  
have rolled those DLL's into one of the recent patches but you might  
try 3.5.7 and see if they included them, if not call Cisco and open a  
TAC case.  My case number was 601951817 perhaps they can send you the  
DLL's.

If you DO open a TAC case be prepared to send large amounts of  
Registry exports, diagnostic output, screen shots and other  
information to Cisco about each affected machine.  Also my  
recommendation would be to get a TAC engineer in your time zone .....

Hope this helps....
Ryan Dorman, CCNP
Network Communications Specialist
Millersville University
717.871.5883
[log in to unmask]


On Sep 13, 2005, at 1:49 PM, nick pistentis wrote:

> Hi everyone-
>
> We're requiring the installation of Symantec Antivirus here, and  
> for the most part this has worked fine. However, we've seen a  
> handful of machines where the system passes the Symantec install  
> check, but when attempting to update the system, it gets an error  
> that 'NortonAV is not installed.' I've tried completely cleaning  
> the system of Symantec products and reinstalling, installing older  
> versions of the program, and adding the desired reg keys by hand,  
> all to no avail. Has anyone else seen this, or found a way around it?
>
> Thanks,
>
> Nick
>
> _____________________________________
> Nicholas Pistentis
> Manager, Student Technology Services
> George Washington University
> [log in to unmask]
> 202.994.6202
>