This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

The installation of Sophos-Antivirus has failed (error 0x80041f09) Windows 10

 Hello!

I am unable to install sophos Anti-virus with this errors 

The installation of Sophos-Antivirus has failed (error 0x80041f09). Contact your network administrator.

 

I checked registry key and delete all folder with sophos. In log files I have 

 

I found record - An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus. Restart doesn't help. 

Tried to use fix from Microsoft, delete all registry information relate with sophos, which i can found .

I cleared all temp folders! I don't know what to do. Did anyone face issue like this ? I have 3 computers with this problem.

Please help!

 

2018-07-28 13:29:46 ExtractClassicConfig: Action started
2018-07-28 13:29:46 ExtractClassicConfig: Action succeeded
2018-07-28 13:29:46 PreInstallChecks: Action started
2018-07-28 13:29:46 PreInstallChecks: Action succeeded
2018-07-28 13:29:46 SetBootDriverStartupProperty: Action started
2018-07-28 13:29:46 SetBootDriverStartupProperty: Boot driver: not installed.
2018-07-28 13:29:46 SetBootDriverStartupProperty: Action succeeded
2018-07-28 13:29:46 SetClassFilterPresentProperty: Action started
2018-07-28 13:29:46 SetClassFilterPresentProperty: Setting class filter present property to: 0
2018-07-28 13:29:46 SetClassFilterPresentProperty: Action succeeded
2018-07-28 13:29:46 SetDriverProperty: Action started
2018-07-28 13:29:46 SetDriverProperty: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:29:46 SetDriverProperty: Action succeeded
2018-07-28 13:29:46 SetProcessorProperties: Action started
2018-07-28 13:29:46 SetProcessorProperties: Action succeeded
2018-07-28 13:29:46 SetRestoreExcludedProcessesProperty: Action started
2018-07-28 13:29:46 SetRestoreExcludedProcessesProperty: SetRestoreExcludedProcessesProperty
2018-07-28 13:29:46 SetRestoreExcludedProcessesProperty: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:29:46 SetRestoreExcludedProcessesProperty: Action succeeded
2018-07-28 13:29:53 CheckRegForNullDACLs: Action started
2018-07-28 13:29:53 CheckRegForNullDACLs: Action succeeded
2018-07-28 13:29:54 WaitForSAVService: Action started
2018-07-28 13:29:54 WaitForSAVService: WaitForSAVService: Walking system processes...
2018-07-28 13:29:54 WaitForSAVService: WaitForSAVService: Finished walking system processes.
2018-07-28 13:29:54 WaitForSAVService: Action succeeded
2018-07-28 13:29:54 CheckUninstallDrivers: Action started
2018-07-28 13:29:54 CheckUninstallDrivers: IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess control. Returning false.
2018-07-28 13:29:54 CheckUninstallDrivers: IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess filter. Returning false.
2018-07-28 13:29:54 CheckUninstallDrivers: Action succeeded
2018-07-28 13:29:55 DeleteIDEs: Action started
2018-07-28 13:29:55 DeleteIDEs: Action succeeded
2018-07-28 13:29:55 DeleteBDLs: Action started
2018-07-28 13:29:55 DeleteBDLs: Action succeeded
2018-07-28 13:29:55 DeleteHIPSConfig: Action started
2018-07-28 13:29:55 DeleteHIPSConfig: Action succeeded
2018-07-28 13:29:55 UpdateSavAdapterDll: Action started
2018-07-28 13:30:05 UpdateSavAdapterDll: Action succeeded
2018-07-28 13:30:05 UpdateDesktopMessaging: Action started
2018-07-28 13:30:05 UpdateDesktopMessaging: UpdateDesktopMessaging: Could not open SAVPlugin registry key(2)
2018-07-28 13:30:05 UpdateDesktopMessaging: Action succeeded
2018-07-28 13:30:05 CopyOtherFiles: Action started
2018-07-28 13:30:05 CopyOtherFiles: CopyOtherFiles custom action - Copying other driver files
2018-07-28 13:30:05 CopyOtherFiles: Copying class filter source: C:\escw_107_sa\savxp\drivers\sdcfilter\win7_amd64\SDCFILTER.INF, target: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
2018-07-28 13:30:05 CopyOtherFiles: Copying boot driver source: C:\escw_107_sa\savxp\drivers\boottasks\win7_amd64\SOPHOSBOOTDRIVER.INF, target: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
2018-07-28 13:30:05 CopyOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll does not exist, no further action.
2018-07-28 13:30:05 CopyOtherFiles: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:05 CopyOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll does not exist, no further action.
2018-07-28 13:30:05 CopyOtherFiles: Copying boot tasks source: C:\escw_107_sa\savxp\drivers\boottasks\win7_amd64\SophosBootTasks.exe, target: C:\WINDOWS\system32\
2018-07-28 13:30:05 CopyOtherFiles: Action succeeded
2018-07-28 13:30:05 RegisterBufferOverflowProtection: Action started
2018-07-28 13:30:05 RegisterBufferOverflowProtection: BopsUnregister: could not get short path to DLL. It will not be unregistered.
2018-07-28 13:30:05 RegisterBufferOverflowProtection: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.
2018-07-28 13:30:05 RegisterBufferOverflowProtection: BOPS path already exists
2018-07-28 13:30:05 RegisterBufferOverflowProtection: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:05 RegisterBufferOverflowProtection: BOPS path already exists
2018-07-28 13:30:05 RegisterBufferOverflowProtection: Action succeeded
2018-07-28 13:30:05 RestoreExcludedProcesses: Action started
2018-07-28 13:30:05 RestoreExcludedProcesses: RestoreExcludedProcesses
2018-07-28 13:30:05 RestoreExcludedProcesses: Empty excluded processes property. Nothing to be done.
2018-07-28 13:30:05 RestoreExcludedProcesses: Action succeeded
2018-07-28 13:30:06 StartDriverServices: Action started
2018-07-28 13:30:06 StartDriverServices: IsServiceRunning: Unable to get a handle to requested service skmscan. Returning false.
2018-07-28 13:30:06 StartDriverServices: Unable to get a handle to kms service - service will not be started until next reboot
2018-07-28 13:30:06 StartDriverServices: Action succeeded
2018-07-28 13:30:09 CreateUserGroups: Action started
2018-07-28 13:30:09 CreateUserGroups: DsGetDcName() failed, error: 1355
2018-07-28 13:30:09 CreateUserGroups: Local name of well-known group Administrators is Administrators
2018-07-28 13:30:09 CreateUserGroups: Local name of well-known group PowerUsers is Power Users
2018-07-28 13:30:09 CreateUserGroups: Local name of well-known group Users is Users
2018-07-28 13:30:10 CreateUserGroups: Failed to add the members of group PowerUsers to SophosPowerUser group
2018-07-28 13:30:11 CreateUserGroups: Adding LOCAL SYSTEM to the SophosAdministrator role in the machine file
2018-07-28 13:30:11 CreateUserGroups: Unable to get a handle to the MA Service inside CreateUserGroups (0x80070424). The Sophos Agent service will not be re-started until next reboot.
2018-07-28 13:30:11 CreateUserGroups: Action succeeded
2018-07-28 13:30:11 PurgeIOfficeAVCache: Action started
2018-07-28 13:30:11 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:11 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:11 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:11 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:11 PurgeIOfficeAVCache: Opened key name S-1-5-21-1324235971-1992567748-1975794374-495761\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{56FFCC30-D398-11D0-B2AE-00A0C908FA49}
2018-07-28 13:30:11 PurgeIOfficeAVCache: Unable to remove Enum sub key: 0x2
2018-07-28 13:30:11 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:11 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:11 PurgeIOfficeAVCache: Action succeeded
2018-07-28 13:30:11 EnableAttachmentScanning: Action started
2018-07-28 13:30:11 EnableAttachmentScanning: ScanWithAntiVirus value is already set to 3
2018-07-28 13:30:11 EnableAttachmentScanning: Action succeeded
2018-07-28 13:30:11 AddDomainGroups: Action started
2018-07-28 13:30:11 AddDomainGroups: DsGetDcName() failed, error: 1355
2018-07-28 13:30:11 AddDomainGroups: DsGetDcName() failed, error: 1355
2018-07-28 13:30:11 AddDomainGroups: GetDCName() failed: (1355) The specified domain either does not exist or could not be contacted.

2018-07-28 13:30:11 AddDomainGroups: SophosDomainAdministrator group doesn't exist
2018-07-28 13:30:11 AddDomainGroups: SophosDomainPowerUser group doesn't exist
2018-07-28 13:30:11 AddDomainGroups: SophosDomainUser group doesn't exist
2018-07-28 13:30:11 AddDomainGroups: Action succeeded
2018-07-28 13:30:14 SetSAVAdminUpdateBegin: Action started
2018-07-28 13:30:14 SetSAVAdminUpdateBegin: Action succeeded
2018-07-28 13:30:14 UpdateSAVI: Action started
2018-07-28 13:30:14 UpdateSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
2018-07-28 13:30:14 UpdateSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__
2018-07-28 13:30:14 UpdateSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
2018-07-28 13:30:14 UpdateSAVI: UpdateRequest signalled
2018-07-28 13:30:14 UpdateSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
2018-07-28 13:30:14 UpdateSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__
2018-07-28 13:30:14 UpdateSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
2018-07-28 13:30:15 UpdateSAVI: MSCM version orig: new: 0.3.0.90
2018-07-28 13:30:15 UpdateSAVI: Copying MSCM from: C:\escw_107_sa\savxp\savmscm.dll to: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\savmscm.dll
2018-07-28 13:30:15 UpdateSAVI: Registered MSCM
2018-07-28 13:30:17 UpdateSAVI: SAVI dll was installed successfully
2018-07-28 13:30:17 UpdateSAVI: Action succeeded
2018-07-28 13:30:17 SetFolderPermissions: Action started
2018-07-28 13:30:17 SetFolderPermissions: We are running on XP or higher - adding LocalService to permissions on config files
2018-07-28 13:30:17 SetFolderPermissions: We are running on XP or higher - adding LocalService to permissions on config files
2018-07-28 13:30:17 SetFolderPermissions: Unable to add set access permissions on the Device Control Log directory
2018-07-28 13:30:17 SetFolderPermissions: Unable to add set access permissions on the Data Control Log directory
2018-07-28 13:30:18 SetFolderPermissions: Unable to add set access permissions on the Device Control directory
2018-07-28 13:30:18 SetFolderPermissions: Unable to add set access permissions on the Data Control directory
2018-07-28 13:30:18 SetFolderPermissions: Action succeeded
2018-07-28 13:30:18 RemoveSAVI: Action started
2018-07-28 13:30:18 RemoveSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
2018-07-28 13:30:18 RemoveSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__
2018-07-28 13:30:18 RemoveSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
2018-07-28 13:30:18 RemoveSAVI: UpdateRequest signalled
2018-07-28 13:30:18 RemoveSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
2018-07-28 13:30:18 RemoveSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__
2018-07-28 13:30:18 RemoveSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
2018-07-28 13:30:18 RemoveSAVI: Action succeeded
2018-07-28 13:30:22 DeleteUserGroups: Action started
2018-07-28 13:30:22 DeleteUserGroups: We are not a domain controller: Attempting to delete local user groups
2018-07-28 13:30:22 DeleteUserGroups: Action succeeded
2018-07-28 13:30:23 UpdateDesktopMessaging: Action started
2018-07-28 13:30:23 UpdateDesktopMessaging: UpdateDesktopMessaging: Could not open SAVPlugin registry key(2)
2018-07-28 13:30:23 UpdateDesktopMessaging: Action succeeded
2018-07-28 13:30:23 RollbackUpdateSavAdapterDll: Action started
2018-07-28 13:30:23 RollbackUpdateSavAdapterDll: Failed to re-add SAVAdapter key (0x2)
2018-07-28 13:30:23 RollbackUpdateSavAdapterDll: Action succeeded
2018-07-28 13:30:23 DeleteOtherFiles: Action started
2018-07-28 13:30:23 DeleteOtherFiles: Unable to get list of engine files from C:\Program Files (x86)\Sophos\Sophos Anti-Virus\engsync.upd
2018-07-28 13:30:23 DeleteOtherFiles: Unregistered MSCM
2018-07-28 13:30:23 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll detoured exists, proceeding to rename it & mark for delete.
2018-07-28 13:30:23 DeleteOtherFiles: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:23 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll detoured exists, proceeding to rename it & mark for delete.
2018-07-28 13:30:23 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.
2018-07-28 13:30:23 DeleteOtherFiles: Deleting config file folder
2018-07-28 13:30:23 DeleteOtherFiles: Failed to delete config folder, 2
2018-07-28 13:30:23 Error deleting file: C:\ProgramData\Sophos\Sophos Anti-Virus\\Infected\Low with error: Access is denied.

2018-07-28 13:30:23 DeleteOtherFiles: Action succeeded
2018-07-28 13:30:23 ForceDeleteUserPlugin: Action started
2018-07-28 13:30:23 ForceDeleteUserPlugin: Action succeeded
2018-07-28 13:30:23 ForceDeleteFiles: Action started
2018-07-28 13:30:23 ForceDeleteFiles: Action succeeded
2018-07-28 13:30:23 RunErrorScripts: Action started
2018-07-28 13:30:23 RunErrorScripts: Action succeeded
2018-07-28 13:30:23 RestoreMovedFiles: Action started
2018-07-28 13:30:23 RestoreMovedFiles: Action succeeded
2018-07-28 13:30:23 SetUpdateFailed: Action started
2018-07-28 13:30:23 SetUpdateFailed: Unable to create an instance of ComponentManager - SystemInformation cannot be informed of end of update
2018-07-28 13:30:23 SetUpdateFailed: Action succeeded

 



This thread was automatically locked due to age.