Uninstall of Sophos Firewall Fails
Verbose log file shows 2 return value 3 events:
MSI (s) (98:1C) [10:48:25:857]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI49C4.tmp, Entrypoint: UninstallSecurityCenter
MSI (s) (98:70) [10:48:25:982]: Executing op: ActionStart(Name=UninstallUnsignedDrivers,,)
MSI (s) (98:70) [10:48:25:982]: Executing op: CustomActionSchedule(Action=UninstallUnsignedDrivers,ActionType=1025,Source=BinaryData,Target=UninstallUnsignedDrivers,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Client Firewall\|ALL)
MSI (s) (98:FC) [10:48:25:982]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI4A42.tmp, Entrypoint: UninstallUnsignedDrivers
CustomAction UninstallUnsignedDrivers returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (98:70) [10:48:26:373]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (98:70) [10:48:26:373]: User policy value 'DisableRollback' is 0
MSI (s) (98:70) [10:48:26:373]: Machine policy value 'DisableRollback' is 0
Action ended 10:48:26: InstallFinalize. Return value 3.
MSI (s) (98:70) [10:48:27:217]: Executing op: RegRemoveKey()
MSI (s) (98:70) [10:48:27:217]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\TempPackages 3: 2
MSI (s) (98:70) [10:48:27:217]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A2BF508A448AABC40888AC4680D7951E\Transforms,,BinaryType=1,,)
MSI (s) (98:70) [10:48:27:217]: Executing op: RegRemoveKey()
MSI (s) (98:70) [10:48:27:217]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A2BF508A448AABC40888AC4680D7951E\Transforms 3: 2
MSI (s) (98:70) [10:48:27:217]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (98:70) [10:48:27:217]: Error in rollback skipped. Return: 5
MSI (s) (98:70) [10:48:27:232]: Note: 1: 2318 2:
MSI (s) (98:70) [10:48:27:232]: Calling SRSetRestorePoint API. dwRestorePtType: 13, dwEventType: 103, llSequenceNumber: 78, szDescription: "".
MSI (s) (98:70) [10:48:27:232]: The call to SRSetRestorePoint API succeeded. Returned status: 0.
MSI (s) (98:70) [10:48:27:232]: Unlocking Server
MSI (s) (98:70) [10:48:27:263]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 10:48:27: INSTALL. Return value 3.
I've tried all the forums I can find. This is the last machine to migrate to the Cloud Central service. All other 575 are done. Only 2 components left on this system. Sophos Client Firewall and Sophos Anti-Virus. I thought firewall had been uninstalled in the correct order and proceeded with uninstall of other components. But that uninstall failed, sop now the uninstall is out of order.
This thread was automatically locked due to age.
