Uninstall Sophos endpoint security and control

HI,

It doesn't really matter but I would suggest for this sceanrio performing the following steps:

1. Ensure the process AlUpdate.exe isn't running (TaskManager - End process Alupdate.exe if exists)  (This is just to ensure that an AutoUpdate isn't trying to update).  If it was you'd get a warning but this will save that.

2. Uninstall RMS

3. Uninstall SAV

4. Uninstall AutoUpdate

5. Restart the computer, then to clear up if that's all Sophos application:
Delete: "C:\program files\sophos\" and/or "C:\Program Files (x86)\Sophos\"

Note: It doesn't really matter what order for this sceanrio, the only reason I've suggested AutoUpdate last, is that this will ensure that install files of the other two are kept until they are removed just incase they are required to help with the removal.  

Regards,

Jak

I am also trying to uninstall Sophos Endpoint from an XP Pro (SR3) computer too.  I have disabled Tamper Protection and been able (through Control Panel - Remove Programs) to remove the SOPHOS AUTO-UPDATING.

I then tried to remove the FIREWALL program but got ERROR 1324. The path My Pictures contains an invalid character.

How do I proceed?

Paul

Hello Paul,

could you show the corresponding log?

Christian

Where do I find that Christian please?

Hello Paul,

sorry, my bad, uninstalling from the Control Panel likely doesn't create a log. You'd have to run msiexec.exe from the command line, please see the How to uninstall ... article for details it also tells how to request a log. Unfortunately my XP no longer exists - I'd have given you the exact parameters otherwise.

Christian 

I have created the following batch file Christian - how does it look to you?  I do not know exactly what I am doing!!

MsiExec.exe /X{A805FB2A-A844-4cba-8088-CA64087D59E1} /qn REBOOT=SUPPRESS/L*v %windir%\Temp\Uninstall_SAV9-10_SophosLog1.txt
MsiExec.exe /X{09863DA9-7A9B-4430-9561-E04D178D7017} /qn REBOOT=SUPPRESS/L*v %windir%\Temp\Uninstall_SAV9-10_SophosLog2.txt

Hello Paul,

the first is one of the firewalls (2.9 or 3.0), the second SAV - these are the only ones (and you've found them in the registry) remaining? Looks ok and should write the logs.

Christian

Well I ran it ... but no files named SophosLog1.txt or SophosLog2.txt were written or found in SEARCH the entire hard drive.

I just wonder now just what do I have to do now to just get rid of SOPHOS?  My trial time for trying out the new software that I want to try is almost over and it has taken 55 days of a 60 day trial to uninstall SOPHOS and I am no further forward.  Very exasperating!

Hello Paul,

just ran your first command (adding a space between SUPPRESS and /L - which is likely just an omission int the post as otherwise msiexec.exe would pop up the help window) and did get ...Log1.txt (slightly over 30 lines) in the %windir%\Temp\ directory. You should get either an error telling you that msiexec.exe could be run at all or crashed immediately, the help pop-up (in case of incorrect parameters or syntax), or the log in the specified location. You should not get no output or feedback at all when you try to run  (regardless of the parameters).

Christian

Thank you for the syntax correction and this time, for the firewall I got the following return:

=== Verbose logging started: 11/29/2017  6:09:51  Build type: SHIP UNICODE 3.01.4001.5512  Calling process: C:\windows\system32\msiexec.exe ===
MSI (c) (38:30) [06:09:51:640]: Resetting cached policy values
MSI (c) (38:30) [06:09:51:640]: Machine policy value 'Debug' is 0
MSI (c) (38:30) [06:09:51:640]: ******* RunEngine:
           ******* Product: {A805FB2A-A844-4cba-8088-CA64087D59E1}
           ******* Action:
           ******* CommandLine: **********
MSI (c) (38:30) [06:09:51:640]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (38:30) [06:09:51:640]: Grabbed execution mutex.
MSI (c) (38:30) [06:09:51:720]: Cloaking enabled.
MSI (c) (38:30) [06:09:51:720]: Attempting to enable all disabled priveleges before calling Install on Server
MSI (c) (38:30) [06:09:51:730]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (08:64) [06:09:51:750]: Grabbed execution mutex.
MSI (s) (08:F4) [06:09:51:750]: Resetting cached policy values
MSI (s) (08:F4) [06:09:51:750]: Machine policy value 'Debug' is 0
MSI (s) (08:F4) [06:09:51:750]: ******* RunEngine:
           ******* Product: {A805FB2A-A844-4cba-8088-CA64087D59E1}
           ******* Action:
           ******* CommandLine: **********
MSI (s) (08:F4) [06:09:51:750]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (08:F4) [06:09:51:790]: End dialog not enabled
MSI (s) (08:F4) [06:09:51:790]: Original package ==> c:\windows\Installer\9a137.msi
MSI (s) (08:F4) [06:09:51:790]: Package we're running from ==> c:\windows\Installer\9a137.msi
MSI (s) (08:F4) [06:09:51:850]: APPCOMPAT: looking for appcompat database entry with ProductCode '{A805FB2A-A844-4CBA-8088-CA64087D59E1}'.
MSI (s) (08:F4) [06:09:51:850]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (08:F4) [06:09:51:870]: MSCOREE not loaded loading copy from system32
MSI (s) (08:F4) [06:09:51:930]: Machine policy value 'DisablePatch' is 0
MSI (s) (08:F4) [06:09:51:930]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (08:F4) [06:09:51:930]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (08:F4) [06:09:51:930]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (08:F4) [06:09:51:930]: APPCOMPAT: looking for appcompat database entry with ProductCode '{A805FB2A-A844-4CBA-8088-CA64087D59E1}'.
MSI (s) (08:F4) [06:09:51:930]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (08:F4) [06:09:51:930]: Transforms are not secure.
MSI (s) (08:F4) [06:09:51:930]: Command Line: REBOOT=SUPPRESS REMOVE=ALL CURRENTDIRECTORY=C:\ CLIENTUILEVEL=3 CLIENTPROCESSID=312
MSI (s) (08:F4) [06:09:51:930]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{9D59C617-3854-4FBF-95F2-ED33037DB8E5}'.
MSI (s) (08:F4) [06:09:51:930]: Product Code passed to Engine.Initialize:           '{A805FB2A-A844-4cba-8088-CA64087D59E1}'
MSI (s) (08:F4) [06:09:51:930]: Product Code from property table before transforms: '{A805FB2A-A844-4CBA-8088-CA64087D59E1}'
MSI (s) (08:F4) [06:09:51:930]: Product Code from property table after transforms:  '{A805FB2A-A844-4cba-8088-CA64087D59E1}'
MSI (s) (08:F4) [06:09:51:930]: Product registered: entering maintenance mode
MSI (s) (08:F4) [06:09:51:930]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'.
MSI (s) (08:F4) [06:09:51:930]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
MSI (s) (08:F4) [06:09:51:930]: Package name retrieved from configuration data: 'Sophos Client Firewall.msi'
MSI (s) (08:F4) [06:09:51:930]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
MSI (s) (08:F4) [06:09:51:940]: Note: 1: 2729
MSI (s) (08:F4) [06:09:51:950]: Note: 1: 2729
MSI (s) (08:F4) [06:09:51:950]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (08:F4) [06:09:51:950]: Machine policy value 'DisableMsi' is 0
MSI (s) (08:F4) [06:09:51:950]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (08:F4) [06:09:51:950]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (08:F4) [06:09:51:950]: Product {A805FB2A-A844-4CBA-8088-CA64087D59E1} is admin assigned: LocalSystem owns the publish key.
MSI (s) (08:F4) [06:09:51:950]: Product {A805FB2A-A844-4CBA-8088-CA64087D59E1} is managed.
MSI (s) (08:F4) [06:09:51:950]: Running product '{A805FB2A-A844-4CBA-8088-CA64087D59E1}' with elevated privileges: Product is assigned.
MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'SUPPRESS'.
MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding REMOVE property. Its value is 'ALL'.
MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\'.
MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '312'.
MSI (s) (08:F4) [06:09:51:950]: TRANSFORMS property is now:
MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'.
MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (s) (08:F4) [06:09:51:950]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Application Data
MSI (s) (08:F4) [06:09:51:950]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Favorites
MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\NetHood
MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\My Documents
MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\PrintHood
MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Recent
MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\SendTo
MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Templates
MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Application Data
MSI (s) (08:F4) [06:09:51:970]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Local Settings\Application Data
MSI (s) (08:F4) [06:09:51:970]: SHELL32::SHGetFolderPath returned: \\PC\My Documents\My Pictures
MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Startup
MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs
MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu
MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Desktop
MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu\Programs\Administrative Tools
MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu\Programs\Startup
MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu\Programs
MSI (s) (08:F4) [06:09:52:180]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu
MSI (s) (08:F4) [06:09:52:180]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Desktop
MSI (s) (08:F4) [06:09:52:180]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Templates
MSI (s) (08:F4) [06:09:52:180]: SHELL32::SHGetFolderPath returned: C:\windows\Fonts
MSI (s) (08:F4) [06:09:52:220]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Paul'.
MSI (s) (08:F4) [06:09:52:220]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding Installed property. Its value is '2015/07/09 08:29:44'.
MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'c:\windows\Installer\9a137.msi'.
MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'c:\windows\Installer\9a137.msi'.
MSI (s) (08:F4) [06:09:52:220]: Note: 1: 2262 2: PatchPackage 3: -2147287038
MSI (s) (08:F4) [06:09:52:220]: Machine policy value 'DisableRollback' is 0
MSI (s) (08:F4) [06:09:52:220]: User policy value 'DisableRollback' is 0
MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
=== Logging started: 11/29/2017  6:09:52 ===
MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding Preselected property. Its value is '1'.
MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (08:F4) [06:09:52:220]: Doing action: INSTALL
MSI (s) (08:F4) [06:09:52:240]: Running ExecuteSequence
MSI (s) (08:F4) [06:09:52:240]: Doing action: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7
Action start 6:09:52: INSTALL.
MSI (s) (08:F4) [06:09:52:240]: PROPERTY CHANGE: Adding ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'C:\Program Files\'.
Action start 6:09:52: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7.
MSI (s) (08:F4) [06:09:52:240]: Doing action: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7
Action ended 6:09:52: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
MSI (s) (08:F4) [06:09:52:240]: PROPERTY CHANGE: Adding CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'C:\Program Files\Common Files\'.
Action start 6:09:52: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7.
MSI (s) (08:F4) [06:09:52:240]: Doing action: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF
Action ended 6:09:52: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
MSI (s) (08:F4) [06:09:52:240]: PROPERTY CHANGE: Adding SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\windows\system32\'.
Action start 6:09:52: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF.
MSI (s) (08:F4) [06:09:52:240]: Doing action: AppSearch
Action ended 6:09:52: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF. Return value 1.
Action start 6:09:52: AppSearch.
MSI (s) (08:F4) [06:09:52:250]: Note: 1: 2262 2: CompLocator 3: -2147287038
MSI (s) (08:F4) [06:09:52:250]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FED1005D-CBC8-45D5-A288-FFC7BB304121} 3: 2
MSI (s) (08:F4) [06:09:52:250]: Note: 1: 2262 2: IniLocator 3: -2147287038
MSI (s) (08:F4) [06:09:52:250]: Note: 1: 2262 2: DrLocator 3: -2147287038
MSI (s) (08:F4) [06:09:52:250]: Note: 1: 2262 2: CompLocator 3: -2147287038
MSI (s) (08:F4) [06:09:52:250]: PROPERTY CHANGE: Adding SAV6 property. Its value is 'YES'.
MSI (s) (08:F4) [06:09:52:250]: Doing action: LaunchConditions
Action ended 6:09:52: AppSearch. Return value 1.
Action start 6:09:52: LaunchConditions.
MSI (s) (08:F4) [06:09:52:250]: Doing action: TP_CheckRemoveAllowed
Action ended 6:09:52: LaunchConditions. Return value 1.
MSI (s) (08:68) [06:09:52:280]: Invoking remote custom action. DLL: C:\windows\Installer\MSI25.tmp, Entrypoint: TP_CheckRemoveAllowed
MSI (s) (08:6C) [06:09:52:280]: Generating random cookie.
MSI (s) (08:6C) [06:09:52:290]: Created Custom Action Server with PID 2064 (0x810).
MSI (s) (08:2C) [06:09:52:341]: Running as a service.
MSI (s) (08:2C) [06:09:52:341]: Hello, I'm your 32bit Impersonated custom action server.
Action start 6:09:52: TP_CheckRemoveAllowed.
UninstallCheck failed (77)
MSI (s) (08:F4) [06:09:52:391]: Skipping action: ISSetAllUsers (condition is false)
MSI (s) (08:F4) [06:09:52:391]: Doing action: FindRelatedProducts
Action ended 6:09:52: TP_CheckRemoveAllowed. Return value 1.
MSI (s) (08:F4) [06:09:52:391]: Skipping FindRelatedProducts action: not run in maintenance mode
Action start 6:09:52: FindRelatedProducts.
MSI (s) (08:F4) [06:09:52:391]: Skipping action: CCPSearch (condition is false)
MSI (s) (08:F4) [06:09:52:391]: Skipping action: RMCCPSearch (condition is false)
MSI (s) (08:F4) [06:09:52:391]: Doing action: ValidateProductID
Action ended 6:09:52: FindRelatedProducts. Return value 0.
Action start 6:09:52: ValidateProductID.
MSI (s) (08:F4) [06:09:52:401]: Doing action: setUserProfileNT
Action ended 6:09:52: ValidateProductID. Return value 1.
MSI (s) (08:F4) [06:09:52:401]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Documents and Settings\Paul'.
Action start 6:09:52: setUserProfileNT.
MSI (s) (08:F4) [06:09:52:401]: Skipping action: SetAllUsersProfileNT (condition is false)
MSI (s) (08:F4) [06:09:52:401]: Doing action: setAllUsersProfile2K
Action ended 6:09:52: setUserProfileNT. Return value 1.
MSI (s) (08:F4) [06:09:52:401]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\Documents and Settings\All Users'.
Action start 6:09:52: setAllUsersProfile2K.
MSI (s) (08:F4) [06:09:52:401]: Doing action: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF
Action ended 6:09:52: setAllUsersProfile2K. Return value 1.
MSI (s) (08:F4) [06:09:52:401]: PROPERTY CHANGE: Adding WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\windows\'.
Action start 6:09:52: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF.
MSI (s) (08:F4) [06:09:52:401]: Doing action: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4
Action ended 6:09:52: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF. Return value 1.
MSI (s) (08:F4) [06:09:52:401]: PROPERTY CHANGE: Adding WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\windows\'.
Action start 6:09:52: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4.
MSI (s) (08:F4) [06:09:52:401]: Doing action: DIRCA_NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7
Action ended 6:09:52: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4. Return value 1.
Action start 6:09:52: DIRCA_NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7.
MSI (s) (08:F4) [06:09:52:401]: Doing action: CostInitialize
Action ended 6:09:52: DIRCA_NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
MSI (s) (08:F4) [06:09:52:401]: Machine policy value 'MaxPatchCacheSize' is 10
Action start 6:09:52: CostInitialize.
MSI (s) (08:F4) [06:09:52:701]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'c:\'.
MSI (s) (08:F4) [06:09:52:701]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (08:F4) [06:09:52:701]: Note: 1: 2262 2: Patch 3: -2147287038
MSI (s) (08:F4) [06:09:52:701]: Note: 1: 2262 2: PatchPackage 3: -2147287038
MSI (s) (08:F4) [06:09:52:701]: Note: 1: 2205 2:  3: MsiPatchHeaders
MSI (s) (08:F4) [06:09:52:701]: Note: 1: 2205 2:  3: __MsiPatchFileList
MSI (s) (08:F4) [06:09:52:701]: Skipping action: ISInitAllUsers (condition is false)
MSI (s) (08:F4) [06:09:52:701]: Skipping action: ResolveSource (condition is false)
MSI (s) (08:F4) [06:09:52:701]: Doing action: FileCost
Action ended 6:09:52: CostInitialize. Return value 1.
MSI (s) (08:F4) [06:09:52:771]: Note: 1: 2262 2: RemoveFile 3: -2147287038
MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: IniFile 3: -2147287038
MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: MoveFile 3: -2147287038
MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: DuplicateFile 3: -2147287038
MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: ReserveCost 3: -2147287038
MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: Shortcut 3: -2147287038
Action start 6:09:52: FileCost.
MSI (s) (08:F4) [06:09:52:841]: Doing action: IsolateComponents
Action ended 6:09:52: FileCost. Return value 1.
MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: BindImage 3: -2147287038
MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: IsolatedComponent 3: -2147287038
MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2728 2: Patch
Action start 6:09:52: IsolateComponents.
MSI (s) (08:F4) [06:09:52:841]: Doing action: CostFinalize
Action ended 6:09:52: IsolateComponents. Return value 1.
MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (08:F4) [06:09:52:901]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'c:\Program Files\Sophos\Sophos Client Firewall'.
Action start 6:09:52: CostFinalize.
MSI (s) (08:F4) [06:09:52:911]: PROPERTY CHANGE: Adding LOGS property. Its value is 'c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall\logs'.
MSI (s) (08:F4) [06:09:52:911]: PROPERTY CHANGE: Adding SOPHOS_CLIENT_FIREWALL1 property. Its value is 'c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall'.
MSI (s) (08:F4) [06:09:52:911]: PROPERTY CHANGE: Adding _6F3B9B6A1D764E649303ABFBEEA6559C.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'c:\Program Files\Common Files\Sophos\Sophos Client Firewall'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'c:\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'c:\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its current value is 'C:\Program Files\'. Its new value: 'c:\Program Files\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its current value is 'C:\Program Files\Common Files\'. Its new value: 'c:\Program Files\Common Files\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding _5200F2F08A1843FFB73833298A0CDE07.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'c:\Program Files\Common Files\Sophos\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying _6F3B9B6A1D764E649303ABFBEEA6559C.B817F5915D4641D694EABCC98F20F7B7 property. Its current value is 'c:\Program Files\Common Files\Sophos\Sophos Client Firewall'. Its new value: 'c:\Program Files\Common Files\Sophos\Sophos Client Firewall\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 property. Its value is 'c:\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its current value is 'C:\windows\'. Its new value: 'c:\windows\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\Policies\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its current value is 'C:\windows\'. Its new value: 'c:\windows\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\Policies\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\Manifests\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its current value is 'C:\windows\system32\'. Its new value: 'c:\windows\system32\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying WindowsFolder property. Its current value is 'C:\windows\'. Its new value: 'c:\windows\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Documents and Settings\Paul'. Its new value: 'c:\Documents and Settings\Paul\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying TemplateFolder property. Its current value is 'C:\Documents and Settings\All Users\Templates\'. Its new value: 'c:\Documents and Settings\All Users\Templates\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying TempFolder property. Its current value is 'C:\DOCUME~1\Paul\LOCALS~1\Temp\'. Its new value: 'c:\DOCUME~1\Paul\LOCALS~1\Temp\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying SystemFolder property. Its current value is 'C:\windows\system32\'. Its new value: 'c:\windows\system32\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding System64Folder property. Its value is 'c:\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying System16Folder property. Its current value is 'C:\windows\system\'. Its new value: 'c:\windows\system\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying StartupFolder property. Its current value is 'C:\Documents and Settings\All Users\Start Menu\Programs\Startup\'. Its new value: 'c:\Documents and Settings\All Users\Start Menu\Programs\Startup\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying StartMenuFolder property. Its current value is 'C:\Documents and Settings\All Users\Start Menu\'. Its new value: 'c:\Documents and Settings\All Users\Start Menu\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying SendToFolder property. Its current value is 'C:\Documents and Settings\Paul\SendTo\'. Its new value: 'c:\Documents and Settings\Paul\SendTo\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying ProgramMenuFolder property. Its current value is 'C:\Documents and Settings\All Users\Start Menu\Programs\'. Its new value: 'c:\Documents and Settings\All Users\Start Menu\Programs\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding ProgramFiles64Folder property. Its value is 'c:\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'c:\'.
MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying PersonalFolder property. Its current value is 'C:\Documents and Settings\Paul\My Documents\'. Its new value: 'c:\Documents and Settings\Paul\My Documents\'.
MSI (s) (08:F4) [06:09:53:062]: Note: 1: 2303 2: 1130 3: \\PC\My Documents\
MSI (s) (08:F4) [06:09:53:062]: Note: 1: 1324 2: My Pictures 3: 1
MSI (s) (08:F4) [06:09:53:062]: Product: Sophos Client Firewall -- Error 1324.The path My Pictures contains an invalid character.

Error 1324.The path My Pictures contains an invalid character.
Action ended 6:09:53: CostFinalize. Return value 3.
Action ended 6:09:53: INSTALL. Return value 3.
Property(S): DiskPrompt = [1]
Property(S): Registration = No
Property(S): UpgradeCode = {7EDA9D28-FF94-4FC8-938F-98BE1E3D7F76}
Property(S): Installed = 2015/07/09 08:29:44
Property(S): OLEAdvtSupport = 1
Property(S): VersionNT = 501
Property(S): TARGETDIR = c:\
Property(S): ALLUSERSPROFILE = C:\Documents and Settings\All Users
Property(S): AdminToolsFolder = C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\
Property(S): CommonAppDataFolder = C:\Documents and Settings\All Users\Application Data\
Property(S): CommonFilesFolder = C:\Program Files\Common Files\
Property(S): DesktopFolder = C:\Documents and Settings\All Users\Desktop\
Property(S): FavoritesFolder = C:\Documents and Settings\Paul\Favorites\
Property(S): FontsFolder = C:\windows\Fonts\
Property(S): INSTALLDIR = c:\Program Files\Sophos\Sophos Client Firewall
Property(S): ProgramFilesFolder = C:\Program Files\
Property(S): LOGS = c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall\logs
Property(S): LocalAppDataFolder = C:\Documents and Settings\Paul\Local Settings\Application Data\
Property(S): MyPicturesFolder = \\PC\My Documents\My Pictures\
Property(S): PersonalFolder = c:\Documents and Settings\Paul\My Documents\
Property(S): PrimaryVolumePath = c:\
Property(S): ProgramFiles64Folder = c:\
Property(S): ProgramMenuFolder = c:\Documents and Settings\All Users\Start Menu\Programs\
Property(S): SOPHOS_CLIENT_FIREWALL1 = c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall
Property(S): SendToFolder = c:\Documents and Settings\Paul\SendTo\
Property(S): StartMenuFolder = c:\Documents and Settings\All Users\Start Menu\
Property(S): StartupFolder = c:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Property(S): System16Folder = c:\windows\system\
Property(S): System64Folder = c:\
Property(S): SystemFolder = c:\windows\system32\
Property(S): TempFolder = c:\DOCUME~1\Paul\LOCALS~1\Temp\
Property(S): TemplateFolder = c:\Documents and Settings\All Users\Templates\
Property(S): USERPROFILE = c:\Documents and Settings\Paul\
Property(S): WindowsFolder = c:\windows\
Property(S): WindowsVolume = c:\
Property(S): WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\
Property(S): SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\system32\
Property(S): WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\
Property(S): payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\
Property(S): payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\
Property(S): GPTSupport = 1
Property(S): WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\Manifests\
Property(S): WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\Policies\
Property(S): policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
Property(S): policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
Property(S): ALLUSERS = 1
Property(S): WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\
Property(S): payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\
Property(S): WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\Policies\
Property(S): policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\
Property(S): WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\
Property(S): INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 = c:\
Property(S): _6F3B9B6A1D764E649303ABFBEEA6559C.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\Common Files\Sophos\Sophos Client Firewall\
Property(S): _5200F2F08A1843FFB73833298A0CDE07.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\Common Files\Sophos\
Property(S): ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\
Property(S): NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7 = c:\
Property(S): CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\Common Files\
Property(S): RecentFolder = C:\Documents and Settings\Paul\Recent\
Property(S): PrintHoodFolder = C:\Documents and Settings\Paul\PrintHood\
Property(S): NetHoodFolder = C:\Documents and Settings\Paul\NetHood\
Property(S): AppDataFolder = C:\Documents and Settings\Paul\Application Data\
Property(S): RemoteAdminTS = 1
Property(S): MANAGED_INSTALL = 0
Property(S): SAV6 = YES
Property(S): ISCHECKFORPRODUCTUPDATES = 1
Property(S): ApplicationUsers = AllUsers
Property(S): AgreeToLicense = No
Property(S): _IsMaintenance = Change
Property(S): IS_SQLSERVER_USERNAME = sa
Property(S): IS_SQLSERVER_AUTHENTICATION = 0
Property(S): SetupType = Typical
Property(S): _IsSetupTypeMin = Typical
Property(S): Display_IsBitmapDlg = 1
Property(S): ARPCOMMENTS = Firewall protection
Property(S): ARPCONTACT = Sophos Technical Support
Property(S): ARPHELPLINK = http://www.sophos.com/support/
Property(S): ARPNOMODIFY = 1
Property(S): ARPNOREPAIR = 1
Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe
Property(S): ARPURLINFOABOUT = http://www.sophos.com/
Property(S): ARPURLUPDATEINFO = www.sophos.com/.../updates
Property(S): DWUSINTERVAL = 30
Property(S): DWUSLINK = CEBCE7CFAEEBE7FF2EACC0AF3E4C978F89EC978F49BBF0C8CEDC47DFDE8BA0189EEC80AFC9AC
Property(S): DefaultUIFont = Tahoma8
Property(S): DialogCaption = InstallShield for Windows Installer
Property(S): DisplayNameCustom = Custom
Property(S): MsiNTProductType = 1
Property(S): DisplayNameMinimal = Minimal
Property(S): DisplayNameTypical = Typical
Property(S): ErrorDialog = SetupError
Property(S): INSTALLLEVEL = 100
Property(S): ISSCRIPT_VERSION_MISSING = The InstallScript engine is missing from this machine.  If available, please run ISScript.msi, or contact your support personnel for further assistance.
Property(S): ISSCRIPT_VERSION_OLD = The InstallScript engine on this machine is older than the version required to run this setup.  If available, please install the latest version of ISScript.msi, or contact your support personnel for further assistance.
Property(S): ISVROOT_PORT_NO = 0
Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1]
Property(S): IS_PROGMSG_XML_COSTING = Costing XML files...
Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s...
Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes...
Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s...
Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes...
Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s...
Property(S): InstallChoice = AR
Property(S): MSIRESTARTMANAGERCONTROL = Disable
Property(S): Manufacturer = Sophos Limited
Property(S): NewProperty1 = 0
Property(S): NewProperty2 = 0
Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@
Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s
Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools...
Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s
Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories...
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions...
Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories...
Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool
Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools...
Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d
Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s
Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions...
Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools...
Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes...
Property(S): ServicePackLevelMinor = 0
Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions...
Property(S): ProductCode = {A805FB2A-A844-4cba-8088-CA64087D59E1}
Property(S): ProductID = none
Property(S): ProductLanguage = 1033
Property(S): ProductName = Sophos Client Firewall
Property(S): ProductVersion = 2.9.5
Property(S): ProgressType0 = install
Property(S): ProgressType1 = Installing
Property(S): ProgressType2 = installed
Property(S): ProgressType3 = installs
Property(S): RESTART_SERVICES = 1
Property(S): RebootYesNo = Yes
Property(S): RegisterWithAutoUpdate = {4DB41E90-DC56-41DC-B91E-9B8E537489A8};scf
Property(S): ReinstallModeText = omus
Property(S): SHOWLAUNCHPROGRAM = 0
Property(S): SecureCustomProperties = MAJORUPGRADEINSTALL
Property(S): UNINSTALLDRIVERS = ALL
Property(S): UPGRADE_DRIVER_REBOOT = 0
Property(S): ServicePackLevel = 3
Property(S): WindowsBuild = 2600
Property(S): VersionMsi = 3.01
Property(S): InstallShieldTempProp = 0
Property(S): VersionDatabase = 200
Property(S): PRODUCTLANGUAGE = 1033
Property(S): CLIENTPROCESSID = 312
Property(S): CLIENTUILEVEL = 3
Property(S): USERNAME = Paul
Property(S): CURRENTDIRECTORY = C:\
Property(S): REMOVE = ALL
Property(S): REBOOT = SUPPRESS
Property(S): ProductToBeRegistered = 1
Property(S): ProductState = 5
Property(S): PackageCode = {9D59C617-3854-4FBF-95F2-ED33037DB8E5}
Property(S): ShellAdvtSupport = 1
Property(S): Intel = 6
Property(S): PhysicalMemory = 2032
Property(S): VirtualMemory = 3234
Property(S): AdminUser = 1
Property(S): LogonUser = Paul
Property(S): UserSID = S-1-5-21-776561741-1078145449-854245398-1003
Property(S): UserLanguageID = 1033
Property(S): ComputerName = ACER1
Property(S): SystemLanguageID = 1033
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 19
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 6:09:53
Property(S): Date = 11/29/2017
Property(S): MsiNetAssemblySupport = 4.0.30319.1
Property(S): MsiWin32AssemblySupport = 5.1.2600.5512
Property(S): RedirectedDllSupport = 2
Property(S): Privileged = 1
Property(S): DATABASE = c:\windows\Installer\9a137.msi
Property(S): OriginalDatabase = c:\windows\Installer\9a137.msi
Property(S): UILevel = 2
Property(S): Preselected = 1
Property(S): ACTION = INSTALL
Property(S): ROOTDRIVE = c:\
Property(S): CostingComplete = 0
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
MSI (s) (08:F4) [06:09:53:152]: Cleaning up uninstalled install packages, if any exist
MSI (s) (08:F4) [06:09:53:152]: MainEngineThread is returning 1603
MSI (s) (08:64) [06:09:53:152]: Destroying RemoteAPI object.
MSI (s) (08:6C) [06:09:53:152]: Custom Action Manager thread ending.
=== Logging stopped: 11/29/2017  6:09:53 ===
MSI (c) (38:30) [06:09:53:152]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (c) (38:30) [06:09:53:152]: MainEngineThread is returning 1603
=== Verbose logging stopped: 11/29/2017  6:09:53 ===

So does that mean that thefirewall is now uninstalled?

I also got a file back for the AV too that I can post if you wish

Thank you for your assistance so far