Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 66 replies
  • Subscribers 5 subscribers
  • Views 138465 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Uninstall Sophos endpoint security and control

stawes

My PC (Windows XP) has been running Sophos endpoint security and control for many years i a domain environment.

When I retired the PC was disconnected from the domain and the updates are not running any longer.

I still have the PC and need to uninstall this software.

In Add or Remove programs three Sophos entries:

Sophos Anti-Virus

Sophos AutoUpdate

Sophos Remote Management System

How should I do?

:33387


This thread was automatically locked due to age.
Parents
  • 0

    I am also trying to uninstall Sophos Endpoint from an XP Pro (SR3) computer too.  I have disabled Tamper Protection and been able (through Control Panel - Remove Programs) to remove the SOPHOS AUTO-UPDATING.

    I then tried to remove the FIREWALL program but got ERROR 1324. The path My Pictures contains an invalid character.

    How do I proceed?

    Paul

  • 0 in reply to PaulBarrow

    Hello Paul,

    could you show the corresponding log?

    Christian

  • 0 in reply to QC

    Well I ran it ... but no files named SophosLog1.txt or SophosLog2.txt were written or found in SEARCH the entire hard drive.

    I just wonder now just what do I have to do now to just get rid of SOPHOS?  My trial time for trying out the new software that I want to try is almost over and it has taken 55 days of a 60 day trial to uninstall SOPHOS and I am no further forward.  Very exasperating!

  • 0 in reply to PaulBarrow

    Hello Paul,

    just ran your first command (adding a space between SUPPRESS and /L - which is likely just an omission int the post as otherwise msiexec.exe would pop up the help window) and did get ...Log1.txt (slightly over 30 lines) in the %windir%\Temp\ directory. You should get either an error telling you that msiexec.exe could be run at all or crashed immediately, the help pop-up (in case of incorrect parameters or syntax), or the log in the specified location. You should not get no output or feedback at all when you try to run  (regardless of the parameters).

    Christian

  • 0 in reply to QC

    Thank you for the syntax correction and this time, for the firewall I got the following return:

    === Verbose logging started: 11/29/2017  6:09:51  Build type: SHIP UNICODE 3.01.4001.5512  Calling process: C:\windows\system32\msiexec.exe ===
    MSI (c) (38:30) [06:09:51:640]: Resetting cached policy values
    MSI (c) (38:30) [06:09:51:640]: Machine policy value 'Debug' is 0
    MSI (c) (38:30) [06:09:51:640]: ******* RunEngine:
               ******* Product: {A805FB2A-A844-4cba-8088-CA64087D59E1}
               ******* Action:
               ******* CommandLine: **********
    MSI (c) (38:30) [06:09:51:640]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (38:30) [06:09:51:640]: Grabbed execution mutex.
    MSI (c) (38:30) [06:09:51:720]: Cloaking enabled.
    MSI (c) (38:30) [06:09:51:720]: Attempting to enable all disabled priveleges before calling Install on Server
    MSI (c) (38:30) [06:09:51:730]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (08:64) [06:09:51:750]: Grabbed execution mutex.
    MSI (s) (08:F4) [06:09:51:750]: Resetting cached policy values
    MSI (s) (08:F4) [06:09:51:750]: Machine policy value 'Debug' is 0
    MSI (s) (08:F4) [06:09:51:750]: ******* RunEngine:
               ******* Product: {A805FB2A-A844-4cba-8088-CA64087D59E1}
               ******* Action:
               ******* CommandLine: **********
    MSI (s) (08:F4) [06:09:51:750]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (08:F4) [06:09:51:790]: End dialog not enabled
    MSI (s) (08:F4) [06:09:51:790]: Original package ==> c:\windows\Installer\9a137.msi
    MSI (s) (08:F4) [06:09:51:790]: Package we're running from ==> c:\windows\Installer\9a137.msi
    MSI (s) (08:F4) [06:09:51:850]: APPCOMPAT: looking for appcompat database entry with ProductCode '{A805FB2A-A844-4CBA-8088-CA64087D59E1}'.
    MSI (s) (08:F4) [06:09:51:850]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (08:F4) [06:09:51:870]: MSCOREE not loaded loading copy from system32
    MSI (s) (08:F4) [06:09:51:930]: Machine policy value 'DisablePatch' is 0
    MSI (s) (08:F4) [06:09:51:930]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (08:F4) [06:09:51:930]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (08:F4) [06:09:51:930]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (08:F4) [06:09:51:930]: APPCOMPAT: looking for appcompat database entry with ProductCode '{A805FB2A-A844-4CBA-8088-CA64087D59E1}'.
    MSI (s) (08:F4) [06:09:51:930]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (08:F4) [06:09:51:930]: Transforms are not secure.
    MSI (s) (08:F4) [06:09:51:930]: Command Line: REBOOT=SUPPRESS REMOVE=ALL CURRENTDIRECTORY=C:\ CLIENTUILEVEL=3 CLIENTPROCESSID=312
    MSI (s) (08:F4) [06:09:51:930]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{9D59C617-3854-4FBF-95F2-ED33037DB8E5}'.
    MSI (s) (08:F4) [06:09:51:930]: Product Code passed to Engine.Initialize:           '{A805FB2A-A844-4cba-8088-CA64087D59E1}'
    MSI (s) (08:F4) [06:09:51:930]: Product Code from property table before transforms: '{A805FB2A-A844-4CBA-8088-CA64087D59E1}'
    MSI (s) (08:F4) [06:09:51:930]: Product Code from property table after transforms:  '{A805FB2A-A844-4cba-8088-CA64087D59E1}'
    MSI (s) (08:F4) [06:09:51:930]: Product registered: entering maintenance mode
    MSI (s) (08:F4) [06:09:51:930]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'.
    MSI (s) (08:F4) [06:09:51:930]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
    MSI (s) (08:F4) [06:09:51:930]: Package name retrieved from configuration data: 'Sophos Client Firewall.msi'
    MSI (s) (08:F4) [06:09:51:930]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
    MSI (s) (08:F4) [06:09:51:940]: Note: 1: 2729
    MSI (s) (08:F4) [06:09:51:950]: Note: 1: 2729
    MSI (s) (08:F4) [06:09:51:950]: Note: 1: 2262 2: AdminProperties 3: -2147287038
    MSI (s) (08:F4) [06:09:51:950]: Machine policy value 'DisableMsi' is 0
    MSI (s) (08:F4) [06:09:51:950]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (08:F4) [06:09:51:950]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (08:F4) [06:09:51:950]: Product {A805FB2A-A844-4CBA-8088-CA64087D59E1} is admin assigned: LocalSystem owns the publish key.
    MSI (s) (08:F4) [06:09:51:950]: Product {A805FB2A-A844-4CBA-8088-CA64087D59E1} is managed.
    MSI (s) (08:F4) [06:09:51:950]: Running product '{A805FB2A-A844-4CBA-8088-CA64087D59E1}' with elevated privileges: Product is assigned.
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'SUPPRESS'.
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding REMOVE property. Its value is 'ALL'.
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\'.
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '312'.
    MSI (s) (08:F4) [06:09:51:950]: TRANSFORMS property is now:
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'.
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
    MSI (s) (08:F4) [06:09:51:950]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Application Data
    MSI (s) (08:F4) [06:09:51:950]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Favorites
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\NetHood
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\My Documents
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\PrintHood
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Recent
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\SendTo
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Templates
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Application Data
    MSI (s) (08:F4) [06:09:51:970]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Local Settings\Application Data
    MSI (s) (08:F4) [06:09:51:970]: SHELL32::SHGetFolderPath returned: \\PC\My Documents\My Pictures
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Startup
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Desktop
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu\Programs\Administrative Tools
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu\Programs\Startup
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu\Programs
    MSI (s) (08:F4) [06:09:52:180]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu
    MSI (s) (08:F4) [06:09:52:180]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Desktop
    MSI (s) (08:F4) [06:09:52:180]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Templates
    MSI (s) (08:F4) [06:09:52:180]: SHELL32::SHGetFolderPath returned: C:\windows\Fonts
    MSI (s) (08:F4) [06:09:52:220]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Paul'.
    MSI (s) (08:F4) [06:09:52:220]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding Installed property. Its value is '2015/07/09 08:29:44'.
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'c:\windows\Installer\9a137.msi'.
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'c:\windows\Installer\9a137.msi'.
    MSI (s) (08:F4) [06:09:52:220]: Note: 1: 2262 2: PatchPackage 3: -2147287038
    MSI (s) (08:F4) [06:09:52:220]: Machine policy value 'DisableRollback' is 0
    MSI (s) (08:F4) [06:09:52:220]: User policy value 'DisableRollback' is 0
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
    === Logging started: 11/29/2017  6:09:52 ===
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding Preselected property. Its value is '1'.
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
    MSI (s) (08:F4) [06:09:52:220]: Doing action: INSTALL
    MSI (s) (08:F4) [06:09:52:240]: Running ExecuteSequence
    MSI (s) (08:F4) [06:09:52:240]: Doing action: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7
    Action start 6:09:52: INSTALL.
    MSI (s) (08:F4) [06:09:52:240]: PROPERTY CHANGE: Adding ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'C:\Program Files\'.
    Action start 6:09:52: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7.
    MSI (s) (08:F4) [06:09:52:240]: Doing action: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7
    Action ended 6:09:52: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
    MSI (s) (08:F4) [06:09:52:240]: PROPERTY CHANGE: Adding CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'C:\Program Files\Common Files\'.
    Action start 6:09:52: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7.
    MSI (s) (08:F4) [06:09:52:240]: Doing action: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF
    Action ended 6:09:52: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
    MSI (s) (08:F4) [06:09:52:240]: PROPERTY CHANGE: Adding SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\windows\system32\'.
    Action start 6:09:52: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF.
    MSI (s) (08:F4) [06:09:52:240]: Doing action: AppSearch
    Action ended 6:09:52: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF. Return value 1.
    Action start 6:09:52: AppSearch.
    MSI (s) (08:F4) [06:09:52:250]: Note: 1: 2262 2: CompLocator 3: -2147287038
    MSI (s) (08:F4) [06:09:52:250]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FED1005D-CBC8-45D5-A288-FFC7BB304121} 3: 2
    MSI (s) (08:F4) [06:09:52:250]: Note: 1: 2262 2: IniLocator 3: -2147287038
    MSI (s) (08:F4) [06:09:52:250]: Note: 1: 2262 2: DrLocator 3: -2147287038
    MSI (s) (08:F4) [06:09:52:250]: Note: 1: 2262 2: CompLocator 3: -2147287038
    MSI (s) (08:F4) [06:09:52:250]: PROPERTY CHANGE: Adding SAV6 property. Its value is 'YES'.
    MSI (s) (08:F4) [06:09:52:250]: Doing action: LaunchConditions
    Action ended 6:09:52: AppSearch. Return value 1.
    Action start 6:09:52: LaunchConditions.
    MSI (s) (08:F4) [06:09:52:250]: Doing action: TP_CheckRemoveAllowed
    Action ended 6:09:52: LaunchConditions. Return value 1.
    MSI (s) (08:68) [06:09:52:280]: Invoking remote custom action. DLL: C:\windows\Installer\MSI25.tmp, Entrypoint: TP_CheckRemoveAllowed
    MSI (s) (08:6C) [06:09:52:280]: Generating random cookie.
    MSI (s) (08:6C) [06:09:52:290]: Created Custom Action Server with PID 2064 (0x810).
    MSI (s) (08:2C) [06:09:52:341]: Running as a service.
    MSI (s) (08:2C) [06:09:52:341]: Hello, I'm your 32bit Impersonated custom action server.
    Action start 6:09:52: TP_CheckRemoveAllowed.
    UninstallCheck failed (77)
    MSI (s) (08:F4) [06:09:52:391]: Skipping action: ISSetAllUsers (condition is false)
    MSI (s) (08:F4) [06:09:52:391]: Doing action: FindRelatedProducts
    Action ended 6:09:52: TP_CheckRemoveAllowed. Return value 1.
    MSI (s) (08:F4) [06:09:52:391]: Skipping FindRelatedProducts action: not run in maintenance mode
    Action start 6:09:52: FindRelatedProducts.
    MSI (s) (08:F4) [06:09:52:391]: Skipping action: CCPSearch (condition is false)
    MSI (s) (08:F4) [06:09:52:391]: Skipping action: RMCCPSearch (condition is false)
    MSI (s) (08:F4) [06:09:52:391]: Doing action: ValidateProductID
    Action ended 6:09:52: FindRelatedProducts. Return value 0.
    Action start 6:09:52: ValidateProductID.
    MSI (s) (08:F4) [06:09:52:401]: Doing action: setUserProfileNT
    Action ended 6:09:52: ValidateProductID. Return value 1.
    MSI (s) (08:F4) [06:09:52:401]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Documents and Settings\Paul'.
    Action start 6:09:52: setUserProfileNT.
    MSI (s) (08:F4) [06:09:52:401]: Skipping action: SetAllUsersProfileNT (condition is false)
    MSI (s) (08:F4) [06:09:52:401]: Doing action: setAllUsersProfile2K
    Action ended 6:09:52: setUserProfileNT. Return value 1.
    MSI (s) (08:F4) [06:09:52:401]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\Documents and Settings\All Users'.
    Action start 6:09:52: setAllUsersProfile2K.
    MSI (s) (08:F4) [06:09:52:401]: Doing action: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF
    Action ended 6:09:52: setAllUsersProfile2K. Return value 1.
    MSI (s) (08:F4) [06:09:52:401]: PROPERTY CHANGE: Adding WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\windows\'.
    Action start 6:09:52: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF.
    MSI (s) (08:F4) [06:09:52:401]: Doing action: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4
    Action ended 6:09:52: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF. Return value 1.
    MSI (s) (08:F4) [06:09:52:401]: PROPERTY CHANGE: Adding WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\windows\'.
    Action start 6:09:52: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4.
    MSI (s) (08:F4) [06:09:52:401]: Doing action: DIRCA_NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7
    Action ended 6:09:52: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4. Return value 1.
    Action start 6:09:52: DIRCA_NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7.
    MSI (s) (08:F4) [06:09:52:401]: Doing action: CostInitialize
    Action ended 6:09:52: DIRCA_NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
    MSI (s) (08:F4) [06:09:52:401]: Machine policy value 'MaxPatchCacheSize' is 10
    Action start 6:09:52: CostInitialize.
    MSI (s) (08:F4) [06:09:52:701]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:701]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
    MSI (s) (08:F4) [06:09:52:701]: Note: 1: 2262 2: Patch 3: -2147287038
    MSI (s) (08:F4) [06:09:52:701]: Note: 1: 2262 2: PatchPackage 3: -2147287038
    MSI (s) (08:F4) [06:09:52:701]: Note: 1: 2205 2:  3: MsiPatchHeaders
    MSI (s) (08:F4) [06:09:52:701]: Note: 1: 2205 2:  3: __MsiPatchFileList
    MSI (s) (08:F4) [06:09:52:701]: Skipping action: ISInitAllUsers (condition is false)
    MSI (s) (08:F4) [06:09:52:701]: Skipping action: ResolveSource (condition is false)
    MSI (s) (08:F4) [06:09:52:701]: Doing action: FileCost
    Action ended 6:09:52: CostInitialize. Return value 1.
    MSI (s) (08:F4) [06:09:52:771]: Note: 1: 2262 2: RemoveFile 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: Extension 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: IniFile 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: MoveFile 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: DuplicateFile 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: ReserveCost 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: Shortcut 3: -2147287038
    Action start 6:09:52: FileCost.
    MSI (s) (08:F4) [06:09:52:841]: Doing action: IsolateComponents
    Action ended 6:09:52: FileCost. Return value 1.
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: BindImage 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: IsolatedComponent 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2728 2: Patch
    Action start 6:09:52: IsolateComponents.
    MSI (s) (08:F4) [06:09:52:841]: Doing action: CostFinalize
    Action ended 6:09:52: IsolateComponents. Return value 1.
    MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
    MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
    MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
    MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
    MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
    MSI (s) (08:F4) [06:09:52:901]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'c:\Program Files\Sophos\Sophos Client Firewall'.
    Action start 6:09:52: CostFinalize.
    MSI (s) (08:F4) [06:09:52:911]: PROPERTY CHANGE: Adding LOGS property. Its value is 'c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall\logs'.
    MSI (s) (08:F4) [06:09:52:911]: PROPERTY CHANGE: Adding SOPHOS_CLIENT_FIREWALL1 property. Its value is 'c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall'.
    MSI (s) (08:F4) [06:09:52:911]: PROPERTY CHANGE: Adding _6F3B9B6A1D764E649303ABFBEEA6559C.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'c:\Program Files\Common Files\Sophos\Sophos Client Firewall'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its current value is 'C:\Program Files\'. Its new value: 'c:\Program Files\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its current value is 'C:\Program Files\Common Files\'. Its new value: 'c:\Program Files\Common Files\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding _5200F2F08A1843FFB73833298A0CDE07.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'c:\Program Files\Common Files\Sophos\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying _6F3B9B6A1D764E649303ABFBEEA6559C.B817F5915D4641D694EABCC98F20F7B7 property. Its current value is 'c:\Program Files\Common Files\Sophos\Sophos Client Firewall'. Its new value: 'c:\Program Files\Common Files\Sophos\Sophos Client Firewall\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its current value is 'C:\windows\'. Its new value: 'c:\windows\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\Policies\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its current value is 'C:\windows\'. Its new value: 'c:\windows\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\Policies\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\Manifests\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its current value is 'C:\windows\system32\'. Its new value: 'c:\windows\system32\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying WindowsFolder property. Its current value is 'C:\windows\'. Its new value: 'c:\windows\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Documents and Settings\Paul'. Its new value: 'c:\Documents and Settings\Paul\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying TemplateFolder property. Its current value is 'C:\Documents and Settings\All Users\Templates\'. Its new value: 'c:\Documents and Settings\All Users\Templates\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying TempFolder property. Its current value is 'C:\DOCUME~1\Paul\LOCALS~1\Temp\'. Its new value: 'c:\DOCUME~1\Paul\LOCALS~1\Temp\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying SystemFolder property. Its current value is 'C:\windows\system32\'. Its new value: 'c:\windows\system32\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding System64Folder property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying System16Folder property. Its current value is 'C:\windows\system\'. Its new value: 'c:\windows\system\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying StartupFolder property. Its current value is 'C:\Documents and Settings\All Users\Start Menu\Programs\Startup\'. Its new value: 'c:\Documents and Settings\All Users\Start Menu\Programs\Startup\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying StartMenuFolder property. Its current value is 'C:\Documents and Settings\All Users\Start Menu\'. Its new value: 'c:\Documents and Settings\All Users\Start Menu\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying SendToFolder property. Its current value is 'C:\Documents and Settings\Paul\SendTo\'. Its new value: 'c:\Documents and Settings\Paul\SendTo\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying ProgramMenuFolder property. Its current value is 'C:\Documents and Settings\All Users\Start Menu\Programs\'. Its new value: 'c:\Documents and Settings\All Users\Start Menu\Programs\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding ProgramFiles64Folder property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying PersonalFolder property. Its current value is 'C:\Documents and Settings\Paul\My Documents\'. Its new value: 'c:\Documents and Settings\Paul\My Documents\'.
    MSI (s) (08:F4) [06:09:53:062]: Note: 1: 2303 2: 1130 3: \\PC\My Documents\
    MSI (s) (08:F4) [06:09:53:062]: Note: 1: 1324 2: My Pictures 3: 1
    MSI (s) (08:F4) [06:09:53:062]: Product: Sophos Client Firewall -- Error 1324.The path My Pictures contains an invalid character.

    Error 1324.The path My Pictures contains an invalid character.
    Action ended 6:09:53: CostFinalize. Return value 3.
    Action ended 6:09:53: INSTALL. Return value 3.
    Property(S): DiskPrompt = [1]
    Property(S): Registration = No
    Property(S): UpgradeCode = {7EDA9D28-FF94-4FC8-938F-98BE1E3D7F76}
    Property(S): Installed = 2015/07/09 08:29:44
    Property(S): OLEAdvtSupport = 1
    Property(S): VersionNT = 501
    Property(S): TARGETDIR = c:\
    Property(S): ALLUSERSPROFILE = C:\Documents and Settings\All Users
    Property(S): AdminToolsFolder = C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\
    Property(S): CommonAppDataFolder = C:\Documents and Settings\All Users\Application Data\
    Property(S): CommonFilesFolder = C:\Program Files\Common Files\
    Property(S): DesktopFolder = C:\Documents and Settings\All Users\Desktop\
    Property(S): FavoritesFolder = C:\Documents and Settings\Paul\Favorites\
    Property(S): FontsFolder = C:\windows\Fonts\
    Property(S): INSTALLDIR = c:\Program Files\Sophos\Sophos Client Firewall
    Property(S): ProgramFilesFolder = C:\Program Files\
    Property(S): LOGS = c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall\logs
    Property(S): LocalAppDataFolder = C:\Documents and Settings\Paul\Local Settings\Application Data\
    Property(S): MyPicturesFolder = \\PC\My Documents\My Pictures\
    Property(S): PersonalFolder = c:\Documents and Settings\Paul\My Documents\
    Property(S): PrimaryVolumePath = c:\
    Property(S): ProgramFiles64Folder = c:\
    Property(S): ProgramMenuFolder = c:\Documents and Settings\All Users\Start Menu\Programs\
    Property(S): SOPHOS_CLIENT_FIREWALL1 = c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall
    Property(S): SendToFolder = c:\Documents and Settings\Paul\SendTo\
    Property(S): StartMenuFolder = c:\Documents and Settings\All Users\Start Menu\
    Property(S): StartupFolder = c:\Documents and Settings\All Users\Start Menu\Programs\Startup\
    Property(S): System16Folder = c:\windows\system\
    Property(S): System64Folder = c:\
    Property(S): SystemFolder = c:\windows\system32\
    Property(S): TempFolder = c:\DOCUME~1\Paul\LOCALS~1\Temp\
    Property(S): TemplateFolder = c:\Documents and Settings\All Users\Templates\
    Property(S): USERPROFILE = c:\Documents and Settings\Paul\
    Property(S): WindowsFolder = c:\windows\
    Property(S): WindowsVolume = c:\
    Property(S): WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\
    Property(S): SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\system32\
    Property(S): WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\
    Property(S): payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\
    Property(S): payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\
    Property(S): GPTSupport = 1
    Property(S): WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\Manifests\
    Property(S): WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\Policies\
    Property(S): policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
    Property(S): policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
    Property(S): ALLUSERS = 1
    Property(S): WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\
    Property(S): payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\
    Property(S): WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\Policies\
    Property(S): policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\
    Property(S): WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\
    Property(S): INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 = c:\
    Property(S): _6F3B9B6A1D764E649303ABFBEEA6559C.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\Common Files\Sophos\Sophos Client Firewall\
    Property(S): _5200F2F08A1843FFB73833298A0CDE07.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\Common Files\Sophos\
    Property(S): ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\
    Property(S): NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7 = c:\
    Property(S): CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\Common Files\
    Property(S): RecentFolder = C:\Documents and Settings\Paul\Recent\
    Property(S): PrintHoodFolder = C:\Documents and Settings\Paul\PrintHood\
    Property(S): NetHoodFolder = C:\Documents and Settings\Paul\NetHood\
    Property(S): AppDataFolder = C:\Documents and Settings\Paul\Application Data\
    Property(S): RemoteAdminTS = 1
    Property(S): MANAGED_INSTALL = 0
    Property(S): SAV6 = YES
    Property(S): ISCHECKFORPRODUCTUPDATES = 1
    Property(S): ApplicationUsers = AllUsers
    Property(S): AgreeToLicense = No
    Property(S): _IsMaintenance = Change
    Property(S): IS_SQLSERVER_USERNAME = sa
    Property(S): IS_SQLSERVER_AUTHENTICATION = 0
    Property(S): SetupType = Typical
    Property(S): _IsSetupTypeMin = Typical
    Property(S): Display_IsBitmapDlg = 1
    Property(S): ARPCOMMENTS = Firewall protection
    Property(S): ARPCONTACT = Sophos Technical Support
    Property(S): ARPHELPLINK = http://www.sophos.com/support/
    Property(S): ARPNOMODIFY = 1
    Property(S): ARPNOREPAIR = 1
    Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe
    Property(S): ARPURLINFOABOUT = http://www.sophos.com/
    Property(S): ARPURLUPDATEINFO = www.sophos.com/.../updates
    Property(S): DWUSINTERVAL = 30
    Property(S): DWUSLINK = CEBCE7CFAEEBE7FF2EACC0AF3E4C978F89EC978F49BBF0C8CEDC47DFDE8BA0189EEC80AFC9AC
    Property(S): DefaultUIFont = Tahoma8
    Property(S): DialogCaption = InstallShield for Windows Installer
    Property(S): DisplayNameCustom = Custom
    Property(S): MsiNTProductType = 1
    Property(S): DisplayNameMinimal = Minimal
    Property(S): DisplayNameTypical = Typical
    Property(S): ErrorDialog = SetupError
    Property(S): INSTALLLEVEL = 100
    Property(S): ISSCRIPT_VERSION_MISSING = The InstallScript engine is missing from this machine.  If available, please run ISScript.msi, or contact your support personnel for further assistance.
    Property(S): ISSCRIPT_VERSION_OLD = The InstallScript engine on this machine is older than the version required to run this setup.  If available, please install the latest version of ISScript.msi, or contact your support personnel for further assistance.
    Property(S): ISVROOT_PORT_NO = 0
    Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1]
    Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1]
    Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1]
    Property(S): IS_PROGMSG_XML_COSTING = Costing XML files...
    Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s...
    Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes...
    Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s...
    Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes...
    Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s...
    Property(S): InstallChoice = AR
    Property(S): MSIRESTARTMANAGERCONTROL = Disable
    Property(S): Manufacturer = Sophos Limited
    Property(S): NewProperty1 = 0
    Property(S): NewProperty2 = 0
    Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@
    Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s
    Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools...
    Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s
    Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories...
    Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension
    Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions...
    Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories...
    Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories...
    Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool
    Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools...
    Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d
    Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s
    Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories...
    Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension
    Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions...
    Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools...
    Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes...
    Property(S): ServicePackLevelMinor = 0
    Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions...
    Property(S): ProductCode = {A805FB2A-A844-4cba-8088-CA64087D59E1}
    Property(S): ProductID = none
    Property(S): ProductLanguage = 1033
    Property(S): ProductName = Sophos Client Firewall
    Property(S): ProductVersion = 2.9.5
    Property(S): ProgressType0 = install
    Property(S): ProgressType1 = Installing
    Property(S): ProgressType2 = installed
    Property(S): ProgressType3 = installs
    Property(S): RESTART_SERVICES = 1
    Property(S): RebootYesNo = Yes
    Property(S): RegisterWithAutoUpdate = {4DB41E90-DC56-41DC-B91E-9B8E537489A8};scf
    Property(S): ReinstallModeText = omus
    Property(S): SHOWLAUNCHPROGRAM = 0
    Property(S): SecureCustomProperties = MAJORUPGRADEINSTALL
    Property(S): UNINSTALLDRIVERS = ALL
    Property(S): UPGRADE_DRIVER_REBOOT = 0
    Property(S): ServicePackLevel = 3
    Property(S): WindowsBuild = 2600
    Property(S): VersionMsi = 3.01
    Property(S): InstallShieldTempProp = 0
    Property(S): VersionDatabase = 200
    Property(S): PRODUCTLANGUAGE = 1033
    Property(S): CLIENTPROCESSID = 312
    Property(S): CLIENTUILEVEL = 3
    Property(S): USERNAME = Paul
    Property(S): CURRENTDIRECTORY = C:\
    Property(S): REMOVE = ALL
    Property(S): REBOOT = SUPPRESS
    Property(S): ProductToBeRegistered = 1
    Property(S): ProductState = 5
    Property(S): PackageCode = {9D59C617-3854-4FBF-95F2-ED33037DB8E5}
    Property(S): ShellAdvtSupport = 1
    Property(S): Intel = 6
    Property(S): PhysicalMemory = 2032
    Property(S): VirtualMemory = 3234
    Property(S): AdminUser = 1
    Property(S): LogonUser = Paul
    Property(S): UserSID = S-1-5-21-776561741-1078145449-854245398-1003
    Property(S): UserLanguageID = 1033
    Property(S): ComputerName = ACER1
    Property(S): SystemLanguageID = 1033
    Property(S): ScreenX = 1024
    Property(S): ScreenY = 768
    Property(S): CaptionHeight = 19
    Property(S): BorderTop = 1
    Property(S): BorderSide = 1
    Property(S): TextHeight = 16
    Property(S): ColorBits = 32
    Property(S): TTCSupport = 1
    Property(S): Time = 6:09:53
    Property(S): Date = 11/29/2017
    Property(S): MsiNetAssemblySupport = 4.0.30319.1
    Property(S): MsiWin32AssemblySupport = 5.1.2600.5512
    Property(S): RedirectedDllSupport = 2
    Property(S): Privileged = 1
    Property(S): DATABASE = c:\windows\Installer\9a137.msi
    Property(S): OriginalDatabase = c:\windows\Installer\9a137.msi
    Property(S): UILevel = 2
    Property(S): Preselected = 1
    Property(S): ACTION = INSTALL
    Property(S): ROOTDRIVE = c:\
    Property(S): CostingComplete = 0
    Property(S): OutOfDiskSpace = 0
    Property(S): OutOfNoRbDiskSpace = 0
    Property(S): PrimaryVolumeSpaceAvailable = 0
    Property(S): PrimaryVolumeSpaceRequired = 0
    Property(S): PrimaryVolumeSpaceRemaining = 0
    MSI (s) (08:F4) [06:09:53:152]: Cleaning up uninstalled install packages, if any exist
    MSI (s) (08:F4) [06:09:53:152]: MainEngineThread is returning 1603
    MSI (s) (08:64) [06:09:53:152]: Destroying RemoteAPI object.
    MSI (s) (08:6C) [06:09:53:152]: Custom Action Manager thread ending.
    === Logging stopped: 11/29/2017  6:09:53 ===
    MSI (c) (38:30) [06:09:53:152]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (c) (38:30) [06:09:53:152]: MainEngineThread is returning 1603
    === Verbose logging stopped: 11/29/2017  6:09:53 ===

    So does that mean that thefirewall is now uninstalled?

    I also got a file back for the AV too that I can post if you wish

    Thank you for your assistance so far

  • 0 in reply to PaulBarrow

    Hello Paul,

    MainEngineThread is returning 1603
    tells that the uninstall failed. You can find the location of the actual error by searching for Return value 3 and this takes us to Error 1324.The path My Pictures contains an invalid character.

    Now this is a known problem (just seach with the engine of your choice for windows installer error 1324). At first I thought that folder redirection is likely not the cause but two lines above there's \\PC\My Documents\. What is the path in the My Pictures value of the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\ registry key? 

    Christian

  • 0 in reply to QC

    Mostly they are %USERPROFILE%\Application Data but My Music, My Pictures and My Video are \\PC\My Documents\My Music or Pictures or Videos.  \\PC was the name of another computer that was attached to the same network previously.  Should I change these to %USERPROFILE%\My Music, %USERPROFILE%\My Pictures and %USERPROFILE%\My Video, then reboot and retry the batch command?

    Paul

  • 0 in reply to PaulBarrow

    Hello Paul,

    if these point to somewhere else the Installer (not the package) complains.
    Guess you don't need to restart, logoff/logon should suffice.

    Christian

  • 0 in reply to QC

    So is that a YES to change them to %USERPROFILE%\Application Data ?

    Paul

  • 0 in reply to PaulBarrow

    Hello Paul,

    of sorry, should have stated it explicitly. Yes

    Christian

  • 0 in reply to QC

    OK -changed them and logged off and back on again.  Re ran and here is the new log file for the firewall:

    === Verbose logging started: 11/29/2017  11:50:04  Build type: SHIP UNICODE 3.01.4001.5512  Calling process: C:\windows\system32\msiexec.exe ===
    MSI (c) (90:DC) [11:50:04:131]: Resetting cached policy values
    MSI (c) (90:DC) [11:50:04:131]: Machine policy value 'Debug' is 0
    MSI (c) (90:DC) [11:50:04:131]: ******* RunEngine:
               ******* Product: {A805FB2A-A844-4cba-8088-CA64087D59E1}
               ******* Action:
               ******* CommandLine: **********
    MSI (c) (90:DC) [11:50:04:131]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (90:DC) [11:50:04:131]: Grabbed execution mutex.
    MSI (c) (90:DC) [11:50:04:221]: Cloaking enabled.
    MSI (c) (90:DC) [11:50:04:221]: Attempting to enable all disabled priveleges before calling Install on Server
    MSI (c) (90:DC) [11:50:04:231]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (94:78) [11:50:04:251]: Grabbed execution mutex.
    MSI (s) (94:C8) [11:50:04:251]: Resetting cached policy values
    MSI (s) (94:C8) [11:50:04:251]: Machine policy value 'Debug' is 0
    MSI (s) (94:C8) [11:50:04:251]: ******* RunEngine:
               ******* Product: {A805FB2A-A844-4cba-8088-CA64087D59E1}
               ******* Action:
               ******* CommandLine: **********
    MSI (s) (94:C8) [11:50:04:251]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (94:C8) [11:50:04:251]: End dialog not enabled
    MSI (s) (94:C8) [11:50:04:251]: Original package ==> c:\windows\Installer\9a137.msi
    MSI (s) (94:C8) [11:50:04:251]: Package we're running from ==> c:\windows\Installer\9a137.msi
    MSI (s) (94:C8) [11:50:04:271]: APPCOMPAT: looking for appcompat database entry with ProductCode '{A805FB2A-A844-4CBA-8088-CA64087D59E1}'.
    MSI (s) (94:C8) [11:50:04:271]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (94:C8) [11:50:04:271]: MSCOREE not loaded loading copy from system32
    MSI (s) (94:C8) [11:50:04:271]: Machine policy value 'DisablePatch' is 0
    MSI (s) (94:C8) [11:50:04:271]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (94:C8) [11:50:04:271]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (94:C8) [11:50:04:271]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (94:C8) [11:50:04:271]: APPCOMPAT: looking for appcompat database entry with ProductCode '{A805FB2A-A844-4CBA-8088-CA64087D59E1}'.
    MSI (s) (94:C8) [11:50:04:271]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (94:C8) [11:50:04:271]: Transforms are not secure.
    MSI (s) (94:C8) [11:50:04:271]: Command Line: REBOOT=SUPPRESS REMOVE=ALL CURRENTDIRECTORY=C:\ CLIENTUILEVEL=3 CLIENTPROCESSID=3216
    MSI (s) (94:C8) [11:50:04:271]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{9D59C617-3854-4FBF-95F2-ED33037DB8E5}'.
    MSI (s) (94:C8) [11:50:04:271]: Product Code passed to Engine.Initialize:           '{A805FB2A-A844-4cba-8088-CA64087D59E1}'
    MSI (s) (94:C8) [11:50:04:271]: Product Code from property table before transforms: '{A805FB2A-A844-4CBA-8088-CA64087D59E1}'
    MSI (s) (94:C8) [11:50:04:271]: Product Code from property table after transforms:  '{A805FB2A-A844-4cba-8088-CA64087D59E1}'
    MSI (s) (94:C8) [11:50:04:271]: Product registered: entering maintenance mode
    MSI (s) (94:C8) [11:50:04:271]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'.
    MSI (s) (94:C8) [11:50:04:271]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
    MSI (s) (94:C8) [11:50:04:281]: Package name retrieved from configuration data: 'Sophos Client Firewall.msi'
    MSI (s) (94:C8) [11:50:04:281]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
    MSI (s) (94:C8) [11:50:04:281]: Note: 1: 2729
    MSI (s) (94:C8) [11:50:04:281]: Note: 1: 2729
    MSI (s) (94:C8) [11:50:04:281]: Note: 1: 2262 2: AdminProperties 3: -2147287038
    MSI (s) (94:C8) [11:50:04:281]: Machine policy value 'DisableMsi' is 0
    MSI (s) (94:C8) [11:50:04:281]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (94:C8) [11:50:04:281]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (94:C8) [11:50:04:281]: Product {A805FB2A-A844-4CBA-8088-CA64087D59E1} is admin assigned: LocalSystem owns the publish key.
    MSI (s) (94:C8) [11:50:04:281]: Product {A805FB2A-A844-4CBA-8088-CA64087D59E1} is managed.
    MSI (s) (94:C8) [11:50:04:281]: Running product '{A805FB2A-A844-4CBA-8088-CA64087D59E1}' with elevated privileges: Product is assigned.
    MSI (s) (94:C8) [11:50:04:281]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'SUPPRESS'.
    MSI (s) (94:C8) [11:50:04:281]: PROPERTY CHANGE: Adding REMOVE property. Its value is 'ALL'.
    MSI (s) (94:C8) [11:50:04:281]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\'.
    MSI (s) (94:C8) [11:50:04:281]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
    MSI (s) (94:C8) [11:50:04:281]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '3216'.
    MSI (s) (94:C8) [11:50:04:281]: TRANSFORMS property is now:
    MSI (s) (94:C8) [11:50:04:281]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'.
    MSI (s) (94:C8) [11:50:04:281]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
    MSI (s) (94:C8) [11:50:04:281]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Application Data
    MSI (s) (94:C8) [11:50:04:281]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Favorites
    MSI (s) (94:C8) [11:50:04:281]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\NetHood
    MSI (s) (94:C8) [11:50:04:281]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\My Documents
    MSI (s) (94:C8) [11:50:04:291]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\PrintHood
    MSI (s) (94:C8) [11:50:04:291]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Recent
    MSI (s) (94:C8) [11:50:04:291]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\SendTo
    MSI (s) (94:C8) [11:50:04:291]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Templates
    MSI (s) (94:C8) [11:50:04:291]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Application Data
    MSI (s) (94:C8) [11:50:04:291]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Local Settings\Application Data
    MSI (s) (94:C8) [11:50:04:291]: Found shell folder %USERPROFILE%\Application Data by spelunking through the registry.
    MSI (s) (94:C8) [11:50:04:291]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
    MSI (s) (94:C8) [11:50:04:291]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Startup
    MSI (s) (94:C8) [11:50:04:301]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs
    MSI (s) (94:C8) [11:50:04:301]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu
    MSI (s) (94:C8) [11:50:04:301]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Desktop
    MSI (s) (94:C8) [11:50:04:301]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu\Programs\Administrative Tools
    MSI (s) (94:C8) [11:50:04:301]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu\Programs\Startup
    MSI (s) (94:C8) [11:50:04:301]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu\Programs
    MSI (s) (94:C8) [11:50:04:301]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu
    MSI (s) (94:C8) [11:50:04:301]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Desktop
    MSI (s) (94:C8) [11:50:04:311]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Templates
    MSI (s) (94:C8) [11:50:04:311]: SHELL32::SHGetFolderPath returned: C:\windows\Fonts
    MSI (s) (94:C8) [11:50:04:311]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
    MSI (s) (94:C8) [11:50:04:311]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
    MSI (s) (94:C8) [11:50:04:311]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Paul'.
    MSI (s) (94:C8) [11:50:04:311]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (94:C8) [11:50:04:311]: PROPERTY CHANGE: Adding Installed property. Its value is '2015/07/09 08:29:44'.
    MSI (s) (94:C8) [11:50:04:311]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'c:\windows\Installer\9a137.msi'.
    MSI (s) (94:C8) [11:50:04:311]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'c:\windows\Installer\9a137.msi'.
    MSI (s) (94:C8) [11:50:04:322]: Note: 1: 2262 2: PatchPackage 3: -2147287038
    MSI (s) (94:C8) [11:50:04:322]: Machine policy value 'DisableRollback' is 0
    MSI (s) (94:C8) [11:50:04:322]: User policy value 'DisableRollback' is 0
    MSI (s) (94:C8) [11:50:04:322]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
    === Logging started: 11/29/2017  11:50:04 ===
    MSI (s) (94:C8) [11:50:04:322]: PROPERTY CHANGE: Adding Preselected property. Its value is '1'.
    MSI (s) (94:C8) [11:50:04:322]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
    MSI (s) (94:C8) [11:50:04:322]: Doing action: INSTALL
    MSI (s) (94:C8) [11:50:04:322]: Running ExecuteSequence
    MSI (s) (94:C8) [11:50:04:322]: Doing action: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7
    Action start 11:50:04: INSTALL.
    MSI (s) (94:C8) [11:50:04:322]: PROPERTY CHANGE: Adding ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'C:\Program Files\'.
    Action start 11:50:04: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7.
    MSI (s) (94:C8) [11:50:04:322]: Doing action: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7
    Action ended 11:50:04: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
    MSI (s) (94:C8) [11:50:04:322]: PROPERTY CHANGE: Adding CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'C:\Program Files\Common Files\'.
    Action start 11:50:04: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7.
    MSI (s) (94:C8) [11:50:04:322]: Doing action: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF
    Action ended 11:50:04: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
    MSI (s) (94:C8) [11:50:04:322]: PROPERTY CHANGE: Adding SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\windows\system32\'.
    Action start 11:50:04: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF.
    MSI (s) (94:C8) [11:50:04:322]: Doing action: AppSearch
    Action ended 11:50:04: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF. Return value 1.
    Action start 11:50:04: AppSearch.
    MSI (s) (94:C8) [11:50:04:322]: Note: 1: 2262 2: CompLocator 3: -2147287038
    MSI (s) (94:C8) [11:50:04:322]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FED1005D-CBC8-45D5-A288-FFC7BB304121} 3: 2
    MSI (s) (94:C8) [11:50:04:322]: Note: 1: 2262 2: IniLocator 3: -2147287038
    MSI (s) (94:C8) [11:50:04:322]: Note: 1: 2262 2: DrLocator 3: -2147287038
    MSI (s) (94:C8) [11:50:04:322]: Note: 1: 2262 2: CompLocator 3: -2147287038
    MSI (s) (94:C8) [11:50:04:322]: PROPERTY CHANGE: Adding SAV6 property. Its value is 'YES'.
    MSI (s) (94:C8) [11:50:04:322]: Doing action: LaunchConditions
    Action ended 11:50:04: AppSearch. Return value 1.
    Action start 11:50:04: LaunchConditions.
    MSI (s) (94:C8) [11:50:04:332]: Doing action: TP_CheckRemoveAllowed
    Action ended 11:50:04: LaunchConditions. Return value 1.
    MSI (s) (94:08) [11:50:04:342]: Invoking remote custom action. DLL: C:\windows\Installer\MSI2B.tmp, Entrypoint: TP_CheckRemoveAllowed
    MSI (s) (94:34) [11:50:04:342]: Generating random cookie.
    MSI (s) (94:34) [11:50:04:352]: Created Custom Action Server with PID 1996 (0x7CC).
    MSI (s) (94:84) [11:50:04:402]: Running as a service.
    MSI (s) (94:CC) [11:50:04:402]: Hello, I'm your 32bit Impersonated custom action server.
    Action start 11:50:04: TP_CheckRemoveAllowed.
    UninstallCheck failed (77)
    MSI (s) (94:C8) [11:50:04:512]: Skipping action: ISSetAllUsers (condition is false)
    MSI (s) (94:C8) [11:50:04:512]: Doing action: FindRelatedProducts
    Action ended 11:50:04: TP_CheckRemoveAllowed. Return value 1.
    MSI (s) (94:C8) [11:50:04:512]: Skipping FindRelatedProducts action: not run in maintenance mode
    Action start 11:50:04: FindRelatedProducts.
    MSI (s) (94:C8) [11:50:04:512]: Skipping action: CCPSearch (condition is false)
    MSI (s) (94:C8) [11:50:04:512]: Skipping action: RMCCPSearch (condition is false)
    MSI (s) (94:C8) [11:50:04:512]: Doing action: ValidateProductID
    Action ended 11:50:04: FindRelatedProducts. Return value 0.
    Action start 11:50:04: ValidateProductID.
    MSI (s) (94:C8) [11:50:04:512]: Doing action: setUserProfileNT
    Action ended 11:50:04: ValidateProductID. Return value 1.
    MSI (s) (94:C8) [11:50:04:512]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Documents and Settings\Paul'.
    Action start 11:50:04: setUserProfileNT.
    MSI (s) (94:C8) [11:50:04:522]: Skipping action: SetAllUsersProfileNT (condition is false)
    MSI (s) (94:C8) [11:50:04:522]: Doing action: setAllUsersProfile2K
    Action ended 11:50:04: setUserProfileNT. Return value 1.
    MSI (s) (94:C8) [11:50:04:522]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\Documents and Settings\All Users'.
    Action start 11:50:04: setAllUsersProfile2K.
    MSI (s) (94:C8) [11:50:04:522]: Doing action: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF
    Action ended 11:50:04: setAllUsersProfile2K. Return value 1.
    MSI (s) (94:C8) [11:50:04:522]: PROPERTY CHANGE: Adding WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\windows\'.
    Action start 11:50:04: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF.
    MSI (s) (94:C8) [11:50:04:522]: Doing action: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4
    Action ended 11:50:04: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF. Return value 1.
    MSI (s) (94:C8) [11:50:04:522]: PROPERTY CHANGE: Adding WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\windows\'.
    Action start 11:50:04: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4.
    MSI (s) (94:C8) [11:50:04:522]: Doing action: DIRCA_NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7
    Action ended 11:50:04: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4. Return value 1.
    Action start 11:50:04: DIRCA_NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7.
    MSI (s) (94:C8) [11:50:04:522]: Doing action: CostInitialize
    Action ended 11:50:04: DIRCA_NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
    MSI (s) (94:C8) [11:50:04:522]: Machine policy value 'MaxPatchCacheSize' is 10
    Action start 11:50:04: CostInitialize.
    MSI (s) (94:C8) [11:50:04:632]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'c:\'.
    MSI (s) (94:C8) [11:50:04:632]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
    MSI (s) (94:C8) [11:50:04:632]: Note: 1: 2262 2: Patch 3: -2147287038
    MSI (s) (94:C8) [11:50:04:632]: Note: 1: 2262 2: PatchPackage 3: -2147287038
    MSI (s) (94:C8) [11:50:04:632]: Note: 1: 2205 2:  3: MsiPatchHeaders
    MSI (s) (94:C8) [11:50:04:632]: Note: 1: 2205 2:  3: __MsiPatchFileList
    MSI (s) (94:C8) [11:50:04:632]: Skipping action: ISInitAllUsers (condition is false)
    MSI (s) (94:C8) [11:50:04:632]: Skipping action: ResolveSource (condition is false)
    MSI (s) (94:C8) [11:50:04:632]: Doing action: FileCost
    Action ended 11:50:04: CostInitialize. Return value 1.
    MSI (s) (94:C8) [11:50:04:642]: Note: 1: 2262 2: RemoveFile 3: -2147287038
    MSI (s) (94:C8) [11:50:04:642]: Note: 1: 2262 2: Extension 3: -2147287038
    MSI (s) (94:C8) [11:50:04:642]: Note: 1: 2262 2: IniFile 3: -2147287038
    MSI (s) (94:C8) [11:50:04:642]: Note: 1: 2262 2: MoveFile 3: -2147287038
    MSI (s) (94:C8) [11:50:04:642]: Note: 1: 2262 2: DuplicateFile 3: -2147287038
    MSI (s) (94:C8) [11:50:04:642]: Note: 1: 2262 2: ReserveCost 3: -2147287038
    MSI (s) (94:C8) [11:50:04:642]: Note: 1: 2262 2: Shortcut 3: -2147287038
    Action start 11:50:04: FileCost.
    MSI (s) (94:C8) [11:50:04:642]: Doing action: IsolateComponents
    Action ended 11:50:04: FileCost. Return value 1.
    MSI (s) (94:C8) [11:50:04:642]: Note: 1: 2262 2: BindImage 3: -2147287038
    MSI (s) (94:C8) [11:50:04:642]: Note: 1: 2262 2: IsolatedComponent 3: -2147287038
    MSI (s) (94:C8) [11:50:04:642]: Note: 1: 2728 2: Patch
    Action start 11:50:04: IsolateComponents.
    MSI (s) (94:C8) [11:50:04:642]: Doing action: CostFinalize
    Action ended 11:50:04: IsolateComponents. Return value 1.
    MSI (s) (94:C8) [11:50:04:642]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
    MSI (s) (94:C8) [11:50:04:642]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
    MSI (s) (94:C8) [11:50:04:642]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
    MSI (s) (94:C8) [11:50:04:642]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
    MSI (s) (94:C8) [11:50:04:642]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
    MSI (s) (94:C8) [11:50:04:642]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'c:\Program Files\Sophos\Sophos Client Firewall'.
    MSI (s) (94:C8) [11:50:04:642]: PROPERTY CHANGE: Adding LOGS property. Its value is 'c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall\logs'.
    MSI (s) (94:C8) [11:50:04:642]: PROPERTY CHANGE: Adding SOPHOS_CLIENT_FIREWALL1 property. Its value is 'c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding _6F3B9B6A1D764E649303ABFBEEA6559C.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'c:\Program Files\Common Files\Sophos\Sophos Client Firewall'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'c:\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'c:\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its current value is 'C:\Program Files\'. Its new value: 'c:\Program Files\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its current value is 'C:\Program Files\Common Files\'. Its new value: 'c:\Program Files\Common Files\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding _5200F2F08A1843FFB73833298A0CDE07.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'c:\Program Files\Common Files\Sophos\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying _6F3B9B6A1D764E649303ABFBEEA6559C.B817F5915D4641D694EABCC98F20F7B7 property. Its current value is 'c:\Program Files\Common Files\Sophos\Sophos Client Firewall'. Its new value: 'c:\Program Files\Common Files\Sophos\Sophos Client Firewall\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 property. Its value is 'c:\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its current value is 'C:\windows\'. Its new value: 'c:\windows\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\Policies\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its current value is 'C:\windows\'. Its new value: 'c:\windows\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\Policies\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\Manifests\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its current value is 'C:\windows\system32\'. Its new value: 'c:\windows\system32\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying WindowsFolder property. Its current value is 'C:\windows\'. Its new value: 'c:\windows\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Documents and Settings\Paul'. Its new value: 'c:\Documents and Settings\Paul\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying TemplateFolder property. Its current value is 'C:\Documents and Settings\All Users\Templates\'. Its new value: 'c:\Documents and Settings\All Users\Templates\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying TempFolder property. Its current value is 'C:\DOCUME~1\Paul\LOCALS~1\Temp\'. Its new value: 'c:\DOCUME~1\Paul\LOCALS~1\Temp\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying SystemFolder property. Its current value is 'C:\windows\system32\'. Its new value: 'c:\windows\system32\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding System64Folder property. Its value is 'c:\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying System16Folder property. Its current value is 'C:\windows\system\'. Its new value: 'c:\windows\system\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying StartupFolder property. Its current value is 'C:\Documents and Settings\All Users\Start Menu\Programs\Startup\'. Its new value: 'c:\Documents and Settings\All Users\Start Menu\Programs\Startup\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying StartMenuFolder property. Its current value is 'C:\Documents and Settings\All Users\Start Menu\'. Its new value: 'c:\Documents and Settings\All Users\Start Menu\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying SendToFolder property. Its current value is 'C:\Documents and Settings\Paul\SendTo\'. Its new value: 'c:\Documents and Settings\Paul\SendTo\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying ProgramMenuFolder property. Its current value is 'C:\Documents and Settings\All Users\Start Menu\Programs\'. Its new value: 'c:\Documents and Settings\All Users\Start Menu\Programs\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding ProgramFiles64Folder property. Its value is 'c:\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'c:\'.
    MSI (s) (94:C8) [11:50:04:652]: PROPERTY CHANGE: Modifying PersonalFolder property. Its current value is 'C:\Documents and Settings\Paul\My Documents\'. Its new value: 'c:\Documents and Settings\Paul\My Documents\'.
    MSI (s) (94:C8) [11:50:04:772]: Note: 1: 1314 2: %USERPROFILE%\Application Data\
    MSI (s) (94:C8) [11:50:04:772]: Note: 1: 1606 2: %USERPROFILE%\Application Data\
    Action start 11:50:04: CostFinalize.
    MSI (s) (94:C8) [11:50:04:772]: Product: Sophos Client Firewall -- Error 1606.Could not access network location %USERPROFILE%\Application Data\.

    MSI (s) (94:C8) [11:50:04:782]: Note: 1: 1606 2: %USERPROFILE%\Application Data\
    Error 1606.Could not access network location %USERPROFILE%\Application Data\.
    MSI (s) (94:C8) [11:50:04:782]: Product: Sophos Client Firewall -- Error 1606.Could not access network location %USERPROFILE%\Application Data\.

    Error 1606.Could not access network location %USERPROFILE%\Application Data\.
    Action ended 11:50:04: CostFinalize. Return value 3.
    Action ended 11:50:04: INSTALL. Return value 3.
    Property(S): DiskPrompt = [1]
    Property(S): Registration = No
    Property(S): UpgradeCode = {7EDA9D28-FF94-4FC8-938F-98BE1E3D7F76}
    Property(S): Installed = 2015/07/09 08:29:44
    Property(S): OLEAdvtSupport = 1
    Property(S): VersionNT = 501
    Property(S): TARGETDIR = c:\
    Property(S): ALLUSERSPROFILE = C:\Documents and Settings\All Users
    Property(S): AdminToolsFolder = C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\
    Property(S): CommonAppDataFolder = C:\Documents and Settings\All Users\Application Data\
    Property(S): CommonFilesFolder = C:\Program Files\Common Files\
    Property(S): DesktopFolder = C:\Documents and Settings\All Users\Desktop\
    Property(S): FavoritesFolder = C:\Documents and Settings\Paul\Favorites\
    Property(S): FontsFolder = C:\windows\Fonts\
    Property(S): INSTALLDIR = c:\Program Files\Sophos\Sophos Client Firewall
    Property(S): ProgramFilesFolder = C:\Program Files\
    Property(S): LOGS = c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall\logs
    Property(S): LocalAppDataFolder = C:\Documents and Settings\Paul\Local Settings\Application Data\
    Property(S): MyPicturesFolder = %USERPROFILE%\Application Data\
    Property(S): PersonalFolder = c:\Documents and Settings\Paul\My Documents\
    Property(S): PrimaryVolumePath = c:\
    Property(S): ProgramFiles64Folder = c:\
    Property(S): ProgramMenuFolder = c:\Documents and Settings\All Users\Start Menu\Programs\
    Property(S): SOPHOS_CLIENT_FIREWALL1 = c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall
    Property(S): SendToFolder = c:\Documents and Settings\Paul\SendTo\
    Property(S): StartMenuFolder = c:\Documents and Settings\All Users\Start Menu\
    Property(S): StartupFolder = c:\Documents and Settings\All Users\Start Menu\Programs\Startup\
    Property(S): System16Folder = c:\windows\system\
    Property(S): System64Folder = c:\
    Property(S): SystemFolder = c:\windows\system32\
    Property(S): TempFolder = c:\DOCUME~1\Paul\LOCALS~1\Temp\
    Property(S): TemplateFolder = c:\Documents and Settings\All Users\Templates\
    Property(S): USERPROFILE = c:\Documents and Settings\Paul\
    Property(S): WindowsFolder = c:\windows\
    Property(S): WindowsVolume = c:\
    Property(S): WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\
    Property(S): SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\system32\
    Property(S): WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\
    Property(S): payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\
    Property(S): payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\
    Property(S): GPTSupport = 1
    Property(S): WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\Manifests\
    Property(S): WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\Policies\
    Property(S): policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
    Property(S): policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
    Property(S): ALLUSERS = 1
    Property(S): WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\
    Property(S): payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\
    Property(S): WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\Policies\
    Property(S): policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\
    Property(S): WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\
    Property(S): INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 = c:\
    Property(S): _6F3B9B6A1D764E649303ABFBEEA6559C.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\Common Files\Sophos\Sophos Client Firewall\
    Property(S): _5200F2F08A1843FFB73833298A0CDE07.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\Common Files\Sophos\
    Property(S): ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\
    Property(S): NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7 = c:\
    Property(S): CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\Common Files\
    Property(S): RecentFolder = C:\Documents and Settings\Paul\Recent\
    Property(S): PrintHoodFolder = C:\Documents and Settings\Paul\PrintHood\
    Property(S): NetHoodFolder = C:\Documents and Settings\Paul\NetHood\
    Property(S): AppDataFolder = C:\Documents and Settings\Paul\Application Data\
    Property(S): RemoteAdminTS = 1
    Property(S): MANAGED_INSTALL = 0
    Property(S): SAV6 = YES
    Property(S): ISCHECKFORPRODUCTUPDATES = 1
    Property(S): ApplicationUsers = AllUsers
    Property(S): AgreeToLicense = No
    Property(S): _IsMaintenance = Change
    Property(S): IS_SQLSERVER_USERNAME = sa
    Property(S): IS_SQLSERVER_AUTHENTICATION = 0
    Property(S): SetupType = Typical
    Property(S): _IsSetupTypeMin = Typical
    Property(S): Display_IsBitmapDlg = 1
    Property(S): ARPCOMMENTS = Firewall protection
    Property(S): ARPCONTACT = Sophos Technical Support
    Property(S): ARPHELPLINK = http://www.sophos.com/support/
    Property(S): ARPNOMODIFY = 1
    Property(S): ARPNOREPAIR = 1
    Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe
    Property(S): ARPURLINFOABOUT = http://www.sophos.com/
    Property(S): ARPURLUPDATEINFO = www.sophos.com/.../updates
    Property(S): DWUSINTERVAL = 30
    Property(S): DWUSLINK = CEBCE7CFAEEBE7FF2EACC0AF3E4C978F89EC978F49BBF0C8CEDC47DFDE8BA0189EEC80AFC9AC
    Property(S): DefaultUIFont = Tahoma8
    Property(S): DialogCaption = InstallShield for Windows Installer
    Property(S): DisplayNameCustom = Custom
    Property(S): MsiNTProductType = 1
    Property(S): DisplayNameMinimal = Minimal
    Property(S): DisplayNameTypical = Typical
    Property(S): ErrorDialog = SetupError
    Property(S): INSTALLLEVEL = 100
    Property(S): ISSCRIPT_VERSION_MISSING = The InstallScript engine is missing from this machine.  If available, please run ISScript.msi, or contact your support personnel for further assistance.
    Property(S): ISSCRIPT_VERSION_OLD = The InstallScript engine on this machine is older than the version required to run this setup.  If available, please install the latest version of ISScript.msi, or contact your support personnel for further assistance.
    Property(S): ISVROOT_PORT_NO = 0
    Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1]
    Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1]
    Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1]
    Property(S): IS_PROGMSG_XML_COSTING = Costing XML files...
    Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s...
    Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes...
    Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s...
    Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes...
    Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s...
    Property(S): InstallChoice = AR
    Property(S): MSIRESTARTMANAGERCONTROL = Disable
    Property(S): Manufacturer = Sophos Limited
    Property(S): NewProperty1 = 0
    Property(S): NewProperty2 = 0
    Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@
    Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s
    Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools...
    Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s
    Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories...
    Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension
    Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions...
    Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories...
    Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories...
    Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool
    Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools...
    Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d
    Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s
    Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories...
    Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension
    Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions...
    Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools...
    Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes...
    Property(S): ServicePackLevelMinor = 0
    Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions...
    Property(S): ProductCode = {A805FB2A-A844-4cba-8088-CA64087D59E1}
    Property(S): ProductID = none
    Property(S): ProductLanguage = 1033
    Property(S): ProductName = Sophos Client Firewall
    Property(S): ProductVersion = 2.9.5
    Property(S): ProgressType0 = install
    Property(S): ProgressType1 = Installing
    Property(S): ProgressType2 = installed
    Property(S): ProgressType3 = installs
    Property(S): RESTART_SERVICES = 1
    Property(S): RebootYesNo = Yes
    Property(S): RegisterWithAutoUpdate = {4DB41E90-DC56-41DC-B91E-9B8E537489A8};scf
    Property(S): ReinstallModeText = omus
    Property(S): SHOWLAUNCHPROGRAM = 0
    Property(S): SecureCustomProperties = MAJORUPGRADEINSTALL
    Property(S): UNINSTALLDRIVERS = ALL
    Property(S): UPGRADE_DRIVER_REBOOT = 0
    Property(S): ServicePackLevel = 3
    Property(S): WindowsBuild = 2600
    Property(S): VersionMsi = 3.01
    Property(S): InstallShieldTempProp = 0
    Property(S): VersionDatabase = 200
    Property(S): PRODUCTLANGUAGE = 1033
    Property(S): CLIENTPROCESSID = 3216
    Property(S): CLIENTUILEVEL = 3
    Property(S): USERNAME = Paul
    Property(S): CURRENTDIRECTORY = C:\
    Property(S): REMOVE = ALL
    Property(S): REBOOT = SUPPRESS
    Property(S): ProductToBeRegistered = 1
    Property(S): ProductState = 5
    Property(S): PackageCode = {9D59C617-3854-4FBF-95F2-ED33037DB8E5}
    Property(S): ShellAdvtSupport = 1
    Property(S): Intel = 6
    Property(S): PhysicalMemory = 2032
    Property(S): VirtualMemory = 3498
    Property(S): AdminUser = 1
    Property(S): LogonUser = Paul
    Property(S): UserSID = S-1-5-21-776561741-1078145449-854245398-1003
    Property(S): UserLanguageID = 1033
    Property(S): ComputerName = ACER1
    Property(S): SystemLanguageID = 1033
    Property(S): ScreenX = 1024
    Property(S): ScreenY = 768
    Property(S): CaptionHeight = 19
    Property(S): BorderTop = 1
    Property(S): BorderSide = 1
    Property(S): TextHeight = 16
    Property(S): ColorBits = 32
    Property(S): TTCSupport = 1
    Property(S): Time = 11:50:05
    Property(S): Date = 11/29/2017
    Property(S): MsiNetAssemblySupport = 4.0.30319.1
    Property(S): MsiWin32AssemblySupport = 5.1.2600.5512
    Property(S): RedirectedDllSupport = 2
    Property(S): Privileged = 1
    Property(S): DATABASE = c:\windows\Installer\9a137.msi
    Property(S): OriginalDatabase = c:\windows\Installer\9a137.msi
    Property(S): UILevel = 2
    Property(S): Preselected = 1
    Property(S): ACTION = INSTALL
    Property(S): ROOTDRIVE = c:\
    Property(S): CostingComplete = 0
    Property(S): OutOfDiskSpace = 0
    Property(S): OutOfNoRbDiskSpace = 0
    Property(S): PrimaryVolumeSpaceAvailable = 0
    Property(S): PrimaryVolumeSpaceRequired = 0
    Property(S): PrimaryVolumeSpaceRemaining = 0
    MSI (s) (94:C8) [11:50:05:343]: Cleaning up uninstalled install packages, if any exist
    MSI (s) (94:C8) [11:50:05:343]: MainEngineThread is returning 1603
    MSI (s) (94:78) [11:50:05:353]: Destroying RemoteAPI object.
    MSI (s) (94:34) [11:50:05:353]: Custom Action Manager thread ending.
    === Logging stopped: 11/29/2017  11:50:05 ===
    MSI (c) (90:DC) [11:50:05:353]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (c) (90:DC) [11:50:05:373]: MainEngineThread is returning 1603
    === Verbose logging stopped: 11/29/2017  11:50:05 ===

  • 0 in reply to PaulBarrow

    I am going to guess it failed because of this:

    Property(S): ISSCRIPT_VERSION_MISSING = The InstallScript engine is missing from this machine.  If available, please run ISScript.msi, or contact your support personnel for further assistance.
    Property(S): ISSCRIPT_VERSION_OLD = The InstallScript engine on this machine is older than the version required to run this setup.  If available, please install the latest version of ISScript.msi, or contact your support personnel for further assistance.

    Where do we go from here please?

Reply
  • 0 in reply to PaulBarrow

    I am going to guess it failed because of this:

    Property(S): ISSCRIPT_VERSION_MISSING = The InstallScript engine is missing from this machine.  If available, please run ISScript.msi, or contact your support personnel for further assistance.
    Property(S): ISSCRIPT_VERSION_OLD = The InstallScript engine on this machine is older than the version required to run this setup.  If available, please install the latest version of ISScript.msi, or contact your support personnel for further assistance.

    Where do we go from here please?

Children
  • 0 in reply to PaulBarrow

    Hello Paul,

    interpreting the Properties dump is a little bit tricky. While it displays the ("server-side") Properties with their current values it doesn't disclose their actual meaning - i.e. whether they describe an actual status or value (like PhysicalMemory = 2032) or are constant (like DisplayNameCustom = Custom and DisplayNameMinimal = Minimal). The properties you've quoted are AFAIK message constants and don't tell whether the message has be issued or not.

    Rather it looks like the type of the My Pictures value is string (REG_SZ) instead of expandable string (REG_EXPAND_SZ). Please check if this is the case and if first delete the value and add it back in as New → Expandable String Value. Afterwards logoff/logon and retry the uninstall.

    Christian

  • 0 in reply to QC

    OK- Done that.  It now looks like sophos1 attached.

    I noticed today that there is a sub-line under User Shell Folders of New that shows the properties shown in sophos 2 attached.  Is this OK or should they be deleted entirely or changed to [REG_EXPAND_SZ]?

    Paul

  • 0 in reply to PaulBarrow

    Hello Paul,

    this New key (who- or whatever created it) will be ignored and you can safely delete it with its contents.

    Christian

  • 0 in reply to QC

    Dare I say it Christian - it looks to have worked???

    Thank you a thousand times over.  I will now have another go with installing the alternate firewall and AV.  It is a pity that SOPHOS stopped supporting XP-Pro for AV otherwise I would not have moved providers but I have a couple of older machines that provide invaluable services and that are running happily on XP-Pro.

    Really appreciate your time in following through with this one.

     

    Paul

  • 0 in reply to PaulBarrow

    Hi Christian

     

    Me again.  This time I am on the second (of three) XP machines to remove Sophos Endpoint from it.

    I ran exactly the same sophos.bat removal file as before and was able to remove the registry entries and all but 4 of the folders namely:

    1. C:\Documents and Settings\All Users\Application Data
    2. C:\Documents and Settings\All Users\Application Data\Sophos
    3. C:\Program Files and
    4. C:\Program Files\Sophos

    Despite several reboots I still cannot get rid of these folders as the Laptop says they are in use and indeed the Sophos APP does pop up in the SYSTRAY.

    What did I miss or what is different please about this UNINSTALL?  All other folders are now gone!  I note that there still appear to be some references to SOPHOS in the Registry (running REGEDIT).  Should I delete those, reboot and then be able to remove the remaining folders?

    Thanks

    Paul

  • 0 in reply to PaulBarrow

    Hello Paul,

    you wouldn't want to remove 1. and 3.
    Which folder(s) under C:\Program Files\Sophos\ are still there? the Sophos APP does pop up in the SYSTRAY - if the Sophos icon is still there it suggests that AutoUpdate hasn't been uninstalled correctly. Is it gone from Add/Remove Programs?

    Christian

  • 0 in reply to QC

    Hi Christian

    I will try and remove them via Add/remove programs as you said ... they are still there!  Add/remove seems to have worked for the Auto Update.  I forgot to use that and it has taken the Auto update out of the systray.  The SAV though failed to uninstall via Add/Remove programs.

     

    Paul

  • 0 in reply to PaulBarrow

    Hello Paul,

    if Add/Remove fails (did it pop up an error?) please retry with msiexec.exe requesting a log. This should tell more.

    Christian

  • 0 in reply to QC

    Hi Christian

    Yes the error on uninstalling Sophos Anti Virus is Fatal error during installation.

    The error log show:

    === Verbose logging started: 12/4/2017  17:47:34  Build type: SHIP UNICODE 3.01.4001.5512  Calling process: C:\windows\system32\msiexec.exe ===
    MSI (c) (EC:B0) [17:47:34:815]: Resetting cached policy values
    MSI (c) (EC:B0) [17:47:34:815]: Machine policy value 'Debug' is 0
    MSI (c) (EC:B0) [17:47:34:815]: ******* RunEngine:
               ******* Product: {09863DA9-7A9B-4430-9561-E04D178D7017}
               ******* Action:
               ******* CommandLine: **********
    MSI (c) (EC:B0) [17:47:34:815]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (EC:B0) [17:47:34:815]: Grabbed execution mutex.
    MSI (c) (EC:B0) [17:47:34:875]: Cloaking enabled.
    MSI (c) (EC:B0) [17:47:34:875]: Attempting to enable all disabled priveleges before calling Install on Server
    MSI (c) (EC:B0) [17:47:34:885]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (F8:A8) [17:47:34:905]: Grabbed execution mutex.
    MSI (s) (F8:9C) [17:47:34:905]: Resetting cached policy values
    MSI (s) (F8:9C) [17:47:34:905]: Machine policy value 'Debug' is 0
    MSI (s) (F8:9C) [17:47:34:905]: ******* RunEngine:
               ******* Product: {09863DA9-7A9B-4430-9561-E04D178D7017}
               ******* Action:
               ******* CommandLine: **********
    MSI (s) (F8:9C) [17:47:34:905]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (F8:9C) [17:47:34:905]: MainEngineThread is returning 1605
    MSI (c) (EC:B0) [17:47:34:905]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (c) (EC:B0) [17:47:34:905]: MainEngineThread is returning 1605
    === Verbose logging stopped: 12/4/2017  17:47:34 ===

    Paul

  • 0 in reply to PaulBarrow

    Hello Paul,

    somewhat strange - 1605 is ERROR_UNKNOWN_PRODUCT This action is only valid for products that are currently installed. Is it still in Add/Remove, if so - please check both HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ and HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\. There should be an UninstallString in one of these locations (might or might not name 09863DA9-... as the product). Retry the msiexec.exe with this product code as before but omit the /qn switch.

    Christian

Unfiltered HTML