This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cannot uninstall Sophos AV Standalone from home machine - because Sophos client firewall cannot be removed either.

Windows 10

I previously protected my home computer as standalone from my previous company. That company have stopped using Sophos so i need to uninstall so that i can install Sophos Home.

 

However whenever I try to uninstall Sophos firewall I get an error message:-

 

 "the operating system does not support running sophos client firewall"



Sophos Endpoint cannot be uninstalled until Sophos firewall has been uninstalled

 

I have tried Microsoft Fix It tool to try to remove this Sophos component but it does not find Sophos firewall as an app.

I have tried Opening Windows Services - Stopping any Sophos related services and then uninstall, but that also does not work and gives the same error

 

Any suggestions please

Graham



This thread was automatically locked due to age.
Parents Reply Children
  • Hello Christain

    Nothing in Windows\temp

    Searching my system i cannot find msiexe.exe.

    I am running Windows 10 and a google search would indicate that msiexe.exe is not a Window 10 system file

     

    Graham

  • Hello Graham,

    it's msiexeC.exe.

    Christian

  • Hello Christian

    The file is on the system.

    i have run again from both Windows & Cdm. No file has been created in C:\Temp, Uninstall still shows the same error code.

    Sorry for being a pain.

     

    Graham

  • Hello Graham,

    run again from both
    msiexec.exe should be run from an administrative cmd window (Command Prompt (Admin)). The command I've suggested should write to C:\Windows\Temp\SCFUninstallLog.txt (but if it's not running from an Admin prompt it's likely not able to do so).

    Uninstall still shows the same error code
    msiexec.exe /x is an uninstall, with this product code it is the same uninstall that runs from Programs and Features. I've asked you to run msiexec so that a log is created which is needed to determine why the uninstall fails. I did not expect msiexec to succeed, and naturally if it fails Uninstall will also still fail - but in case msiexec succeeds SCF would be gone from Programs and Features.

    Christian

  • Works & I have the log file.  

    === Verbose logging started: 12/01/2018 08:14:11 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\WINDOWS\system32\MsiExec.exe ===
    MSI (c) (CC:74) [08:14:11:184]: Resetting cached policy values
    MSI (c) (CC:74) [08:14:11:184]: Machine policy value 'Debug' is 0
    MSI (c) (CC:74) [08:14:11:184]: ******* RunEngine:
    ******* Product: {A805FB2A-A844-4cba-8088-CA64087D59E1}
    ******* Action:
    ******* CommandLine: **********
    MSI (c) (CC:74) [08:14:11:185]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (CC:74) [08:14:11:185]: Grabbed execution mutex.
    MSI (c) (CC:74) [08:14:11:199]: Cloaking enabled.
    MSI (c) (CC:74) [08:14:11:199]: Attempting to enable all disabled privileges before calling Install on Server
    MSI (c) (CC:74) [08:14:11:203]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (B0:50) [08:14:11:213]: Running installation inside multi-package transaction {A805FB2A-A844-4cba-8088-CA64087D59E1}
    MSI (s) (B0:50) [08:14:11:213]: Grabbed execution mutex.
    MSI (s) (B0:60) [08:14:11:216]: Resetting cached policy values
    MSI (s) (B0:60) [08:14:11:216]: Machine policy value 'Debug' is 0
    MSI (s) (B0:60) [08:14:11:216]: ******* RunEngine:
    ******* Product: {A805FB2A-A844-4cba-8088-CA64087D59E1}
    ******* Action:
    ******* CommandLine: **********
    MSI (s) (B0:60) [08:14:11:216]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (B0:60) [08:14:11:216]: MainEngineThread is returning 1605
    MSI (s) (B0:50) [08:14:11:218]: User policy value 'DisableRollback' is 0
    MSI (s) (B0:50) [08:14:11:218]: Machine policy value 'DisableRollback' is 0
    MSI (s) (B0:50) [08:14:11:218]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (B0:50) [08:14:11:220]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (CC:74) [08:14:11:222]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (CC:74) [08:14:11:237]: MainEngineThread is returning 1605
    === Verbose logging stopped: 12/01/2018 08:14:11 ===

     

    Hope this helps... sorry i really should read instructions more closely... Thanks

    Graham

  • Hello Graham,

    1605 means the product isn't installed. Is SCF still in Programs and Features (you might also want to check the registry as outlines under Gather the uninstall commands in this How to ... article)?

    Christian

  • Good morning

    There were two entries one for Sophos Client Fire Wall, the other for Sophos Anti-Virus

    MsiExec.exe /X{12C00299-B8B4-40D3-9663-66ABEA3198AB}   ..sophos client firewall
    MsiExec.exe /X{65323B2D-83D4-470D-A209-D769DB30BBDB} .. sophos Ant-Virus

    I followed the instruction and attach the log file.

    However, when i tried again to un-install the Sophos Firewall still gives the same error code.

    Have a great weekend and i love the photo.

    Graham

     

    === Verbose logging started: 12/01/2018 17:07:27 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\WINDOWS\system32\msiexec.exe ===
    MSI (c) (9C:30) [17:07:27:241]: Resetting cached policy values
    MSI (c) (9C:30) [17:07:27:242]: Machine policy value 'Debug' is 0
    MSI (c) (9C:30) [17:07:27:242]: ******* RunEngine:
    ******* Product: {12C00299-B8B4-40D3-9663-66ABEA3198AB}
    ******* Action:
    ******* CommandLine: **********
    MSI (c) (9C:30) [17:07:27:242]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (9C:30) [17:07:27:242]: Grabbed execution mutex.
    MSI (c) (9C:30) [17:07:27:252]: Cloaking enabled.
    MSI (c) (9C:30) [17:07:27:252]: Attempting to enable all disabled privileges before calling Install on Server
    MSI (c) (9C:30) [17:07:27:256]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (CC:FC) [17:07:27:263]: Running installation inside multi-package transaction {12C00299-B8B4-40D3-9663-66ABEA3198AB}
    MSI (s) (CC:FC) [17:07:27:263]: Grabbed execution mutex.
    MSI (s) (CC:98) [17:07:27:266]: Resetting cached policy values
    MSI (s) (CC:98) [17:07:27:266]: Machine policy value 'Debug' is 0
    MSI (s) (CC:98) [17:07:27:266]: ******* RunEngine:
    ******* Product: {12C00299-B8B4-40D3-9663-66ABEA3198AB}
    ******* Action:
    ******* CommandLine: **********
    MSI (s) (CC:98) [17:07:27:266]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (CC:98) [17:07:27:268]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (CC:98) [17:07:27:272]: SRSetRestorePoint skipped for this transaction.
    MSI (s) (CC:98) [17:07:27:273]: MSCOREE not loaded loading copy from system32
    MSI (s) (CC:98) [17:07:27:279]: End dialog not enabled
    MSI (s) (CC:98) [17:07:27:280]: Original package ==> C:\Windows\Installer\ca4ec1.msi
    MSI (s) (CC:98) [17:07:27:280]: Package we're running from ==> C:\Windows\Installer\ca4ec1.msi
    MSI (s) (CC:98) [17:07:27:284]: APPCOMPAT: Uninstall Flags override found.
    MSI (s) (CC:98) [17:07:27:284]: APPCOMPAT: Uninstall VersionNT override found.
    MSI (s) (CC:98) [17:07:27:284]: APPCOMPAT: Uninstall ServicePackLevel override found.
    MSI (s) (CC:98) [17:07:27:284]: APPCOMPAT: looking for appcompat database entry with ProductCode '{12C00299-B8B4-40D3-9663-66ABEA3198AB}'.
    MSI (s) (CC:98) [17:07:27:284]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (CC:98) [17:07:27:298]: Machine policy value 'DisablePatch' is 0
    MSI (s) (CC:98) [17:07:27:298]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (CC:98) [17:07:27:299]: Machine policy value 'DisableMsi' is 0
    MSI (s) (CC:98) [17:07:27:299]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (CC:98) [17:07:27:299]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (CC:98) [17:07:27:299]: Product {12C00299-B8B4-40D3-9663-66ABEA3198AB} is admin assigned: LocalSystem owns the publish key.
    MSI (s) (CC:98) [17:07:27:299]: Product {12C00299-B8B4-40D3-9663-66ABEA3198AB} is managed.
    MSI (s) (CC:98) [17:07:27:299]: Running product '{12C00299-B8B4-40D3-9663-66ABEA3198AB}' with elevated privileges: Product is assigned.
    MSI (s) (CC:98) [17:07:27:299]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (CC:98) [17:07:27:299]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (CC:98) [17:07:27:300]: APPCOMPAT: looking for appcompat database entry with ProductCode '{12C00299-B8B4-40D3-9663-66ABEA3198AB}'.
    MSI (s) (CC:98) [17:07:27:300]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (CC:98) [17:07:27:300]: Transforms are not secure.
    MSI (s) (CC:98) [17:07:27:300]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\WINDOWS\Temp\Uninstall_SAV9-10_Log.txt'.
    MSI (s) (CC:98) [17:07:27:300]: Command Line: REBOOT=SUPPRESS REMOVE=ALL CURRENTDIRECTORY=C:\Users\Graham Home_PB\Documents CLIENTUILEVEL=3 CLIENTPROCESSID=9628
    MSI (s) (CC:98) [17:07:27:300]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{1CB67048-8DDF-4A1A-A299-1A1BB5B0653D}'.
    MSI (s) (CC:98) [17:07:27:301]: Product Code passed to Engine.Initialize: '{12C00299-B8B4-40D3-9663-66ABEA3198AB}'
    MSI (s) (CC:98) [17:07:27:301]: Product Code from property table before transforms: '{12C00299-B8B4-40D3-9663-66ABEA3198AB}'
    MSI (s) (CC:98) [17:07:27:301]: Product Code from property table after transforms: '{12C00299-B8B4-40D3-9663-66ABEA3198AB}'
    MSI (s) (CC:98) [17:07:27:301]: Product registered: entering maintenance mode
    MSI (s) (CC:98) [17:07:27:301]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
    MSI (s) (CC:98) [17:07:27:301]: Product {12C00299-B8B4-40D3-9663-66ABEA3198AB} is admin assigned: LocalSystem owns the publish key.
    MSI (s) (CC:98) [17:07:27:301]: Product {12C00299-B8B4-40D3-9663-66ABEA3198AB} is managed.
    MSI (s) (CC:98) [17:07:27:301]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (CC:98) [17:07:27:301]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (CC:98) [17:07:27:301]: MSI_LUA: Installation UI level is silent, no credential elevation is possible
    MSI (s) (CC:98) [17:07:27:301]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'.
    MSI (s) (CC:98) [17:07:27:301]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
    MSI (s) (CC:98) [17:07:27:302]: Package name retrieved from configuration data: 'Sophos Client Firewall.msi'
    MSI (s) (CC:98) [17:07:27:304]: Note: 1: 2262 2: AdminProperties 3: -2147287038
    MSI (s) (CC:98) [17:07:27:304]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (CC:98) [17:07:27:304]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (CC:98) [17:07:27:304]: Product {12C00299-B8B4-40D3-9663-66ABEA3198AB} is admin assigned: LocalSystem owns the publish key.
    MSI (s) (CC:98) [17:07:27:304]: Product {12C00299-B8B4-40D3-9663-66ABEA3198AB} is managed.
    MSI (s) (CC:98) [17:07:27:304]: Running product '{12C00299-B8B4-40D3-9663-66ABEA3198AB}' with elevated privileges: Product is assigned.
    MSI (s) (CC:98) [17:07:27:304]: Machine policy value 'EnableUserControl' is 0
    MSI (s) (CC:98) [17:07:27:304]: PROPERTY CHANGE: Adding RestrictedUserControl property. Its value is '1'.
    MSI (s) (CC:98) [17:07:27:304]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'SUPPRESS'.
    MSI (s) (CC:98) [17:07:27:304]: PROPERTY CHANGE: Adding REMOVE property. Its value is 'ALL'.
    MSI (s) (CC:98) [17:07:27:304]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\Graham Home_PB\Documents'.
    MSI (s) (CC:98) [17:07:27:304]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
    MSI (s) (CC:98) [17:07:27:304]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '9628'.
    MSI (s) (CC:98) [17:07:27:305]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
    MSI (s) (CC:98) [17:07:27:305]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
    MSI (s) (CC:98) [17:07:27:305]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
    MSI (s) (CC:98) [17:07:27:305]: TRANSFORMS property is now:
    MSI (s) (CC:98) [17:07:27:305]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'.
    MSI (s) (CC:98) [17:07:27:305]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
    MSI (s) (CC:98) [17:07:27:308]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming
    MSI (s) (CC:98) [17:07:27:310]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\Favorites
    MSI (s) (CC:98) [17:07:27:312]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Network Shortcuts
    MSI (s) (CC:98) [17:07:27:314]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\Documents
    MSI (s) (CC:98) [17:07:27:316]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
    MSI (s) (CC:98) [17:07:27:318]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Recent
    MSI (s) (CC:98) [17:07:27:320]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\SendTo
    MSI (s) (CC:98) [17:07:27:322]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Templates
    MSI (s) (CC:98) [17:07:27:322]: SHELL32::SHGetFolderPath returned: C:\ProgramData
    MSI (s) (CC:98) [17:07:27:325]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Local
    MSI (s) (CC:98) [17:07:27:328]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\Pictures
    MSI (s) (CC:98) [17:07:27:331]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (CC:98) [17:07:27:333]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (CC:98) [17:07:27:335]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
    MSI (s) (CC:98) [17:07:27:337]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
    MSI (s) (CC:98) [17:07:27:339]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
    MSI (s) (CC:98) [17:07:27:343]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (CC:98) [17:07:27:345]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (CC:98) [17:07:27:348]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
    MSI (s) (CC:98) [17:07:27:349]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Start Menu
    MSI (s) (CC:98) [17:07:27:351]: SHELL32::SHGetFolderPath returned: C:\Users\Graham Home_PB\Desktop
    MSI (s) (CC:98) [17:07:27:353]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
    MSI (s) (CC:98) [17:07:27:354]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
    MSI (s) (CC:98) [17:07:27:354]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
    MSI (s) (CC:98) [17:07:27:367]: MSI_LUA: Setting AdminUser property to 1 because the product is already installed managed and per-machine
    MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding AdminUser property. Its value is '1'.
    MSI (s) (CC:98) [17:07:27:367]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
    MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
    MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
    MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Graham Home_PB'.
    MSI (s) (CC:98) [17:07:27:367]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding Installed property. Its value is '2010/04/22 18:00:10'.
    MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\ca4ec1.msi'.
    MSI (s) (CC:98) [17:07:27:367]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Windows\Installer\ca4ec1.msi'.
    MSI (s) (CC:98) [17:07:27:367]: Machine policy value 'MsiDisableEmbeddedUI' is 0
    MSI (s) (CC:98) [17:07:27:367]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
    MSI (s) (CC:98) [17:07:27:368]: Note: 1: 2262 2: PatchPackage 3: -2147287038
    MSI (s) (CC:98) [17:07:27:368]: Machine policy value 'DisableRollback' is 0
    MSI (s) (CC:98) [17:07:27:368]: User policy value 'DisableRollback' is 0
    MSI (s) (CC:98) [17:07:27:368]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
    MSI (s) (CC:98) [17:07:27:368]: Note: 1: 2262 2: Font 3: -2147287038
    === Logging started: 12/01/2018 17:07:27 ===
    MSI (s) (CC:98) [17:07:27:369]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Adding Preselected property. Its value is '1'.
    MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Modifying VersionNT property. Its current value is '603'. Its new value: '601'.
    MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Modifying VersionNT64 property. Its current value is '603'. Its new value: '601'.
    MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Modifying ServicePackLevel property. Its current value is '0'. Its new value: '14'.
    MSI (s) (CC:98) [17:07:27:369]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition version successfully detected.
    MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Modifying VersionNT property. Its current value is '601'. Its new value: '603'.
    MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Modifying ServicePackLevel property. Its current value is '14'. Its new value: '0'.
    MSI (s) (CC:98) [17:07:27:369]: PROPERTY CHANGE: Modifying VersionNT64 property. Its current value is '601'. Its new value: '603'.
    MSI (s) (CC:98) [17:07:27:370]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
    MSI (s) (CC:98) [17:07:27:370]: Doing action: INSTALL
    Action start 17:07:27: INSTALL.
    MSI (s) (CC:98) [17:07:27:371]: Running ExecuteSequence
    MSI (s) (CC:98) [17:07:27:371]: Doing action: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7
    MSI (s) (CC:98) [17:07:27:372]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7'
    MSI (s) (CC:98) [17:07:27:372]: PROPERTY CHANGE: Adding ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'C:\Program Files (x86)\'.
    Action start 17:07:27: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7.
    MSI (s) (CC:98) [17:07:27:373]: Doing action: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7
    Action ended 17:07:27: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
    MSI (s) (CC:98) [17:07:27:374]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7'
    MSI (s) (CC:98) [17:07:27:374]: PROPERTY CHANGE: Adding CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'C:\Program Files (x86)\Common Files\'.
    Action start 17:07:27: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7.
    MSI (s) (CC:98) [17:07:27:374]: Doing action: WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E
    Action ended 17:07:27: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
    MSI (s) (CC:98) [17:07:27:375]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E'
    MSI (s) (CC:98) [17:07:27:375]: PROPERTY CHANGE: Adding WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\'.
    Action start 17:07:27: WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E.
    MSI (s) (CC:98) [17:07:27:376]: Doing action: SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E
    Action ended 17:07:27: WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E. Return value 1.
    MSI (s) (CC:98) [17:07:27:377]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E'
    MSI (s) (CC:98) [17:07:27:377]: PROPERTY CHANGE: Adding SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\SysWOW64\'.
    Action start 17:07:27: SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E.
    MSI (s) (CC:98) [17:07:27:377]: Doing action: WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E
    Action ended 17:07:27: SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E. Return value 1.
    MSI (s) (CC:98) [17:07:27:378]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E'
    MSI (s) (CC:98) [17:07:27:378]: PROPERTY CHANGE: Adding WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\'.
    Action start 17:07:27: WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E.
    MSI (s) (CC:98) [17:07:27:379]: Doing action: SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E
    Action ended 17:07:27: WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E. Return value 1.
    MSI (s) (CC:98) [17:07:27:380]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E'
    MSI (s) (CC:98) [17:07:27:380]: PROPERTY CHANGE: Adding SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E property. Its value is 'C:\WINDOWS\SysWOW64\'.
    Action start 17:07:27: SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E.
    MSI (s) (CC:98) [17:07:27:381]: Doing action: ISSetupFilesExtract
    Action ended 17:07:27: SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E. Return value 1.
    MSI (s) (CC:98) [17:07:27:382]: Note: 1: 2235 2: 3: ExtendedType 4: SELECT `Action`,`Type`,`Source`,`Target`, NULL, `ExtendedType` FROM `CustomAction` WHERE `Action` = 'ISSetupFilesExtract'
    MSI (s) (CC:14) [17:07:27:399]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI3545.tmp, Entrypoint: SFStartupEx
    MSI (s) (CC:CC) [17:07:27:399]: Generating random cookie.
    MSI (s) (CC:CC) [17:07:27:403]: Created Custom Action Server with PID 10992 (0x2AF0).
    MSI (s) (CC:00) [17:07:27:475]: Running as a service.
    MSI (s) (CC:00) [17:07:27:480]: Hello, I'm your 32bit Impersonated custom action server.
    Action start 17:07:27: ISSetupFilesExtract.
    1: Starting to extract setup files
    1: Getting SUPPORTDIR property :
    1: Extracting SetupFiles to: C:\Users\GRAHAM~1\AppData\Local\Temp\{12C00299-B8B4-40D3-9663-66ABEA3198AB}
    1: Getting ISSetupFile table view
    1: Executing ISSetupFile table view
    1: Extracting Setup File:
    1: C:\Users\GRAHAM~1\AppData\Local\Temp\{12C00299-B8B4-40D3-9663-66ABEA3198AB}\DriverHelper_x64.exe
    1: Extracting Setup File:
    1: C:\Users\GRAHAM~1\AppData\Local\Temp\{12C00299-B8B4-40D3-9663-66ABEA3198AB}\DriverHelper_Win32.exe
    MSI (s) (CC!A0) [17:07:27:812]: PROPERTY CHANGE: Adding SUPPORTDIR property. Its value is 'C:\Users\GRAHAM~1\AppData\Local\Temp\{12C00299-B8B4-40D3-9663-66ABEA3198AB}'.
    MSI (s) (CC!A0) [17:07:27:812]: PROPERTY CHANGE: Adding ISSETUPFILESCOMPLETED property. Its value is 'Completed'.
    1: Setting SUPPORTDIR property to: C:\Users\GRAHAM~1\AppData\Local\Temp\{12C00299-B8B4-40D3-9663-66ABEA3198AB}
    1: Setting ISSETUPFILESCOMPLETED property
    MSI (s) (CC:98) [17:07:27:816]: Doing action: AppSearch
    Action ended 17:07:27: ISSetupFilesExtract. Return value 1.
    Action start 17:07:27: AppSearch.
    MSI (s) (CC:98) [17:07:27:818]: Note: 1: 2262 2: CompLocator 3: -2147287038
    MSI (s) (CC:98) [17:07:27:818]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FED1005D-CBC8-45D5-A288-FFC7BB304121} 3: 2
    MSI (s) (CC:98) [17:07:27:818]: Note: 1: 2262 2: IniLocator 3: -2147287038
    MSI (s) (CC:98) [17:07:27:818]: Note: 1: 2262 2: DrLocator 3: -2147287038
    MSI (s) (CC:98) [17:07:27:819]: Note: 1: 2262 2: CompLocator 3: -2147287038
    MSI (s) (CC:98) [17:07:27:819]: PROPERTY CHANGE: Adding SAV6 property. Its value is 'YES'.
    MSI (s) (CC:98) [17:07:27:819]: Doing action: LaunchConditions
    Action ended 17:07:27: AppSearch. Return value 1.
    Action start 17:07:27: LaunchConditions.
    MSI (s) (CC:98) [17:07:27:821]: Product: Sophos Client Firewall -- The operating system does not support running Sophos Client Firewall.

    The operating system does not support running Sophos Client Firewall.
    Action ended 17:07:27: LaunchConditions. Return value 3.
    Action ended 17:07:27: INSTALL. Return value 3.
    Property(S): DiskPrompt = [1]
    Property(S): Registration = No
    Property(S): UpgradeCode = {7EDA9D28-FF94-4FC8-938F-98BE1E3D7F76}
    Property(S): Installed = 2010/04/22 18:00:10
    Property(S): VersionNT = 603
    Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
    Property(S): CommonAppDataFolder = C:\ProgramData\
    Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
    Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
    Property(S): DesktopFolder = C:\Users\Public\Desktop\
    Property(S): FavoritesFolder = C:\Users\Graham Home_PB\Favorites\
    Property(S): FontsFolder = C:\WINDOWS\Fonts\
    Property(S): ProgramFilesFolder = C:\Program Files (x86)\
    Property(S): LocalAppDataFolder = C:\Users\Graham Home_PB\AppData\Local\
    Property(S): MyPicturesFolder = C:\Users\Graham Home_PB\Pictures\
    Property(S): PersonalFolder = C:\Users\Graham Home_PB\Documents\
    Property(S): ProgramFiles64Folder = C:\Program Files\
    Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
    Property(S): SendToFolder = C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\SendTo\
    Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
    Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
    Property(S): System64Folder = C:\WINDOWS\system32\
    Property(S): SystemFolder = C:\WINDOWS\SysWOW64\
    Property(S): TempFolder = C:\Users\GRAHAM~1\AppData\Local\Temp\
    Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
    Property(S): WindowsFolder = C:\WINDOWS\
    Property(S): WindowsVolume = C:\
    Property(S): WindowsFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E = C:\WINDOWS\
    Property(S): SystemFolder.98CB24AD_52FB_DB5F_FF1F_C8B3B9A1E18E = C:\WINDOWS\SysWOW64\
    Property(S): ALLUSERS = 1
    Property(S): WindowsFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E = C:\WINDOWS\
    Property(S): SystemFolder.63E949F6_03BC_5C40_FF1F_C8B3B9A1E18E = C:\WINDOWS\SysWOW64\
    Property(S): ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 = C:\Program Files (x86)\
    Property(S): CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 = C:\Program Files (x86)\Common Files\
    Property(S): RecentFolder = C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Recent\
    Property(S): PrintHoodFolder = C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
    Property(S): NetHoodFolder = C:\Users\Graham Home_PB\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
    Property(S): AppDataFolder = C:\Users\Graham Home_PB\AppData\Roaming\
    Property(S): RemoteAdminTS = 1
    Property(S): MsiNTProductType = 1
    Property(S): ServicePackLevelMinor = 0
    Property(S): ServicePackLevel = 0
    Property(S): MANAGED_INSTALL = 0
    Property(S): SAV6 = YES
    Property(S): ISCHECKFORPRODUCTUPDATES = 1
    Property(S): ApplicationUsers = AllUsers
    Property(S): AgreeToLicense = No
    Property(S): _IsMaintenance = Change
    Property(S): IS_SQLSERVER_USERNAME = sa
    Property(S): IS_SQLSERVER_AUTHENTICATION = 0
    Property(S): SetupType = Typical
    Property(S): _IsSetupTypeMin = Typical
    Property(S): Display_IsBitmapDlg = 1
    Property(S): ARPCOMMENTS = Firewall protection
    Property(S): ARPCONTACT = Sophos Technical Support
    Property(S): ARPHELPLINK = http://www.sophos.com/support/
    Property(S): ARPNOMODIFY = 1
    Property(S): ARPNOREPAIR = 1
    Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe
    Property(S): ARPURLINFOABOUT = http://www.sophos.com/
    Property(S): ARPURLUPDATEINFO = www.sophos.com/.../updates
    Property(S): DWUSINTERVAL = 30
    Property(S): DWUSLINK = CEBCE7CFAEEBE7FF2EACC0AF3E4C978F89EC978F49BBF0C8CEDC47DFDE8BA0189EEC80AFC9AC
    Property(S): DefaultUIFont = Tahoma8
    Property(S): DialogCaption = InstallShield for Windows Installer
    Property(S): DisplayNameCustom = Custom
    Property(S): WindowsBuild = 9600
    Property(S): DisplayNameMinimal = Minimal
    Property(S): DisplayNameTypical = Typical
    Property(S): ErrorDialog = SetupError
    Property(S): INSTALLLEVEL = 100
    Property(S): ISSCRIPT_VERSION_MISSING = The InstallScript engine is missing from this machine. If available, please run ISScript.msi, or contact your support personnel for further assistance.
    Property(S): ISSCRIPT_VERSION_OLD = The InstallScript engine on this machine is older than the version required to run this setup. If available, please install the latest version of ISScript.msi, or contact your support personnel for further assistance.
    Property(S): ISVROOT_PORT_NO = 0
    Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1]
    Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1]
    Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1]
    Property(S): IS_PROGMSG_XML_COSTING = Costing XML files...
    Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s...
    Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes...
    Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s...
    Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes...
    Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s...
    Property(S): InstallChoice = AR
    Property(S): MSIRESTARTMANAGERCONTROL = Disable
    Property(S): Manufacturer = Sophos Plc
    Property(S): NewProperty1 = 0
    Property(S): NewProperty2 = 0
    Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@
    Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s
    Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools...
    Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s
    Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories...
    Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension
    Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions...
    Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories...
    Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories...
    Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool
    Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools...
    Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d
    Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s
    Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories...
    Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension
    Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions...
    Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools...
    Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes...
    Property(S): VersionNT64 = 603
    Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions...
    Property(S): ProductCode = {12C00299-B8B4-40D3-9663-66ABEA3198AB}
    Property(S): ProductID = none
    Property(S): ProductLanguage = 1033
    Property(S): ProductName = Sophos Client Firewall
    Property(S): ProductVersion = 2.5.0
    Property(S): ProgressType0 = install
    Property(S): ProgressType1 = Installing
    Property(S): ProgressType2 = installed
    Property(S): ProgressType3 = installs
    Property(S): RESTART_SERVICES = 1
    Property(S): RebootYesNo = Yes
    Property(S): RegisterWithAutoUpdate = {4DB41E90-DC56-41DC-B91E-9B8E537489A8};scf
    Property(S): ReinstallModeText = omus
    Property(S): SHOWLAUNCHPROGRAM = 0
    Property(S): SecureCustomProperties = MAJORUPGRADEINSTALL
    Property(S): UNINSTALLDRIVERS = ALL
    Property(S): UPGRADE_DRIVER_REBOOT = 0
    Property(S): VersionMsi = 5.00
    Property(S): InstallShieldTempProp = 0
    Property(S): VersionDatabase = 200
    Property(S): PRODUCTLANGUAGE = 1033
    Property(S): MsiSystemRebootPending = 1
    Property(S): CLIENTPROCESSID = 9628
    Property(S): CLIENTUILEVEL = 3
    Property(S): CURRENTDIRECTORY = C:\Users\Graham Home_PB\Documents
    Property(S): REMOVE = ALL
    Property(S): USERNAME = Graham Home_PB
    Property(S): REBOOT = SUPPRESS
    Property(S): RestrictedUserControl = 1
    Property(S): ProductToBeRegistered = 1
    Property(S): ProductState = 5
    Property(S): PackageCode = {1CB67048-8DDF-4A1A-A299-1A1BB5B0653D}
    Property(S): MsiLogFileLocation = C:\WINDOWS\Temp\Uninstall_SAV9-10_Log.txt
    Property(S): GPTSupport = 1
    Property(S): OLEAdvtSupport = 1
    Property(S): ShellAdvtSupport = 1
    Property(S): MsiAMD64 = 6
    Property(S): Msix64 = 6
    Property(S): Intel = 6
    Property(S): PhysicalMemory = 3036
    Property(S): VirtualMemory = 2059
    Property(S): LogonUser = Graham Home_PB
    Property(S): UserSID = S-1-5-21-3334529122-838391252-138077349-1000
    Property(S): UserLanguageID = 2057
    Property(S): ComputerName = GRAHAMHOME_PB
    Property(S): SystemLanguageID = 2057
    Property(S): ScreenX = 1024
    Property(S): ScreenY = 768
    Property(S): CaptionHeight = 23
    Property(S): BorderTop = 1
    Property(S): BorderSide = 1
    Property(S): MsiTabletPC = 1
    Property(S): TextHeight = 16
    Property(S): TextInternalLeading = 3
    Property(S): ColorBits = 32
    Property(S): TTCSupport = 1
    Property(S): Time = 17:07:27
    Property(S): Date = 12/01/2018
    Property(S): MsiNetAssemblySupport = 4.7.2556.0
    Property(S): MsiWin32AssemblySupport = 6.3.16299.15
    Property(S): RedirectedDllSupport = 2
    Property(S): AdminUser = 1
    Property(S): MsiRunningElevated = 1
    Property(S): Privileged = 1
    Property(S): DATABASE = C:\Windows\Installer\ca4ec1.msi
    Property(S): OriginalDatabase = C:\Windows\Installer\ca4ec1.msi
    Property(S): UILevel = 2
    Property(S): Preselected = 1
    Property(S): ACTION = INSTALL
    Property(S): SUPPORTDIR = C:\Users\GRAHAM~1\AppData\Local\Temp\{12C00299-B8B4-40D3-9663-66ABEA3198AB}
    Property(S): ISSETUPFILESCOMPLETED = Completed
    MSI (s) (CC:98) [17:07:27:891]: Note: 1: 1725
    MSI (s) (CC:98) [17:07:27:892]: Product: Sophos Client Firewall -- Removal failed.

    MSI (s) (CC:98) [17:07:27:893]: Windows Installer removed the product. Product Name: Sophos Client Firewall. Product Version: 2.5.0. Product Language: 1033. Manufacturer: Sophos Plc. Removal success or error status: 1603.

    MSI (s) (CC:98) [17:07:27:896]: Deferring clean up of packages/files, if any exist
    MSI (s) (CC:98) [17:07:27:897]: MainEngineThread is returning 1603
    MSI (s) (CC:FC) [17:07:27:897]: No System Restore sequence number for this installation.
    === Logging stopped: 12/01/2018 17:07:27 ===
    MSI (s) (CC:FC) [17:07:27:899]: User policy value 'DisableRollback' is 0
    MSI (s) (CC:FC) [17:07:27:899]: Machine policy value 'DisableRollback' is 0
    MSI (s) (CC:FC) [17:07:27:899]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (CC:FC) [17:07:27:900]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (s) (CC:FC) [17:07:27:901]: Destroying RemoteAPI object.
    MSI (s) (CC:CC) [17:07:27:901]: Custom Action Manager thread ending.
    MSI (c) (9C:30) [17:07:27:905]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (9C:30) [17:07:27:906]: MainEngineThread is returning 1603
    === Verbose logging stopped: 12/01/2018 17:07:27 ===

  • Given this error:

    MSI (s) (CC:98) [17:07:27:819]: Doing action: LaunchConditions
    Action ended 17:07:27: AppSearch. Return value 1.
    Action start 17:07:27: LaunchConditions.
    MSI (s) (CC:98) [17:07:27:821]: Product: Sophos Client Firewall -- The operating system does not support running Sophos Client Firewall.

    The operating system does not support running Sophos Client Firewall.
    Action ended 17:07:27: LaunchConditions. Return value 3.
    Action ended 17:07:27: INSTALL. Return value 3.

    I wonder if you could bypass this by editing the MSI file you're using to uninstall.  How about:

    1. Locate the file "Sophos Client Firewall.msi" which is in the AutoUpdate Cache directory. E..g \programdata\sophos\autoupdate\cache\...  I assume this is the same version as the version installed.  If not maybe try taking a copy of C:\Windows\Installer\ca4ec1.msi and editing that.

    2. Make a copy of it "Sophos Client Firewall.msi" so you have a backup.

    3. Create a new text file called editMSI.vbs (ensure it has the extension .vbs and not .vbs.txt) and paste the following.

    Dim oInstaller : Set oInstaller = CreateObject("WindowsInstaller.Installer")
    Dim oDatabase : Set oDatabase = oInstaller.OpenDatabase(WScript.Arguments(0),1)
    Dim sql : sql = "delete FROM `InstallExecuteSequence` WHERE `Action` = 'LaunchConditions'"
    Dim oUpdate : Set regView = oDatabase.OpenView(sql)
    oUpdate.Execute
    oDatabase.Commit
    oUpdate.Close
    Set oUpdate = Nothing
    Set oDatabase = Nothing
    Set oInstaller = Nothing

    4. Save the VBS file next to the "Sophos Client Firewall.msi" file.

    5. In a command prompt CD to the location of the file and run:
    cscript editmsi.vbs "Sophos Client Firewall.msi"

    This should update the file  "Sophos Client Firewall.msi", deleting the LaunchConditions action from the InstallExeccuteSequence table.

    6. Once edited, you could use this MSI to uninstall.

    MsiExec.exe /x "Sophos Client Firewall.msi" /qn REBOOT=SUPPRESS /L*v %windir%\Temp\SCFUninstallLog.txt 

     

    If this fails, maybe change the VBS line:

    Dim sql : sql = "delete FROM `InstallExecuteSequence` WHERE `Action` = 'LaunchConditions'"

    To

    Dim sql : sql = "delete FROM `InstallUISequence` WHERE `Action` = 'LaunchConditions'"

    To update the MSI file a second time (updating the other table that references this action) before retrying.

    Hope it help.

    Regards,

    Jak

  • jak

     

    Thanks, i followed the instructions but i am afraid it has not resulted in uninstall sophos cient firewall.. the same error still appears.

    Here is the log file

    === Verbose logging started: 14/01/2018 13:03:47 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\WINDOWS\system32\MsiExec.exe ===
    MSI (c) (34:90) [13:03:47:212]: Resetting cached policy values
    MSI (c) (34:90) [13:03:47:212]: Machine policy value 'Debug' is 0
    MSI (c) (34:90) [13:03:47:212]: ******* RunEngine:
    ******* Product: Sophos Client Firewall.msi
    ******* Action:
    ******* CommandLine: **********
    MSI (c) (34:90) [13:03:47:213]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (34:90) [13:03:50:214]: Failed to grab execution mutex. System error 258.
    MSI (c) (34:90) [13:03:50:267]: Cloaking enabled.
    MSI (c) (34:90) [13:03:50:267]: Attempting to enable all disabled privileges before calling Install on Server
    MSI (c) (34:90) [13:03:50:282]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (8C:48) [13:03:50:290]: Running installation inside multi-package transaction C:\WINDOWS\system32\Sophos Client Firewall.msi
    MSI (s) (8C:48) [13:03:50:290]: Grabbed execution mutex.
    MSI (s) (8C:7C) [13:03:50:293]: Resetting cached policy values
    MSI (s) (8C:7C) [13:03:50:293]: Machine policy value 'Debug' is 0
    MSI (s) (8C:7C) [13:03:50:293]: ******* RunEngine:
    ******* Product: C:\WINDOWS\system32\Sophos Client Firewall.msi
    ******* Action:
    ******* CommandLine: **********
    MSI (s) (8C:7C) [13:03:50:293]: Note: 1: 2203 2: C:\WINDOWS\system32\Sophos Client Firewall.msi 3: -2147287038
    MSI (s) (8C:7C) [13:03:50:294]: MainEngineThread is returning 2
    MSI (s) (8C:48) [13:03:50:296]: User policy value 'DisableRollback' is 0
    MSI (s) (8C:48) [13:03:50:296]: Machine policy value 'DisableRollback' is 0
    MSI (s) (8C:48) [13:03:50:297]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (8C:48) [13:03:50:298]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (34:90) [13:03:50:301]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (34:90) [13:03:50:302]: MainEngineThread is returning 2
    === Verbose logging stopped: 14/01/2018 13:03:50 ===

  • This message:

    Failed to grab execution mutex. System error 258.

    would suggest that MSI is performing another installation.

    If you wait/reboot and try again, do you keep getting this?

    Regards,

    Jak