Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 4 subscribers
  • Views 3061 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Uninstall failed

Jurij Auer

Hey everyone,

we wanted to uninstall Sophos Endpoint Defense.

With the Enterprise Console we put the Targets we want to uninstall in a policy Group with tamper protaction disabeld.

The uninstallation does not go through properly.

We would be very happy to receive help.

Here is a log that i found in the %temp% folder:

Started C:\Program Files\Sophos\Endpoint Defense\SEDuninstall.exe
01.09.2020 17:09:00, INFO : Getting the SED Component version from C:\Program Files\Sophos\Endpoint Defense\integrity.dat
01.09.2020 17:09:00, INFO : Starting Sophos Endpoint Defense uninstallation (2.2.4.520)
01.09.2020 17:09:00, INFO : Operating system version is Win10 or greater and supports InstallELAMCertificate ...
01.09.2020 17:09:00, INFO : Disabled SEL driver and services protection.
01.09.2020 17:09:00, INFO : Disabled driver and services protection.
01.09.2020 17:09:00, INFO : Removed Sophos process keys under 'AppCompatFlags\Custom'
01.09.2020 17:09:00, INFO : Removed Sophos process keys under 'Image File Execution Options'
01.09.2020 17:09:00, INFO : Removed Sophos process keys under 'AppCompatFlags\Custom - WOW6432'
01.09.2020 17:09:00, INFO : Removed Sophos process keys under 'Image File Execution Options - WOW6432'
01.09.2020 17:09:00, INFO : Stopping Sophos System Protection Service ...
01.09.2020 17:09:00, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:01, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:02, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:03, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:04, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:05, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:06, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:07, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:08, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:09, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:10, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:11, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:12, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:13, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:14, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:15, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:16, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:17, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:18, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:19, WARNING : Could not open service - Sophos System Protection Service, error 1060.
01.09.2020 17:09:20, WARNING : Skipping stop service - Sophos System Protection Service is not installed.
01.09.2020 17:09:20, INFO : Stopping Sophos Endpoint Defense Service ...
01.09.2020 17:09:20, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:21, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:22, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:23, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:24, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:25, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:26, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:27, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:28, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:29, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:30, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:31, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:32, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:33, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:34, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:35, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:36, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:37, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:38, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:39, WARNING : Could not open service - Sophos Endpoint Defense Service, error 1060.
01.09.2020 17:09:40, WARNING : Skipping stop service - Sophos Endpoint Defense Service is not installed.
01.09.2020 17:09:40, WARNING : Sophos System Protection Service has already been removed from the Service Control Manager.
01.09.2020 17:09:40, WARNING : Sophos Endpoint Defense Service has already been removed from the Service Control Manager.
01.09.2020 17:09:40, WARNING : SophosEL.sys has already been removed from System32 drivers.
01.09.2020 17:09:40, INFO : Deleting C:\Windows\ELAMBKUP\SophosEL.sys
01.09.2020 17:09:40, WARNING : SophosEL.sys has already been removed from the ELAM driver Backup Path or BackupPath folder is missing
01.09.2020 17:09:40, WARNING : Sophos ELAM has already been removed from the Service Control Manager.
01.09.2020 17:09:40, INFO : Unloading driver...
01.09.2020 17:10:10, ERROR : FilterUnload error 0x801f0010
01.09.2020 17:10:10, ERROR : Failed to uninstall: Failed to unload Sophos Endpoint Defense driver



This thread was automatically locked due to age.
Parents
  • 0

    You seem to uninstall all components only fail to unload the driver. Been a while not using Sophos Enterprise console, so i dont remember the driver names. Try to open a cmd with Admin rights and check drivers with "fltmc". Learn exact name of driver if you can and try to manually unload it "fltmc unload somedriver". if it still gives error, then you will need to reboot the device and try again. (in case its hooked to kernel it wont let go unless reboot) Also you can try to reboot and run uninstaller again.

Reply
  • 0

    You seem to uninstall all components only fail to unload the driver. Been a while not using Sophos Enterprise console, so i dont remember the driver names. Try to open a cmd with Admin rights and check drivers with "fltmc". Learn exact name of driver if you can and try to manually unload it "fltmc unload somedriver". if it still gives error, then you will need to reboot the device and try again. (in case its hooked to kernel it wont let go unless reboot) Also you can try to reboot and run uninstaller again.

Children
No Data
Unfiltered HTML