unable to uninstall Sophos endpoint agent?

Have you tried the steps in the following KB? https://community.sophos.com/kb/en-us/122040

Bohdan,

Thank you for your help.

Actually, from the sophos central console, I disable tamper protection for that computer. but it didn't work.

Also, as you can see in the picture, I'm not able to disable it locally. all setting are grey out. 

You need to Authenticate, using the Tamper password first, then the Disable option *should* be avaliable.

This is from the Local Machine

Also a community memeber ( https://community.sophos.com/products/free-antivirus-tools-for-desktops/f/sophos-anti-virus-for-mac-home-edition/9776/remove-sophos-but-no-tamper-protection-password ) seems to have found an unoffical way to reset the tamper password, not sure if that may assist? Maybe just changing the value "enabled" to "disabled" would work?

Also found a Blog article detailing removal without the tamper password: https://support.nutbourne.com/hc/en-us/articles/215884158-Uninstalling-Sophos-Endpoint-Security-Control-Without-Tamper-Protection-Password

I just have the Endpoint Agent on this machine, nothing else. I don't have access to any of those menus.

Also, I don't see sophos file in programs and features. Any ideas or solution to remove it? 

Do you have anybootstar or install logs in %temp% ( Start > Run > Type %temp% > OK )?

If so can you post them?

Do you have any Services starting with Sophos? If so try stopping them, and installing again.

I don't have anybootstar or install logs in %temp%.

in services, I have these ones:

• Sophos Autoupdate service
• Sophos data recorder
• Sophos health service
• heartbeat
• sophos MCS Agent
• sophos MCS Client
• sophos system protection service

I was wondering how can I remove it completely from the machine?

Try stoping all services starting with Sophos.

Programs and Features should have Applications starting with Sophos, since you have the Autoupdater installed.

With the services stopped, if you can try uninstalling, and the install again.

Well, unfortunately, I don't have any files in programs and features!!!!

I have sophos folder in Program Data that includes: " AutoUpdate,certificates,endpoint defense,health,hearbeat,management communication system,remote management system, sophos data recorder,sophos UI,web control "

Also,the similar folder in C: program files-sophos with 4 folders inside it

and another one in program files (x86).

in addition I check registry  and I see some files related to sophos.

what is your recommendation? Can I remove these folders manually? and clean the registry? does it works?

Try running the installer again, with the services stopped first.

Try running the installer again, with the services stopped first.

that's ridiculous!!!

Ias you said, i try to run the installer in safe mode and again I have the same error! "Tamper protection must be disabled"

All Sophos services are disabled now!

Any suggestions?

Try this KB article to remove via the command line: https://community.sophos.com/kb/en-us/109668

If that fails, you could always try removing everything manually, but that might leave you more broken: http://www.luther.edu/helpdesk/sophosuninstall/

https://community.sophos.com/kb/en-us/124377

@Jak, Bookmarked! Missed that one.