Sophos Firewall Uninstall Fails

Uninstall of Sophos Firewall Fails

Verbose log file shows 2 return value 3 events:

MSI (s) (98:1C) [10:48:25:857]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI49C4.tmp, Entrypoint: UninstallSecurityCenter
MSI (s) (98:70) [10:48:25:982]: Executing op: ActionStart(Name=UninstallUnsignedDrivers,,)
MSI (s) (98:70) [10:48:25:982]: Executing op: CustomActionSchedule(Action=UninstallUnsignedDrivers,ActionType=1025,Source=BinaryData,Target=UninstallUnsignedDrivers,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Client Firewall\|ALL)
MSI (s) (98:FC) [10:48:25:982]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI4A42.tmp, Entrypoint: UninstallUnsignedDrivers
CustomAction UninstallUnsignedDrivers returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (98:70) [10:48:26:373]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (98:70) [10:48:26:373]: User policy value 'DisableRollback' is 0
MSI (s) (98:70) [10:48:26:373]: Machine policy value 'DisableRollback' is 0
Action ended 10:48:26: InstallFinalize. Return value 3.

 

MSI (s) (98:70) [10:48:27:217]: Executing op: RegRemoveKey()
MSI (s) (98:70) [10:48:27:217]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\TempPackages 3: 2
MSI (s) (98:70) [10:48:27:217]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A2BF508A448AABC40888AC4680D7951E\Transforms,,BinaryType=1,,)
MSI (s) (98:70) [10:48:27:217]: Executing op: RegRemoveKey()
MSI (s) (98:70) [10:48:27:217]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A2BF508A448AABC40888AC4680D7951E\Transforms 3: 2
MSI (s) (98:70) [10:48:27:217]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (98:70) [10:48:27:217]: Error in rollback skipped. Return: 5
MSI (s) (98:70) [10:48:27:232]: Note: 1: 2318 2:
MSI (s) (98:70) [10:48:27:232]: Calling SRSetRestorePoint API. dwRestorePtType: 13, dwEventType: 103, llSequenceNumber: 78, szDescription: "".
MSI (s) (98:70) [10:48:27:232]: The call to SRSetRestorePoint API succeeded. Returned status: 0.
MSI (s) (98:70) [10:48:27:232]: Unlocking Server
MSI (s) (98:70) [10:48:27:263]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 10:48:27: INSTALL. Return value 3.

 

I've tried all the forums I can find.  This is the last machine to migrate to the Cloud Central service.  All other 575 are done.  Only 2 components left on this system.  Sophos Client Firewall and Sophos Anti-Virus.  I thought firewall had been uninstalled in the correct order and proceeded with uninstall of other components.  But that uninstall failed, sop now the uninstall is out of order.