This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Firewall Uninstall Fails

Uninstall of Sophos Firewall Fails

Verbose log file shows 2 return value 3 events:

MSI (s) (98:1C) [10:48:25:857]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI49C4.tmp, Entrypoint: UninstallSecurityCenter
MSI (s) (98:70) [10:48:25:982]: Executing op: ActionStart(Name=UninstallUnsignedDrivers,,)
MSI (s) (98:70) [10:48:25:982]: Executing op: CustomActionSchedule(Action=UninstallUnsignedDrivers,ActionType=1025,Source=BinaryData,Target=UninstallUnsignedDrivers,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Client Firewall\|ALL)
MSI (s) (98:FC) [10:48:25:982]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI4A42.tmp, Entrypoint: UninstallUnsignedDrivers
CustomAction UninstallUnsignedDrivers returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (98:70) [10:48:26:373]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (98:70) [10:48:26:373]: User policy value 'DisableRollback' is 0
MSI (s) (98:70) [10:48:26:373]: Machine policy value 'DisableRollback' is 0
Action ended 10:48:26: InstallFinalize. Return value 3.

 

MSI (s) (98:70) [10:48:27:217]: Executing op: RegRemoveKey()
MSI (s) (98:70) [10:48:27:217]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\TempPackages 3: 2
MSI (s) (98:70) [10:48:27:217]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A2BF508A448AABC40888AC4680D7951E\Transforms,,BinaryType=1,,)
MSI (s) (98:70) [10:48:27:217]: Executing op: RegRemoveKey()
MSI (s) (98:70) [10:48:27:217]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A2BF508A448AABC40888AC4680D7951E\Transforms 3: 2
MSI (s) (98:70) [10:48:27:217]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (98:70) [10:48:27:217]: Error in rollback skipped. Return: 5
MSI (s) (98:70) [10:48:27:232]: Note: 1: 2318 2:
MSI (s) (98:70) [10:48:27:232]: Calling SRSetRestorePoint API. dwRestorePtType: 13, dwEventType: 103, llSequenceNumber: 78, szDescription: "".
MSI (s) (98:70) [10:48:27:232]: The call to SRSetRestorePoint API succeeded. Returned status: 0.
MSI (s) (98:70) [10:48:27:232]: Unlocking Server
MSI (s) (98:70) [10:48:27:263]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 10:48:27: INSTALL. Return value 3.

 

I've tried all the forums I can find.  This is the last machine to migrate to the Cloud Central service.  All other 575 are done.  Only 2 components left on this system.  Sophos Client Firewall and Sophos Anti-Virus.  I thought firewall had been uninstalled in the correct order and proceeded with uninstall of other components.  But that uninstall failed, sop now the uninstall is out of order.



This thread was automatically locked due to age.
Parents Reply Children
  • Barb,

        Thanks for the reply.  I had tried those.  I finally went through the registry and removed everything Sophos.  Then removed the folders and deleted the services.  That allowed me to install the Sophos Central version over top.

     

    Fly Navy,

     

    Scott