Failed to install SAVXP: The MSI has failed (error code 00000067)

Sophos Endpoint Security and Control could not be successfully installed on this server, the situation appears to be that there are remaining Sophos components that cannot be removed, I have tried to use SophosZap but still failed, here is the log, thanks a lot!

 

5751.Sophos Anti-Virus Major CustomActions Log_200507_071900.txt
2020-05-07 15:19:01 ExtractClassicConfig: Action started

2020-05-07 15:19:01 ExtractClassicConfig: Action succeeded

2020-05-07 15:19:01 PreInstallChecks: Action started

2020-05-07 15:19:01 PreInstallChecks: Action succeeded

2020-05-07 15:19:02 SetBootDriverStartupProperty: Action started

2020-05-07 15:19:02 SetBootDriverStartupProperty: Boot driver: not installed.

2020-05-07 15:19:02 SetBootDriverStartupProperty: Action succeeded

2020-05-07 15:19:02 UpdateSavAdapterDll: Action started

2020-05-07 15:19:12 UpdateSavAdapterDll: Action succeeded

2020-05-07 15:19:12 SetClassFilterPresentProperty: Action started

2020-05-07 15:19:12 SetClassFilterPresentProperty: Setting class filter present property to: 0

2020-05-07 15:19:12 SetClassFilterPresentProperty: Action succeeded

2020-05-07 15:19:12 SetDriverProperty: Action started

2020-05-07 15:19:12 SetDriverProperty: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2020-05-07 15:19:12 SetDriverProperty: Action succeeded

2020-05-07 15:19:12 SetProcessorProperties: Action started

2020-05-07 15:19:12 SetProcessorProperties: Action succeeded

2020-05-07 15:19:12 SetRestoreExcludedProcessesProperty: Action started

2020-05-07 15:19:12 SetRestoreExcludedProcessesProperty: SetRestoreExcludedProcessesProperty

2020-05-07 15:19:12 SetRestoreExcludedProcessesProperty: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2020-05-07 15:19:12 SetRestoreExcludedProcessesProperty: Action succeeded

2020-05-07 15:19:20 CheckRegForNullDACLs: Action started

2020-05-07 15:19:20 CheckRegForNullDACLs: Action succeeded

2020-05-07 15:19:20 WaitForSAVService: Action started

2020-05-07 15:19:20 WaitForSAVService: WaitForSAVService: Walking system processes...

2020-05-07 15:19:20 WaitForSAVService: WaitForSAVService: Finished walking system processes.

2020-05-07 15:19:20 WaitForSAVService: Action succeeded

2020-05-07 15:19:20 CheckUninstallDrivers: Action started

2020-05-07 15:19:20 CheckUninstallDrivers: IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess control. Returning false.

2020-05-07 15:19:20 CheckUninstallDrivers: IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess filter. Returning false.

2020-05-07 15:19:20 CheckUninstallDrivers: Action succeeded

2020-05-07 15:19:20 DeleteIDEs: Action started

2020-05-07 15:19:20 DeleteIDEs: Action succeeded

2020-05-07 15:19:20 DeleteBDLs: Action started

2020-05-07 15:19:20 DeleteBDLs: Action succeeded

2020-05-07 15:19:20 DeleteHIPSConfig: Action started

2020-05-07 15:19:20 DeleteHIPSConfig: Action succeeded

2020-05-07 15:19:21 UpdateDesktopMessaging: Action started

2020-05-07 15:19:21 UpdateDesktopMessaging: UpdateDesktopMessaging: Could not delete SAVPlugin registry key(2)

2020-05-07 15:19:21 UpdateDesktopMessaging: Action succeeded

2020-05-07 15:19:21 CopyOtherFiles: Action started

2020-05-07 15:19:21 CopyOtherFiles: CopyOtherFiles custom action - Copying other driver files

2020-05-07 15:19:21 CopyOtherFiles: Copying class filter source: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\win7_amd64\SDCFILTER.INF, target: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\

2020-05-07 15:19:21 CopyOtherFiles: Copying boot driver source: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_amd64\SOPHOSBOOTDRIVER.INF, target: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\

2020-05-07 15:19:21 CopyOtherFiles: BopsCopyFiles: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\

2020-05-07 15:19:21 CopyOtherFiles: BopsCopyFiles, systemPath: C:\Windows\system32\SophosAV\

2020-05-07 15:19:21 CopyOtherFiles: GetRidOfExistingDetoured - C:\Windows\system32\SophosAV\sophos_detoured.dll does not exist, no further action.

2020-05-07 15:19:21 CopyOtherFiles: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2020-05-07 15:19:21 CopyOtherFiles: GetRidOfExistingDetoured - C:\Windows\system32\SophosAV\sophos_detoured_x64.dll does not exist, no further action.

2020-05-07 15:19:21 CopyOtherFiles: Copying boot tasks source: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_amd64\SophosBootTasks.exe, target: C:\Windows\system32\

2020-05-07 15:19:21 CopyOtherFiles: Action succeeded

2020-05-07 15:19:21 RegisterBufferOverflowProtection: Action started

2020-05-07 15:19:21 RegisterBufferOverflowProtection: UnregisterAppInitDLL: installDir: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\, module: detoured.dll, is64bit: N

2020-05-07 15:19:21 RegisterBufferOverflowProtection: UnregisterAppInitDLL: could not get short path to DLL. It will not be unregistered.

2020-05-07 15:19:21 RegisterBufferOverflowProtection: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.

2020-05-07 15:19:21 RegisterBufferOverflowProtection: UnregisterAppInitDLL: installDir: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\, module: sophos_detoured.dll, is64bit: N

2020-05-07 15:19:21 RegisterBufferOverflowProtection: UnregisterAppInitDLL: could not get short path to DLL. It will not be unregistered.

2020-05-07 15:19:21 RegisterBufferOverflowProtection: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll does not exist, no further action.

2020-05-07 15:19:21 RegisterBufferOverflowProtection: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2020-05-07 15:19:21 RegisterBufferOverflowProtection: UnregisterAppInitDLL: installDir: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\, module: sophos_detoured_x64.dll, is64bit: Y

2020-05-07 15:19:21 RegisterBufferOverflowProtection: UnregisterAppInitDLL: could not get short path to DLL. It will not be unregistered.

2020-05-07 15:19:21 RegisterBufferOverflowProtection: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll does not exist, no further action.

2020-05-07 15:19:21 RegisterBufferOverflowProtection: BOPS path already exists

2020-05-07 15:19:21 RegisterBufferOverflowProtection: BOPS path already exists

2020-05-07 15:19:21 RegisterBufferOverflowProtection: Action succeeded

2020-05-07 15:19:21 RestoreExcludedProcesses: Action started

2020-05-07 15:19:21 RestoreExcludedProcesses: RestoreExcludedProcesses

2020-05-07 15:19:21 RestoreExcludedProcesses: Empty excluded processes property. Nothing to be done.

2020-05-07 15:19:21 RestoreExcludedProcesses: Action succeeded

2020-05-07 15:19:21 native:InstallInfSection: Action started

2020-05-07 15:19:21 native:InstallInfSection: INF file: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_amd64\SOPHOSBOOTDRIVER.INF

2020-05-07 15:19:21 native:InstallInfSection: Warning: failed to register catalog file with the driver database for C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_amd64\SOPHOSBOOTDRIVER.INF, error = 0x0

2020-05-07 15:19:21 native:InstallInfSection: Action succeeded

2020-05-07 15:19:21 native:InstallInfSection: Action started

2020-05-07 15:19:21 native:InstallInfSection: INF file: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\win7_amd64\SAVONACCESSDRIV.INF

2020-05-07 15:19:22 native:InstallInfSection: Warning: failed to register catalog file with the driver database for C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\win7_amd64\SAVONACCESSDRIV.INF, error = 0x0

2020-05-07 15:19:22 native:InstallInfSection: Action succeeded

2020-05-07 15:19:22 native:InstallInfSection: Action started

2020-05-07 15:19:22 native:InstallInfSection: INF file: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\win7_amd64\SDCFILTER.INF

2020-05-07 15:19:23 native:InstallInfSection: Warning: failed to register catalog file with the driver database for C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\win7_amd64\SDCFILTER.INF, error = 0x0

2020-05-07 15:19:23 native:InstallInfSection: Action succeeded

2020-05-07 15:19:23 StartDriverServices: Action started

2020-05-07 15:19:23 StartDriverServices: IsServiceRunning: Unable to get a handle to requested service skmscan. Returning false.

2020-05-07 15:19:23 StartDriverServices: Unable to get a handle to kms service - service will not be started until next reboot

2020-05-07 15:19:23 StartDriverServices: Action succeeded

2020-05-07 15:19:24 CreateUserGroups: Action started

2020-05-07 15:19:25 CreateUserGroups: Local name of well-known group Administrators is Administrators

2020-05-07 15:19:25 CreateUserGroups: Local name of well-known group PowerUsers is Power Users

2020-05-07 15:19:25 CreateUserGroups: Local name of well-known group Users is Users

2020-05-07 15:19:25 CreateUserGroups: Failed to add the members of group PowerUsers to SophosPowerUser group

2020-05-07 15:19:25 CreateUserGroups: Adding LOCAL SYSTEM to the SophosAdministrator role in the machine file

2020-05-07 15:19:28 CreateUserGroups: Action succeeded

2020-05-07 15:19:29 PurgeIOfficeAVCache: Action started

2020-05-07 15:19:29 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2020-05-07 15:19:29 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2020-05-07 15:19:29 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2020-05-07 15:19:29 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2020-05-07 15:19:29 PurgeIOfficeAVCache: Opened key name S-1-5-21-3735748371-2670118343-3604632254-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{56FFCC30-D398-11D0-B2AE-00A0C908FA49}

2020-05-07 15:19:29 PurgeIOfficeAVCache: Unable to remove Enum sub key: 0x2

2020-05-07 15:19:29 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2020-05-07 15:19:29 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2020-05-07 15:19:29 PurgeIOfficeAVCache: Action succeeded

2020-05-07 15:19:29 EnableAttachmentScanning: Action started

2020-05-07 15:19:29 EnableAttachmentScanning: ScanWithAntiVirus value is already set to 3

2020-05-07 15:19:29 EnableAttachmentScanning: Action succeeded

2020-05-07 15:19:29 AddDomainGroups: Action started

2020-05-07 15:19:29 AddDomainGroups: SophosDomainUser not found: (1722) RPC :O
ghV!q�lO(u0



2020-05-07 15:19:29 AddDomainGroups: SophosDomainPowerUser not found: (1722) RPC :O
ghV!q�lO(u0



2020-05-07 15:19:29 AddDomainGroups: SophosDomainAdministrator not found: (1722) RPC :O
ghV!q�lO(u0



2020-05-07 15:19:29 AddDomainGroups: SophosDomainAdministrator group doesn't exist

2020-05-07 15:19:29 AddDomainGroups: SophosDomainPowerUser group doesn't exist

2020-05-07 15:19:29 AddDomainGroups: SophosDomainUser group doesn't exist

2020-05-07 15:19:29 AddDomainGroups: Action succeeded

2020-05-07 15:19:32 SetSAVAdminUpdateBegin: Action started

2020-05-07 15:19:32 SetSAVAdminUpdateBegin: Action succeeded

2020-05-07 15:19:32 UpdateSAVI: Action started

2020-05-07 15:19:32 UpdateSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate

2020-05-07 15:19:32 UpdateSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__

2020-05-07 15:19:32 UpdateSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate

2020-05-07 15:19:32 UpdateSAVI: UpdateRequest signalled

2020-05-07 15:19:32 UpdateSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended

2020-05-07 15:19:32 UpdateSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__

2020-05-07 15:19:32 UpdateSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended

2020-05-07 15:19:32 UpdateSAVI: MSCM version orig:  new: 0.3.0.90

2020-05-07 15:19:32 UpdateSAVI: Copying MSCM from: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\savmscm.dll to: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\savmscm.dll

2020-05-07 15:19:32 UpdateSAVI: Registered MSCM

2020-05-07 15:19:33 UpdateSAVI: SAVI dll was installed successfully

2020-05-07 15:19:33 UpdateSAVI: Action succeeded

2020-05-07 15:19:33 SetFolderPermissions: Action started

2020-05-07 15:19:33 SetFolderPermissions: We are running on XP or higher - adding LocalService to permissions on config files

2020-05-07 15:19:33 SetFolderPermissions: We are running on XP or higher - adding LocalService to permissions on config files

2020-05-07 15:19:33 SetFolderPermissions: Action succeeded

2020-05-07 15:19:33 SetServiceXP: Action started

2020-05-07 15:19:33 SetServiceXP: Action succeeded

2020-05-07 15:19:33 CreateTamperProtectionRegKey: Action started

2020-05-07 15:19:33 CreateTamperProtectionRegKey: Action succeeded

2020-05-07 15:19:33 SetSAVServiceSID: Action started

2020-05-07 15:19:33 SetSAVServiceSID: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2020-05-07 15:19:33 SetSAVServiceSID: Action succeeded

2020-05-07 15:19:33 SetServiceSecurity: Action started

2020-05-07 15:19:33 SetServiceSecurity: Adding SYSTEM_MANDATORY_LABEL_NO_EXECUTE_UP to SavService launch permissions

2020-05-07 15:19:33 SetServiceSecurity: Adding SYSTEM_MANDATORY_LABEL_NO_EXECUTE_UP to SavService launch permissions

2020-05-07 15:19:33 SetServiceSecurity: Action succeeded

2020-05-07 15:19:33 SetServiceRecoveryActions: Action started

2020-05-07 15:19:33 SetServiceRecoveryActions: Action succeeded

2020-05-07 15:19:33 InstallDeviceControl: Action started

2020-05-07 15:19:33 InstallDeviceControl: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2020-05-07 15:19:33 InstallDeviceControl: Action succeeded

2020-05-07 15:19:33 SetAdminGroupDescription: Action started

2020-05-07 15:19:33 SetAdminGroupDescription: Action succeeded

2020-05-07 15:19:33 SetPowerGroupDescription: Action started

2020-05-07 15:19:33 SetPowerGroupDescription: Action succeeded

2020-05-07 15:19:33 SetUserGroupDescription: Action started

2020-05-07 15:19:33 SetUserGroupDescription: Action succeeded

2020-05-07 15:19:33 SetOnAccessGroupDescription: Action started

2020-05-07 15:19:33 SetOnAccessGroupDescription: Action succeeded

2020-05-07 15:19:33 DisablePUADetection: Action started

2020-05-07 15:19:33 DisablePUADetection: Action succeeded

2020-05-07 15:19:33 DeleteExpiredCaches: Action started

2020-05-07 15:19:33 DeleteExpiredCaches: Action succeeded

2020-05-07 15:19:33 EnableJournals: Action started

2020-05-07 15:19:33 EnableJournals: Skipping journal action - server platform detected.

2020-05-07 15:19:33 EnableJournals: Action succeeded

2020-05-07 15:19:33 DisableWebProtection: Action started

2020-05-07 15:19:33 DisableWebProtection: DisableWebProtection: OK

2020-05-07 15:19:33 DisableWebProtection: Action succeeded

2020-05-07 15:19:33 DisableSxlLookups: Action started

2020-05-07 15:19:33 DisableSxlLookups: DisableSxlLookups: OK

2020-05-07 15:19:33 DisableSxlLookups: Action succeeded

2020-05-07 15:19:33 CheckSNMPDLLPresence: Action started

2020-05-07 15:19:33 CheckSNMPDLLPresence: Action succeeded

2020-05-07 15:19:34 UpdateSXLServerList: Action started

2020-05-07 15:19:34 UpdateSXLServerList: LoadSophtainerData: GetSophtainerSection(C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SXLConfig.dat) returned 0. (180 bytes returned)


2020-05-07 15:19:34 UpdateSXLServerList: ExtractSXLServerConf: 0, 4, 4

2020-05-07 15:19:34 UpdateSXLServerList: Action succeeded

2020-05-07 15:19:34 ApplySAVControlFile: Action started

2020-05-07 15:19:34 ApplySAVControlFile: Reading SAVControlFile from C:\ProgramData\Sophos\AutoUpdate\cache\savxp\savcontrol

2020-05-07 15:19:34 ApplySAVControlFile: `anonymous-namespace'::GetBoolValue: Value /FeatureControl/EnableBOPS in savcontrol json file not found, assumed default

2020-05-07 15:19:34 ApplySAVControlFile: Writing machine file C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml

2020-05-07 15:19:34 ApplySAVControlFile: Action succeeded

2020-05-07 15:19:34 GenerateSavMachineId: Action started

2020-05-07 15:19:34 GenerateSavMachineId: Sav machine id = 2589E739-AF3A-4295-89A0-E5B2359E5F69

2020-05-07 15:19:34 GenerateSavMachineId: Action succeeded

2020-05-07 15:19:34 RunPreLaunchScripts: Action started

2020-05-07 15:19:34 RunPreLaunchScripts: RunPreLaunchScripts: No entries.

2020-05-07 15:19:34 RunPreLaunchScripts: Action succeeded

2020-05-07 15:19:34 BootDriverStartup: Action started

2020-05-07 15:19:34 BootDriverStartup: Boot driver restored: disabled

2020-05-07 15:19:34 BootDriverStartup: Action succeeded

2020-05-07 15:19:34 SetSAVAdminUpdateComplete: Action started

2020-05-07 15:19:34 SetSAVAdminUpdateComplete: Action succeeded

2020-05-07 15:19:35 RegisterDCIfEnabled: Action started

2020-05-07 15:19:35 RegisterDCIfEnabled: isDCEnabled: node not found: /configuration/components/DeviceControlManager/settings/enabled

2020-05-07 15:19:35 RegisterDCIfEnabled: Action succeeded

2020-05-07 15:19:35 StartSAVServices: Action started

2020-05-07 15:19:58 StartSAVServices: Action succeeded

2020-05-07 15:20:00 UninstallSecurityCenter: Action started

2020-05-07 15:20:00 UninstallSecurityCenter: Action succeeded

2020-05-07 15:20:01 RollbackInstallDeviceControl: Action started

2020-05-07 15:20:01 RollbackInstallDeviceControl: Action succeeded

2020-05-07 15:20:02 RemoveTamperProtectionRegKey: Action started

2020-05-07 15:20:02 RemoveTamperProtectionRegKey: Action succeeded

2020-05-07 15:20:04 RemoveSAVI: Action started

2020-05-07 15:20:04 RemoveSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate

2020-05-07 15:20:04 RemoveSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__

2020-05-07 15:20:04 RemoveSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate

2020-05-07 15:20:04 RemoveSAVI: UpdateRequest signalled

2020-05-07 15:20:04 RemoveSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended

2020-05-07 15:20:04 RemoveSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__

2020-05-07 15:20:04 RemoveSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended

2020-05-07 15:20:04 RemoveSAVI: Action succeeded

2020-05-07 15:20:09 DeleteUserGroups: Action started

2020-05-07 15:20:09 DeleteUserGroups: We are not a domain controller: Attempting to delete local user groups

2020-05-07 15:20:09 DeleteUserGroups: Action succeeded

2020-05-07 15:20:10 native:InstallInfSection: Action started

2020-05-07 15:20:10 native:InstallInfSection: INF file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF

2020-05-07 15:20:11 native:InstallInfSection: Warning: failed to remove catalog file from the driver database for C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF, error = 0x8000ffff

2020-05-07 15:20:11 native:InstallInfSection: Action succeeded

2020-05-07 15:20:11 native:InstallInfSection: Action started

2020-05-07 15:20:11 native:InstallInfSection: INF file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF

2020-05-07 15:20:11 native:InstallInfSection: Warning: failed to remove catalog file from the driver database for C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF, error = 0x8000ffff

2020-05-07 15:20:11 native:InstallInfSection: Action succeeded

2020-05-07 15:20:11 native:InstallInfSection: Action started

2020-05-07 15:20:12 native:InstallInfSection: INF file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SDCFILTER.INF

2020-05-07 15:20:12 native:InstallInfSection: Warning: failed to remove catalog file from the driver database for C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SDCFILTER.INF, error = 0x8000ffff

2020-05-07 15:20:12 native:InstallInfSection: Action succeeded

2020-05-07 15:20:12 UpdateDesktopMessaging: Action started

2020-05-07 15:20:12 UpdateDesktopMessaging: UpdateDesktopMessaging: Could not delete SAVPlugin registry key(2)

2020-05-07 15:20:12 UpdateDesktopMessaging: Action succeeded

2020-05-07 15:20:12 DeleteOtherFiles: Action started

2020-05-07 15:20:12 DeleteOtherFiles: Unable to get list of engine files from C:\Program Files (x86)\Sophos\Sophos Anti-Virus\engsync.upd

2020-05-07 15:20:12 DeleteOtherFiles: Unregistered MSCM

2020-05-07 15:20:12 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll does not exist, no further action.

2020-05-07 15:20:12 DeleteOtherFiles: PROCESSOR_ARCHITECTURE environment variable is: AMD64

2020-05-07 15:20:12 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll does not exist, no further action.

2020-05-07 15:20:12 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.

2020-05-07 15:20:12 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Windows\system32\SophosAV\sophos_detoured.dll detoured exists, proceeding to rename it & mark for delete.

2020-05-07 15:20:12 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Windows\system32\SophosAV\sophos_detoured_x64.dll detoured exists, proceeding to rename it & mark for delete.

2020-05-07 15:20:12 DeleteOtherFiles: RemoveSophosAVDirectory: C:\Windows\system32\SophosAV\

2020-05-07 15:20:12 DeleteOtherFiles: RemoveSophosAVDirectory: Scheduling delete of SophosAV system directory on reboot (145).

2020-05-07 15:20:12 DeleteOtherFiles: RemoveSophosAVDirectory: C:\Windows\system32\SophosAV\ (wow64 disabled)

2020-05-07 15:20:12 DeleteOtherFiles: RemoveSophosAVDirectory: Scheduling delete of SophosAV system directory on reboot (145).

2020-05-07 15:20:12 DeleteOtherFiles: Deleting config file folder

2020-05-07 15:20:12 DeleteOtherFiles: Action succeeded

2020-05-07 15:20:12 ForceDeleteUserPlugin: Action started

2020-05-07 15:20:12 ForceDeleteUserPlugin: Error deleting user pluging registry key. Returned error was: �|q}~b
N0Rc�[�v�jHh0



2020-05-07 15:20:12 ForceDeleteUserPlugin: Action succeeded

2020-05-07 15:20:12 ForceDeleteFiles: Action started

2020-05-07 15:20:12 ForceDeleteFiles: Action succeeded

2020-05-07 15:20:13 RollbackUpdateSavAdapterDll: Action started

2020-05-07 15:20:13 RollbackUpdateSavAdapterDll: Action succeeded

2020-05-07 15:20:13 RunErrorScripts: Action started

2020-05-07 15:20:13 RunErrorScripts: Action succeeded

2020-05-07 15:20:13 RestoreMovedFiles: Action started

2020-05-07 15:20:13 RestoreMovedFiles: Action succeeded

2020-05-07 15:20:13 SetUpdateFailed: Action started

2020-05-07 15:20:13 SetUpdateFailed: Unable to create an instance of ComponentManager - SystemInformation cannot be informed of end of update

2020-05-07 15:20:13 SetUpdateFailed: Action succeeded

 

Sophos Anti-Virus Major Install Log_200507_071900.txt