Got a big probem with this issue, every computer on my domain is exhibiting it.
Using Enterprise Console 4 with SAV9. When deploying to computers from the console it simply reports 'the msi has failed'. RMS and Auto Update install OK, it's the Sophos Anti Virus MSI that fails.
if installing manually on a client, again RMS and Auto Update are OK, but the SAV MSI gets right to the end of the installation (removing backup files) before rolling back the install and erroring).
Inspection of the Sophos Anti Virus install log determines these actions to be the reason for the failure:
MSI (s) (FC:DC) [22:54:16:537]: Executing op: ComponentUnregister(ComponentId={484E3E44-1A83-4137-BAA1-B984E5636086},ProductKey={9ACB414D-9347-40B6-A453-5EFB2DB59DFA},BinaryType=0,)
MSI (s) (FC:DC) [22:54:16:537]: Executing op: ComponentUnregister(ComponentId={FE613E3D-0469-40F8-9A0F-635D16097928},ProductKey={9ACB414D-9347-40B6-A453-5EFB2DB59DFA},BinaryType=0,)
MSI (s) (FC:DC) [22:54:16:537]: Executing op: ComponentUnregister(ComponentId={F4E436FD-FE28-4278-86D5-E3412859F5E5},ProductKey={9ACB414D-9347-40B6-A453-5EFB2DB59DFA},BinaryType=0,)
MSI (s) (FC:DC) [22:54:16:537]: Executing op: ComponentUnregister(ComponentId={A153DC07-D119-4900-B5D1-F671EC25C7EB},ProductKey={9ACB414D-9347-40B6-A453-5EFB2DB59DFA},BinaryType=0,)
MSI (s) (FC:DC) [22:54:16:537]: Executing op: ComponentUnregister(ComponentId={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},ProductKey={9ACB414D-9347-40B6-A453-5EFB2DB59DFA},BinaryType=0,)
MSI (s) (FC:DC) [22:54:16:537]: Executing op: ActionStart(Name=RunErrorScript,,)
MSI (s) (FC:DC) [22:54:16:537]: Executing op: CustomActionRollback(Action=RunErrorScript,ActionType=1345,Source=BinaryData,Target=RunErrorScripts,CustomActionData="C:\Program Files\Sophos\Sophos Anti-Virus\""C:\Program Files\Sophos\AutoUpdate\cache\savxp\""9.0.5")
MSI (s) (FC:A8) [22:54:16:553]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI1B5.tmp, Entrypoint: RunErrorScripts
MSI (s) (FC:DC) [22:54:16:568]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,)
MSI (s) (FC:DC) [22:54:16:568]: Executing op: ActionStart(Name=SetUpdateFailed,,)
MSI (s) (FC:DC) [22:54:16:568]: Executing op: CustomActionRollback(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,)
MSI (s) (FC:04) [22:54:16:584]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI1B6.tmp, Entrypoint: SetUpdateFailed
MSI (s) (FC:DC) [22:54:16:600]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (FC:DC) [22:54:16:600]: Error in rollback skipped. Return: 5
MSI (s) (FC:DC) [22:54:16:615]: No System Restore sequence number for this installation.
MSI (s) (FC:DC) [22:54:16:615]: Unlocking Server
MSI (s) (FC:DC) [22:54:16:615]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 22:54:16: InstallFinalize. Return value 3.
Action ended 22:54:16: INSTALL. Return value 3.
Does anyone have an idea of how I recover this? I have tried reinstalling the server, and have exhausted all Sophos KBs that relate to anything similar. I have also tried dozens of client-side fixes (msi reregistration, MSI cleanup, etc).
It's worth mentioning that all clients have or have had old versions of SAV 7 on them, but I have removed all traces (I think) of this with the Sophos-provided Sophos Endpoint 9 removal .msu, and still the MSI fails.
I can post the full log if necessary.
Any advice would be greatly appreciated. Thanks.
This thread was automatically locked due to age.
