This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Uninstall Sophos endpoint security and control

My PC (Windows XP) has been running Sophos endpoint security and control for many years i a domain environment.

When I retired the PC was disconnected from the domain and the updates are not running any longer.

I still have the PC and need to uninstall this software.

In Add or Remove programs three Sophos entries:

Sophos Anti-Virus

Sophos AutoUpdate

Sophos Remote Management System

How should I do?

:33387


This thread was automatically locked due to age.
  • HI,

    It doesn't really matter but I would suggest for this sceanrio performing the following steps:

    1. Ensure the process AlUpdate.exe isn't running (TaskManager - End process Alupdate.exe if exists)  (This is just to ensure that an AutoUpdate isn't trying to update).  If it was you'd get a warning but this will save that.

    2. Uninstall RMS

    3. Uninstall SAV

    4. Uninstall AutoUpdate

    5. Restart the computer, then to clear up if that's all Sophos application:
    Delete: "C:\program files\sophos\" and/or "C:\Program Files (x86)\Sophos\"

    Note: It doesn't really matter what order for this sceanrio, the only reason I've suggested AutoUpdate last, is that this will ensure that install files of the other two are kept until they are removed just incase they are required to help with the removal.  

    Regards,

    Jak

    :33389
  • I am also trying to uninstall Sophos Endpoint from an XP Pro (SR3) computer too.  I have disabled Tamper Protection and been able (through Control Panel - Remove Programs) to remove the SOPHOS AUTO-UPDATING.

    I then tried to remove the FIREWALL program but got ERROR 1324. The path My Pictures contains an invalid character.

    How do I proceed?

    Paul

  • Hello Paul,

    could you show the corresponding log?

    Christian

  • Where do I find that Christian please?

  • Hello Paul,

    sorry, my bad, uninstalling from the Control Panel likely doesn't create a log. You'd have to run msiexec.exe from the command line, please see the How to uninstall ... article for details it also tells how to request a log. Unfortunately my XP no longer exists - I'd have given you the exact parameters otherwise.

    Christian 

  • I have created the following batch file Christian - how does it look to you?  I do not know exactly what I am doing!!

    MsiExec.exe /X{A805FB2A-A844-4cba-8088-CA64087D59E1} /qn REBOOT=SUPPRESS/L*v %windir%\Temp\Uninstall_SAV9-10_SophosLog1.txt
    MsiExec.exe /X{09863DA9-7A9B-4430-9561-E04D178D7017} /qn REBOOT=SUPPRESS/L*v %windir%\Temp\Uninstall_SAV9-10_SophosLog2.txt

  • Hello Paul,

    the first is one of the firewalls (2.9 or 3.0), the second SAV - these are the only ones (and you've found them in the registry) remaining? Looks ok and should write the logs.

    Christian

  • Well I ran it ... but no files named SophosLog1.txt or SophosLog2.txt were written or found in SEARCH the entire hard drive.

    I just wonder now just what do I have to do now to just get rid of SOPHOS?  My trial time for trying out the new software that I want to try is almost over and it has taken 55 days of a 60 day trial to uninstall SOPHOS and I am no further forward.  Very exasperating!

  • Hello Paul,

    just ran your first command (adding a space between SUPPRESS and /L - which is likely just an omission int the post as otherwise msiexec.exe would pop up the help window) and did get ...Log1.txt (slightly over 30 lines) in the %windir%\Temp\ directory. You should get either an error telling you that msiexec.exe could be run at all or crashed immediately, the help pop-up (in case of incorrect parameters or syntax), or the log in the specified location. You should not get no output or feedback at all when you try to run  (regardless of the parameters).

    Christian

  • Thank you for the syntax correction and this time, for the firewall I got the following return:

    === Verbose logging started: 11/29/2017  6:09:51  Build type: SHIP UNICODE 3.01.4001.5512  Calling process: C:\windows\system32\msiexec.exe ===
    MSI (c) (38:30) [06:09:51:640]: Resetting cached policy values
    MSI (c) (38:30) [06:09:51:640]: Machine policy value 'Debug' is 0
    MSI (c) (38:30) [06:09:51:640]: ******* RunEngine:
               ******* Product: {A805FB2A-A844-4cba-8088-CA64087D59E1}
               ******* Action:
               ******* CommandLine: **********
    MSI (c) (38:30) [06:09:51:640]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (38:30) [06:09:51:640]: Grabbed execution mutex.
    MSI (c) (38:30) [06:09:51:720]: Cloaking enabled.
    MSI (c) (38:30) [06:09:51:720]: Attempting to enable all disabled priveleges before calling Install on Server
    MSI (c) (38:30) [06:09:51:730]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (08:64) [06:09:51:750]: Grabbed execution mutex.
    MSI (s) (08:F4) [06:09:51:750]: Resetting cached policy values
    MSI (s) (08:F4) [06:09:51:750]: Machine policy value 'Debug' is 0
    MSI (s) (08:F4) [06:09:51:750]: ******* RunEngine:
               ******* Product: {A805FB2A-A844-4cba-8088-CA64087D59E1}
               ******* Action:
               ******* CommandLine: **********
    MSI (s) (08:F4) [06:09:51:750]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (08:F4) [06:09:51:790]: End dialog not enabled
    MSI (s) (08:F4) [06:09:51:790]: Original package ==> c:\windows\Installer\9a137.msi
    MSI (s) (08:F4) [06:09:51:790]: Package we're running from ==> c:\windows\Installer\9a137.msi
    MSI (s) (08:F4) [06:09:51:850]: APPCOMPAT: looking for appcompat database entry with ProductCode '{A805FB2A-A844-4CBA-8088-CA64087D59E1}'.
    MSI (s) (08:F4) [06:09:51:850]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (08:F4) [06:09:51:870]: MSCOREE not loaded loading copy from system32
    MSI (s) (08:F4) [06:09:51:930]: Machine policy value 'DisablePatch' is 0
    MSI (s) (08:F4) [06:09:51:930]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (08:F4) [06:09:51:930]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (08:F4) [06:09:51:930]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (08:F4) [06:09:51:930]: APPCOMPAT: looking for appcompat database entry with ProductCode '{A805FB2A-A844-4CBA-8088-CA64087D59E1}'.
    MSI (s) (08:F4) [06:09:51:930]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (08:F4) [06:09:51:930]: Transforms are not secure.
    MSI (s) (08:F4) [06:09:51:930]: Command Line: REBOOT=SUPPRESS REMOVE=ALL CURRENTDIRECTORY=C:\ CLIENTUILEVEL=3 CLIENTPROCESSID=312
    MSI (s) (08:F4) [06:09:51:930]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{9D59C617-3854-4FBF-95F2-ED33037DB8E5}'.
    MSI (s) (08:F4) [06:09:51:930]: Product Code passed to Engine.Initialize:           '{A805FB2A-A844-4cba-8088-CA64087D59E1}'
    MSI (s) (08:F4) [06:09:51:930]: Product Code from property table before transforms: '{A805FB2A-A844-4CBA-8088-CA64087D59E1}'
    MSI (s) (08:F4) [06:09:51:930]: Product Code from property table after transforms:  '{A805FB2A-A844-4cba-8088-CA64087D59E1}'
    MSI (s) (08:F4) [06:09:51:930]: Product registered: entering maintenance mode
    MSI (s) (08:F4) [06:09:51:930]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'.
    MSI (s) (08:F4) [06:09:51:930]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
    MSI (s) (08:F4) [06:09:51:930]: Package name retrieved from configuration data: 'Sophos Client Firewall.msi'
    MSI (s) (08:F4) [06:09:51:930]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
    MSI (s) (08:F4) [06:09:51:940]: Note: 1: 2729
    MSI (s) (08:F4) [06:09:51:950]: Note: 1: 2729
    MSI (s) (08:F4) [06:09:51:950]: Note: 1: 2262 2: AdminProperties 3: -2147287038
    MSI (s) (08:F4) [06:09:51:950]: Machine policy value 'DisableMsi' is 0
    MSI (s) (08:F4) [06:09:51:950]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (08:F4) [06:09:51:950]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (08:F4) [06:09:51:950]: Product {A805FB2A-A844-4CBA-8088-CA64087D59E1} is admin assigned: LocalSystem owns the publish key.
    MSI (s) (08:F4) [06:09:51:950]: Product {A805FB2A-A844-4CBA-8088-CA64087D59E1} is managed.
    MSI (s) (08:F4) [06:09:51:950]: Running product '{A805FB2A-A844-4CBA-8088-CA64087D59E1}' with elevated privileges: Product is assigned.
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'SUPPRESS'.
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding REMOVE property. Its value is 'ALL'.
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\'.
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '312'.
    MSI (s) (08:F4) [06:09:51:950]: TRANSFORMS property is now:
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'.
    MSI (s) (08:F4) [06:09:51:950]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
    MSI (s) (08:F4) [06:09:51:950]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Application Data
    MSI (s) (08:F4) [06:09:51:950]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Favorites
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\NetHood
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\My Documents
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\PrintHood
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Recent
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\SendTo
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Templates
    MSI (s) (08:F4) [06:09:51:960]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Application Data
    MSI (s) (08:F4) [06:09:51:970]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Local Settings\Application Data
    MSI (s) (08:F4) [06:09:51:970]: SHELL32::SHGetFolderPath returned: \\PC\My Documents\My Pictures
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Startup
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Desktop
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu\Programs\Administrative Tools
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu\Programs\Startup
    MSI (s) (08:F4) [06:09:52:170]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu\Programs
    MSI (s) (08:F4) [06:09:52:180]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Start Menu
    MSI (s) (08:F4) [06:09:52:180]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Paul\Desktop
    MSI (s) (08:F4) [06:09:52:180]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Templates
    MSI (s) (08:F4) [06:09:52:180]: SHELL32::SHGetFolderPath returned: C:\windows\Fonts
    MSI (s) (08:F4) [06:09:52:220]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Paul'.
    MSI (s) (08:F4) [06:09:52:220]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding Installed property. Its value is '2015/07/09 08:29:44'.
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'c:\windows\Installer\9a137.msi'.
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'c:\windows\Installer\9a137.msi'.
    MSI (s) (08:F4) [06:09:52:220]: Note: 1: 2262 2: PatchPackage 3: -2147287038
    MSI (s) (08:F4) [06:09:52:220]: Machine policy value 'DisableRollback' is 0
    MSI (s) (08:F4) [06:09:52:220]: User policy value 'DisableRollback' is 0
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
    === Logging started: 11/29/2017  6:09:52 ===
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding Preselected property. Its value is '1'.
    MSI (s) (08:F4) [06:09:52:220]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
    MSI (s) (08:F4) [06:09:52:220]: Doing action: INSTALL
    MSI (s) (08:F4) [06:09:52:240]: Running ExecuteSequence
    MSI (s) (08:F4) [06:09:52:240]: Doing action: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7
    Action start 6:09:52: INSTALL.
    MSI (s) (08:F4) [06:09:52:240]: PROPERTY CHANGE: Adding ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'C:\Program Files\'.
    Action start 6:09:52: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7.
    MSI (s) (08:F4) [06:09:52:240]: Doing action: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7
    Action ended 6:09:52: ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
    MSI (s) (08:F4) [06:09:52:240]: PROPERTY CHANGE: Adding CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'C:\Program Files\Common Files\'.
    Action start 6:09:52: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7.
    MSI (s) (08:F4) [06:09:52:240]: Doing action: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF
    Action ended 6:09:52: CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
    MSI (s) (08:F4) [06:09:52:240]: PROPERTY CHANGE: Adding SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\windows\system32\'.
    Action start 6:09:52: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF.
    MSI (s) (08:F4) [06:09:52:240]: Doing action: AppSearch
    Action ended 6:09:52: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF. Return value 1.
    Action start 6:09:52: AppSearch.
    MSI (s) (08:F4) [06:09:52:250]: Note: 1: 2262 2: CompLocator 3: -2147287038
    MSI (s) (08:F4) [06:09:52:250]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FED1005D-CBC8-45D5-A288-FFC7BB304121} 3: 2
    MSI (s) (08:F4) [06:09:52:250]: Note: 1: 2262 2: IniLocator 3: -2147287038
    MSI (s) (08:F4) [06:09:52:250]: Note: 1: 2262 2: DrLocator 3: -2147287038
    MSI (s) (08:F4) [06:09:52:250]: Note: 1: 2262 2: CompLocator 3: -2147287038
    MSI (s) (08:F4) [06:09:52:250]: PROPERTY CHANGE: Adding SAV6 property. Its value is 'YES'.
    MSI (s) (08:F4) [06:09:52:250]: Doing action: LaunchConditions
    Action ended 6:09:52: AppSearch. Return value 1.
    Action start 6:09:52: LaunchConditions.
    MSI (s) (08:F4) [06:09:52:250]: Doing action: TP_CheckRemoveAllowed
    Action ended 6:09:52: LaunchConditions. Return value 1.
    MSI (s) (08:68) [06:09:52:280]: Invoking remote custom action. DLL: C:\windows\Installer\MSI25.tmp, Entrypoint: TP_CheckRemoveAllowed
    MSI (s) (08:6C) [06:09:52:280]: Generating random cookie.
    MSI (s) (08:6C) [06:09:52:290]: Created Custom Action Server with PID 2064 (0x810).
    MSI (s) (08:2C) [06:09:52:341]: Running as a service.
    MSI (s) (08:2C) [06:09:52:341]: Hello, I'm your 32bit Impersonated custom action server.
    Action start 6:09:52: TP_CheckRemoveAllowed.
    UninstallCheck failed (77)
    MSI (s) (08:F4) [06:09:52:391]: Skipping action: ISSetAllUsers (condition is false)
    MSI (s) (08:F4) [06:09:52:391]: Doing action: FindRelatedProducts
    Action ended 6:09:52: TP_CheckRemoveAllowed. Return value 1.
    MSI (s) (08:F4) [06:09:52:391]: Skipping FindRelatedProducts action: not run in maintenance mode
    Action start 6:09:52: FindRelatedProducts.
    MSI (s) (08:F4) [06:09:52:391]: Skipping action: CCPSearch (condition is false)
    MSI (s) (08:F4) [06:09:52:391]: Skipping action: RMCCPSearch (condition is false)
    MSI (s) (08:F4) [06:09:52:391]: Doing action: ValidateProductID
    Action ended 6:09:52: FindRelatedProducts. Return value 0.
    Action start 6:09:52: ValidateProductID.
    MSI (s) (08:F4) [06:09:52:401]: Doing action: setUserProfileNT
    Action ended 6:09:52: ValidateProductID. Return value 1.
    MSI (s) (08:F4) [06:09:52:401]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Documents and Settings\Paul'.
    Action start 6:09:52: setUserProfileNT.
    MSI (s) (08:F4) [06:09:52:401]: Skipping action: SetAllUsersProfileNT (condition is false)
    MSI (s) (08:F4) [06:09:52:401]: Doing action: setAllUsersProfile2K
    Action ended 6:09:52: setUserProfileNT. Return value 1.
    MSI (s) (08:F4) [06:09:52:401]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\Documents and Settings\All Users'.
    Action start 6:09:52: setAllUsersProfile2K.
    MSI (s) (08:F4) [06:09:52:401]: Doing action: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF
    Action ended 6:09:52: setAllUsersProfile2K. Return value 1.
    MSI (s) (08:F4) [06:09:52:401]: PROPERTY CHANGE: Adding WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\windows\'.
    Action start 6:09:52: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF.
    MSI (s) (08:F4) [06:09:52:401]: Doing action: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4
    Action ended 6:09:52: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF. Return value 1.
    MSI (s) (08:F4) [06:09:52:401]: PROPERTY CHANGE: Adding WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\windows\'.
    Action start 6:09:52: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4.
    MSI (s) (08:F4) [06:09:52:401]: Doing action: DIRCA_NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7
    Action ended 6:09:52: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4. Return value 1.
    Action start 6:09:52: DIRCA_NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7.
    MSI (s) (08:F4) [06:09:52:401]: Doing action: CostInitialize
    Action ended 6:09:52: DIRCA_NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7. Return value 1.
    MSI (s) (08:F4) [06:09:52:401]: Machine policy value 'MaxPatchCacheSize' is 10
    Action start 6:09:52: CostInitialize.
    MSI (s) (08:F4) [06:09:52:701]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:701]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
    MSI (s) (08:F4) [06:09:52:701]: Note: 1: 2262 2: Patch 3: -2147287038
    MSI (s) (08:F4) [06:09:52:701]: Note: 1: 2262 2: PatchPackage 3: -2147287038
    MSI (s) (08:F4) [06:09:52:701]: Note: 1: 2205 2:  3: MsiPatchHeaders
    MSI (s) (08:F4) [06:09:52:701]: Note: 1: 2205 2:  3: __MsiPatchFileList
    MSI (s) (08:F4) [06:09:52:701]: Skipping action: ISInitAllUsers (condition is false)
    MSI (s) (08:F4) [06:09:52:701]: Skipping action: ResolveSource (condition is false)
    MSI (s) (08:F4) [06:09:52:701]: Doing action: FileCost
    Action ended 6:09:52: CostInitialize. Return value 1.
    MSI (s) (08:F4) [06:09:52:771]: Note: 1: 2262 2: RemoveFile 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: Extension 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: IniFile 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: MoveFile 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: DuplicateFile 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: ReserveCost 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: Shortcut 3: -2147287038
    Action start 6:09:52: FileCost.
    MSI (s) (08:F4) [06:09:52:841]: Doing action: IsolateComponents
    Action ended 6:09:52: FileCost. Return value 1.
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: BindImage 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2262 2: IsolatedComponent 3: -2147287038
    MSI (s) (08:F4) [06:09:52:841]: Note: 1: 2728 2: Patch
    Action start 6:09:52: IsolateComponents.
    MSI (s) (08:F4) [06:09:52:841]: Doing action: CostFinalize
    Action ended 6:09:52: IsolateComponents. Return value 1.
    MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
    MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
    MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
    MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
    MSI (s) (08:F4) [06:09:52:841]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
    MSI (s) (08:F4) [06:09:52:901]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'c:\Program Files\Sophos\Sophos Client Firewall'.
    Action start 6:09:52: CostFinalize.
    MSI (s) (08:F4) [06:09:52:911]: PROPERTY CHANGE: Adding LOGS property. Its value is 'c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall\logs'.
    MSI (s) (08:F4) [06:09:52:911]: PROPERTY CHANGE: Adding SOPHOS_CLIENT_FIREWALL1 property. Its value is 'c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall'.
    MSI (s) (08:F4) [06:09:52:911]: PROPERTY CHANGE: Adding _6F3B9B6A1D764E649303ABFBEEA6559C.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'c:\Program Files\Common Files\Sophos\Sophos Client Firewall'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its current value is 'C:\Program Files\'. Its new value: 'c:\Program Files\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 property. Its current value is 'C:\Program Files\Common Files\'. Its new value: 'c:\Program Files\Common Files\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding _5200F2F08A1843FFB73833298A0CDE07.B817F5915D4641D694EABCC98F20F7B7 property. Its value is 'c:\Program Files\Common Files\Sophos\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying _6F3B9B6A1D764E649303ABFBEEA6559C.B817F5915D4641D694EABCC98F20F7B7 property. Its current value is 'c:\Program Files\Common Files\Sophos\Sophos Client Firewall'. Its new value: 'c:\Program Files\Common Files\Sophos\Sophos Client Firewall\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its current value is 'C:\windows\'. Its new value: 'c:\windows\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\Policies\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'c:\windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its current value is 'C:\windows\'. Its new value: 'c:\windows\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\Policies\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\Manifests\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its current value is 'C:\windows\system32\'. Its new value: 'c:\windows\system32\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying WindowsFolder property. Its current value is 'C:\windows\'. Its new value: 'c:\windows\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Documents and Settings\Paul'. Its new value: 'c:\Documents and Settings\Paul\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying TemplateFolder property. Its current value is 'C:\Documents and Settings\All Users\Templates\'. Its new value: 'c:\Documents and Settings\All Users\Templates\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying TempFolder property. Its current value is 'C:\DOCUME~1\Paul\LOCALS~1\Temp\'. Its new value: 'c:\DOCUME~1\Paul\LOCALS~1\Temp\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying SystemFolder property. Its current value is 'C:\windows\system32\'. Its new value: 'c:\windows\system32\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding System64Folder property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying System16Folder property. Its current value is 'C:\windows\system\'. Its new value: 'c:\windows\system\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying StartupFolder property. Its current value is 'C:\Documents and Settings\All Users\Start Menu\Programs\Startup\'. Its new value: 'c:\Documents and Settings\All Users\Start Menu\Programs\Startup\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying StartMenuFolder property. Its current value is 'C:\Documents and Settings\All Users\Start Menu\'. Its new value: 'c:\Documents and Settings\All Users\Start Menu\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying SendToFolder property. Its current value is 'C:\Documents and Settings\Paul\SendTo\'. Its new value: 'c:\Documents and Settings\Paul\SendTo\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying ProgramMenuFolder property. Its current value is 'C:\Documents and Settings\All Users\Start Menu\Programs\'. Its new value: 'c:\Documents and Settings\All Users\Start Menu\Programs\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding ProgramFiles64Folder property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'c:\'.
    MSI (s) (08:F4) [06:09:52:921]: PROPERTY CHANGE: Modifying PersonalFolder property. Its current value is 'C:\Documents and Settings\Paul\My Documents\'. Its new value: 'c:\Documents and Settings\Paul\My Documents\'.
    MSI (s) (08:F4) [06:09:53:062]: Note: 1: 2303 2: 1130 3: \\PC\My Documents\
    MSI (s) (08:F4) [06:09:53:062]: Note: 1: 1324 2: My Pictures 3: 1
    MSI (s) (08:F4) [06:09:53:062]: Product: Sophos Client Firewall -- Error 1324.The path My Pictures contains an invalid character.

    Error 1324.The path My Pictures contains an invalid character.
    Action ended 6:09:53: CostFinalize. Return value 3.
    Action ended 6:09:53: INSTALL. Return value 3.
    Property(S): DiskPrompt = [1]
    Property(S): Registration = No
    Property(S): UpgradeCode = {7EDA9D28-FF94-4FC8-938F-98BE1E3D7F76}
    Property(S): Installed = 2015/07/09 08:29:44
    Property(S): OLEAdvtSupport = 1
    Property(S): VersionNT = 501
    Property(S): TARGETDIR = c:\
    Property(S): ALLUSERSPROFILE = C:\Documents and Settings\All Users
    Property(S): AdminToolsFolder = C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\
    Property(S): CommonAppDataFolder = C:\Documents and Settings\All Users\Application Data\
    Property(S): CommonFilesFolder = C:\Program Files\Common Files\
    Property(S): DesktopFolder = C:\Documents and Settings\All Users\Desktop\
    Property(S): FavoritesFolder = C:\Documents and Settings\Paul\Favorites\
    Property(S): FontsFolder = C:\windows\Fonts\
    Property(S): INSTALLDIR = c:\Program Files\Sophos\Sophos Client Firewall
    Property(S): ProgramFilesFolder = C:\Program Files\
    Property(S): LOGS = c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall\logs
    Property(S): LocalAppDataFolder = C:\Documents and Settings\Paul\Local Settings\Application Data\
    Property(S): MyPicturesFolder = \\PC\My Documents\My Pictures\
    Property(S): PersonalFolder = c:\Documents and Settings\Paul\My Documents\
    Property(S): PrimaryVolumePath = c:\
    Property(S): ProgramFiles64Folder = c:\
    Property(S): ProgramMenuFolder = c:\Documents and Settings\All Users\Start Menu\Programs\
    Property(S): SOPHOS_CLIENT_FIREWALL1 = c:\Documents and Settings\All Users\Application Data\Sophos\Sophos Client Firewall
    Property(S): SendToFolder = c:\Documents and Settings\Paul\SendTo\
    Property(S): StartMenuFolder = c:\Documents and Settings\All Users\Start Menu\
    Property(S): StartupFolder = c:\Documents and Settings\All Users\Start Menu\Programs\Startup\
    Property(S): System16Folder = c:\windows\system\
    Property(S): System64Folder = c:\
    Property(S): SystemFolder = c:\windows\system32\
    Property(S): TempFolder = c:\DOCUME~1\Paul\LOCALS~1\Temp\
    Property(S): TemplateFolder = c:\Documents and Settings\All Users\Templates\
    Property(S): USERPROFILE = c:\Documents and Settings\Paul\
    Property(S): WindowsFolder = c:\windows\
    Property(S): WindowsVolume = c:\
    Property(S): WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\
    Property(S): SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\system32\
    Property(S): WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\
    Property(S): payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\
    Property(S): payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\
    Property(S): GPTSupport = 1
    Property(S): WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\Manifests\
    Property(S): WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\Policies\
    Property(S): policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
    Property(S): policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = c:\windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
    Property(S): ALLUSERS = 1
    Property(S): WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\
    Property(S): payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\
    Property(S): WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\Policies\
    Property(S): policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\
    Property(S): WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = c:\windows\
    Property(S): INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 = c:\
    Property(S): _6F3B9B6A1D764E649303ABFBEEA6559C.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\Common Files\Sophos\Sophos Client Firewall\
    Property(S): _5200F2F08A1843FFB73833298A0CDE07.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\Common Files\Sophos\
    Property(S): ProgramFilesFolder.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\
    Property(S): NEWRETARGETABLEPROPERTY1.B817F5915D4641D694EABCC98F20F7B7 = c:\
    Property(S): CommonFilesFolder.B817F5915D4641D694EABCC98F20F7B7 = c:\Program Files\Common Files\
    Property(S): RecentFolder = C:\Documents and Settings\Paul\Recent\
    Property(S): PrintHoodFolder = C:\Documents and Settings\Paul\PrintHood\
    Property(S): NetHoodFolder = C:\Documents and Settings\Paul\NetHood\
    Property(S): AppDataFolder = C:\Documents and Settings\Paul\Application Data\
    Property(S): RemoteAdminTS = 1
    Property(S): MANAGED_INSTALL = 0
    Property(S): SAV6 = YES
    Property(S): ISCHECKFORPRODUCTUPDATES = 1
    Property(S): ApplicationUsers = AllUsers
    Property(S): AgreeToLicense = No
    Property(S): _IsMaintenance = Change
    Property(S): IS_SQLSERVER_USERNAME = sa
    Property(S): IS_SQLSERVER_AUTHENTICATION = 0
    Property(S): SetupType = Typical
    Property(S): _IsSetupTypeMin = Typical
    Property(S): Display_IsBitmapDlg = 1
    Property(S): ARPCOMMENTS = Firewall protection
    Property(S): ARPCONTACT = Sophos Technical Support
    Property(S): ARPHELPLINK = http://www.sophos.com/support/
    Property(S): ARPNOMODIFY = 1
    Property(S): ARPNOREPAIR = 1
    Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe
    Property(S): ARPURLINFOABOUT = http://www.sophos.com/
    Property(S): ARPURLUPDATEINFO = www.sophos.com/.../updates
    Property(S): DWUSINTERVAL = 30
    Property(S): DWUSLINK = CEBCE7CFAEEBE7FF2EACC0AF3E4C978F89EC978F49BBF0C8CEDC47DFDE8BA0189EEC80AFC9AC
    Property(S): DefaultUIFont = Tahoma8
    Property(S): DialogCaption = InstallShield for Windows Installer
    Property(S): DisplayNameCustom = Custom
    Property(S): MsiNTProductType = 1
    Property(S): DisplayNameMinimal = Minimal
    Property(S): DisplayNameTypical = Typical
    Property(S): ErrorDialog = SetupError
    Property(S): INSTALLLEVEL = 100
    Property(S): ISSCRIPT_VERSION_MISSING = The InstallScript engine is missing from this machine.  If available, please run ISScript.msi, or contact your support personnel for further assistance.
    Property(S): ISSCRIPT_VERSION_OLD = The InstallScript engine on this machine is older than the version required to run this setup.  If available, please install the latest version of ISScript.msi, or contact your support personnel for further assistance.
    Property(S): ISVROOT_PORT_NO = 0
    Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1]
    Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1]
    Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1]
    Property(S): IS_PROGMSG_XML_COSTING = Costing XML files...
    Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s...
    Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes...
    Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s...
    Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes...
    Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s...
    Property(S): InstallChoice = AR
    Property(S): MSIRESTARTMANAGERCONTROL = Disable
    Property(S): Manufacturer = Sophos Limited
    Property(S): NewProperty1 = 0
    Property(S): NewProperty2 = 0
    Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@
    Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s
    Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools...
    Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s
    Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories...
    Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension
    Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions...
    Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories...
    Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories...
    Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool
    Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools...
    Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d
    Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s
    Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories...
    Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension
    Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions...
    Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools...
    Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes...
    Property(S): ServicePackLevelMinor = 0
    Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions...
    Property(S): ProductCode = {A805FB2A-A844-4cba-8088-CA64087D59E1}
    Property(S): ProductID = none
    Property(S): ProductLanguage = 1033
    Property(S): ProductName = Sophos Client Firewall
    Property(S): ProductVersion = 2.9.5
    Property(S): ProgressType0 = install
    Property(S): ProgressType1 = Installing
    Property(S): ProgressType2 = installed
    Property(S): ProgressType3 = installs
    Property(S): RESTART_SERVICES = 1
    Property(S): RebootYesNo = Yes
    Property(S): RegisterWithAutoUpdate = {4DB41E90-DC56-41DC-B91E-9B8E537489A8};scf
    Property(S): ReinstallModeText = omus
    Property(S): SHOWLAUNCHPROGRAM = 0
    Property(S): SecureCustomProperties = MAJORUPGRADEINSTALL
    Property(S): UNINSTALLDRIVERS = ALL
    Property(S): UPGRADE_DRIVER_REBOOT = 0
    Property(S): ServicePackLevel = 3
    Property(S): WindowsBuild = 2600
    Property(S): VersionMsi = 3.01
    Property(S): InstallShieldTempProp = 0
    Property(S): VersionDatabase = 200
    Property(S): PRODUCTLANGUAGE = 1033
    Property(S): CLIENTPROCESSID = 312
    Property(S): CLIENTUILEVEL = 3
    Property(S): USERNAME = Paul
    Property(S): CURRENTDIRECTORY = C:\
    Property(S): REMOVE = ALL
    Property(S): REBOOT = SUPPRESS
    Property(S): ProductToBeRegistered = 1
    Property(S): ProductState = 5
    Property(S): PackageCode = {9D59C617-3854-4FBF-95F2-ED33037DB8E5}
    Property(S): ShellAdvtSupport = 1
    Property(S): Intel = 6
    Property(S): PhysicalMemory = 2032
    Property(S): VirtualMemory = 3234
    Property(S): AdminUser = 1
    Property(S): LogonUser = Paul
    Property(S): UserSID = S-1-5-21-776561741-1078145449-854245398-1003
    Property(S): UserLanguageID = 1033
    Property(S): ComputerName = ACER1
    Property(S): SystemLanguageID = 1033
    Property(S): ScreenX = 1024
    Property(S): ScreenY = 768
    Property(S): CaptionHeight = 19
    Property(S): BorderTop = 1
    Property(S): BorderSide = 1
    Property(S): TextHeight = 16
    Property(S): ColorBits = 32
    Property(S): TTCSupport = 1
    Property(S): Time = 6:09:53
    Property(S): Date = 11/29/2017
    Property(S): MsiNetAssemblySupport = 4.0.30319.1
    Property(S): MsiWin32AssemblySupport = 5.1.2600.5512
    Property(S): RedirectedDllSupport = 2
    Property(S): Privileged = 1
    Property(S): DATABASE = c:\windows\Installer\9a137.msi
    Property(S): OriginalDatabase = c:\windows\Installer\9a137.msi
    Property(S): UILevel = 2
    Property(S): Preselected = 1
    Property(S): ACTION = INSTALL
    Property(S): ROOTDRIVE = c:\
    Property(S): CostingComplete = 0
    Property(S): OutOfDiskSpace = 0
    Property(S): OutOfNoRbDiskSpace = 0
    Property(S): PrimaryVolumeSpaceAvailable = 0
    Property(S): PrimaryVolumeSpaceRequired = 0
    Property(S): PrimaryVolumeSpaceRemaining = 0
    MSI (s) (08:F4) [06:09:53:152]: Cleaning up uninstalled install packages, if any exist
    MSI (s) (08:F4) [06:09:53:152]: MainEngineThread is returning 1603
    MSI (s) (08:64) [06:09:53:152]: Destroying RemoteAPI object.
    MSI (s) (08:6C) [06:09:53:152]: Custom Action Manager thread ending.
    === Logging stopped: 11/29/2017  6:09:53 ===
    MSI (c) (38:30) [06:09:53:152]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (c) (38:30) [06:09:53:152]: MainEngineThread is returning 1603
    === Verbose logging stopped: 11/29/2017  6:09:53 ===

    So does that mean that thefirewall is now uninstalled?

    I also got a file back for the AV too that I can post if you wish

    Thank you for your assistance so far