Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 13 subscribers
  • Views 16799 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

The installation of Sophos-Antivirus has failed (error 0x80041f09) Windows 10

Artem Smirnov

 Hello!

I am unable to install sophos Anti-virus with this errors 

The installation of Sophos-Antivirus has failed (error 0x80041f09). Contact your network administrator.

 

I checked registry key and delete all folder with sophos. In log files I have 

 

I found record - An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus. Restart doesn't help. 

Tried to use fix from Microsoft, delete all registry information relate with sophos, which i can found .

I cleared all temp folders! I don't know what to do. Did anyone face issue like this ? I have 3 computers with this problem.

Please help!

 

2018-07-28 13:29:46 ExtractClassicConfig: Action started
2018-07-28 13:29:46 ExtractClassicConfig: Action succeeded
2018-07-28 13:29:46 PreInstallChecks: Action started
2018-07-28 13:29:46 PreInstallChecks: Action succeeded
2018-07-28 13:29:46 SetBootDriverStartupProperty: Action started
2018-07-28 13:29:46 SetBootDriverStartupProperty: Boot driver: not installed.
2018-07-28 13:29:46 SetBootDriverStartupProperty: Action succeeded
2018-07-28 13:29:46 SetClassFilterPresentProperty: Action started
2018-07-28 13:29:46 SetClassFilterPresentProperty: Setting class filter present property to: 0
2018-07-28 13:29:46 SetClassFilterPresentProperty: Action succeeded
2018-07-28 13:29:46 SetDriverProperty: Action started
2018-07-28 13:29:46 SetDriverProperty: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:29:46 SetDriverProperty: Action succeeded
2018-07-28 13:29:46 SetProcessorProperties: Action started
2018-07-28 13:29:46 SetProcessorProperties: Action succeeded
2018-07-28 13:29:46 SetRestoreExcludedProcessesProperty: Action started
2018-07-28 13:29:46 SetRestoreExcludedProcessesProperty: SetRestoreExcludedProcessesProperty
2018-07-28 13:29:46 SetRestoreExcludedProcessesProperty: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:29:46 SetRestoreExcludedProcessesProperty: Action succeeded
2018-07-28 13:29:53 CheckRegForNullDACLs: Action started
2018-07-28 13:29:53 CheckRegForNullDACLs: Action succeeded
2018-07-28 13:29:54 WaitForSAVService: Action started
2018-07-28 13:29:54 WaitForSAVService: WaitForSAVService: Walking system processes...
2018-07-28 13:29:54 WaitForSAVService: WaitForSAVService: Finished walking system processes.
2018-07-28 13:29:54 WaitForSAVService: Action succeeded
2018-07-28 13:29:54 CheckUninstallDrivers: Action started
2018-07-28 13:29:54 CheckUninstallDrivers: IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess control. Returning false.
2018-07-28 13:29:54 CheckUninstallDrivers: IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess filter. Returning false.
2018-07-28 13:29:54 CheckUninstallDrivers: Action succeeded
2018-07-28 13:29:55 DeleteIDEs: Action started
2018-07-28 13:29:55 DeleteIDEs: Action succeeded
2018-07-28 13:29:55 DeleteBDLs: Action started
2018-07-28 13:29:55 DeleteBDLs: Action succeeded
2018-07-28 13:29:55 DeleteHIPSConfig: Action started
2018-07-28 13:29:55 DeleteHIPSConfig: Action succeeded
2018-07-28 13:29:55 UpdateSavAdapterDll: Action started
2018-07-28 13:30:05 UpdateSavAdapterDll: Action succeeded
2018-07-28 13:30:05 UpdateDesktopMessaging: Action started
2018-07-28 13:30:05 UpdateDesktopMessaging: UpdateDesktopMessaging: Could not open SAVPlugin registry key(2)
2018-07-28 13:30:05 UpdateDesktopMessaging: Action succeeded
2018-07-28 13:30:05 CopyOtherFiles: Action started
2018-07-28 13:30:05 CopyOtherFiles: CopyOtherFiles custom action - Copying other driver files
2018-07-28 13:30:05 CopyOtherFiles: Copying class filter source: C:\escw_107_sa\savxp\drivers\sdcfilter\win7_amd64\SDCFILTER.INF, target: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
2018-07-28 13:30:05 CopyOtherFiles: Copying boot driver source: C:\escw_107_sa\savxp\drivers\boottasks\win7_amd64\SOPHOSBOOTDRIVER.INF, target: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
2018-07-28 13:30:05 CopyOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll does not exist, no further action.
2018-07-28 13:30:05 CopyOtherFiles: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:05 CopyOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll does not exist, no further action.
2018-07-28 13:30:05 CopyOtherFiles: Copying boot tasks source: C:\escw_107_sa\savxp\drivers\boottasks\win7_amd64\SophosBootTasks.exe, target: C:\WINDOWS\system32\
2018-07-28 13:30:05 CopyOtherFiles: Action succeeded
2018-07-28 13:30:05 RegisterBufferOverflowProtection: Action started
2018-07-28 13:30:05 RegisterBufferOverflowProtection: BopsUnregister: could not get short path to DLL. It will not be unregistered.
2018-07-28 13:30:05 RegisterBufferOverflowProtection: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.
2018-07-28 13:30:05 RegisterBufferOverflowProtection: BOPS path already exists
2018-07-28 13:30:05 RegisterBufferOverflowProtection: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:05 RegisterBufferOverflowProtection: BOPS path already exists
2018-07-28 13:30:05 RegisterBufferOverflowProtection: Action succeeded
2018-07-28 13:30:05 RestoreExcludedProcesses: Action started
2018-07-28 13:30:05 RestoreExcludedProcesses: RestoreExcludedProcesses
2018-07-28 13:30:05 RestoreExcludedProcesses: Empty excluded processes property. Nothing to be done.
2018-07-28 13:30:05 RestoreExcludedProcesses: Action succeeded
2018-07-28 13:30:06 StartDriverServices: Action started
2018-07-28 13:30:06 StartDriverServices: IsServiceRunning: Unable to get a handle to requested service skmscan. Returning false.
2018-07-28 13:30:06 StartDriverServices: Unable to get a handle to kms service - service will not be started until next reboot
2018-07-28 13:30:06 StartDriverServices: Action succeeded
2018-07-28 13:30:09 CreateUserGroups: Action started
2018-07-28 13:30:09 CreateUserGroups: DsGetDcName() failed, error: 1355
2018-07-28 13:30:09 CreateUserGroups: Local name of well-known group Administrators is Administrators
2018-07-28 13:30:09 CreateUserGroups: Local name of well-known group PowerUsers is Power Users
2018-07-28 13:30:09 CreateUserGroups: Local name of well-known group Users is Users
2018-07-28 13:30:10 CreateUserGroups: Failed to add the members of group PowerUsers to SophosPowerUser group
2018-07-28 13:30:11 CreateUserGroups: Adding LOCAL SYSTEM to the SophosAdministrator role in the machine file
2018-07-28 13:30:11 CreateUserGroups: Unable to get a handle to the MA Service inside CreateUserGroups (0x80070424). The Sophos Agent service will not be re-started until next reboot.
2018-07-28 13:30:11 CreateUserGroups: Action succeeded
2018-07-28 13:30:11 PurgeIOfficeAVCache: Action started
2018-07-28 13:30:11 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:11 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:11 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:11 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:11 PurgeIOfficeAVCache: Opened key name S-1-5-21-1324235971-1992567748-1975794374-495761\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{56FFCC30-D398-11D0-B2AE-00A0C908FA49}
2018-07-28 13:30:11 PurgeIOfficeAVCache: Unable to remove Enum sub key: 0x2
2018-07-28 13:30:11 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:11 PurgeIOfficeAVCache: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:11 PurgeIOfficeAVCache: Action succeeded
2018-07-28 13:30:11 EnableAttachmentScanning: Action started
2018-07-28 13:30:11 EnableAttachmentScanning: ScanWithAntiVirus value is already set to 3
2018-07-28 13:30:11 EnableAttachmentScanning: Action succeeded
2018-07-28 13:30:11 AddDomainGroups: Action started
2018-07-28 13:30:11 AddDomainGroups: DsGetDcName() failed, error: 1355
2018-07-28 13:30:11 AddDomainGroups: DsGetDcName() failed, error: 1355
2018-07-28 13:30:11 AddDomainGroups: GetDCName() failed: (1355) The specified domain either does not exist or could not be contacted.

2018-07-28 13:30:11 AddDomainGroups: SophosDomainAdministrator group doesn't exist
2018-07-28 13:30:11 AddDomainGroups: SophosDomainPowerUser group doesn't exist
2018-07-28 13:30:11 AddDomainGroups: SophosDomainUser group doesn't exist
2018-07-28 13:30:11 AddDomainGroups: Action succeeded
2018-07-28 13:30:14 SetSAVAdminUpdateBegin: Action started
2018-07-28 13:30:14 SetSAVAdminUpdateBegin: Action succeeded
2018-07-28 13:30:14 UpdateSAVI: Action started
2018-07-28 13:30:14 UpdateSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
2018-07-28 13:30:14 UpdateSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__
2018-07-28 13:30:14 UpdateSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
2018-07-28 13:30:14 UpdateSAVI: UpdateRequest signalled
2018-07-28 13:30:14 UpdateSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
2018-07-28 13:30:14 UpdateSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__
2018-07-28 13:30:14 UpdateSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
2018-07-28 13:30:15 UpdateSAVI: MSCM version orig: new: 0.3.0.90
2018-07-28 13:30:15 UpdateSAVI: Copying MSCM from: C:\escw_107_sa\savxp\savmscm.dll to: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\savmscm.dll
2018-07-28 13:30:15 UpdateSAVI: Registered MSCM
2018-07-28 13:30:17 UpdateSAVI: SAVI dll was installed successfully
2018-07-28 13:30:17 UpdateSAVI: Action succeeded
2018-07-28 13:30:17 SetFolderPermissions: Action started
2018-07-28 13:30:17 SetFolderPermissions: We are running on XP or higher - adding LocalService to permissions on config files
2018-07-28 13:30:17 SetFolderPermissions: We are running on XP or higher - adding LocalService to permissions on config files
2018-07-28 13:30:17 SetFolderPermissions: Unable to add set access permissions on the Device Control Log directory
2018-07-28 13:30:17 SetFolderPermissions: Unable to add set access permissions on the Data Control Log directory
2018-07-28 13:30:18 SetFolderPermissions: Unable to add set access permissions on the Device Control directory
2018-07-28 13:30:18 SetFolderPermissions: Unable to add set access permissions on the Data Control directory
2018-07-28 13:30:18 SetFolderPermissions: Action succeeded
2018-07-28 13:30:18 RemoveSAVI: Action started
2018-07-28 13:30:18 RemoveSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
2018-07-28 13:30:18 RemoveSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__
2018-07-28 13:30:18 RemoveSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__ReadyForUpdate
2018-07-28 13:30:18 RemoveSAVI: UpdateRequest signalled
2018-07-28 13:30:18 RemoveSAVI: About to wait for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
2018-07-28 13:30:18 RemoveSAVI: WaitForSAVIEvent: Could not open memory mapped file Global\!$_SAVI_!$$!_MMMF_$!__
2018-07-28 13:30:18 RemoveSAVI: Successfully waited for event Global\!$_SAVI_!$$!_EVENT_$!__Suspended
2018-07-28 13:30:18 RemoveSAVI: Action succeeded
2018-07-28 13:30:22 DeleteUserGroups: Action started
2018-07-28 13:30:22 DeleteUserGroups: We are not a domain controller: Attempting to delete local user groups
2018-07-28 13:30:22 DeleteUserGroups: Action succeeded
2018-07-28 13:30:23 UpdateDesktopMessaging: Action started
2018-07-28 13:30:23 UpdateDesktopMessaging: UpdateDesktopMessaging: Could not open SAVPlugin registry key(2)
2018-07-28 13:30:23 UpdateDesktopMessaging: Action succeeded
2018-07-28 13:30:23 RollbackUpdateSavAdapterDll: Action started
2018-07-28 13:30:23 RollbackUpdateSavAdapterDll: Failed to re-add SAVAdapter key (0x2)
2018-07-28 13:30:23 RollbackUpdateSavAdapterDll: Action succeeded
2018-07-28 13:30:23 DeleteOtherFiles: Action started
2018-07-28 13:30:23 DeleteOtherFiles: Unable to get list of engine files from C:\Program Files (x86)\Sophos\Sophos Anti-Virus\engsync.upd
2018-07-28 13:30:23 DeleteOtherFiles: Unregistered MSCM
2018-07-28 13:30:23 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll detoured exists, proceeding to rename it & mark for delete.
2018-07-28 13:30:23 DeleteOtherFiles: PROCESSOR_ARCHITECTURE environment variable is: AMD64
2018-07-28 13:30:23 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll detoured exists, proceeding to rename it & mark for delete.
2018-07-28 13:30:23 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action.
2018-07-28 13:30:23 DeleteOtherFiles: Deleting config file folder
2018-07-28 13:30:23 DeleteOtherFiles: Failed to delete config folder, 2
2018-07-28 13:30:23 Error deleting file: C:\ProgramData\Sophos\Sophos Anti-Virus\\Infected\Low with error: Access is denied.

2018-07-28 13:30:23 DeleteOtherFiles: Action succeeded
2018-07-28 13:30:23 ForceDeleteUserPlugin: Action started
2018-07-28 13:30:23 ForceDeleteUserPlugin: Action succeeded
2018-07-28 13:30:23 ForceDeleteFiles: Action started
2018-07-28 13:30:23 ForceDeleteFiles: Action succeeded
2018-07-28 13:30:23 RunErrorScripts: Action started
2018-07-28 13:30:23 RunErrorScripts: Action succeeded
2018-07-28 13:30:23 RestoreMovedFiles: Action started
2018-07-28 13:30:23 RestoreMovedFiles: Action succeeded
2018-07-28 13:30:23 SetUpdateFailed: Action started
2018-07-28 13:30:23 SetUpdateFailed: Unable to create an instance of ComponentManager - SystemInformation cannot be informed of end of update
2018-07-28 13:30:23 SetUpdateFailed: Action succeeded

 



This thread was automatically locked due to age.
  • 0

    Property(S): SequenceNumber = 0
    Property(S): SetupType = Typical
    Property(S): UITYPE = full
    Property(S): UNINSTALLBOOTDRIVERS = 1
    Property(S): UNINSTALLCLASSFILTER = 1
    Property(S): UNINSTALLDRIVERS = 1
    Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus.
    Property(S): UNINSTALLKMSDRIVERS = 1
    Property(S): UPDATEBOOTDRIVERS = 1
    Property(S): UPDATECLASSFILTER = 1
    Property(S): VIRUSDATAUPDATE = 0
    Property(S): SecureCustomProperties = EXCLUDEDPROCESSES;INSTALLINGVERSION;MAJORUPGRADE;WEBCONTROL
    Property(S): WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\
    Property(S): SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll
    Property(S): SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll
    Property(S): SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
    Property(S): SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
    Property(S): DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe
    Property(S): DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat
    Property(S): CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe
    Property(S): CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe
    Property(S): CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat
    Property(S): SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = swi_service
    Property(S): SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /registerService
    Property(S): SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe" -r "C:\Users\ARSMIR~1\AppData\Local\Temp\SwiRebootRequired.txt" /u "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf"
    Property(S): SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe" -r "C:\Users\ARSMIR~1\AppData\Local\Temp\SwiRebootRequired.txt" "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf"
    Property(S): SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = swi_filter
    Property(S): SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe" -i
    Property(S): REBOOTREQUIREDFILE.11DACB83_28A7_4FA6_AF5B_C006E340C101 = SwiRebootRequired.txt
    Property(S): MsiLogFileLocation = C:\Users\ARSMIR~1\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_180728_102933.txt
    Property(S): PackageCode = {B11B63E0-A3EB-478A-AF04-AAE0B577AEB2}
    Property(S): ProductState = -1
    Property(S): PackagecodeChanging = 1
    Property(S): REBOOT = ReallySuppress
    Property(S): UPDATEKMSDRIVERS = 1
    Property(S): RECOVERYMODE = 0
    Property(S): WEBCONTROL = 0
    Property(S): CURRENTDIRECTORY = C:\escw_107_sa
    Property(S): CLIENTUILEVEL = 2
    Property(S): MSICLIENTUSESEXTERNALUI = 1
    Property(S): CLIENTPROCESSID = 6720
    Property(S): VersionDatabase = 200
    Property(S): VersionMsi = 5.00
    Property(S): WindowsBuild = 9600
    Property(S): ServicePackLevel = 0
    Property(S): ServicePackLevelMinor = 0
    Property(S): MsiNTProductType = 1
    Property(S): RemoteAdminTS = 1
    Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
    Property(S): AppDataFolder = C:\Users\arsmirnov\AppData\Roaming\
    Property(S): NetHoodFolder = C:\Users\arsmirnov\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
    Property(S): PersonalFolder = C:\Users\arsmirnov\Documents\
    Property(S): PrintHoodFolder = C:\Users\arsmirnov\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
    Property(S): RecentFolder = C:\Users\arsmirnov\AppData\Roaming\Microsoft\Windows\Recent\
    Property(S): MyPicturesFolder = C:\Users\arsmirnov\Pictures\
    Property(S): GPTSupport = 1
    Property(S): OLEAdvtSupport = 1
    Property(S): ShellAdvtSupport = 1
    Property(S): Msix64 = 6
    Property(S): Intel = 6
    Property(S): PhysicalMemory = 6032
    Property(S): VirtualMemory = 5682
    Property(S): MsiTrueAdminUser = 1
    Property(S): LogonUser = arsmirnov
    Property(S): UserSID = S-1-5-21-1324235971-1992567748-1975794374-495761
    Property(S): UserLanguageID = 1049
    Property(S): ComputerName = MOS0WS00077
    Property(S): SystemLanguageID = 1049
    Property(S): ScreenX = 1024
    Property(S): ScreenY = 768
    Property(S): CaptionHeight = 23
    Property(S): BorderTop = 1
    Property(S): BorderSide = 1
    Property(S): TextHeight = 16
    Property(S): TextInternalLeading = 3
    Property(S): ColorBits = 32
    Property(S): TTCSupport = 1
    Property(S): Time = 13:30:24
    Property(S): Date = 28.07.2018
    Property(S): MsiNetAssemblySupport = 4.7.3056.0
    Property(S): MsiWin32AssemblySupport = 6.3.17134.1
    Property(S): RedirectedDllSupport = 2
    Property(S): MsiRunningElevated = 1
    Property(S): Privileged = 1
    Property(S): DATABASE = C:\WINDOWS\Installer\1ffa8.msi
    Property(S): OriginalDatabase = C:\escw_107_sa\savxp\Sophos Anti-Virus.msi
    Property(S): UILevel = 3
    Property(S): MsiUIHideCancel = 1
    Property(S): ACTION = INSTALL
    Property(S): ROOTDRIVE = C:\
    Property(S): CostingComplete = 1
    Property(S): OutOfDiskSpace = 0
    Property(S): OutOfNoRbDiskSpace = 0
    Property(S): PrimaryVolumeSpaceAvailable = 0
    Property(S): PrimaryVolumeSpaceRequired = 0
    Property(S): PrimaryVolumeSpaceRemaining = 0
    Property(S): SOURCEDIR = C:\escw_107_sa\savxp\
    Property(S): SourcedirProduct = {65323B2D-83D4-470D-A209-D769DB30BBDB}
    Property(S): ProductToBeRegistered = 1
    MSI (s) (E0:28) [13:30:24:078]: Note: 1: 1708
    MSI (s) (E0:28) [13:30:24:078]: Product: Sophos Anti-Virus -- Installation operation failed.

    MSI (s) (E0:28) [13:30:24:078]: Windows Installer installed the product. Product Name: Sophos Anti-Virus. Product Version: 10.7.2.49. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1603.

    MSI (s) (E0:28) [13:30:24:375]: Deferring clean up of packages/files, if any exist
    MSI (s) (E0:28) [13:30:24:375]: MainEngineThread is returning 1603
    === Logging stopped: 28.07.2018 13:30:24 ===
    MSI (s) (E0:E4) [13:30:24:422]: User policy value 'DisableRollback' is 0
    MSI (s) (E0:E4) [13:30:24:422]: Machine policy value 'DisableRollback' is 0
    MSI (s) (E0:E4) [13:30:24:422]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (E0:E4) [13:30:24:422]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (E0:E4) [13:30:24:422]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (E0:E4) [13:30:24:422]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (s) (E0:E4) [13:30:24:422]: Destroying RemoteAPI object.
    MSI (s) (E0:A0) [13:30:24:422]: Custom Action Manager thread ending.
    MSI (c) (40:F0) [13:30:24:422]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (40:F0) [13:30:24:422]: MainEngineThread is returning 1603
    === Verbose logging stopped: 28.07.2018 13:30:24 ===

    2018-07-28 13:30:24 ERROR: Installation failed
    2018-07-28 13:30:24 Info: Added SAV to ComponentList.
    2018-07-28 13:30:24 Info: Added SWI to ComponentList.
    2018-07-28 13:30:24 Info: Added SWC to ComponentList.

  • 0 in reply to Artem Smirnov

    Hello Artem Smirnov,

    If you have already removed (manually) registry keys and folders, please give this articles a try:
    Sophos Central Endpoint: How to uninstall using command line or batch file

    How to uninstall Sophos Endpoint Security and Control from the command line or with a batch file

    Regards,

    Barb@Sophos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

     

Unfiltered HTML