Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Help! Install failing at startup with 'missing tamper protection'

5-10-2017,12:12:32,Information,------------------ Beginning installation of Sophos Anti-Virus and AutoUpdate ------------------,
5-10-2017,12:12:32,Information,Setup version 3.3.2.316,
5-10-2017,12:12:32,Information,Command line: c:\users\jg\appdata\local\temp\sophos_bootstrap\setup.exe -server mcs-cloudstation-eu-central-1.prod.hydra.sophos.com -token ***************** -edxtimestamp 20171005T065526Z,
5-10-2017,12:12:32,Information,Process security set successfully,
5-10-2017,12:12:32,Information,Setup program was run from C:\Users\JG\AppData\Local\Temp\sophos_bootstrap,
5-10-2017,12:12:32,Information,Checking system TMP paths.,
5-10-2017,12:12:32,Information,Checking TMP...,
5-10-2017,12:12:32,Information,Temp path for System found: 'C:\WINDOWS\TEMP'.,
5-10-2017,12:12:32,Information,Sophos Endpoint Defense is not installed,
5-10-2017,12:12:32,Information,Migration: 0,
5-10-2017,12:12:32,Information,Migration ID: ,
5-10-2017,12:12:32,Information,Migration Job: 0,
5-10-2017,12:12:32,Information,SEC initiated: 0,
5-10-2017,12:12:32,Information,SEC-initiated migration: 0,
5-10-2017,12:12:32,Information,Tamper protection is not installed,
5-10-2017,12:12:32,Information,Checking if Sophos Anti-Virus or Sophos AutoUpdate are installed...,
5-10-2017,12:12:32,ERROR,There was an unexpected problem with the installation of Sophos Endpoint Security and Control. Details: Unexpected product state 2 for product with code {CA524364-D9C5-4804-92DE-2800BDAC1AA4},
5-10-2017,12:12:37,Information,------------------ Found errors during installation: 114 ------------------,
5-10-2017,12:12:37,Information,------------------ Installation program finishing with code 114 ------------------,

 

 

When trying to run the installer for Sophos central I get these logs.  I was initially trying to install the encryption functionality as well but at this point, I'll be satisfied with just installing it on this laptop for now.

 

I get the sense removing the auto-updater after the encryption install failed has caused some issues in the registry, is there a batch file or some such to fully remove Sophos entries in the registries?

 

Thank you in advance for any and all help. 

 

edit1: the first errorlog I solved by assigning the SophosAdmingroup  to the user. The 2nd log is the one generated by the installer on a system without sophos. (the tamper protection) 

 

edit2: I tried installing our old sophos program (the iteration before sophos central) this gave the following error:

 



This thread was automatically locked due to age.
  • Was aided by a sophos engineer to remove the keys in the error message. It was a rather long and harrowing tale but it did get the desired result that I could install manually.

     

    If you are ever unfortunate enough to have removed the autoupdater and get the same registry keys, try running the following batch file to remove the 'usual' keys. Maybe it will be sufficient for your situation, it leeft a few straggler keys on my device. Which wasnt all bad because the sophos employees were a delight to communicate with.

    -------------------------------------------

    net stop "Sophos Anti-Virus"
    net stop "Sophos AutoUpdate Service"
    "C:\program files\Sophos\Sophos Endpoint Agent\uninstallcli.exe"
    :Sophos AutoUpdate
    MsiExec.exe /qn /X{7CD26A0C-9B59-4E84-B5EE-B386B2F7AA16} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{BCF53039-A7FC-4C79-A3E3-437AE28FD918} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{9D1B8594-5DD2-4CDC-A5BD-98E7E9D75520} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E} REBOOT=ReallySuppress
    :Sophos Anti-Virus (Endpoint)
    MsiExec.exe /qn /X{8123193C-9000-4EEB-B28A-E74E779759FA} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{36333618-1CE1-4EF2-8FFD-7F17394891CE} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{DFDA2077-95D0-4C5F-ACE7-41DA16639255} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{CA3CE456-B2D9-4812-8C69-17D6980432EF} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{3B998572-90A5-4D61-9022-00B288DD755D} REBOOT=ReallySuppress
    :Sophos Anti-Virus (Server)
    MsiExec.exe /qn /X{72E30858-FC95-4C87-A697-670081EBF065} REBOOT=ReallySuppress
    :Sophos System Protection
    MsiExec.exe /qn /X{934BEF80-B9D1-4A86-8B42-D8A6716A8D27} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{1093B57D-A613-47F3-90CF-0FD5C5DCFFE6} REBOOT=ReallySuppress
    :Sophos Network Threat Protection
    MsiExec.exe /qn /X{66967E5F-43E8-4402-87A4-04685EE5C2CB} REBOOT=ReallySuppress
    :Sophos Health
    MsiExec.exe /qn /X{A5CCEEF1-B6A7-4EB4-A826-267996A62A9E} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{D5BC54B8-1DA1-44F4-AE6F-86E05CDB0B44} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{E44AF5E6-7D11-4BDF-BEA8-AA7AE5FE6745} REBOOT=ReallySuppress
    :SDU (1.x)
    MsiExec.exe /qn /X{4627F5A1-E85A-4394-9DB3-875DF83AF6C2} REBOOT=ReallySuppress
    :Heartbeat
    MsiExec.exe /qn /X{DFFA9361-3625-4219-82C2-9EF011E433B1} REBOOT=ReallySuppress
    :Sophos Management Communications System
    MsiExec.exe /qn /X{A1DC5EF8-DD20-45E8-ABBD-F529A24D477B} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{D875F30C-B469-4998-9A08-FE145DD5DC1A} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{2C14E1A2-C4EB-466E-8374-81286D723D3A} REBOOT=ReallySuppress
    :UI
    MsiExec.exe /qn /X{D29542AE-287C-42E4-AB28-3858E13C1A3E} REBOOT=ReallySuppress
    :SophosClean
    "C:\Program Files\Sophos\Clean\uninstall.exe"
    :SED
    "C:\Program Files\Sophos\Endpoint Defense\uninstall.exe" /quiet
    :HMPA (managed) 3.5.3.563
    "C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe" /uninstall /quiet
    :HMPA 1.0.0.699
    "C:\Program Files (x86)\HitmanPro.Alert\uninstall.exe" /uninstall /quiet
    :HMPA 3.7.14.265
    "C:\Program Files\HitmanPro\HitmanPro.exe" /uninstall /quiet

     

     

    -----

     

    Good luck!