Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 29 replies
  • Subscribers 1 subscriber
  • Views 93187 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Scripted Uninstall of Sophos

packman73

Looking for a scripted uninstall of Sophos.  We have over 2000 endpoints at 420+ remote locations which are mainly POS systems running XP or Windows 7.  We can't take control of these systems to manually uninstall Sophos if problems arise (and they have).  I've talked to Sophos support about this and they don't have an uninstall script for Sophos 10.0 from what I've been told.  

I've found all the MSIEXEC uninstall strings within the registry but running those remotely via PsExec does not work, not sure why.

I find it interesting that as good as Sophos is of uninstalling ever other major AV/EPP product on the market to install their product on an end-point, they offer no means (other than touch each endpoint manually) to uninstall their own product.

If anyone has any information that would help us, that would be greatly appreciated.

Regards,

Art

:22069


This thread was automatically locked due to age.
Parents
  • 0

    Major install log:

    Property(S): UNINSTALLCLASSFILTER = 1
    Property(S): UNINSTALLDRIVERS = 1
    Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus.
    Property(S): UNINSTALLKMSDRIVERS = 1
    Property(S): UPDATEBOOTDRIVERS = 1
    Property(S): UPDATECLASSFILTER = 1
    Property(S): VIRUSDATAUPDATE = 0
    Property(S): ISReleaseFlags = SAV
    Property(S): RollBackInstallDeviceControl = C:\Program Files\Sophos\Sophos Anti-Virus\
    Property(S): AdminUser = 1
    Property(S): ROOTDRIVE = C:\
    Property(S): ACTION = INSTALL
    Property(S): UILevel = 2
    Property(S): OriginalDatabase = C:\Program Files\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
    Property(S): DATABASE = C:\WINDOWS\Installer\20bda3.msi
    Property(S): InstallShieldTempProp = 0
    Property(S): Privileged = 1
    Property(S): RedirectedDllSupport = 2
    Property(S): MsiWin32AssemblySupport = 5.1.2600.3019
    Property(S): MsiNetAssemblySupport = 2.0.50727.3053
    Property(S): Date = 27-7-2012
    Property(S): Time = 9:16:36
    Property(S): TTCSupport = 1
    Property(S): ColorBits = 32
    Property(S): TextHeight = 16
    Property(S): BorderSide = 1
    Property(S): BorderTop = 1
    Property(S): CaptionHeight = 26
    Property(S): ScreenY = 1200
    Property(S): ScreenX = 1920
    Property(S): SystemLanguageID = 1043
    Property(S): ComputerName = DT110WXP0108
    Property(S): UserLanguageID = 1043
    Property(S): USERNAME = Dell
    Property(S): UserSID = S-1-5-18
    Property(S): LogonUser = SYSTEM
    Property(S): VirtualMemory = 3460
    Property(S): PhysicalMemory = 2005
    Property(S): Intel = 6
    Property(S): ShellAdvtSupport = 1
    Property(S): OLEAdvtSupport = 1
    Property(S): GPTSupport = 1
    Property(S): MyPicturesFolder = C:\WINDOWS\system32\config\systemprofile\Mijn documenten\Mijn afbeeldingen\
    Property(S): RecentFolder = C:\WINDOWS\system32\config\systemprofile\Onlangs geopend\
    Property(S): PrintHoodFolder = C:\WINDOWS\system32\config\systemprofile\Netwerkprinteromgeving\
    Property(S): PersonalFolder = C:\WINDOWS\system32\config\systemprofile\Mijn documenten\
    Property(S): NetHoodFolder = C:\WINDOWS\system32\config\systemprofile\NetHood\
    Property(S): AppDataFolder = C:\WINDOWS\system32\config\systemprofile\Application Data\
    Property(S): RemoteAdminTS = 1
    Property(S): MsiNTProductType = 1
    Property(S): ServicePackLevelMinor = 0
    Property(S): ServicePackLevel = 2
    Property(S): WindowsBuild = 2600
    Property(S): VersionMsi = 3.01
    Property(S): VersionDatabase = 200
    Property(S): CLIENTPROCESSID = 2652
    Property(S): CLIENTUILEVEL = 3
    Property(S): CURRENTDIRECTORY = C:\WINDOWS\system32
    Property(S): WEBCONTROL = 1
    Property(S): UPDATEKMSDRIVERS = 1
    Property(S): REBOOT = ReallySuppress
    Property(S): PackagecodeChanging = 1
    Property(S): ProductState = -1
    Property(S): PackageCode = {8610DF5B-50F1-4BBA-9571-6F9E537CC5FE}
    Property(S): CostingComplete = 1
    Property(S): OutOfDiskSpace = 0
    Property(S): OutOfNoRbDiskSpace = 0
    Property(S): PrimaryVolumeSpaceAvailable = 0
    Property(S): PrimaryVolumeSpaceRequired = 0
    Property(S): PrimaryVolumeSpaceRemaining = 0
    Property(S): SOURCEDIR = C:\Program Files\Sophos\AutoUpdate\cache\savxp\
    Property(S): SourcedirProduct = {9ACB414D-9347-40B6-A453-5EFB2DB59DFA}
    Property(S): ProductToBeRegistered = 1
    MSI (s) (1C:74) [09:16:36:627]: Note: 1: 1708
    MSI (s) (1C:74) [09:16:36:627]: Product: Sophos Anti-Virus -- Installation operation failed.

    MSI (s) (1C:74) [09:16:36:627]: Cleaning up uninstalled install packages, if any exist
    MSI (s) (1C:74) [09:16:36:627]: MainEngineThread is returning 1603
    MSI (s) (1C:B8) [09:16:36:737]: Destroying RemoteAPI object.
    MSI (s) (1C:88) [09:16:36:737]: Custom Action Manager thread ending.
    === Logging stopped: 27-7-2012 9:16:36 ===
    MSI (c) (5C:A8) [09:16:36:768]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (5C:A8) [09:16:36:768]: MainEngineThread is returning 1603
    === Verbose logging stopped: 27-7-2012 9:16:36 ===

    2012-07-27 09:16:36 ERROR: Installation failed

    :27467
Reply
  • 0

    Major install log:

    Property(S): UNINSTALLCLASSFILTER = 1
    Property(S): UNINSTALLDRIVERS = 1
    Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus.
    Property(S): UNINSTALLKMSDRIVERS = 1
    Property(S): UPDATEBOOTDRIVERS = 1
    Property(S): UPDATECLASSFILTER = 1
    Property(S): VIRUSDATAUPDATE = 0
    Property(S): ISReleaseFlags = SAV
    Property(S): RollBackInstallDeviceControl = C:\Program Files\Sophos\Sophos Anti-Virus\
    Property(S): AdminUser = 1
    Property(S): ROOTDRIVE = C:\
    Property(S): ACTION = INSTALL
    Property(S): UILevel = 2
    Property(S): OriginalDatabase = C:\Program Files\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
    Property(S): DATABASE = C:\WINDOWS\Installer\20bda3.msi
    Property(S): InstallShieldTempProp = 0
    Property(S): Privileged = 1
    Property(S): RedirectedDllSupport = 2
    Property(S): MsiWin32AssemblySupport = 5.1.2600.3019
    Property(S): MsiNetAssemblySupport = 2.0.50727.3053
    Property(S): Date = 27-7-2012
    Property(S): Time = 9:16:36
    Property(S): TTCSupport = 1
    Property(S): ColorBits = 32
    Property(S): TextHeight = 16
    Property(S): BorderSide = 1
    Property(S): BorderTop = 1
    Property(S): CaptionHeight = 26
    Property(S): ScreenY = 1200
    Property(S): ScreenX = 1920
    Property(S): SystemLanguageID = 1043
    Property(S): ComputerName = DT110WXP0108
    Property(S): UserLanguageID = 1043
    Property(S): USERNAME = Dell
    Property(S): UserSID = S-1-5-18
    Property(S): LogonUser = SYSTEM
    Property(S): VirtualMemory = 3460
    Property(S): PhysicalMemory = 2005
    Property(S): Intel = 6
    Property(S): ShellAdvtSupport = 1
    Property(S): OLEAdvtSupport = 1
    Property(S): GPTSupport = 1
    Property(S): MyPicturesFolder = C:\WINDOWS\system32\config\systemprofile\Mijn documenten\Mijn afbeeldingen\
    Property(S): RecentFolder = C:\WINDOWS\system32\config\systemprofile\Onlangs geopend\
    Property(S): PrintHoodFolder = C:\WINDOWS\system32\config\systemprofile\Netwerkprinteromgeving\
    Property(S): PersonalFolder = C:\WINDOWS\system32\config\systemprofile\Mijn documenten\
    Property(S): NetHoodFolder = C:\WINDOWS\system32\config\systemprofile\NetHood\
    Property(S): AppDataFolder = C:\WINDOWS\system32\config\systemprofile\Application Data\
    Property(S): RemoteAdminTS = 1
    Property(S): MsiNTProductType = 1
    Property(S): ServicePackLevelMinor = 0
    Property(S): ServicePackLevel = 2
    Property(S): WindowsBuild = 2600
    Property(S): VersionMsi = 3.01
    Property(S): VersionDatabase = 200
    Property(S): CLIENTPROCESSID = 2652
    Property(S): CLIENTUILEVEL = 3
    Property(S): CURRENTDIRECTORY = C:\WINDOWS\system32
    Property(S): WEBCONTROL = 1
    Property(S): UPDATEKMSDRIVERS = 1
    Property(S): REBOOT = ReallySuppress
    Property(S): PackagecodeChanging = 1
    Property(S): ProductState = -1
    Property(S): PackageCode = {8610DF5B-50F1-4BBA-9571-6F9E537CC5FE}
    Property(S): CostingComplete = 1
    Property(S): OutOfDiskSpace = 0
    Property(S): OutOfNoRbDiskSpace = 0
    Property(S): PrimaryVolumeSpaceAvailable = 0
    Property(S): PrimaryVolumeSpaceRequired = 0
    Property(S): PrimaryVolumeSpaceRemaining = 0
    Property(S): SOURCEDIR = C:\Program Files\Sophos\AutoUpdate\cache\savxp\
    Property(S): SourcedirProduct = {9ACB414D-9347-40B6-A453-5EFB2DB59DFA}
    Property(S): ProductToBeRegistered = 1
    MSI (s) (1C:74) [09:16:36:627]: Note: 1: 1708
    MSI (s) (1C:74) [09:16:36:627]: Product: Sophos Anti-Virus -- Installation operation failed.

    MSI (s) (1C:74) [09:16:36:627]: Cleaning up uninstalled install packages, if any exist
    MSI (s) (1C:74) [09:16:36:627]: MainEngineThread is returning 1603
    MSI (s) (1C:B8) [09:16:36:737]: Destroying RemoteAPI object.
    MSI (s) (1C:88) [09:16:36:737]: Custom Action Manager thread ending.
    === Logging stopped: 27-7-2012 9:16:36 ===
    MSI (c) (5C:A8) [09:16:36:768]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (5C:A8) [09:16:36:768]: MainEngineThread is returning 1603
    === Verbose logging stopped: 27-7-2012 9:16:36 ===

    2012-07-27 09:16:36 ERROR: Installation failed

    :27467
Children
No Data