Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 5794 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Endpoint and Security Manual Uninstallation

alexstef

Hi,

I hope somebody can help me. I have a really nasty situation here.

Sophos Client Firewall installed on one of users ignores the policy which pushed from the console and blocks everything.

I pushed the program from the console, but it didn't fix the issue. So I decided to uninstall and reinstall the firewall.

When I tried to uninstall, I ended up with "Fatal Error" and Firewall couldn't be removed.

I think I have to remove the Firewall manyall,

Anybody has a list of which folders, files, dll, registry need to be cleaned.

Your help would be greatly appreceated!

:21633


This thread was automatically locked due to age.
Parents
  • 0

    Hi Jak,

    Thank you very much for the response.

    The below the same entries were logged repeatedly in the both log files.

    You are right. It seems the driver causes the problem.

    Please let me know if you see anything else.

    Regards,

    - Sophos Client Firewall CustomActions Log

    2012-02-03 12:24:27 =============================================================================
    2012-02-03 12:24:27 =================== Uninstalling Sophos Client Firewall ... =================
    2012-02-03 12:24:27 =============================================================================
    2012-02-03 12:24:29 CloseClientApps: Closing client applications...
    2012-02-03 12:24:29 CloseClientApps: Global shutdown event does not exist. Trying old shutdown mechanism.
    2012-02-03 12:24:29 GetIdOfProcess: Target process does not appear to be running.
    2012-02-03 12:24:29 GetIdOfProcess: Target process does not appear to be running.
    2012-02-03 12:24:29 CloseClientApps: Return Success
    2012-02-03 12:24:29 CloseSESUI: Closing client applications...
    2012-02-03 12:24:29 CloseSESUI: Attempting to close the SES UI returned the error 2
    2012-02-03 12:24:29 CloseSESUI: Return Success
    2012-02-03 12:24:29 UnregisterSCFAdapter: Unregistering SCFAdapter...
    2012-02-03 12:24:29 UnregisterSCFAdapter: Return Success
    2012-02-03 12:24:29 UnregisterNAIPlugin: Unregistering FirewallNAIPlugin...
    2012-02-03 12:24:29 UnregisterNAIPlugin: Return Success
    2012-02-03 12:24:30 UninstallSecurityCenter: Unregistering with Microsoft Security Center...
    2012-02-03 12:24:30 UninstallUnsignedDrivers: Uninstalling driver...
    2012-02-03 12:24:30 UninstallUnsignedDrivers: Uninstall action All
    2012-02-03 12:24:30 PlatformPath: Architecture x86, running DriverHelper_Win32.exe
    2012-02-03 12:24:30 Execute: C:\DOCUME~1\TISHIB~1\LOCALS~1\Temp\{12C00~1\DRIVER~2.EXE /uninstall
    2012-02-03 12:24:30 Execute: Returned 80070002
    2012-02-03 12:24:30 UninstallUnsignedDrivers: Failed to uninstall
    2012-02-03 12:24:30 RegisterNAIPlugin: Registering NAIPlugin...
    2012-02-03 12:24:30 RegisterNAIPlugin: Return Success
    2012-02-03 12:24:30 RegisterSCFAdapter: Registering SCFAdapter...
    2012-02-03 12:24:30 RegisterSCFAdapter: Return Success
    2012-02-03 12:24:30 SetUpdateFailed: Calling UpdateRegKeyHelper( SCFUPDATE_FAILED )
    2012-02-03 12:24:30 SetUpdateFailed: Return Success

    - Sophos Client Firewall DriverHelper Log

    2012-02-03 12:24:30 Command: C:\DOCUME~1\TISHIB~1\LOCALS~1\Temp\{12C00~1\DRIVER~2.EXE /uninstall
    2012-02-03 12:24:30 Performing uninstall
    2012-02-03 12:24:30 Installing to Windows XP
    2012-02-03 12:24:30 NDISDriverInstaller: Driver scfint from wxp_i386 (infs: scfintMiniport.inf scfintProtocol.inf)
    2012-02-03 12:24:30 TDIDriverInstaller: Driver scfdriver from w2k_i386 (depends: Tcpip scfint)
    2012-02-03 12:24:30 Uninstall: scfint
    2012-02-03 12:24:30 DriverInstallerImpl::Uninstall Exception: 80070002, RecallInfFileNames: Failed to get inf names for scfint
    2012-02-03 12:24:30 MultiDriverInstaller::Uninstall: Failed on 0, hr 80070002
    2012-02-03 12:24:30 Action failed

    :21687
Reply
  • 0

    Hi Jak,

    Thank you very much for the response.

    The below the same entries were logged repeatedly in the both log files.

    You are right. It seems the driver causes the problem.

    Please let me know if you see anything else.

    Regards,

    - Sophos Client Firewall CustomActions Log

    2012-02-03 12:24:27 =============================================================================
    2012-02-03 12:24:27 =================== Uninstalling Sophos Client Firewall ... =================
    2012-02-03 12:24:27 =============================================================================
    2012-02-03 12:24:29 CloseClientApps: Closing client applications...
    2012-02-03 12:24:29 CloseClientApps: Global shutdown event does not exist. Trying old shutdown mechanism.
    2012-02-03 12:24:29 GetIdOfProcess: Target process does not appear to be running.
    2012-02-03 12:24:29 GetIdOfProcess: Target process does not appear to be running.
    2012-02-03 12:24:29 CloseClientApps: Return Success
    2012-02-03 12:24:29 CloseSESUI: Closing client applications...
    2012-02-03 12:24:29 CloseSESUI: Attempting to close the SES UI returned the error 2
    2012-02-03 12:24:29 CloseSESUI: Return Success
    2012-02-03 12:24:29 UnregisterSCFAdapter: Unregistering SCFAdapter...
    2012-02-03 12:24:29 UnregisterSCFAdapter: Return Success
    2012-02-03 12:24:29 UnregisterNAIPlugin: Unregistering FirewallNAIPlugin...
    2012-02-03 12:24:29 UnregisterNAIPlugin: Return Success
    2012-02-03 12:24:30 UninstallSecurityCenter: Unregistering with Microsoft Security Center...
    2012-02-03 12:24:30 UninstallUnsignedDrivers: Uninstalling driver...
    2012-02-03 12:24:30 UninstallUnsignedDrivers: Uninstall action All
    2012-02-03 12:24:30 PlatformPath: Architecture x86, running DriverHelper_Win32.exe
    2012-02-03 12:24:30 Execute: C:\DOCUME~1\TISHIB~1\LOCALS~1\Temp\{12C00~1\DRIVER~2.EXE /uninstall
    2012-02-03 12:24:30 Execute: Returned 80070002
    2012-02-03 12:24:30 UninstallUnsignedDrivers: Failed to uninstall
    2012-02-03 12:24:30 RegisterNAIPlugin: Registering NAIPlugin...
    2012-02-03 12:24:30 RegisterNAIPlugin: Return Success
    2012-02-03 12:24:30 RegisterSCFAdapter: Registering SCFAdapter...
    2012-02-03 12:24:30 RegisterSCFAdapter: Return Success
    2012-02-03 12:24:30 SetUpdateFailed: Calling UpdateRegKeyHelper( SCFUPDATE_FAILED )
    2012-02-03 12:24:30 SetUpdateFailed: Return Success

    - Sophos Client Firewall DriverHelper Log

    2012-02-03 12:24:30 Command: C:\DOCUME~1\TISHIB~1\LOCALS~1\Temp\{12C00~1\DRIVER~2.EXE /uninstall
    2012-02-03 12:24:30 Performing uninstall
    2012-02-03 12:24:30 Installing to Windows XP
    2012-02-03 12:24:30 NDISDriverInstaller: Driver scfint from wxp_i386 (infs: scfintMiniport.inf scfintProtocol.inf)
    2012-02-03 12:24:30 TDIDriverInstaller: Driver scfdriver from w2k_i386 (depends: Tcpip scfint)
    2012-02-03 12:24:30 Uninstall: scfint
    2012-02-03 12:24:30 DriverInstallerImpl::Uninstall Exception: 80070002, RecallInfFileNames: Failed to get inf names for scfint
    2012-02-03 12:24:30 MultiDriverInstaller::Uninstall: Failed on 0, hr 80070002
    2012-02-03 12:24:30 Action failed

    :21687
Children
No Data