Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
706 Views 5 Replies Latest reply: Oct 22, 2013 7:49 AM by vincelewin RSS
vincelewin Newcomer 4 posts since
Sep 23, 2013
Currently Being Moderated

Sep 23, 2013 5:06 AM

VSE Install fails trying to uninstall Sophos.

I hope someone can help me with this issue I have.

 

I am currently trialing McAfee EPO and Virusscan to replace Sophos on my server estate.

 

I have an issue where if I deploy from EPO or run manually VSE fails to install.

 

As I am new to this product I have struggled to find details of whats happening but I have searched for logs modified today and found VSEUninst.log.

 

This shows....

 

Remove : PRODUCT_138::Sophos Anti-Virus

InvokedUninstaller : MsiExec.exe /X{9ACB414D-9347-40B6-A453-5EFB2DB59DFA} /qn REBOOT=R

InvokedUninstaller : Sophos AV uninstaller returned error. ERROR CODE: 1603

 

Return Code : Decimal = 4  Hex = 4

 

I have disabled on-access scanning, behaviour monitoring and rebooted the server but it has made no difference.

 

Thanks in advance for any advice you can offer.

 

Vince

  • wwarren McAfee SME 765 posts since
    Nov 3, 2009
    Currently Being Moderated
    1. Sep 24, 2013 3:08 PM (in response to vincelewin)
    Re: VSE Install fails trying to uninstall Sophos.

    The VSEUninst log you are checking is where we record incompatible software findings.

    In other words, we recognized the product you have installed as an incompatible one and try to remove it. However, the removal of that product failed.

     

    Unfortunately, we can't solve problems in other vendors uninstall routines - I don't think we should have that expectation.

    You'll want to remove that software prior to installing VSE.

  • Jonesthemilk Newcomer 40 posts since
    Oct 3, 2008
    Currently Being Moderated
    2. Oct 22, 2013 5:48 AM (in response to wwarren)
    Re: VSE Install fails trying to uninstall Sophos.

    I am about to roll out to u0pwards of VSE 4000 machines (replacing Sophos) using ePO and was relying on McAfee doing what it says on the tin!

    Being stand-alone Domains do not have the luxury of SCCM or CA

     

    So not overly impressed with the above  response!

    what is the point of issuing KB72251 then?

     

    The key mentioned is quite common to Sophos Installations that I have  too( Sophos 10.3)

  • PhilR Apprentice 336 posts since
    May 21, 2009
    Currently Being Moderated
    3. Oct 22, 2013 6:06 AM (in response to Jonesthemilk)
    Re: VSE Install fails trying to uninstall Sophos.

    We recently migrated around 2000 PCs from Sophos to McAfee Virusscan.

     

    On only a handful did we have problems with Sophos uninstalling, so I'm tempted to say that something's broken in the Sophos installation.

     

    Or there's a Sophos configuration which is preventing the uninstall.

  • Jonesthemilk Newcomer 40 posts since
    Oct 3, 2008
    Currently Being Moderated
    4. Oct 22, 2013 7:15 AM (in response to PhilR)
    Re: VSE Install fails trying to uninstall Sophos.

    Thanks PhilR

    Thats a bit more re-assuring.

    You could be right with TamperProtection affecting things.

    Not being a Sophos Expert I don't know in what version this was introduced. Will have to check and test this anyway.

    Am happy with the numbers you quoted but didn't fancy revisiting 4000+ machines

     

    vincelewin :-

    Found this batch file out there but not sure if it will help you in anyway.

     

    REM  RemoveSophos.txt
    REM Stopping Sophos Services
    net stop "Sophos AutoUpdate Service"
    net stop "Sophos Agent"
    net stop "SAVService"
    net stop "SAVAdminService"
    net stop "Sophos Message Router"
    net stop "Sophos Web Control Service"
    net stop "swi_service"
    net stop "swi_update"

    REM
    REM Removing Sophos AutoUpdater
    MsiExec.exe /X{15C418EB-7675-42be-B2B3-281952DA014D} /qn REBOOT=SUPPRESS /PASSIVE

    REM
    REM Removing Sophos Update Manager
    MsiExec.exe /X{2C7A82DB-69BC-4198-AC26-BB862F1BE4D0} /qn REBOOT=SUPPRESS /PASSIVE

    REM
    REM Removing Sophos Remote Management System
    MsiExec.exe /X{FED1005D-CBC8-45D5-A288-FFC7BB304121} /qn REBOOT=SUPPRESS /PASSIVE

    REM
    REM Removing Sophos Anti-Virus
    MsiExec.exe /X{9ACB414D-9347-40B6-A453-5EFB2DB59DFA} /qn REBOOT=SUPPRESS /PASSIVE

     

    I'll certainly be trying it on my Failures .....................................by the looks of things

     

    Diolch yn fawr

     

    JTM

     

    Message was edited by: Jonesthemilk on 22/10/13 13:15:35 IST

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points