Failed to install Sophos Anti-Virus for Windows 7

Hello, you posted the SDU log, which just details the log files the SDU tool has collected.

We would really need to see the logs of the Sophos Anti-Virus component.

If you run SophosSetup.exe as you, then the install logs of the components go to %temp%. 

If the installer installs AutoUpdate (the last component in the list), then 5 minutes after, the AutoUpdate service starts it will have a go at installing the component, this time it will be running as local system so the logs will go to \windows\temp\.

The Sophos Anti-Virus component is MSI based, so there is the major install log and a custom action log file.  Note the timestamps on the end will match as they are a pair.

Can you attach them?

This is the contents of the sophos UI Install Log file :

ProductSetup::ProductSetup: Begin product setup
ProductSetup::Install: Begin install
ProductSetup::InstUninstEntry: Show gui: false
ProductSetup::InstUninstEntry: Existing product code: {8D7BB12C-6854-46DF-A67D-F82D778D75C8}
ProductSetup::InstUninstEntry: Install from: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui
ProductSetup::InstUninstEntry: Install to: <default>
=== Verbose logging started: 25/03/2021 17:15:57 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\Cache\sophos_autoupdate1.dir\su-setup32.exe ===
MSI (c) (D0:54) [17:15:57:585]: Cloaking enabled.
MSI (c) (D0:54) [17:15:57:585]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (D0:54) [17:15:57:588]: End dialog not enabled
MSI (c) (D0:54) [17:15:57:588]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi
MSI (c) (D0:54) [17:15:57:588]: Package we're running from ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi
MSI (c) (D0:54) [17:15:57:588]: Machine policy value 'DisableUserInstalls' is 0
MSI (c) (D0:54) [17:15:57:589]: APPCOMPAT: Uninstall Flags override found.
MSI (c) (D0:54) [17:15:57:589]: APPCOMPAT: Uninstall VersionNT override found.
MSI (c) (D0:54) [17:15:57:589]: APPCOMPAT: Uninstall ServicePackLevel override found.
MSI (c) (D0:54) [17:15:57:590]: APPCOMPAT: looking for appcompat database entry with ProductCode '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'.
MSI (c) (D0:54) [17:15:57:596]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (D0:54) [17:15:57:603]: MSCOREE not loaded loading copy from system32
MSI (c) (D0:54) [17:15:57:606]: APPCOMPAT: looking for appcompat database entry with ProductCode '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'.
MSI (c) (D0:54) [17:15:57:606]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (D0:54) [17:15:57:606]: Transforms are not secure.
MSI (c) (D0:54) [17:15:57:606]: Note: 1: 2205 2: 3: Control
MSI (c) (D0:54) [17:15:57:606]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos UI Install Log 20210325 171557.txt'.
MSI (c) (D0:54) [17:15:57:606]: No Command Line.
MSI (c) (D0:54) [17:15:57:606]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{5C8C0B42-292F-4458-9945-96D6D5DBD920}'.
MSI (c) (D0:54) [17:15:57:606]: Product Code passed to Engine.Initialize: '(none)'
MSI (c) (D0:54) [17:15:57:606]: Product Code from property table before transforms: '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'
MSI (c) (D0:54) [17:15:57:606]: Product Code from property table after transforms: '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'
MSI (c) (D0:54) [17:15:57:606]: Product not registered: beginning first-time install
MSI (c) (D0:54) [17:15:57:606]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
MSI (c) (D0:54) [17:15:57:606]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (c) (D0:54) [17:15:57:607]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (c) (D0:54) [17:15:57:607]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (c) (D0:54) [17:15:57:607]: User policy value 'SearchOrder' is 'nmu'
MSI (c) (D0:54) [17:15:57:607]: Adding new sources is allowed.
MSI (c) (D0:54) [17:15:57:607]: Package name extracted from package path: 'Sophos UI.msi'
MSI (c) (D0:54) [17:15:57:607]: Package to be registered: 'Sophos UI.msi'
MSI (c) (D0:54) [17:15:57:607]: Note: 1: 2205 2: 3: Error
MSI (c) (D0:54) [17:15:57:608]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (c) (D0:54) [17:15:57:608]: TRANSFORMS property is now:
MSI (c) (D0:54) [17:15:57:608]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '405'.
MSI (c) (D0:54) [17:15:57:608]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming
MSI (c) (D0:54) [17:15:57:608]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites
MSI (c) (D0:54) [17:15:57:609]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (c) (D0:54) [17:15:57:609]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents
MSI (c) (D0:54) [17:15:57:609]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (c) (D0:54) [17:15:57:610]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent
MSI (c) (D0:54) [17:15:57:610]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo
MSI (c) (D0:54) [17:15:57:610]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates
MSI (c) (D0:54) [17:15:57:610]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (c) (D0:54) [17:15:57:610]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local
MSI (c) (D0:54) [17:15:57:611]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures
MSI (c) (D0:54) [17:15:57:611]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (D0:54) [17:15:57:611]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (D0:54) [17:15:57:611]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (c) (D0:54) [17:15:57:612]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (c) (D0:54) [17:15:57:612]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (c) (D0:54) [17:15:57:612]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (D0:54) [17:15:57:613]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (D0:54) [17:15:57:613]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (c) (D0:54) [17:15:57:613]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (c) (D0:54) [17:15:57:614]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop
MSI (c) (D0:54) [17:15:57:614]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (c) (D0:54) [17:15:57:614]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (c) (D0:54) [17:15:57:615]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (c) (D0:54) [17:15:57:623]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation
MSI (c) (D0:54) [17:15:57:623]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (c) (D0:54) [17:15:57:623]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (c) (D0:54) [17:15:57:623]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (D0:54) [17:15:57:623]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (D0:54) [17:15:57:623]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'SBYJUAL20'.
MSI (c) (D0:54) [17:15:57:623]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (D0:54) [17:15:57:623]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Microsoft'.
MSI (c) (D0:54) [17:15:57:623]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi'.
MSI (c) (D0:54) [17:15:57:623]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi'.
MSI (c) (D0:54) [17:15:57:623]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (c) (D0:54) [17:15:57:623]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (c) (D0:54) [17:15:57:623]: EEUI - Disabling MsiEmbeddedUI in quiet mode
=== Logging started: 25/03/2021 17:15:57 ===
MSI (c) (D0:54) [17:15:57:623]: Machine policy value 'DisableRollback' is 0
MSI (c) (D0:54) [17:15:57:623]: User policy value 'DisableRollback' is 0
MSI (c) (D0:54) [17:15:57:623]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (c) (D0:54) [17:15:57:624]: Creating MSIHANDLE (1) of type 790537 for thread 5972
MSI (c) (D0:54) [17:15:57:624]: MsiOpenPackageEx is returning 0
MSI (c) (D0:54) [17:15:57:624]: Closing MSIHANDLE (1) of type 790537 for thread 5972
=== Verbose logging stopped: 25/03/2021 17:15:57 ===

setup::MsiInstaller::install: New version: {8D7BB12C-6854-46DF-A67D-F82D778D75C8}, version: 2.1.44.0
=== Verbose logging started: 25/03/2021 17:15:57 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\Cache\sophos_autoupdate1.dir\su-setup32.exe ===
MSI (c) (D0:54) [17:15:57:651]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Windows\Installer\16a728.msi' against software restriction policy
MSI (c) (D0:54) [17:15:57:655]: SOFTWARE RESTRICTION POLICY: C:\Windows\Installer\16a728.msi has a digital signature
MSI (c) (D0:54) [17:15:57:655]: SOFTWARE RESTRICTION POLICY: C:\Windows\Installer\16a728.msi is permitted to run because the user token authorizes execution (system or service token).
MSI (c) (D0:54) [17:15:57:656]: Cloaking enabled.
MSI (c) (D0:54) [17:15:57:656]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (D0:54) [17:15:57:657]: End dialog not enabled
MSI (c) (D0:54) [17:15:57:657]: Original package ==> C:\Windows\Installer\16a728.msi
MSI (c) (D0:54) [17:15:57:657]: Package we're running from ==> C:\Windows\Installer\16a728.msi
MSI (c) (D0:54) [17:15:57:658]: APPCOMPAT: Uninstall Flags override found.
MSI (c) (D0:54) [17:15:57:658]: APPCOMPAT: Uninstall VersionNT override found.
MSI (c) (D0:54) [17:15:57:658]: APPCOMPAT: Uninstall ServicePackLevel override found.
MSI (c) (D0:54) [17:15:57:659]: APPCOMPAT: looking for appcompat database entry with ProductCode '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'.
MSI (c) (D0:54) [17:15:57:659]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (D0:54) [17:15:57:675]: MSCOREE not loaded loading copy from system32
MSI (c) (D0:54) [17:15:57:682]: Machine policy value 'DisablePatch' is 0
MSI (c) (D0:54) [17:15:57:682]: Machine policy value 'AllowLockdownPatch' is 0
MSI (c) (D0:54) [17:15:57:682]: Machine policy value 'DisableLUAPatching' is 0
MSI (c) (D0:54) [17:15:57:682]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (c) (D0:54) [17:15:57:682]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active
MSI (c) (D0:54) [17:15:57:683]: APPCOMPAT: looking for appcompat database entry with ProductCode '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'.
MSI (c) (D0:54) [17:15:57:683]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (D0:54) [17:15:57:683]: Transforms are not secure.
MSI (c) (D0:54) [17:15:57:683]: Note: 1: 2205 2: 3: Control
MSI (c) (D0:54) [17:15:57:683]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos UI Install Log 20210325 171557.txt'.
MSI (c) (D0:54) [17:15:57:683]: No Command Line.
MSI (c) (D0:54) [17:15:57:683]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{5C8C0B42-292F-4458-9945-96D6D5DBD920}'.
MSI (c) (D0:54) [17:15:57:683]: Product Code passed to Engine.Initialize: '(none)'
MSI (c) (D0:54) [17:15:57:683]: Product Code from property table before transforms: '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'
MSI (c) (D0:54) [17:15:57:683]: Product Code from property table after transforms: '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'
MSI (c) (D0:54) [17:15:57:683]: Product registered: entering maintenance mode
MSI (c) (D0:54) [17:15:57:684]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
MSI (c) (D0:54) [17:15:57:684]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'.
MSI (c) (D0:54) [17:15:57:684]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
MSI (c) (D0:54) [17:15:57:684]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (c) (D0:54) [17:15:57:685]: Package name retrieved from configuration data: 'Sophos UI.msi'
MSI (c) (D0:54) [17:15:57:685]: Note: 1: 2205 2: 3: Error
MSI (c) (D0:54) [17:15:57:685]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (c) (D0:54) [17:15:57:685]: Machine policy value 'DisableMsi' is 0
MSI (c) (D0:54) [17:15:57:685]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (c) (D0:54) [17:15:57:685]: User policy value 'AlwaysInstallElevated' is 0
MSI (c) (D0:54) [17:15:57:685]: Product {8D7BB12C-6854-46DF-A67D-F82D778D75C8} is admin assigned: LocalSystem owns the publish key.
MSI (c) (D0:54) [17:15:57:685]: Product {8D7BB12C-6854-46DF-A67D-F82D778D75C8} is managed.
MSI (c) (D0:54) [17:15:57:685]: Running product '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}' with elevated privileges: Product is assigned.
MSI (c) (D0:54) [17:15:57:685]: TRANSFORMS property is now:
MSI (c) (D0:54) [17:15:57:686]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'.
MSI (c) (D0:54) [17:15:57:686]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '405'.
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (c) (D0:54) [17:15:57:686]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (c) (D0:54) [17:15:57:686]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (c) (D0:54) [17:15:57:694]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation
MSI (c) (D0:54) [17:15:57:694]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (c) (D0:54) [17:15:57:694]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (c) (D0:54) [17:15:57:694]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (D0:54) [17:15:57:694]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (D0:54) [17:15:57:694]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'SBYJUAL20'.
MSI (c) (D0:54) [17:15:57:694]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (D0:54) [17:15:57:694]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Microsoft'.
MSI (c) (D0:54) [17:15:57:694]: PROPERTY CHANGE: Adding Installed property. Its value is '00:00:00'.
MSI (c) (D0:54) [17:15:57:694]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\16a728.msi'.
MSI (c) (D0:54) [17:15:57:694]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Windows\Installer\16a728.msi'.
MSI (c) (D0:54) [17:15:57:694]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (c) (D0:54) [17:15:57:694]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (c) (D0:54) [17:15:57:694]: EEUI - Disabling MsiEmbeddedUI in quiet mode
=== Logging started: 25/03/2021 17:15:57 ===
MSI (c) (D0:54) [17:15:57:695]: Note: 1: 2205 2: 3: PatchPackage
MSI (c) (D0:54) [17:15:57:695]: Machine policy value 'DisableRollback' is 0
MSI (c) (D0:54) [17:15:57:695]: User policy value 'DisableRollback' is 0
MSI (c) (D0:54) [17:15:57:695]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (c) (D0:54) [17:15:57:695]: Creating MSIHANDLE (2) of type 790537 for thread 5972
MSI (c) (D0:54) [17:15:57:695]: MsiOpenPackageEx is returning 0
MSI (c) (D0:54) [17:15:57:695]: MsiOpenPackage is returning 0
MSI (c) (D0:54) [17:15:57:695]: Closing MSIHANDLE (2) of type 790537 for thread 5972
=== Verbose logging stopped: 25/03/2021 17:15:57 ===

setup::MsiInstaller::install: Installed version: {8D7BB12C-6854-46DF-A67D-F82D778D75C8}, version: 2.1.44.0
setup::MsiInstaller::install: Performing minor upgrade
setup::MsiInstaller::upgrade: Running upgrade
setup::MsiInstaller::installOrUpgrade: Executing: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi INSTALLDIR="" REBOOT=ReallySuppress REINSTALLMODE=vmuso REINSTALL=ALL INSTALLINGVERSION="2.1.44.0" ARPSYSTEMCOMPONENT=1
setup::MsiInstaller::tryRunMsi: Running MSI command, attempt (1 of 10)
=== Verbose logging started: 25/03/2021 17:15:57 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\Cache\sophos_autoupdate1.dir\su-setup32.exe ===
MSI (c) (D0:88) [17:15:57:701]: Resetting cached policy values
MSI (c) (D0:88) [17:15:57:701]: Machine policy value 'Debug' is 0
MSI (c) (D0:88) [17:15:57:701]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi
******* Action:
******* CommandLine: **********
MSI (c) (D0:88) [17:15:57:702]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (D0:88) [17:15:57:702]: Grabbed execution mutex.
MSI (c) (D0:88) [17:15:57:703]: Cloaking enabled.
MSI (c) (D0:88) [17:15:57:703]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (D0:88) [17:15:57:703]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (24:EC) [17:15:57:705]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi
MSI (s) (24:EC) [17:15:57:705]: Grabbed execution mutex.
MSI (s) (24:68) [17:15:57:706]: Resetting cached policy values
MSI (s) (24:68) [17:15:57:706]: Machine policy value 'Debug' is 0
MSI (s) (24:68) [17:15:57:706]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi
******* Action:
******* CommandLine: **********
MSI (s) (24:68) [17:15:57:706]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (24:68) [17:15:57:706]: Setting cached product context: machine assigned for product: 000021090B0090400000000000F01FEC
MSI (s) (24:68) [17:15:57:706]: Using cached product context: machine assigned for product: 000021090B0090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Setting cached product context: machine assigned for product: 00002109110000000000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Using cached product context: machine assigned for product: 00002109110000000000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Setting cached product context: machine assigned for product: 00002109440090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Using cached product context: machine assigned for product: 00002109440090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Setting cached product context: machine assigned for product: 00002109510090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Using cached product context: machine assigned for product: 00002109510090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Setting cached product context: machine assigned for product: 00002109511090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Using cached product context: machine assigned for product: 00002109511090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Setting cached product context: machine assigned for product: 00002109610090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Using cached product context: machine assigned for product: 00002109610090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Setting cached product context: machine assigned for product: 00002109711090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Using cached product context: machine assigned for product: 00002109711090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Setting cached product context: machine assigned for product: 00002109810090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Using cached product context: machine assigned for product: 00002109810090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Setting cached product context: machine assigned for product: 00002109910090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Using cached product context: machine assigned for product: 00002109910090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Setting cached product context: machine assigned for product: 00002109A10090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Using cached product context: machine assigned for product: 00002109A10090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Setting cached product context: machine assigned for product: 00002109B10090400000000000F01FEC
MSI (s) (24:68) [17:15:57:707]: Using cached product context: machine assigned for product: 00002109B10090400000000000F01FEC
MSI (s) (24:68) [17:15:57:708]: Setting cached product context: machine assigned for product: 00002109C20090400000000000F01FEC
MSI (s) (24:68) [17:15:57:708]: Using cached product context: machine assigned for product: 00002109C20090400000000000F01FEC
MSI (s) (24:68) [17:15:57:708]: Setting cached product context: machine assigned for product: 00002109E60090400000000000F01FEC
MSI (s) (24:68) [17:15:57:708]: Using cached product context: machine assigned for product: 00002109E60090400000000000F01FEC
MSI (s) (24:68) [17:15:57:708]: Setting cached product context: machine assigned for product: 00002109F10090400000000000F01FEC
MSI (s) (24:68) [17:15:57:708]: Using cached product context: machine assigned for product: 00002109F10090400000000000F01FEC
MSI (s) (24:68) [17:15:57:708]: Setting cached product context: machine assigned for product: 00002109F100A0C00000000000F01FEC
MSI (s) (24:68) [17:15:57:708]: Using cached product context: machine assigned for product: 00002109F100A0C00000000000F01FEC
MSI (s) (24:68) [17:15:57:708]: Setting cached product context: machine assigned for product: 00002109F100C0400000000000F01FEC
MSI (s) (24:68) [17:15:57:708]: Using cached product context: machine assigned for product: 00002109F100C0400000000000F01FEC
MSI (s) (24:68) [17:15:57:708]: Setting cached product context: machine assigned for product: 000021599B0090400000000000F01FEC
MSI (s) (24:68) [17:15:57:708]: Using cached product context: machine assigned for product: 000021599B0090400000000000F01FEC
MSI (s) (24:68) [17:15:57:708]: Setting cached product context: machine assigned for product: 032440EF5AC97F34B985A55C2AA8F133
MSI (s) (24:68) [17:15:57:708]: Using cached product context: machine assigned for product: 032440EF5AC97F34B985A55C2AA8F133
MSI (s) (24:68) [17:15:57:708]: Setting cached product context: machine assigned for product: 076CFAAAB965F2A4284B2449E5D03EFE
MSI (s) (24:68) [17:15:57:708]: Using cached product context: machine assigned for product: 076CFAAAB965F2A4284B2449E5D03EFE
MSI (s) (24:68) [17:15:57:708]: Setting cached product context: machine assigned for product: 099A4A9134357FF43B5BF640C690E1FD
MSI (s) (24:68) [17:15:57:708]: Using cached product context: machine assigned for product: 099A4A9134357FF43B5BF640C690E1FD
MSI (s) (24:68) [17:15:57:708]: Setting cached product context: machine assigned for product: 14704D8AC0940914282F2609891914B4
MSI (s) (24:68) [17:15:57:708]: Using cached product context: machine assigned for product: 14704D8AC0940914282F2609891914B4
MSI (s) (24:68) [17:15:57:708]: Setting cached product context: machine assigned for product: 14A7CAC1B3853844F95AE34556FA8F2C
MSI (s) (24:68) [17:15:57:708]: Using cached product context: machine assigned for product: 14A7CAC1B3853844F95AE34556FA8F2C
MSI (s) (24:68) [17:15:57:709]: Setting cached product context: machine assigned for product: 17EBDE16E3D57BA4DA595EF3AE6FC871
MSI (s) (24:68) [17:15:57:709]: Using cached product context: machine assigned for product: 17EBDE16E3D57BA4DA595EF3AE6FC871
MSI (s) (24:68) [17:15:57:709]: Setting cached product context: machine assigned for product: 1981A2D27564F6E43937FBECC4A95CAB
MSI (s) (24:68) [17:15:57:709]: Using cached product context: machine assigned for product: 1981A2D27564F6E43937FBECC4A95CAB
MSI (s) (24:68) [17:15:57:709]: Setting cached product context: machine assigned for product: 19BB2778CA395904E968EE013F0A4E98
MSI (s) (24:68) [17:15:57:709]: Using cached product context: machine assigned for product: 19BB2778CA395904E968EE013F0A4E98
MSI (s) (24:68) [17:15:57:709]: Setting cached product context: machine assigned for product: 1C79E9FA1347D6248A5DBA4E90590C1B
MSI (s) (24:68) [17:15:57:709]: Using cached product context: machine assigned for product: 1C79E9FA1347D6248A5DBA4E90590C1B
MSI (s) (24:68) [17:15:57:709]: Setting cached product context: machine assigned for product: 1D034B0FAA6BD374B960AAD30DF10D8B
MSI (s) (24:68) [17:15:57:709]: Using cached product context: machine assigned for product: 1D034B0FAA6BD374B960AAD30DF10D8B
MSI (s) (24:68) [17:15:57:709]: Setting cached product context: machine assigned for product: 1FB497DFD7566B341B380623778B6D8C
MSI (s) (24:68) [17:15:57:709]: Using cached product context: machine assigned for product: 1FB497DFD7566B341B380623778B6D8C
MSI (s) (24:68) [17:15:57:709]: Setting cached product context: machine assigned for product: 212E06E4771361B4CB3B16C6CC2553D7
MSI (s) (24:68) [17:15:57:709]: Using cached product context: machine assigned for product: 212E06E4771361B4CB3B16C6CC2553D7
MSI (s) (24:68) [17:15:57:709]: Setting cached product context: machine assigned for product: 26CEF00243C306D4C98ECE73E2100CF8
MSI (s) (24:68) [17:15:57:709]: Using cached product context: machine assigned for product: 26CEF00243C306D4C98ECE73E2100CF8
MSI (s) (24:68) [17:15:57:709]: Setting cached product context: machine assigned for product: 2878E7224F2B79E40BEE94EDC91C0C0C
MSI (s) (24:68) [17:15:57:709]: Using cached product context: machine assigned for product: 2878E7224F2B79E40BEE94EDC91C0C0C
MSI (s) (24:68) [17:15:57:709]: Setting cached product context: machine assigned for product: 295FE304B3594974CBFECEBA38C50259
MSI (s) (24:68) [17:15:57:709]: Using cached product context: machine assigned for product: 295FE304B3594974CBFECEBA38C50259
MSI (s) (24:68) [17:15:57:709]: Setting cached product context: machine assigned for product: 29F618052561C7A49BCB846F2847C2B4
MSI (s) (24:68) [17:15:57:709]: Using cached product context: machine assigned for product: 29F618052561C7A49BCB846F2847C2B4
MSI (s) (24:68) [17:15:57:710]: Setting cached product context: machine assigned for product: 2B51DA16BD0568647A9341EF81D04492
MSI (s) (24:68) [17:15:57:710]: Using cached product context: machine assigned for product: 2B51DA16BD0568647A9341EF81D04492
MSI (s) (24:68) [17:15:57:710]: Setting cached product context: machine assigned for product: 3512A0B06A8544244B8552DE5FCF8D90
MSI (s) (24:68) [17:15:57:710]: Using cached product context: machine assigned for product: 3512A0B06A8544244B8552DE5FCF8D90
MSI (s) (24:68) [17:15:57:710]: Setting cached product context: machine assigned for product: 389F20921C4BAB448BD5C5D6252E4C14
MSI (s) (24:68) [17:15:57:710]: Using cached product context: machine assigned for product: 389F20921C4BAB448BD5C5D6252E4C14
MSI (s) (24:68) [17:15:57:710]: Setting cached product context: machine assigned for product: 3BF78CA6CFCA614498C098675D9A3B17
MSI (s) (24:68) [17:15:57:710]: Using cached product context: machine assigned for product: 3BF78CA6CFCA614498C098675D9A3B17
MSI (s) (24:68) [17:15:57:710]: Setting cached product context: machine assigned for product: 3D04254D3B6B9FF42B3445CE3E1E0066
MSI (s) (24:68) [17:15:57:710]: Using cached product context: machine assigned for product: 3D04254D3B6B9FF42B3445CE3E1E0066
MSI (s) (24:68) [17:15:57:710]: Setting cached product context: machine assigned for product: 4314AE291D01A814191EA5403531A183
MSI (s) (24:68) [17:15:57:710]: Using cached product context: machine assigned for product: 4314AE291D01A814191EA5403531A183
MSI (s) (24:68) [17:15:57:710]: Setting cached product context: machine assigned for product: 46B5A9879DD95AB419A50FCFA0B1B7EF
MSI (s) (24:68) [17:15:57:710]: Using cached product context: machine assigned for product: 46B5A9879DD95AB419A50FCFA0B1B7EF
MSI (s) (24:68) [17:15:57:710]: Setting cached product context: machine assigned for product: 4A4869755DDD3AC4E98AB77E9D95D34B
MSI (s) (24:68) [17:15:57:710]: Using cached product context: machine assigned for product: 4A4869755DDD3AC4E98AB77E9D95D34B
MSI (s) (24:68) [17:15:57:710]: Setting cached product context: machine assigned for product: 4A9D4F432C248434EB4F5E358C54947E
MSI (s) (24:68) [17:15:57:710]: Using cached product context: machine assigned for product: 4A9D4F432C248434EB4F5E358C54947E
MSI (s) (24:68) [17:15:57:710]: Setting cached product context: machine assigned for product: 4B323F68F2FDA064483702B1CF76B6B1
MSI (s) (24:68) [17:15:57:710]: Using cached product context: machine assigned for product: 4B323F68F2FDA064483702B1CF76B6B1
MSI (s) (24:68) [17:15:57:710]: Setting cached product context: machine assigned for product: 4DE4057180BD8A04182C728D0C5118AD
MSI (s) (24:68) [17:15:57:710]: Using cached product context: machine assigned for product: 4DE4057180BD8A04182C728D0C5118AD
MSI (s) (24:68) [17:15:57:710]: Setting cached product context: machine assigned for product: 4E42866C3BBC1584BBF38EFC6D539032
MSI (s) (24:68) [17:15:57:711]: Using cached product context: machine assigned for product: 4E42866C3BBC1584BBF38EFC6D539032
MSI (s) (24:68) [17:15:57:711]: Setting cached product context: machine assigned for product: 4E60B829AADDA67429A6466102233672
MSI (s) (24:68) [17:15:57:711]: Using cached product context: machine assigned for product: 4E60B829AADDA67429A6466102233672
MSI (s) (24:68) [17:15:57:711]: Setting cached product context: machine assigned for product: 4EA42A62D9304AC4784BF238120632FF
MSI (s) (24:68) [17:15:57:711]: Using cached product context: machine assigned for product: 4EA42A62D9304AC4784BF238120632FF
MSI (s) (24:68) [17:15:57:711]: Setting cached product context: machine assigned for product: 4F9EB6A38CF5BB44EBB7232A6970EF6F
MSI (s) (24:68) [17:15:57:711]: Using cached product context: machine assigned for product: 4F9EB6A38CF5BB44EBB7232A6970EF6F
MSI (s) (24:68) [17:15:57:711]: Setting cached product context: machine assigned for product: 514D163353AB34143B10669119AB2691
MSI (s) (24:68) [17:15:57:711]: Using cached product context: machine assigned for product: 514D163353AB34143B10669119AB2691
MSI (s) (24:68) [17:15:57:711]: Setting cached product context: machine assigned for product: 51DDCFE42A4298D4484A58D7B16FF88A
MSI (s) (24:68) [17:15:57:711]: Using cached product context: machine assigned for product: 51DDCFE42A4298D4484A58D7B16FF88A
MSI (s) (24:68) [17:15:57:711]: Setting cached product context: machine assigned for product: 55565908215A0914C9DA0B003CD6B6B6
MSI (s) (24:68) [17:15:57:711]: Using cached product context: machine assigned for product: 55565908215A0914C9DA0B003CD6B6B6
MSI (s) (24:68) [17:15:57:711]: Setting cached product context: machine assigned for product: 57BE88642E821374B9BC556E427FDC54
MSI (s) (24:68) [17:15:57:711]: Using cached product context: machine assigned for product: 57BE88642E821374B9BC556E427FDC54
MSI (s) (24:68) [17:15:57:711]: Setting cached product context: machine assigned for product: 5B32B9D8C0D9AF5438A6F45B94BC7D21
MSI (s) (24:68) [17:15:57:711]: Using cached product context: machine assigned for product: 5B32B9D8C0D9AF5438A6F45B94BC7D21
MSI (s) (24:68) [17:15:57:711]: Setting cached product context: machine assigned for product: 5E1EFAEEB670A034699D5B7697A2AF88
MSI (s) (24:68) [17:15:57:711]: Using cached product context: machine assigned for product: 5E1EFAEEB670A034699D5B7697A2AF88
MSI (s) (24:68) [17:15:57:711]: Setting cached product context: machine assigned for product: 6043B4640D4A419419F0C74A83D0CC31
MSI (s) (24:68) [17:15:57:711]: Using cached product context: machine assigned for product: 6043B4640D4A419419F0C74A83D0CC31
MSI (s) (24:68) [17:15:57:711]: Setting cached product context: machine assigned for product: 60EA627A3AAA1D34783E075F0113F440
MSI (s) (24:68) [17:15:57:711]: Using cached product context: machine assigned for product: 60EA627A3AAA1D34783E075F0113F440
MSI (s) (24:68) [17:15:57:712]: Setting cached product context: machine assigned for product: 6116D6C8427B0184F8D20D746E7B6DE8
MSI (s) (24:68) [17:15:57:712]: Using cached product context: machine assigned for product: 6116D6C8427B0184F8D20D746E7B6DE8
MSI (s) (24:68) [17:15:57:712]: Setting cached product context: machine assigned for product: 65FC11932FE9AB9348A62CB73DDC6058
MSI (s) (24:68) [17:15:57:712]: Using cached product context: machine assigned for product: 65FC11932FE9AB9348A62CB73DDC6058
MSI (s) (24:68) [17:15:57:712]: Setting cached product context: machine assigned for product: 68AB67CA7DA73301B7448A0100000030
MSI (s) (24:68) [17:15:57:712]: Using cached product context: machine assigned for product: 68AB67CA7DA73301B7448A0100000030
MSI (s) (24:68) [17:15:57:712]: Setting cached product context: machine assigned for product: 69FE29508D96B4E4C99C885FE88AF610
MSI (s) (24:68) [17:15:57:712]: Using cached product context: machine assigned for product: 69FE29508D96B4E4C99C885FE88AF610
MSI (s) (24:68) [17:15:57:712]: Setting cached product context: machine assigned for product: 6F9E66FF7E38E3A3FA41D89E8A906A4A
MSI (s) (24:68) [17:15:57:712]: Using cached product context: machine assigned for product: 6F9E66FF7E38E3A3FA41D89E8A906A4A
MSI (s) (24:68) [17:15:57:712]: Setting cached product context: machine assigned for product: 71DCBBF1304249742B8A3ADADDB3A08F
MSI (s) (24:68) [17:15:57:712]: Using cached product context: machine assigned for product: 71DCBBF1304249742B8A3ADADDB3A08F
MSI (s) (24:68) [17:15:57:712]: Setting cached product context: machine assigned for product: 7303D148B52A3874799D3A6A4DD024CD
MSI (s) (24:68) [17:15:57:712]: Using cached product context: machine assigned for product: 7303D148B52A3874799D3A6A4DD024CD
MSI (s) (24:68) [17:15:57:712]: Setting cached product context: machine assigned for product: 766F6333940964D4896BC447E3BE5C1B
MSI (s) (24:68) [17:15:57:712]: Using cached product context: machine assigned for product: 766F6333940964D4896BC447E3BE5C1B
MSI (s) (24:68) [17:15:57:712]: Setting cached product context: machine assigned for product: 775F634D5961F2D4B844CA679CE90020
MSI (s) (24:68) [17:15:57:712]: Using cached product context: machine assigned for product: 775F634D5961F2D4B844CA679CE90020
MSI (s) (24:68) [17:15:57:713]: Setting cached product context: machine assigned for product: 7B292C385A83B0447A137070E0186AF4
MSI (s) (24:68) [17:15:57:713]: Using cached product context: machine assigned for product: 7B292C385A83B0447A137070E0186AF4
MSI (s) (24:68) [17:15:57:713]: Setting cached product context: machine assigned for product: 7BD4C90EC03660F46A13E87A329932FA
MSI (s) (24:68) [17:15:57:713]: Using cached product context: machine assigned for product: 7BD4C90EC03660F46A13E87A329932FA
MSI (s) (24:68) [17:15:57:713]: Setting cached product context: machine assigned for product: 7E0BA6F1DDC839B4A832AAE92BEFCF4E
MSI (s) (24:68) [17:15:57:713]: Using cached product context: machine assigned for product: 7E0BA6F1DDC839B4A832AAE92BEFCF4E
MSI (s) (24:68) [17:15:57:713]: Setting cached product context: machine assigned for product: 7F80AB91827CC964A853FBDB6333EB80
MSI (s) (24:68) [17:15:57:713]: Using cached product context: machine assigned for product: 7F80AB91827CC964A853FBDB6333EB80
MSI (s) (24:68) [17:15:57:713]: Setting cached product context: machine assigned for product: 866B60270EEFB554BBF1B9A5E2E09CA4
MSI (s) (24:68) [17:15:57:713]: Using cached product context: machine assigned for product: 866B60270EEFB554BBF1B9A5E2E09CA4
MSI (s) (24:68) [17:15:57:713]: Setting cached product context: machine assigned for product: 88119C0AF88C68E4396EDCC7A9626694
MSI (s) (24:68) [17:15:57:713]: Using cached product context: machine assigned for product: 88119C0AF88C68E4396EDCC7A9626694
MSI (s) (24:68) [17:15:57:713]: Setting cached product context: machine assigned for product: 884FD4BEFEAAF6043A14BCA2AA13B509
MSI (s) (24:68) [17:15:57:713]: Using cached product context: machine assigned for product: 884FD4BEFEAAF6043A14BCA2AA13B509
MSI (s) (24:68) [17:15:57:713]: Setting cached product context: machine assigned for product: 9040110900063D11C8EF10054038389C
MSI (s) (24:68) [17:15:57:713]: Using cached product context: machine assigned for product: 9040110900063D11C8EF10054038389C
MSI (s) (24:68) [17:15:57:713]: Setting cached product context: machine assigned for product: 9040150900063D11C8EF10054038389C
MSI (s) (24:68) [17:15:57:713]: Using cached product context: machine assigned for product: 9040150900063D11C8EF10054038389C
MSI (s) (24:68) [17:15:57:713]: Setting cached product context: machine assigned for product: 933448FAA8F23954183BF9C44530C8E4
MSI (s) (24:68) [17:15:57:714]: Using cached product context: machine assigned for product: 933448FAA8F23954183BF9C44530C8E4
MSI (s) (24:68) [17:15:57:714]: Setting cached product context: machine assigned for product: 9CA6158A1FAA9F747966302E4DDCCB8F
MSI (s) (24:68) [17:15:57:714]: Using cached product context: machine assigned for product: 9CA6158A1FAA9F747966302E4DDCCB8F
MSI (s) (24:68) [17:15:57:714]: Setting cached product context: machine assigned for product: A32460A5C012BF9459E0BCE08B5CEC7C
MSI (s) (24:68) [17:15:57:714]: Using cached product context: machine assigned for product: A32460A5C012BF9459E0BCE08B5CEC7C
MSI (s) (24:68) [17:15:57:714]: Setting cached product context: machine assigned for product: A57765D93F393A44082948E08362ED03
MSI (s) (24:68) [17:15:57:714]: Using cached product context: machine assigned for product: A57765D93F393A44082948E08362ED03
MSI (s) (24:68) [17:15:57:714]: Setting cached product context: machine assigned for product: A58B0E57F5803AB42BFB9159FA8D20D4
MSI (s) (24:68) [17:15:57:714]: Using cached product context: machine assigned for product: A58B0E57F5803AB42BFB9159FA8D20D4
MSI (s) (24:68) [17:15:57:714]: Setting cached product context: machine assigned for product: A6C64DD86500CEF47BA082BB611A1FF1
MSI (s) (24:68) [17:15:57:714]: Using cached product context: machine assigned for product: A6C64DD86500CEF47BA082BB611A1FF1
MSI (s) (24:68) [17:15:57:714]: Setting cached product context: machine assigned for product: AAFB6477D5B2DFF40A8E54854F661850
MSI (s) (24:68) [17:15:57:714]: Using cached product context: machine assigned for product: AAFB6477D5B2DFF40A8E54854F661850
MSI (s) (24:68) [17:15:57:714]: Setting cached product context: machine assigned for product: B2F5519759897D9468219D52080EEDB5
MSI (s) (24:68) [17:15:57:714]: Using cached product context: machine assigned for product: B2F5519759897D9468219D52080EEDB5
MSI (s) (24:68) [17:15:57:714]: Setting cached product context: machine assigned for product: B6ACDB9A3563B764CA384963D73AFB3E
MSI (s) (24:68) [17:15:57:714]: Using cached product context: machine assigned for product: B6ACDB9A3563B764CA384963D73AFB3E
MSI (s) (24:68) [17:15:57:714]: Setting cached product context: machine assigned for product: C0584C772953F2A46B25CA7BA7E17FC7
MSI (s) (24:68) [17:15:57:714]: Using cached product context: machine assigned for product: C0584C772953F2A46B25CA7BA7E17FC7
MSI (s) (24:68) [17:15:57:715]: Setting cached product context: machine assigned for product: C062052359A7236498B39856E75B45B5
MSI (s) (24:68) [17:15:57:715]: Using cached product context: machine assigned for product: C062052359A7236498B39856E75B45B5
MSI (s) (24:68) [17:15:57:715]: Setting cached product context: machine assigned for product: c1c4f01781cc94c4c8fb1542c0981a2a
MSI (s) (24:68) [17:15:57:715]: Using cached product context: machine assigned for product: c1c4f01781cc94c4c8fb1542c0981a2a
MSI (s) (24:68) [17:15:57:715]: Setting cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:715]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:716]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:716]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:716]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:716]: SRSetRestorePoint skipped for this transaction.
MSI (s) (24:68) [17:15:57:716]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (s) (24:68) [17:15:57:718]: File will have security applied from OpCode.
MSI (s) (24:68) [17:15:57:720]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi' against software restriction policy
MSI (s) (24:68) [17:15:57:720]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi has a digital signature
MSI (s) (24:68) [17:15:57:720]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi is permitted to run because the user token authorizes execution (system or service token).
MSI (s) (24:68) [17:15:57:720]: End dialog not enabled
MSI (s) (24:68) [17:15:57:720]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi
MSI (s) (24:68) [17:15:57:720]: Package we're running from ==> C:\Windows\Installer\b51b0.msi
MSI (s) (24:68) [17:15:57:720]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:720]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:720]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:720]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:720]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:720]: APPCOMPAT: Uninstall Flags override found.
MSI (s) (24:68) [17:15:57:720]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:720]: APPCOMPAT: Uninstall VersionNT override found.
MSI (s) (24:68) [17:15:57:720]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:720]: APPCOMPAT: Uninstall ServicePackLevel override found.
MSI (s) (24:68) [17:15:57:721]: APPCOMPAT: looking for appcompat database entry with ProductCode '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'.
MSI (s) (24:68) [17:15:57:721]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (24:68) [17:15:57:721]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:721]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:721]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:721]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:721]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:728]: MSCOREE not loaded loading copy from system32
MSI (s) (24:68) [17:15:57:732]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:732]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:732]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:732]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:733]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:733]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:733]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:733]: Machine policy value 'DisablePatch' is 0
MSI (s) (24:68) [17:15:57:733]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (24:68) [17:15:57:733]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (24:68) [17:15:57:733]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:733]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:733]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (24:68) [17:15:57:733]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active
MSI (s) (24:68) [17:15:57:733]: APPCOMPAT: looking for appcompat database entry with ProductCode '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'.
MSI (s) (24:68) [17:15:57:733]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (24:68) [17:15:57:733]: Transforms are not secure.
MSI (s) (24:68) [17:15:57:734]: Note: 1: 2205 2: 3: Control
MSI (s) (24:68) [17:15:57:734]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos UI Install Log 20210325 171557.txt'.
MSI (s) (24:68) [17:15:57:734]: Command Line: INSTALLDIR= REBOOT=ReallySuppress REINSTALLMODE=vmuso REINSTALL=ALL INSTALLINGVERSION=2.1.44.0 ARPSYSTEMCOMPONENT=1 CURRENTDIRECTORY=C:\Windows\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=6096
MSI (s) (24:68) [17:15:57:734]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{5C8C0B42-292F-4458-9945-96D6D5DBD920}'.
MSI (s) (24:68) [17:15:57:734]: Product Code passed to Engine.Initialize: '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'
MSI (s) (24:68) [17:15:57:734]: Product Code from property table before transforms: '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'
MSI (s) (24:68) [17:15:57:734]: Product Code from property table after transforms: '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'
MSI (s) (24:68) [17:15:57:734]: Product registered: entering maintenance mode
MSI (s) (24:68) [17:15:57:734]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:734]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
MSI (s) (24:68) [17:15:57:734]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:734]: Product {8D7BB12C-6854-46DF-A67D-F82D778D75C8} is admin assigned: LocalSystem owns the publish key.
MSI (s) (24:68) [17:15:57:734]: Product {8D7BB12C-6854-46DF-A67D-F82D778D75C8} is managed.
MSI (s) (24:68) [17:15:57:734]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:734]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (24:68) [17:15:57:734]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'.
MSI (s) (24:68) [17:15:57:734]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
MSI (s) (24:68) [17:15:57:734]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:734]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:734]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (24:68) [17:15:57:734]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:734]: Specifed source is already in a list.
MSI (s) (24:68) [17:15:57:734]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (24:68) [17:15:57:734]: Machine policy value 'DisableBrowse' is 0
MSI (s) (24:68) [17:15:57:734]: Machine policy value 'AllowLockdownBrowse' is 0
MSI (s) (24:68) [17:15:57:734]: Adding new sources is allowed.
MSI (s) (24:68) [17:15:57:734]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:734]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:734]: Package name retrieved from configuration data: 'Sophos UI.msi'
MSI (s) (24:68) [17:15:57:734]: Note: 1: 2205 2: 3: Error
MSI (s) (24:68) [17:15:57:735]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (24:68) [17:15:57:735]: Machine policy value 'DisableMsi' is 0
MSI (s) (24:68) [17:15:57:735]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (24:68) [17:15:57:735]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (24:68) [17:15:57:735]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:735]: Product {8D7BB12C-6854-46DF-A67D-F82D778D75C8} is admin assigned: LocalSystem owns the publish key.
MSI (s) (24:68) [17:15:57:735]: Product {8D7BB12C-6854-46DF-A67D-F82D778D75C8} is managed.
MSI (s) (24:68) [17:15:57:735]: Running product '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}' with elevated privileges: Product is assigned.
MSI (s) (24:68) [17:15:57:735]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (24:68) [17:15:57:735]: PROPERTY CHANGE: Adding REINSTALLMODE property. Its value is 'vmuso'.
MSI (s) (24:68) [17:15:57:735]: PROPERTY CHANGE: Adding REINSTALL property. Its value is 'ALL'.
MSI (s) (24:68) [17:15:57:735]: PROPERTY CHANGE: Adding INSTALLINGVERSION property. Its value is '2.1.44.0'.
MSI (s) (24:68) [17:15:57:735]: PROPERTY CHANGE: Adding ARPSYSTEMCOMPONENT property. Its value is '1'.
MSI (s) (24:68) [17:15:57:735]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Windows\system32'.
MSI (s) (24:68) [17:15:57:735]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (24:68) [17:15:57:735]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
MSI (s) (24:68) [17:15:57:735]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '6096'.
MSI (s) (24:68) [17:15:57:735]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (24:68) [17:15:57:735]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
MSI (s) (24:68) [17:15:57:735]: TRANSFORMS property is now:
MSI (s) (24:68) [17:15:57:735]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'.
MSI (s) (24:68) [17:15:57:735]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '405'.
MSI (s) (24:68) [17:15:57:736]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming
MSI (s) (24:68) [17:15:57:737]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites
MSI (s) (24:68) [17:15:57:737]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (24:68) [17:15:57:738]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents
MSI (s) (24:68) [17:15:57:739]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (24:68) [17:15:57:739]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (24:68) [17:15:57:740]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (24:68) [17:15:57:741]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (24:68) [17:15:57:741]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (24:68) [17:15:57:742]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local
MSI (s) (24:68) [17:15:57:742]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures
MSI (s) (24:68) [17:15:57:744]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (24:68) [17:15:57:744]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (24:68) [17:15:57:745]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (24:68) [17:15:57:746]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (24:68) [17:15:57:746]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (24:68) [17:15:57:748]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (24:68) [17:15:57:749]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (24:68) [17:15:57:749]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (24:68) [17:15:57:750]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (24:68) [17:15:57:751]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop
MSI (s) (24:68) [17:15:57:751]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (24:68) [17:15:57:752]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (s) (24:68) [17:15:57:752]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (24:68) [17:15:57:760]: MSI_LUA: Setting AdminUser property to 1 because the product is already installed managed and per-machine
MSI (s) (24:68) [17:15:57:760]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (24:68) [17:15:57:760]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (24:68) [17:15:57:760]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (24:68) [17:15:57:760]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:760]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (24:68) [17:15:57:760]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'SBYJUAL20'.
MSI (s) (24:68) [17:15:57:760]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (24:68) [17:15:57:760]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Microsoft'.
MSI (s) (24:68) [17:15:57:760]: PROPERTY CHANGE: Adding Installed property. Its value is '00:00:00'.
MSI (s) (24:68) [17:15:57:760]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\b51b0.msi'.
MSI (s) (24:68) [17:15:57:760]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi'.
MSI (s) (24:68) [17:15:57:760]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (24:68) [17:15:57:760]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (s) (24:68) [17:15:57:760]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (24:68) [17:15:57:761]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (24:68) [17:15:57:761]: Machine policy value 'DisableRollback' is 0
MSI (s) (24:68) [17:15:57:761]: User policy value 'DisableRollback' is 0
MSI (s) (24:68) [17:15:57:761]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (s) (24:68) [17:15:57:761]: PROPERTY CHANGE: Adding QFEUpgrade property. Its value is '1'.
=== Logging started: 25/03/2021 17:15:57 ===
MSI (s) (24:68) [17:15:57:761]: PROPERTY CHANGE: Adding Preselected property. Its value is '1'.
MSI (s) (24:68) [17:15:57:761]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (24:68) [17:15:57:761]: Doing action: INSTALL
MSI (s) (24:68) [17:15:57:761]: Note: 1: 2205 2: 3: ActionText
Action start 17:15:57: INSTALL.
MSI (s) (24:68) [17:15:57:762]: Running ExecuteSequence
MSI (s) (24:68) [17:15:57:762]: Doing action: FindRelatedProducts
MSI (s) (24:68) [17:15:57:762]: Note: 1: 2205 2: 3: ActionText
MSI (s) (24:68) [17:15:57:763]: Skipping FindRelatedProducts action: not run in maintenance mode
Action start 17:15:57: FindRelatedProducts.
MSI (s) (24:68) [17:15:57:763]: Doing action: AppSearch
MSI (s) (24:68) [17:15:57:763]: Note: 1: 2205 2: 3: ActionText
Action ended 17:15:57: FindRelatedProducts. Return value 0.
Action start 17:15:57: AppSearch.
MSI (s) (24:68) [17:15:57:765]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (s) (24:68) [17:15:57:765]: PROPERTY CHANGE: Adding WIXNETFX4RELEASEINSTALLED property. Its value is '#379893'.
MSI (s) (24:68) [17:15:57:765]: Doing action: SetWIX_IS_NETFRAMEWORK_451_OR_LATER_INSTALLED
MSI (s) (24:68) [17:15:57:765]: Note: 1: 2205 2: 3: ActionText
Action ended 17:15:57: AppSearch. Return value 1.
MSI (s) (24:68) [17:15:57:765]: PROPERTY CHANGE: Adding WIX_IS_NETFRAMEWORK_451_OR_LATER_INSTALLED property. Its value is '1'.
Action start 17:15:57: SetWIX_IS_NETFRAMEWORK_451_OR_LATER_INSTALLED.
MSI (s) (24:68) [17:15:57:765]: Doing action: SetWIX_IS_NETFRAMEWORK_452_OR_LATER_INSTALLED
MSI (s) (24:68) [17:15:57:765]: Note: 1: 2205 2: 3: ActionText
Action ended 17:15:57: SetWIX_IS_NETFRAMEWORK_451_OR_LATER_INSTALLED. Return value 1.
MSI (s) (24:68) [17:15:57:766]: PROPERTY CHANGE: Adding WIX_IS_NETFRAMEWORK_452_OR_LATER_INSTALLED property. Its value is '1'.
Action start 17:15:57: SetWIX_IS_NETFRAMEWORK_452_OR_LATER_INSTALLED.
MSI (s) (24:68) [17:15:57:766]: Doing action: LaunchConditions
MSI (s) (24:68) [17:15:57:766]: Note: 1: 2205 2: 3: ActionText
Action ended 17:15:57: SetWIX_IS_NETFRAMEWORK_452_OR_LATER_INSTALLED. Return value 1.
Action start 17:15:57: LaunchConditions.
MSI (s) (24:68) [17:15:57:767]: Doing action: ValidateProductID
MSI (s) (24:68) [17:15:57:767]: Note: 1: 2205 2: 3: ActionText
Action ended 17:15:57: LaunchConditions. Return value 1.
Action start 17:15:57: ValidateProductID.
MSI (s) (24:68) [17:15:57:767]: Doing action: CostInitialize
MSI (s) (24:68) [17:15:57:767]: Note: 1: 2205 2: 3: ActionText
Action ended 17:15:57: ValidateProductID. Return value 1.
MSI (s) (24:68) [17:15:57:768]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (s) (24:68) [17:15:57:768]: Baseline: Sorting baselines for {8D7BB12C-6854-46DF-A67D-F82D778D75C8}.
MSI (s) (24:68) [17:15:57:768]: Baseline: New baseline 2.1.44 from transaction.
MSI (s) (24:68) [17:15:57:768]: Baseline: Sorted order Native: Order 0.
MSI (s) (24:68) [17:15:57:768]: Baseline Data Table:
MSI (s) (24:68) [17:15:57:768]: ProductCode: {8D7BB12C-6854-46DF-A67D-F82D778D75C8} Version: 2.1.44 Attributes: 0 PatchId: Native BaselineId: -2147483648 Order: 0
MSI (s) (24:68) [17:15:57:768]: Baseline File Table:
MSI (s) (24:68) [17:15:57:769]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (s) (24:68) [17:15:57:769]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (24:68) [17:15:57:769]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:769]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:15:57:769]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (24:68) [17:15:57:769]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (24:68) [17:15:57:769]: Note: 1: 2205 2: 3: __MsiPatchFileList
MSI (s) (24:68) [17:15:57:770]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (24:68) [17:15:57:770]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
MSI (s) (24:68) [17:15:57:770]: Delta compression fallback method for this product transaction is 'MSI 2.0 legacy obsolescence'
MSI (s) (24:68) [17:15:57:770]: Note: 1: 2205 2: 3: Patch
Action start 17:15:57: CostInitialize.
MSI (s) (24:68) [17:15:57:770]: Doing action: FileCost
MSI (s) (24:68) [17:15:57:770]: Note: 1: 2205 2: 3: ActionText
Action ended 17:15:57: CostInitialize. Return value 1.
MSI (s) (24:68) [17:15:57:771]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (24:68) [17:15:57:771]: Note: 1: 2205 2: 3: Class
MSI (s) (24:68) [17:15:57:771]: Note: 1: 2205 2: 3: Extension
MSI (s) (24:68) [17:15:57:771]: Note: 1: 2205 2: 3: TypeLib
Action start 17:15:57: FileCost.
MSI (s) (24:68) [17:15:57:771]: Doing action: CostFinalize
MSI (s) (24:68) [17:15:57:771]: Note: 1: 2205 2: 3: ActionText
Action ended 17:15:57: FileCost. Return value 1.
MSI (s) (24:68) [17:15:57:772]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (24:68) [17:15:57:772]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (24:68) [17:15:57:772]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (24:68) [17:15:57:772]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (24:68) [17:15:57:772]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (24:68) [17:15:57:772]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (24:68) [17:15:57:772]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
MSI (s) (24:68) [17:15:57:772]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files\Sophos\Sophos UI'.
MSI (s) (24:68) [17:15:57:773]: PROPERTY CHANGE: Adding EventsDirectory property. Its value is 'C:\Program Files\Sophos\Sophos UI\Events'.
MSI (s) (24:68) [17:15:57:774]: PROPERTY CHANGE: Adding CzechDirectory property. Its value is 'C:\Program Files\Sophos\Sophos UI\cs'.
MSI (s) (24:68) [17:15:57:774]: PROPERTY CHANGE: Adding GermanDirectory property. Its value is 'C:\Program Files\Sophos\Sophos UI\de'.
MSI (s) (24:68) [17:15:57:774]: PROPERTY CHANGE: Adding SpanishDirectory property. Its value is 'C:\Program Files\Sophos\Sophos UI\es'.
MSI (s) (24:68) [17:15:57:775]: PROPERTY CHANGE: Adding FrenchDirectory property. Its value is 'C:\Program Files\Sophos\Sophos UI\fr'.
MSI (s) (24:68) [17:15:57:775]: PROPERTY CHANGE: Adding ItalianDirectory property. Its value is 'C:\Program Files\Sophos\Sophos UI\it'.
MSI (s) (24:68) [17:15:57:775]: PROPERTY CHANGE: Adding JapaneseDirectory property. Its value is 'C:\Program Files\Sophos\Sophos UI\ja'.
MSI (s) (24:68) [17:15:57:776]: PROPERTY CHANGE: Adding PolishDirectory property. Its value is 'C:\Program Files\Sophos\Sophos UI\pl'.
MSI (s) (24:68) [17:15:57:776]: PROPERTY CHANGE: Adding KoreanKoreaDirectory property. Its value is 'C:\Program Files\Sophos\Sophos UI\ko-KR'.
MSI (s) (24:68) [17:15:57:776]: PROPERTY CHANGE: Adding PortugueseBrazilDirectory property. Its value is 'C:\Program Files\Sophos\Sophos UI\pt-BR'.
MSI (s) (24:68) [17:15:57:776]: PROPERTY CHANGE: Adding ChineseSimplifiedDirectory property. Its value is 'C:\Program Files\Sophos\Sophos UI\zh-Hans'.
MSI (s) (24:68) [17:15:57:777]: PROPERTY CHANGE: Adding ChineseTraditionalDirectory property. Its value is 'C:\Program Files\Sophos\Sophos UI\zh-Hant'.
MSI (s) (24:68) [17:15:57:777]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:'.
MSI (s) (24:68) [17:15:57:777]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:15:57:777]: Note: 1: 2205 2: 3: Condition
MSI (s) (24:68) [17:15:57:777]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:777]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:777]: Machine policy value 'EnforceUpgradeComponentRules' is 0
MSI (s) (24:68) [17:15:57:777]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:57:777]: PROPERTY CHANGE: Modifying TARGETDIR property. Its current value is 'C:'. Its new value: 'C:\'.
MSI (s) (24:68) [17:15:57:777]: PROPERTY CHANGE: Adding SophosProgramsFolder property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\'.
MSI (s) (24:68) [17:15:57:778]: PROPERTY CHANGE: Adding Sophos property. Its value is 'C:\Program Files\Sophos\'.
MSI (s) (24:68) [17:15:57:778]: PROPERTY CHANGE: Modifying INSTALLDIR property. Its current value is 'C:\Program Files\Sophos\Sophos UI'. Its new value: 'C:\Program Files\Sophos\Sophos UI\'.
MSI (s) (24:68) [17:15:57:778]: PROPERTY CHANGE: Modifying ChineseTraditionalDirectory property. Its current value is 'C:\Program Files\Sophos\Sophos UI\zh-Hant'. Its new value: 'C:\Program Files\Sophos\Sophos UI\zh-Hant\'.
MSI (s) (24:68) [17:15:57:778]: PROPERTY CHANGE: Modifying ChineseSimplifiedDirectory property. Its current value is 'C:\Program Files\Sophos\Sophos UI\zh-Hans'. Its new value: 'C:\Program Files\Sophos\Sophos UI\zh-Hans\'.
MSI (s) (24:68) [17:15:57:778]: PROPERTY CHANGE: Modifying PortugueseBrazilDirectory property. Its current value is 'C:\Program Files\Sophos\Sophos UI\pt-BR'. Its new value: 'C:\Program Files\Sophos\Sophos UI\pt-BR\'.
MSI (s) (24:68) [17:15:57:778]: PROPERTY CHANGE: Modifying KoreanKoreaDirectory property. Its current value is 'C:\Program Files\Sophos\Sophos UI\ko-KR'. Its new value: 'C:\Program Files\Sophos\Sophos UI\ko-KR\'.
MSI (s) (24:68) [17:15:57:778]: PROPERTY CHANGE: Modifying PolishDirectory property. Its current value is 'C:\Program Files\Sophos\Sophos UI\pl'. Its new value: 'C:\Program Files\Sophos\Sophos UI\pl\'.
MSI (s) (24:68) [17:15:57:778]: PROPERTY CHANGE: Modifying JapaneseDirectory property. Its current value is 'C:\Program Files\Sophos\Sophos UI\ja'. Its new value: 'C:\Program Files\Sophos\Sophos UI\ja\'.
MSI (s) (24:68) [17:15:57:778]: PROPERTY CHANGE: Modifying ItalianDirectory property. Its current value is 'C:\Program Files\Sophos\Sophos UI\it'. Its new value: 'C:\Program Files\Sophos\Sophos UI\it\'.
MSI (s) (24:68) [17:15:57:778]: PROPERTY CHANGE: Modifying FrenchDirectory property. Its current value is 'C:\Program Files\Sophos\Sophos UI\fr'. Its new value: 'C:\Program Files\Sophos\Sophos UI\fr\'.
MSI (s) (24:68) [17:15:57:778]: PROPERTY CHANGE: Modifying SpanishDirectory property. Its current value is 'C:\Program Files\Sophos\Sophos UI\es'. Its new value: 'C:\Program Files\Sophos\Sophos UI\es\'.
MSI (s) (24:68) [17:15:57:778]: PROPERTY CHANGE: Modifying GermanDirectory property. Its current value is 'C:\Program Files\Sophos\Sophos UI\de'. Its new value: 'C:\Program Files\Sophos\Sophos UI\de\'.
MSI (s) (24:68) [17:15:57:779]: PROPERTY CHANGE: Modifying CzechDirectory property. Its current value is 'C:\Program Files\Sophos\Sophos UI\cs'. Its new value: 'C:\Program Files\Sophos\Sophos UI\cs\'.
MSI (s) (24:68) [17:15:57:779]: PROPERTY CHANGE: Modifying EventsDirectory property. Its current value is 'C:\Program Files\Sophos\Sophos UI\Events'. Its new value: 'C:\Program Files\Sophos\Sophos UI\Events\'.
MSI (s) (24:68) [17:15:57:779]: Target path resolution complete. Dumping Directory table...
MSI (s) (24:68) [17:15:57:779]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: TARGETDIR , Object: C:\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: WindowsFolder , Object: C:\Windows\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: ProgramMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: SophosProgramsFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: Sophos , Object: C:\Program Files\Sophos\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files\Sophos\Sophos UI\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: ChineseTraditionalDirectory , Object: C:\Program Files\Sophos\Sophos UI\zh-Hant\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: ChineseSimplifiedDirectory , Object: C:\Program Files\Sophos\Sophos UI\zh-Hans\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: PortugueseBrazilDirectory , Object: C:\Program Files\Sophos\Sophos UI\pt-BR\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: KoreanKoreaDirectory , Object: C:\Program Files\Sophos\Sophos UI\ko-KR\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: PolishDirectory , Object: C:\Program Files\Sophos\Sophos UI\pl\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: JapaneseDirectory , Object: C:\Program Files\Sophos\Sophos UI\ja\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: ItalianDirectory , Object: C:\Program Files\Sophos\Sophos UI\it\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: FrenchDirectory , Object: C:\Program Files\Sophos\Sophos UI\fr\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: SpanishDirectory , Object: C:\Program Files\Sophos\Sophos UI\es\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: GermanDirectory , Object: C:\Program Files\Sophos\Sophos UI\de\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: CzechDirectory , Object: C:\Program Files\Sophos\Sophos UI\cs\
MSI (s) (24:68) [17:15:57:779]: Dir (target): Key: EventsDirectory , Object: C:\Program Files\Sophos\Sophos UI\Events\
MSI (s) (24:68) [17:15:57:779]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
Action start 17:15:57: CostFinalize.
MSI (s) (24:68) [17:15:57:962]: Doing action: MigrateFeatureStates
MSI (s) (24:68) [17:15:57:962]: Note: 1: 2205 2: 3: ActionText
Action ended 17:15:57: CostFinalize. Return value 1.
MSI (s) (24:68) [17:15:57:965]: Skipping MigrateFeatureStates action: not run in maintenance mode
Action start 17:15:57: MigrateFeatureStates.
MSI (s) (24:68) [17:15:57:965]: Doing action: InstallValidate
MSI (s) (24:68) [17:15:57:965]: Note: 1: 2205 2: 3: ActionText
Action ended 17:15:57: MigrateFeatureStates. Return value 0.
MSI (s) (24:68) [17:15:57:968]: Note: 1: 2205 2: 3: Dialog
MSI (s) (24:68) [17:15:57:968]: Feature: AllComponents; Installed: Local; Request: Reinstall; Action: Reinstall
MSI (s) (24:68) [17:15:57:968]: Component: Adapter; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: ProductInformation; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUI; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUISavApi; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUIShortcut; Installed: Local; Request: Local; Action: Local; Client State: Absent
MSI (s) (24:68) [17:15:57:968]: Component: Events.cs_cz; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: Events.de_de; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: Events.en_us; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: Events.es_es; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: Events.fr_fr; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: Events.it_it; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: Events.ja_jp; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: Events.ko_kr; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: Events.pl_pl; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: Events.pt_br; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: Events.zh_cn; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: Events.zh_tw; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: Newtonsoft.Json; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: NLog; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: NLog_config; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUI_config; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUI_cs; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUI_de; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUI_es; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUI_fr; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUI_it; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUI_ja; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUI_pl; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUI_koKR; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUI_ptBR; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUI_zhHans; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SophosUI_zhHant; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: Telemetry; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SetSophosUIToRunOnLogin; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: SetSophosUIAsRegisteredAVShellOpenCommand; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: RegisterTelemetryEXEWithSAU; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: AdapterNotifications; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: TamperProtection; Installed: Local; Request: Local; Action: Local; Client State: Local
MSI (s) (24:68) [17:15:57:968]: Component: __SophosUIShortcut65; Installed: Null; Request: Local; Action: Local; Client State: Null
MSI (s) (24:68) [17:15:57:968]: Component: __SetSophosUIToRunOnLogin65; Installed: Null; Request: Local; Action: Local; Client State: Null
MSI (s) (24:68) [17:15:57:968]: Component: __SetSophosUIAsRegisteredAVShellOpenCommand65; Installed: Null; Request: Local; Action: Local; Client State: Null
MSI (s) (24:68) [17:15:57:968]: Component: __RegisterTelemetryEXEWithSAU65; Installed: Null; Request: Local; Action: Local; Client State: Null
MSI (s) (24:68) [17:15:57:968]: Component: __AdapterNotifications65; Installed: Null; Request: Local; Action: Local; Client State: Null
MSI (s) (24:68) [17:15:57:968]: Component: __ProductInformation65; Installed: Null; Request: Local; Action: Local; Client State: Null
MSI (s) (24:68) [17:15:57:969]: Component: __SophosUISavApi65; Installed: Null; Request: Local; Action: Local; Client State: Null
MSI (s) (24:68) [17:15:57:969]: Note: 1: 2205 2: 3: BindImage
MSI (s) (24:68) [17:15:57:969]: Note: 1: 2205 2: 3: ProgId
MSI (s) (24:68) [17:15:57:969]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (24:68) [17:15:57:969]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (24:68) [17:15:57:969]: Note: 1: 2205 2: 3: Extension
MSI (s) (24:68) [17:15:57:969]: Note: 1: 2205 2: 3: Font
MSI (s) (24:68) [17:15:57:969]: Note: 1: 2205 2: 3: Class
MSI (s) (24:68) [17:15:57:969]: Note: 1: 2205 2: 3: TypeLib
Action start 17:15:57: InstallValidate.
MSI (s) (24:68) [17:15:57:969]: Note: 1: 2205 2: 3: _RemoveFilePath
MSI (s) (24:68) [17:15:58:405]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (24:68) [17:15:58:405]: Note: 1: 2205 2: 3: BindImage
MSI (s) (24:68) [17:15:58:405]: Note: 1: 2205 2: 3: ProgId
MSI (s) (24:68) [17:15:58:405]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (24:68) [17:15:58:405]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (24:68) [17:15:58:405]: Note: 1: 2205 2: 3: Extension
MSI (s) (24:68) [17:15:58:405]: Note: 1: 2205 2: 3: Font
MSI (s) (24:68) [17:15:58:405]: Note: 1: 2205 2: 3: Class
MSI (s) (24:68) [17:15:58:405]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (24:68) [17:15:58:406]: Note: 1: 2727 2:
MSI (s) (24:68) [17:15:59:673]: Note: 1: 2727 2:
MSI (s) (24:68) [17:15:59:674]: Doing action: RemoveExistingProducts
MSI (s) (24:68) [17:15:59:674]: Note: 1: 2205 2: 3: ActionText
Action ended 17:15:59: InstallValidate. Return value 1.
MSI (s) (24:68) [17:15:59:675]: Skipping RemoveExistingProducts action: current configuration is maintenance mode or an uninstall
Action start 17:15:59: RemoveExistingProducts.
MSI (s) (24:68) [17:15:59:675]: Doing action: InstallInitialize
MSI (s) (24:68) [17:15:59:675]: Note: 1: 2205 2: 3: ActionText
Action ended 17:15:59: RemoveExistingProducts. Return value 0.
MSI (s) (24:68) [17:15:59:676]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (24:68) [17:15:59:676]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (24:68) [17:15:59:676]: BeginTransaction: Locking Server
MSI (s) (24:68) [17:15:59:676]: SRSetRestorePoint skipped for this transaction.
MSI (s) (24:68) [17:15:59:676]: Server not locked: locking for product {8D7BB12C-6854-46DF-A67D-F82D778D75C8}
MSI (s) (24:68) [17:15:59:982]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:59:982]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:59:982]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
Action start 17:15:59: InstallInitialize.
MSI (s) (24:68) [17:15:59:983]: Doing action: ProcessComponents
MSI (s) (24:68) [17:15:59:983]: Note: 1: 2205 2: 3: ActionText
Action ended 17:15:59: InstallInitialize. Return value 1.
MSI (s) (24:68) [17:15:59:986]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:59:987]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:59:987]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:15:59:987]: Note: 1: 2205 2: 3: ActionText
MSI (s) (24:68) [17:15:59:988]: Note: 1: 2205 2: 3: ActionText
MSI (s) (24:68) [17:15:59:993]: Note: 1: 2205 2: 3: ActionText
Action start 17:15:59: ProcessComponents.
MSI (s) (24:68) [17:16:00:002]: Doing action: UnpublishFeatures
MSI (s) (24:68) [17:16:00:002]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:00: ProcessComponents. Return value 1.
MSI (s) (24:68) [17:16:00:004]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
Action start 17:16:00: UnpublishFeatures.
MSI (s) (24:68) [17:16:00:004]: Doing action: SetUnregisterManagementAdapterRollback
MSI (s) (24:68) [17:16:00:004]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:00: UnpublishFeatures. Return value 1.
MSI (s) (24:68) [17:16:00:005]: PROPERTY CHANGE: Adding UnregisterManagementAdapterRollback property. Its value is 'C:\Program Files\Sophos\Sophos UI\Adapter.dll'.
Action start 17:16:00: SetUnregisterManagementAdapterRollback.
MSI (s) (24:68) [17:16:00:005]: Doing action: UnregisterManagementAdapterRollback
MSI (s) (24:68) [17:16:00:005]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:00: SetUnregisterManagementAdapterRollback. Return value 1.
Action start 17:16:00: UnregisterManagementAdapterRollback.
MSI (s) (24:68) [17:16:00:011]: Doing action: UnregisterManagementAdapter
MSI (s) (24:68) [17:16:00:011]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:00: UnregisterManagementAdapterRollback. Return value 1.
Action start 17:16:00: UnregisterManagementAdapter.
MSI (s) (24:68) [17:16:00:019]: Doing action: StopServices
MSI (s) (24:68) [17:16:00:019]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:00: UnregisterManagementAdapter. Return value 1.
MSI (s) (24:68) [17:16:00:022]: Note: 1: 2205 2: 3: ServiceControl
MSI (s) (24:68) [17:16:00:022]: Note: 1: 2228 2: 3: ServiceControl 4: SELECT `Name`,`Wait`,`Arguments`,`Event`, `Action` FROM `ServiceControl`, `Component` WHERE `Component_` = `Component` AND (`Action` = 0 OR `Action` = 1 OR `Action` = 2)
Action start 17:16:00: StopServices.
MSI (s) (24:68) [17:16:00:022]: Doing action: RemoveRegistryValues
MSI (s) (24:68) [17:16:00:022]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:00: StopServices. Return value 1.
Action start 17:16:00: RemoveRegistryValues.
MSI (s) (24:68) [17:16:00:025]: Doing action: RemoveShortcuts
MSI (s) (24:68) [17:16:00:025]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:00: RemoveRegistryValues. Return value 1.
Action start 17:16:00: RemoveShortcuts.
MSI (s) (24:68) [17:16:00:028]: Doing action: WixCloseApplications
MSI (s) (24:68) [17:16:00:028]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:00: RemoveShortcuts. Return value 1.
MSI (s) (24:68) [17:16:00:032]: Creating MSIHANDLE (12) of type 790542 for thread 5736
MSI (s) (24:94) [17:16:00:033]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI634C.tmp, Entrypoint: WixCloseApplications
MSI (s) (24:40) [17:16:00:033]: Generating random cookie.
MSI (s) (24:40) [17:16:00:038]: Created Custom Action Server with PID 1224 (0x4C8).
MSI (s) (24:C0) [17:16:00:096]: Running as a service.
MSI (s) (24:C0) [17:16:00:097]: Hello, I'm your 32bit Elevated custom action server.
MSI (s) (24!A8) [17:16:00:145]: Creating MSIHANDLE (13) of type 790541 for thread 680
MSI (s) (24!A8) [17:16:00:145]: Creating MSIHANDLE (14) of type 790540 for thread 680
MSI (s) (24!A8) [17:16:00:145]: Creating MSIHANDLE (15) of type 790531 for thread 680
MSI (s) (24!A8) [17:16:00:146]: Creating MSIHANDLE (16) of type 790531 for thread 680
MSI (s) (24!A8) [17:16:00:146]: Closing MSIHANDLE (16) of type 790531 for thread 680
MSI (s) (24!A8) [17:16:05:154]: Closing MSIHANDLE (15) of type 790531 for thread 680
MSI (s) (24!A8) [17:16:05:154]: PROPERTY CHANGE: Adding WixCloseApplicationsDeferred property. Its value is 'Sophos UI.exe€40€5000€1'.
MSI (s) (24!A8) [17:16:05:154]: Creating MSIHANDLE (17) of type 790531 for thread 680
Action start 17:16:00: WixCloseApplications.
MSI (s) (24!A8) [17:16:05:155]: Closing MSIHANDLE (17) of type 790531 for thread 680
MSI (s) (24!A8) [17:16:05:155]: Doing action: WixCloseApplicationsDeferred
MSI (s) (24!A8) [17:16:05:155]: Note: 1: 2205 2: 3: ActionText
Action start 17:16:05: WixCloseApplicationsDeferred.
MSI (s) (24!A8) [17:16:05:161]: Closing MSIHANDLE (13) of type 790541 for thread 680
MSI (s) (24!A8) [17:16:05:161]: Closing MSIHANDLE (14) of type 790540 for thread 680
MSI (s) (24:94) [17:16:05:162]: Closing MSIHANDLE (12) of type 790542 for thread 5736
Action ended 17:16:05: WixCloseApplicationsDeferred. Return value 1.
MSI (s) (24:68) [17:16:05:163]: Doing action: RemoveFiles
MSI (s) (24:68) [17:16:05:163]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: WixCloseApplications. Return value 1.
Action start 17:16:05: RemoveFiles.
MSI (s) (24:68) [17:16:05:167]: Doing action: RemoveFolders
MSI (s) (24:68) [17:16:05:167]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: RemoveFiles. Return value 1.
Action start 17:16:05: RemoveFolders.
MSI (s) (24:68) [17:16:05:170]: Doing action: CreateFolders
MSI (s) (24:68) [17:16:05:170]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: RemoveFolders. Return value 1.
Action start 17:16:05: CreateFolders.
MSI (s) (24:68) [17:16:05:174]: Doing action: InstallFiles
MSI (s) (24:68) [17:16:05:174]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: CreateFolders. Return value 1.
MSI (s) (24:68) [17:16:05:176]: The file represented by File table key 'Adapter.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:176]: The file represented by File table key 'SophosUI.exe' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'SavApi.exe' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'Newtonsoft.Json.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'SophosUI_cs.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'SophosUI_de.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'SophosUI_es.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'SophosUI_fr.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'SophosUI_it.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'SophosUI_ja.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'SophosUI_pl.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'SophosUI_koKR.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'SophosUI_ptBR.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'SophosUI_zhHans.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'SophosUI_zhHant.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:177]: The file represented by File table key 'SophosUITelemetry.exe' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'integrity.dat' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'Events.cs_cz.json' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'Events.de_de.json' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'Events.en_us.json' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'Events.es_es.json' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'Events.fr_fr.json' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'Events.it_it.json' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'Events.ja_jp.json' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'Events.ko_kr.json' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'Events.pl_pl.json' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'Events.pt_br.json' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'Events.zh_cn.json' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'Events.zh_tw.json' has no eligible binary patches
MSI (s) (24:68) [17:16:05:178]: The file represented by File table key 'NLog.dll' has no eligible binary patches
MSI (s) (24:68) [17:16:05:179]: The file represented by File table key 'NLog.config' has no eligible binary patches
MSI (s) (24:68) [17:16:05:179]: The file represented by File table key 'Sophos_UI_exe.config' has no eligible binary patches
Action start 17:16:05: InstallFiles.
MSI (s) (24:68) [17:16:05:180]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:180]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:180]: Note: 1: 2205 2: 3: Error
MSI (s) (24:68) [17:16:05:180]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1302
MSI (s) (24:68) [17:16:05:180]: Note: 1: 2205 2: 3: MsiSFCBypass
MSI (s) (24:68) [17:16:05:180]: Note: 1: 2228 2: 3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ?
MSI (s) (24:68) [17:16:05:180]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (24:68) [17:16:05:180]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ?
MSI (s) (24:68) [17:16:05:181]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:181]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (24:68) [17:16:05:181]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (24:68) [17:16:05:181]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (24:68) [17:16:05:183]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:183]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:184]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:184]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:193]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:193]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:193]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:193]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:195]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:195]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:196]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:196]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:198]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:198]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:198]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:198]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:201]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:201]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:201]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:201]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:204]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:204]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:204]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:204]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:207]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:207]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:207]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:207]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:210]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:210]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:210]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:210]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:212]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:212]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:213]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:213]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:215]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:215]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:215]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:215]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:218]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:218]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:218]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:218]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:219]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:219]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:219]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:219]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:220]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:220]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:221]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:221]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:222]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:222]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:222]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:222]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:223]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:223]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:223]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:223]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:224]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:224]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:225]: Note: 1: 2205 2: 3: Patch
MSI (s) (24:68) [17:16:05:225]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (24:68) [17:16:05:225]: Doing action: CreateShortcuts
MSI (s) (24:68) [17:16:05:225]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: InstallFiles. Return value 1.
MSI (s) (24:68) [17:16:05:226]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
Action start 17:16:05: CreateShortcuts.
MSI (s) (24:68) [17:16:05:227]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:227]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:227]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:227]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:228]: Doing action: WriteRegistryValues
MSI (s) (24:68) [17:16:05:228]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: CreateShortcuts. Return value 1.
Action start 17:16:05: WriteRegistryValues.
MSI (s) (24:68) [17:16:05:232]: Doing action: StartServices
MSI (s) (24:68) [17:16:05:232]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: WriteRegistryValues. Return value 1.
MSI (s) (24:68) [17:16:05:233]: Note: 1: 2205 2: 3: ServiceControl
MSI (s) (24:68) [17:16:05:233]: Note: 1: 2228 2: 3: ServiceControl 4: SELECT `Name`,`Wait`,`Arguments`,`Event`, `Action` FROM `ServiceControl`, `Component` WHERE `Component_` = `Component` AND (`Action` = 0 OR `Action` = 1 OR `Action` = 2)
Action start 17:16:05: StartServices.
MSI (s) (24:68) [17:16:05:233]: Doing action: RegisterManagementAdapterRollback
MSI (s) (24:68) [17:16:05:233]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: StartServices. Return value 1.
Action start 17:16:05: RegisterManagementAdapterRollback.
MSI (s) (24:68) [17:16:05:236]: Doing action: SetRegisterManagementAdapter
MSI (s) (24:68) [17:16:05:236]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: RegisterManagementAdapterRollback. Return value 1.
MSI (s) (24:68) [17:16:05:236]: PROPERTY CHANGE: Adding RegisterManagementAdapter property. Its value is 'C:\Program Files\Sophos\Sophos UI\Adapter.dll'.
Action start 17:16:05: SetRegisterManagementAdapter.
MSI (s) (24:68) [17:16:05:236]: Doing action: RegisterManagementAdapter
MSI (s) (24:68) [17:16:05:236]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: SetRegisterManagementAdapter. Return value 1.
Action start 17:16:05: RegisterManagementAdapter.
MSI (s) (24:68) [17:16:05:239]: Doing action: RegisterUser
MSI (s) (24:68) [17:16:05:239]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: RegisterManagementAdapter. Return value 1.
Action start 17:16:05: RegisterUser.
MSI (s) (24:68) [17:16:05:241]: Doing action: RegisterProduct
MSI (s) (24:68) [17:16:05:241]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: RegisterUser. Return value 0.
MSI (s) (24:68) [17:16:05:242]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:242]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:242]: Note: 1: 2205 2: 3: Error
MSI (s) (24:68) [17:16:05:242]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1302
MSI (s) (24:68) [17:16:05:242]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
Action start 17:16:05: RegisterProduct.
MSI (s) (24:68) [17:16:05:242]: Re-registering product - performing upgrade of existing installation.
MSI (s) (24:68) [17:16:05:242]: Resolving source.
MSI (s) (24:68) [17:16:05:242]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:242]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:242]: Resolving source to launched-from source.
MSI (s) (24:68) [17:16:05:242]: Setting launched-from source as last-used.
MSI (s) (24:68) [17:16:05:242]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\'.
MSI (s) (24:68) [17:16:05:242]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\'.
MSI (s) (24:68) [17:16:05:242]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{8D7BB12C-6854-46DF-A67D-F82D778D75C8}'.
MSI (s) (24:68) [17:16:05:242]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\
MSI (s) (24:68) [17:16:05:242]: SOURCEDIR product ==> {8D7BB12C-6854-46DF-A67D-F82D778D75C8}
MSI (s) (24:68) [17:16:05:242]: Determining source type
MSI (s) (24:68) [17:16:05:243]: Source type from package 'Sophos UI.msi': 0
MSI (s) (24:68) [17:16:05:243]: Source path resolution complete. Dumping Directory table...
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: TARGETDIR , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\ , LongSubPath: , ShortSubPath:
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: WindowsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\ , LongSubPath: , ShortSubPath:
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: ProgramMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\ , LongSubPath: , ShortSubPath:
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: SophosProgramsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\ , LongSubPath: Sophos\ , ShortSubPath:
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: ProgramFilesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\ , LongSubPath: , ShortSubPath:
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: Sophos , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\ , LongSubPath: Sophos\ , ShortSubPath:
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: INSTALLDIR , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\ , LongSubPath: Sophos\Sophos UI\ , ShortSubPath: Sophos\vqmqt5st\
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: ChineseTraditionalDirectory , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\zh-Hant\ , LongSubPath: Sophos\Sophos UI\zh-Hant\ , ShortSubPath: Sophos\vqmqt5st\zh-Hant\
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: ChineseSimplifiedDirectory , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\zh-Hans\ , LongSubPath: Sophos\Sophos UI\zh-Hans\ , ShortSubPath: Sophos\vqmqt5st\zh-Hans\
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: PortugueseBrazilDirectory , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\pt-BR\ , LongSubPath: Sophos\Sophos UI\pt-BR\ , ShortSubPath: Sophos\vqmqt5st\pt-BR\
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: KoreanKoreaDirectory , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\ko-KR\ , LongSubPath: Sophos\Sophos UI\ko-KR\ , ShortSubPath: Sophos\vqmqt5st\ko-KR\
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: PolishDirectory , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\pl\ , LongSubPath: Sophos\Sophos UI\pl\ , ShortSubPath: Sophos\vqmqt5st\pl\
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: JapaneseDirectory , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\ja\ , LongSubPath: Sophos\Sophos UI\ja\ , ShortSubPath: Sophos\vqmqt5st\ja\
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: ItalianDirectory , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\it\ , LongSubPath: Sophos\Sophos UI\it\ , ShortSubPath: Sophos\vqmqt5st\it\
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: FrenchDirectory , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\fr\ , LongSubPath: Sophos\Sophos UI\fr\ , ShortSubPath: Sophos\vqmqt5st\fr\
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: SpanishDirectory , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\es\ , LongSubPath: Sophos\Sophos UI\es\ , ShortSubPath: Sophos\vqmqt5st\es\
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: GermanDirectory , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\de\ , LongSubPath: Sophos\Sophos UI\de\ , ShortSubPath: Sophos\vqmqt5st\de\
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: CzechDirectory , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\cs\ , LongSubPath: Sophos\Sophos UI\cs\ , ShortSubPath: Sophos\vqmqt5st\cs\
MSI (s) (24:68) [17:16:05:243]: Dir (source): Key: EventsDirectory , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\Events\ , LongSubPath: Sophos\Sophos UI\Events\ , ShortSubPath: Sophos\vqmqt5st\Events\
MSI (s) (24:68) [17:16:05:244]: Doing action: PublishFeatures
MSI (s) (24:68) [17:16:05:244]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: RegisterProduct. Return value 1.
Action start 17:16:05: PublishFeatures.
MSI (s) (24:68) [17:16:05:245]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:245]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:245]: Doing action: PublishProduct
MSI (s) (24:68) [17:16:05:245]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: PublishFeatures. Return value 1.
MSI (s) (24:68) [17:16:05:246]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:246]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
Action start 17:16:05: PublishProduct.
MSI (s) (24:68) [17:16:05:247]: Re-publishing product - installing new package with existing product code.
MSI (s) (24:68) [17:16:05:247]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:247]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:247]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:247]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:05:247]: Doing action: SetLaunchApplication
MSI (s) (24:68) [17:16:05:247]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: PublishProduct. Return value 1.
MSI (s) (24:68) [17:16:05:247]: PROPERTY CHANGE: Adding LaunchApplication property. Its value is 'C:\Program Files\Sophos\Sophos UI\Sophos UI.exe'.
Action start 17:16:05: SetLaunchApplication.
MSI (s) (24:68) [17:16:05:247]: Doing action: LaunchApplication
MSI (s) (24:68) [17:16:05:247]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: SetLaunchApplication. Return value 1.
Action start 17:16:05: LaunchApplication.
MSI (s) (24:68) [17:16:05:250]: Skipping action: WixFailWhenDeferred (condition is false)
MSI (s) (24:68) [17:16:05:250]: Doing action: InstallFinalize
MSI (s) (24:68) [17:16:05:250]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:05: LaunchApplication. Return value 1.
MSI (s) (24:68) [17:16:05:251]: Running Script: C:\Windows\Installer\MSI631C.tmp
MSI (s) (24:68) [17:16:05:251]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'.
MSI (s) (24:68) [17:16:05:251]: Machine policy value 'DisableRollback' is 0
MSI (s) (24:68) [17:16:05:254]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (24:68) [17:16:05:257]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1383696896,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
Action start 17:16:05: InstallFinalize.
MSI (s) (24:68) [17:16:05:257]: Executing op: ProductInfo(ProductKey={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductName=Sophos Endpoint Agent,PackageName=Sophos UI.msi,Language=1033,Version=33620012,Assignment=1,ObsoleteArg=0,ProductIcon=shield.ico,,PackageCode={5C8C0B42-292F-4458-9945-96D6D5DBD920},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
MSI (s) (24:68) [17:16:05:257]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (24:68) [17:16:05:257]: Executing op: DialogInfo(Type=1,Argument=Sophos Endpoint Agent)
MSI (s) (24:68) [17:16:05:258]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (24:68) [17:16:05:258]: Executing op: SetBaseline(Baseline=0,)
MSI (s) (24:68) [17:16:05:258]: Executing op: SetBaseline(Baseline=1,)
MSI (s) (24:68) [17:16:05:258]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
MSI (s) (24:68) [17:16:05:258]: Executing op: ProgressTotal(Total=38,Type=1,ByteEquivalent=24000)
MSI (s) (24:68) [17:16:05:258]: Executing op: ComponentRegister(ComponentId={B7E224A8-6E18-4A09-802D-EF991E337A46},KeyPath=C:\Program Files\Sophos\Sophos UI\Adapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:259]: Executing op: ComponentRegister(ComponentId={1F8A8289-33A6-423C-88B8-17A44D9E5466},KeyPath=C:\Program Files\Sophos\Sophos UI\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:259]: Executing op: ComponentRegister(ComponentId={180FFBAE-758F-4FCA-B839-6A5BEAD79BD5},KeyPath=C:\Program Files\Sophos\Sophos UI\Sophos UI.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:259]: Executing op: ComponentRegister(ComponentId={4FBF226B-3D3C-4CFB-8CD7-8BFEC2E1C536},KeyPath=C:\Program Files\Sophos\Sophos UI\SavApi.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:260]: Executing op: ComponentRegister(ComponentId={2A5CF3AC-B60A-4ADF-822F-B64FAD87C947},KeyPath=01:\Software\Microsoft\SophosUI\installed,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:260]: Executing op: ComponentRegister(ComponentId={2F0E5C23-3604-4816-A975-70D27635DA70},KeyPath=C:\Program Files\Sophos\Sophos UI\Events\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:260]: Executing op: ComponentRegister(ComponentId={29A6BF15-BE82-4FC7-B26E-1E569B69BB6B},KeyPath=C:\Program Files\Sophos\Sophos UI\Events\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:261]: Executing op: ComponentRegister(ComponentId={B9F1E837-393F-4A86-9484-85C6D579C1A6},KeyPath=C:\Program Files\Sophos\Sophos UI\Events\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:261]: Executing op: ComponentRegister(ComponentId={864A02F1-79B5-4445-93D7-F1D0C3BF5711},KeyPath=C:\Program Files\Sophos\Sophos UI\Events\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:261]: Executing op: ComponentRegister(ComponentId={B4AAAE17-FB85-401A-8C78-7297162E9F4D},KeyPath=C:\Program Files\Sophos\Sophos UI\Events\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:262]: Executing op: ComponentRegister(ComponentId={10873E10-97C8-4038-A973-F14C562204A0},KeyPath=C:\Program Files\Sophos\Sophos UI\Events\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:262]: Executing op: ComponentRegister(ComponentId={AEE059DD-FABB-4F52-8F14-660FD3227D1A},KeyPath=C:\Program Files\Sophos\Sophos UI\Events\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:262]: Executing op: ComponentRegister(ComponentId={A97C04E2-4D04-411E-8AB8-1F4AC6D3E949},KeyPath=C:\Program Files\Sophos\Sophos UI\Events\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:262]: Executing op: ComponentRegister(ComponentId={EF9E6227-3BB2-4FAC-8E0A-E6376FBCA80D},KeyPath=C:\Program Files\Sophos\Sophos UI\Events\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:263]: Executing op: ComponentRegister(ComponentId={5948EC73-733A-4998-A2F8-CA68DBE695E8},KeyPath=C:\Program Files\Sophos\Sophos UI\Events\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:263]: Executing op: ComponentRegister(ComponentId={81841CD8-B410-4421-9983-6E5D2BBCD1E9},KeyPath=C:\Program Files\Sophos\Sophos UI\Events\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:263]: Executing op: ComponentRegister(ComponentId={AE02BAFC-9900-45D1-9EDE-BEA85E0B1AA6},KeyPath=C:\Program Files\Sophos\Sophos UI\Events\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:264]: Executing op: ComponentRegister(ComponentId={68E9172B-D4E6-4C04-8F77-FF5FE1F1E936},KeyPath=C:\Program Files\Sophos\Sophos UI\Newtonsoft.Json.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:264]: Executing op: ComponentRegister(ComponentId={8EE1B8EF-1161-4449-ADEB-FA79C3B86054},KeyPath=C:\Program Files\Sophos\Sophos UI\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:264]: Executing op: ComponentRegister(ComponentId={A487479F-9E93-4D19-B3BF-5765E50C4672},KeyPath=C:\Program Files\Sophos\Sophos UI\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:264]: Executing op: ComponentRegister(ComponentId={E63A1F0D-7D3F-44B6-AABF-6DDF049C756C},KeyPath=C:\Program Files\Sophos\Sophos UI\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:265]: Executing op: ComponentRegister(ComponentId={102C8063-4F87-4AA7-8261-A179B1D1BD01},KeyPath=C:\Program Files\Sophos\Sophos UI\cs\Sophos UI.resources.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:265]: Executing op: ComponentRegister(ComponentId={4FE272C8-C4C5-4CA6-8EC9-619CB4D1FE56},KeyPath=C:\Program Files\Sophos\Sophos UI\de\Sophos UI.resources.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:265]: Executing op: ComponentRegister(ComponentId={A2C53B11-7F14-4678-B414-2DD14E55DB89},KeyPath=C:\Program Files\Sophos\Sophos UI\es\Sophos UI.resources.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:266]: Executing op: ComponentRegister(ComponentId={EBC248D6-840D-4FE4-8E92-ED18A08C997B},KeyPath=C:\Program Files\Sophos\Sophos UI\fr\Sophos UI.resources.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:266]: Executing op: ComponentRegister(ComponentId={429690FB-7264-4D6D-A7C4-80F6FADCC3C3},KeyPath=C:\Program Files\Sophos\Sophos UI\it\Sophos UI.resources.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:266]: Executing op: ComponentRegister(ComponentId={D6E71BBD-09CC-487C-B4EB-03A0C3536F09},KeyPath=C:\Program Files\Sophos\Sophos UI\ja\Sophos UI.resources.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:267]: Executing op: ComponentRegister(ComponentId={0A70772B-0D06-45C9-8884-3427CAF141C9},KeyPath=C:\Program Files\Sophos\Sophos UI\pl\Sophos UI.resources.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:267]: Executing op: ComponentRegister(ComponentId={D82D2B2D-9024-4AA0-8FCB-4FDDB85B8602},KeyPath=C:\Program Files\Sophos\Sophos UI\ko-KR\Sophos UI.resources.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:267]: Executing op: ComponentRegister(ComponentId={340D5AD3-1FF8-4E60-A401-F49B34F208C0},KeyPath=C:\Program Files\Sophos\Sophos UI\pt-BR\Sophos UI.resources.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:268]: Executing op: ComponentRegister(ComponentId={E3B28A15-A1B4-4FD7-8F0B-08B0BEF7BB16},KeyPath=C:\Program Files\Sophos\Sophos UI\zh-Hans\Sophos UI.resources.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:268]: Executing op: ComponentRegister(ComponentId={15595AB0-A4B8-4D29-BBC3-B0403A43284B},KeyPath=C:\Program Files\Sophos\Sophos UI\zh-Hant\Sophos UI.resources.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:269]: Executing op: ComponentRegister(ComponentId={0EE9A882-B42E-4F0A-B1A4-903DE26B21AE},KeyPath=C:\Program Files\Sophos\Sophos UI\SophosUITelemetry.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:269]: Executing op: ComponentRegister(ComponentId={C0C89267-7C9F-41F9-91A3-9EE8A720D431},KeyPath=02:\Software\Microsoft\Windows\CurrentVersion\Run\Sophos UI.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:270]: Executing op: ComponentRegister(ComponentId={F7D65D0A-7C63-4F2D-8693-75643BD8EA2C},KeyPath=02:\Software\Classes\sophosui\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:270]: Executing op: ComponentRegister(ComponentId={2FCAFF90-F472-4E8A-BCC0-E62820F06EEB},KeyPath=02:\Software\Sophos\Telemetry\Plugins\UI\Path,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:270]: Executing op: ComponentRegister(ComponentId={355DA335-7EF4-42A3-A015-9A848F527FAE},KeyPath=C:\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:271]: Executing op: ComponentRegister(ComponentId={B3896F3F-6DA5-4598-B669-823E7D3632A5},KeyPath=C:\Program Files\Sophos\Sophos UI\integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (24:68) [17:16:05:271]: Executing op: ActionStart(Name=UnregisterManagementAdapterRollback,,)
MSI (s) (24:68) [17:16:05:271]: Executing op: CustomActionSchedule(Action=UnregisterManagementAdapterRollback,ActionType=1345,Source=BinaryData,Target=RegisterManagementAdapter,CustomActionData=C:\Program Files\Sophos\Sophos UI\Adapter.dll)
MSI (s) (24:68) [17:16:05:273]: Executing op: ActionStart(Name=UnregisterManagementAdapter,,)
MSI (s) (24:68) [17:16:05:273]: Executing op: CustomActionSchedule(Action=UnregisterManagementAdapter,ActionType=1089,Source=BinaryData,Target=UnregisterManagementAdapter,)
MSI (s) (24:68) [17:16:05:275]: Creating MSIHANDLE (18) of type 790536 for thread 5736
MSI (s) (24:70) [17:16:05:276]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI77C8.tmp, Entrypoint: UnregisterManagementAdapter
MSI (s) (24!A8) [17:16:05:303]: Creating MSIHANDLE (19) of type 790531 for thread 2216
MSI (s) (24!A8) [17:16:05:304]: Closing MSIHANDLE (19) of type 790531 for thread 2216
MSI (s) (24!A8) [17:16:05:304]: Creating MSIHANDLE (20) of type 790531 for thread 2216
UnregisterManagementAdapter: UnregisterManagementAdapter called
MSI (s) (24!A8) [17:16:05:305]: Closing MSIHANDLE (20) of type 790531 for thread 2216
MSI (s) (24!A8) [17:16:05:305]: Creating MSIHANDLE (21) of type 790531 for thread 2216
UnregisterManagementAdapter: Management adapter successfully unregistered
MSI (s) (24!A8) [17:16:05:305]: Closing MSIHANDLE (21) of type 790531 for thread 2216
MSI (s) (24!A8) [17:16:05:305]: Creating MSIHANDLE (22) of type 790531 for thread 2216
UnregisterManagementAdapter: Waiting for adapter to be unloaded
MSI (s) (24!A8) [17:16:05:305]: Closing MSIHANDLE (22) of type 790531 for thread 2216
MSI (s) (24!A8) [17:16:05:369]: Creating MSIHANDLE (23) of type 790531 for thread 2216
UnregisterManagementAdapter: Adapter path=C:\Program Files\Sophos\Sophos UI\Adapter.dll
MSI (s) (24!A8) [17:16:05:370]: Closing MSIHANDLE (23) of type 790531 for thread 2216
MSI (s) (24:70) [17:16:05:371]: Closing MSIHANDLE (18) of type 790536 for thread 5736
MSI (s) (24:68) [17:16:05:372]: Executing op: ActionStart(Name=WixCloseApplicationsDeferred,,)
UnregisterManagementAdapter: Management adapter has been unloaded.
MSI (s) (24:68) [17:16:05:372]: Executing op: CustomActionSchedule(Action=WixCloseApplicationsDeferred,ActionType=3073,Source=BinaryData,Target=WixCloseApplicationsDeferred,CustomActionData=Sophos UI.exe€40€5000€1)
MSI (s) (24:68) [17:16:05:376]: Creating MSIHANDLE (24) of type 790536 for thread 5736
MSI (s) (24:4C) [17:16:05:377]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7827.tmp, Entrypoint: WixCloseApplicationsDeferred
MSI (s) (24!AC) [17:16:05:393]: Creating MSIHANDLE (25) of type 790531 for thread 4268
MSI (s) (24!AC) [17:16:05:394]: Closing MSIHANDLE (25) of type 790531 for thread 4268
MSI (s) (24:4C) [17:16:05:395]: Closing MSIHANDLE (24) of type 790536 for thread 5736
MSI (s) (24:68) [17:16:05:396]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])
MSI (s) (24:68) [17:16:05:396]: Executing op: FolderCreate(Folder=C:\Program Files\Sophos\Sophos UI\,Foreign=0,,)
MSI (s) (24:68) [17:16:05:397]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1], Directory: [9], Size: [6])
MSI (s) (24:68) [17:16:05:397]: Executing op: ProgressTotal(Total=4637840,Type=0,ByteEquivalent=1)
MSI (s) (24:68) [17:16:05:398]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\)
MSI (s) (24:68) [17:16:05:398]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\|Sophos\Sophos UI\)
MSI (s) (24:68) [17:16:05:398]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,,BytesPerTick=65536,CopierType=0,,,,,,IsFirstPhysicalMedia=1)
MSI (s) (24:68) [17:16:05:398]: Executing op: RegisterSharedComponentProvider(,,File=Adapter.dll,Component={B7E224A8-6E18-4A09-802D-EF991E337A46},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:406]: Executing op: FileCopy(SourceName=Adapter.dll,SourceCabKey=Adapter.dll,DestName=Adapter.dll,Attributes=512,FileSize=636952,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=1033,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:408]: File: C:\Program Files\Sophos\Sophos UI\Adapter.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:408]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\Events\)
MSI (s) (24:68) [17:16:05:409]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\Events\|Sophos\Sophos UI\Events\)
MSI (s) (24:68) [17:16:05:409]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:409]: Executing op: FileCopy(SourceName=xpu_uuhp.jso|Events.cs-cz.json,SourceCabKey=Events.cs_cz.json,DestName=Events.cs-cz.json,Attributes=512,FileSize=8613,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:410]: File: C:\Program Files\Sophos\Sophos UI\Events\Events.cs-cz.json; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:410]: Source for file 'Events.cs-cz.json' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\Events\'.
MSI (s) (24:68) [17:16:05:412]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:413]: Verifying accessibility of file: Events.cs-cz.json
MSI (s) (24:68) [17:16:05:415]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:416]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:417]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:418]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:418]: Executing op: FileCopy(SourceName=dpxgiqgp.jso|Events.de-de.json,SourceCabKey=Events.de_de.json,DestName=Events.de-de.json,Attributes=512,FileSize=8831,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:419]: File: C:\Program Files\Sophos\Sophos UI\Events\Events.de-de.json; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:419]: Source for file 'Events.de-de.json' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\Events\'.
MSI (s) (24:68) [17:16:05:421]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:422]: Verifying accessibility of file: Events.de-de.json
MSI (s) (24:68) [17:16:05:424]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:425]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:425]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:427]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:427]: Executing op: FileCopy(SourceName=u7je5bja.jso|Events.en-us.json,SourceCabKey=Events.en_us.json,DestName=Events.en-us.json,Attributes=512,FileSize=7782,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:428]: File: C:\Program Files\Sophos\Sophos UI\Events\Events.en-us.json; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:428]: Source for file 'Events.en-us.json' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\Events\'.
MSI (s) (24:68) [17:16:05:429]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:431]: Verifying accessibility of file: Events.en-us.json
MSI (s) (24:68) [17:16:05:433]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:433]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:434]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:435]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:435]: Executing op: FileCopy(SourceName=oabuijiv.jso|Events.es-es.json,SourceCabKey=Events.es_es.json,DestName=Events.es-es.json,Attributes=512,FileSize=8772,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:437]: File: C:\Program Files\Sophos\Sophos UI\Events\Events.es-es.json; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:437]: Source for file 'Events.es-es.json' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\Events\'.
MSI (s) (24:68) [17:16:05:438]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:439]: Verifying accessibility of file: Events.es-es.json
MSI (s) (24:68) [17:16:05:441]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:442]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:442]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:443]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:444]: Executing op: FileCopy(SourceName=avnzknlf.jso|Events.fr-fr.json,SourceCabKey=Events.fr_fr.json,DestName=Events.fr-fr.json,Attributes=512,FileSize=8847,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:445]: File: C:\Program Files\Sophos\Sophos UI\Events\Events.fr-fr.json; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:445]: Source for file 'Events.fr-fr.json' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\Events\'.
MSI (s) (24:68) [17:16:05:446]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:447]: Verifying accessibility of file: Events.fr-fr.json
MSI (s) (24:68) [17:16:05:449]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:450]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:451]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:452]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:452]: Executing op: FileCopy(SourceName=vu_lh9pv.jso|Events.it-it.json,SourceCabKey=Events.it_it.json,DestName=Events.it-it.json,Attributes=512,FileSize=9038,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:453]: File: C:\Program Files\Sophos\Sophos UI\Events\Events.it-it.json; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:453]: Source for file 'Events.it-it.json' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\Events\'.
MSI (s) (24:68) [17:16:05:455]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:456]: Verifying accessibility of file: Events.it-it.json
MSI (s) (24:68) [17:16:05:458]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:459]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:459]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:461]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:461]: Executing op: FileCopy(SourceName=_vgkd-dr.jso|Events.ja-jp.json,SourceCabKey=Events.ja_jp.json,DestName=Events.ja-jp.json,Attributes=512,FileSize=10910,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:462]: File: C:\Program Files\Sophos\Sophos UI\Events\Events.ja-jp.json; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:462]: Source for file 'Events.ja-jp.json' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\Events\'.
MSI (s) (24:68) [17:16:05:464]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:474]: Verifying accessibility of file: Events.ja-jp.json
MSI (s) (24:68) [17:16:05:476]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:477]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:478]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:479]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:479]: Executing op: FileCopy(SourceName=wie3j-8g.jso|Events.ko-kr.json,SourceCabKey=Events.ko_kr.json,DestName=Events.ko-kr.json,Attributes=512,FileSize=9075,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:480]: File: C:\Program Files\Sophos\Sophos UI\Events\Events.ko-kr.json; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:480]: Source for file 'Events.ko-kr.json' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\Events\'.
MSI (s) (24:68) [17:16:05:481]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:483]: Verifying accessibility of file: Events.ko-kr.json
MSI (s) (24:68) [17:16:05:485]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:486]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:487]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:488]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:488]: Executing op: FileCopy(SourceName=aeviq9_x.jso|Events.pl-pl.json,SourceCabKey=Events.pl_pl.json,DestName=Events.pl-pl.json,Attributes=512,FileSize=9064,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:489]: File: C:\Program Files\Sophos\Sophos UI\Events\Events.pl-pl.json; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:489]: Source for file 'Events.pl-pl.json' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\Events\'.
MSI (s) (24:68) [17:16:05:491]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:492]: Verifying accessibility of file: Events.pl-pl.json
MSI (s) (24:68) [17:16:05:494]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:495]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:496]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:497]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:497]: Executing op: FileCopy(SourceName=jw6y_aif.jso|Events.pt-br.json,SourceCabKey=Events.pt_br.json,DestName=Events.pt-br.json,Attributes=512,FileSize=8680,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:499]: File: C:\Program Files\Sophos\Sophos UI\Events\Events.pt-br.json; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:499]: Source for file 'Events.pt-br.json' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\Events\'.
MSI (s) (24:68) [17:16:05:501]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:503]: Verifying accessibility of file: Events.pt-br.json
MSI (s) (24:68) [17:16:05:505]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:506]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:506]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:507]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:507]: Executing op: FileCopy(SourceName=fbzrzlyx.jso|Events.zh-cn.json,SourceCabKey=Events.zh_cn.json,DestName=Events.zh-cn.json,Attributes=512,FileSize=7494,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:509]: File: C:\Program Files\Sophos\Sophos UI\Events\Events.zh-cn.json; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:509]: Source for file 'Events.zh-cn.json' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\Events\'.
MSI (s) (24:68) [17:16:05:510]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:512]: Verifying accessibility of file: Events.zh-cn.json
MSI (s) (24:68) [17:16:05:514]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:514]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:515]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:516]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:516]: Executing op: FileCopy(SourceName=mgv-opgi.jso|Events.zh-tw.json,SourceCabKey=Events.zh_tw.json,DestName=Events.zh-tw.json,Attributes=512,FileSize=7515,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:517]: File: C:\Program Files\Sophos\Sophos UI\Events\Events.zh-tw.json; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:517]: Source for file 'Events.zh-tw.json' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\Events\'.
MSI (s) (24:68) [17:16:05:519]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:521]: Verifying accessibility of file: Events.zh-tw.json
MSI (s) (24:68) [17:16:05:523]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:523]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:524]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:525]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\)
MSI (s) (24:68) [17:16:05:525]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\|Sophos\Sophos UI\)
MSI (s) (24:68) [17:16:05:525]: Executing op: FileCopy(SourceName=b-cruslu.dat|integrity.dat,SourceCabKey=integrity.dat,DestName=integrity.dat,Attributes=512,FileSize=3385,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=126091264,HashOptions=0,HashPart1=-1464331453,HashPart2=1848647127,HashPart3=-1672790359,HashPart4=-163382239,,)
MSI (s) (24:68) [17:16:05:526]: File: C:\Program Files\Sophos\Sophos UI\integrity.dat; Won't Overwrite; Won't patch; Existing file is unversioned and unmodified - hash matches source file
MSI (s) (24:68) [17:16:05:527]: Executing op: RegisterSharedComponentProvider(,,File=Newtonsoft.Json.dll,Component={68E9172B-D4E6-4C04-8F77-FF5FE1F1E936},ComponentVersion=12.0.3.23909,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:536]: Executing op: FileCopy(SourceName=NEWTJSON.DLL|Newtonsoft.Json.dll,SourceCabKey=Newtonsoft.Json.dll,DestName=Newtonsoft.Json.dll,Attributes=1025,FileSize=700336,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=12.0.3.23909,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:537]: File: C:\Program Files\Sophos\Sophos UI\Newtonsoft.Json.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:537]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:537]: Executing op: FileCopy(SourceName=NLOG.CFG|NLog.config,SourceCabKey=NLog.config,DestName=NLog.config,Attributes=1025,FileSize=1075,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:538]: File: C:\Program Files\Sophos\Sophos UI\NLog.config; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:539]: Source for file 'NLog.config' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\'.
MSI (s) (24:68) [17:16:05:540]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:542]: Verifying accessibility of file: NLog.config
MSI (s) (24:68) [17:16:05:546]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:547]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:547]: Executing op: FileCopy(SourceName=NLog.dll,SourceCabKey=NLog.dll,DestName=NLog.dll,Attributes=1025,FileSize=853352,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:549]: File: C:\Program Files\Sophos\Sophos UI\NLog.dll; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:549]: Source for file 'NLog.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\'.
MSI (s) (24:68) [17:16:05:551]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:560]: Verifying accessibility of file: NLog.dll
MSI (s) (24:68) [17:16:05:570]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:572]: Executing op: RegisterSharedComponentProvider(,,File=SavApi.exe,Component={4FBF226B-3D3C-4CFB-8CD7-8BFEC2E1C536},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:580]: Executing op: FileCopy(SourceName=SavApi.exe,SourceCabKey=SavApi.exe,DestName=SavApi.exe,Attributes=512,FileSize=137528,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=1033,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:581]: File: C:\Program Files\Sophos\Sophos UI\SavApi.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:581]: Executing op: SetCompanionParent(ParentPath=C:\Program Files\Sophos\Sophos UI\,ParentName=Sophos UI.exe,ParentVersion=2.1.44.0,ParentLanguage=0)
MSI (s) (24:68) [17:16:05:581]: Executing op: FileCopy(SourceName=SOUIEXE.CFG|Sophos UI.exe.config,SourceCabKey=Sophos_UI_exe.config,DestName=Sophos UI.exe.config,Attributes=1025,FileSize=935,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SophosUI.exe,,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:582]: File: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe.config; Overwrite; Won't patch; Existing file is of an equal version (Checked using version of companion: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:05:582]: Source for file 'Sophos UI.exe.config' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos\Sophos UI\'.
MSI (s) (24:68) [17:16:05:584]: Re-applying security from existing file.
MSI (s) (24:68) [17:16:05:585]: Verifying accessibility of file: Sophos UI.exe.config
MSI (s) (24:68) [17:16:05:588]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:05:589]: Executing op: RegisterSharedComponentProvider(,,File=SophosUI.exe,Component={180FFBAE-758F-4FCA-B839-6A5BEAD79BD5},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:597]: Executing op: FileCopy(SourceName=4yrrgb4i.exe|Sophos UI.exe,SourceCabKey=SophosUI.exe,DestName=Sophos UI.exe,Attributes=512,FileSize=1475240,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:598]: File: C:\Program Files\Sophos\Sophos UI\Sophos UI.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:598]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\cs\)
MSI (s) (24:68) [17:16:05:598]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\cs\|Sophos\Sophos UI\cs\)
MSI (s) (24:68) [17:16:05:598]: Executing op: RegisterSharedComponentProvider(,,File=SophosUI_cs.dll,Component={102C8063-4F87-4AA7-8261-A179B1D1BD01},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:607]: Executing op: FileCopy(SourceName=SOUICS.DLL|Sophos UI.resources.dll,SourceCabKey=SophosUI_cs.dll,DestName=Sophos UI.resources.dll,Attributes=1025,FileSize=25928,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:608]: File: C:\Program Files\Sophos\Sophos UI\cs\Sophos UI.resources.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:609]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\de\)
MSI (s) (24:68) [17:16:05:609]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\de\|Sophos\Sophos UI\de\)
MSI (s) (24:68) [17:16:05:609]: Executing op: RegisterSharedComponentProvider(,,File=SophosUI_de.dll,Component={4FE272C8-C4C5-4CA6-8EC9-619CB4D1FE56},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:617]: Executing op: FileCopy(SourceName=SOUIDE.DLL|Sophos UI.resources.dll,SourceCabKey=SophosUI_de.dll,DestName=Sophos UI.resources.dll,Attributes=1025,FileSize=25928,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:618]: File: C:\Program Files\Sophos\Sophos UI\de\Sophos UI.resources.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:618]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\es\)
MSI (s) (24:68) [17:16:05:618]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\es\|Sophos\Sophos UI\es\)
MSI (s) (24:68) [17:16:05:618]: Executing op: RegisterSharedComponentProvider(,,File=SophosUI_es.dll,Component={A2C53B11-7F14-4678-B414-2DD14E55DB89},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:627]: Executing op: FileCopy(SourceName=SOUIES.DLL|Sophos UI.resources.dll,SourceCabKey=SophosUI_es.dll,DestName=Sophos UI.resources.dll,Attributes=1025,FileSize=25928,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:628]: File: C:\Program Files\Sophos\Sophos UI\es\Sophos UI.resources.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:628]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\fr\)
MSI (s) (24:68) [17:16:05:628]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\fr\|Sophos\Sophos UI\fr\)
MSI (s) (24:68) [17:16:05:628]: Executing op: RegisterSharedComponentProvider(,,File=SophosUI_fr.dll,Component={EBC248D6-840D-4FE4-8E92-ED18A08C997B},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:637]: Executing op: FileCopy(SourceName=SOUIFR.DLL|Sophos UI.resources.dll,SourceCabKey=SophosUI_fr.dll,DestName=Sophos UI.resources.dll,Attributes=1025,FileSize=26440,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:638]: File: C:\Program Files\Sophos\Sophos UI\fr\Sophos UI.resources.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:638]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\it\)
MSI (s) (24:68) [17:16:05:638]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\it\|Sophos\Sophos UI\it\)
MSI (s) (24:68) [17:16:05:638]: Executing op: RegisterSharedComponentProvider(,,File=SophosUI_it.dll,Component={429690FB-7264-4D6D-A7C4-80F6FADCC3C3},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:646]: Executing op: FileCopy(SourceName=SOUIIT.DLL|Sophos UI.resources.dll,SourceCabKey=SophosUI_it.dll,DestName=Sophos UI.resources.dll,Attributes=1025,FileSize=25928,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:647]: File: C:\Program Files\Sophos\Sophos UI\it\Sophos UI.resources.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:647]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\ja\)
MSI (s) (24:68) [17:16:05:648]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\ja\|Sophos\Sophos UI\ja\)
MSI (s) (24:68) [17:16:05:648]: Executing op: RegisterSharedComponentProvider(,,File=SophosUI_ja.dll,Component={D6E71BBD-09CC-487C-B4EB-03A0C3536F09},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:657]: Executing op: FileCopy(SourceName=SOUIJA.DLL|Sophos UI.resources.dll,SourceCabKey=SophosUI_ja.dll,DestName=Sophos UI.resources.dll,Attributes=1025,FileSize=27504,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:658]: File: C:\Program Files\Sophos\Sophos UI\ja\Sophos UI.resources.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:658]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\ko-KR\)
MSI (s) (24:68) [17:16:05:658]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\ko-KR\|Sophos\Sophos UI\ko-KR\)
MSI (s) (24:68) [17:16:05:658]: Executing op: RegisterSharedComponentProvider(,,File=SophosUI_koKR.dll,Component={D82D2B2D-9024-4AA0-8FCB-4FDDB85B8602},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:666]: Executing op: FileCopy(SourceName=SOUIKOKR.DLL|Sophos UI.resources.dll,SourceCabKey=SophosUI_koKR.dll,DestName=Sophos UI.resources.dll,Attributes=1025,FileSize=25928,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:667]: File: C:\Program Files\Sophos\Sophos UI\ko-KR\Sophos UI.resources.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:667]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\pl\)
MSI (s) (24:68) [17:16:05:667]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\pl\|Sophos\Sophos UI\pl\)
MSI (s) (24:68) [17:16:05:667]: Executing op: RegisterSharedComponentProvider(,,File=SophosUI_pl.dll,Component={0A70772B-0D06-45C9-8884-3427CAF141C9},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:675]: Executing op: FileCopy(SourceName=SOUIPL.DLL|Sophos UI.resources.dll,SourceCabKey=SophosUI_pl.dll,DestName=Sophos UI.resources.dll,Attributes=1025,FileSize=25928,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:677]: File: C:\Program Files\Sophos\Sophos UI\pl\Sophos UI.resources.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:677]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\pt-BR\)
MSI (s) (24:68) [17:16:05:677]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\pt-BR\|Sophos\Sophos UI\pt-BR\)
MSI (s) (24:68) [17:16:05:677]: Executing op: RegisterSharedComponentProvider(,,File=SophosUI_ptBR.dll,Component={340D5AD3-1FF8-4E60-A401-F49B34F208C0},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:685]: Executing op: FileCopy(SourceName=SOUIPTBR.DLL|Sophos UI.resources.dll,SourceCabKey=SophosUI_ptBR.dll,DestName=Sophos UI.resources.dll,Attributes=1025,FileSize=25928,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:686]: File: C:\Program Files\Sophos\Sophos UI\pt-BR\Sophos UI.resources.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:686]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\zh-Hans\)
MSI (s) (24:68) [17:16:05:686]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\zh-Hans\|Sophos\Sophos UI\zh-Hans\)
MSI (s) (24:68) [17:16:05:686]: Executing op: RegisterSharedComponentProvider(,,File=SophosUI_zhHans.dll,Component={E3B28A15-A1B4-4FD7-8F0B-08B0BEF7BB16},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:694]: Executing op: FileCopy(SourceName=SOUIZHS.DLL|Sophos UI.resources.dll,SourceCabKey=SophosUI_zhHans.dll,DestName=Sophos UI.resources.dll,Attributes=1025,FileSize=24904,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:695]: File: C:\Program Files\Sophos\Sophos UI\zh-Hans\Sophos UI.resources.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:695]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\zh-Hant\)
MSI (s) (24:68) [17:16:05:696]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\zh-Hant\|Sophos\Sophos UI\zh-Hant\)
MSI (s) (24:68) [17:16:05:696]: Executing op: RegisterSharedComponentProvider(,,File=SophosUI_zhHant.dll,Component={15595AB0-A4B8-4D29-BBC3-B0403A43284B},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:704]: Executing op: FileCopy(SourceName=SOUIZHT.DLL|Sophos UI.resources.dll,SourceCabKey=SophosUI_zhHant.dll,DestName=Sophos UI.resources.dll,Attributes=1025,FileSize=24904,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=0,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:704]: File: C:\Program Files\Sophos\Sophos UI\zh-Hant\Sophos UI.resources.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:704]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos UI\)
MSI (s) (24:68) [17:16:05:705]: Executing op: SetSourceFolder(Folder=1\Sophos\vqmqt5st\|Sophos\Sophos UI\)
MSI (s) (24:68) [17:16:05:705]: Executing op: RegisterSharedComponentProvider(,,File=SophosUITelemetry.exe,Component={0EE9A882-B42E-4F0A-B1A4-903DE26B21AE},ComponentVersion=2.1.44.0,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},ProductVersion=2.1.44,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (24:68) [17:16:05:713]: Executing op: FileCopy(SourceName=a2uw_f4e.exe|SophosUITelemetry.exe,SourceCabKey=SophosUITelemetry.exe,DestName=SophosUITelemetry.exe,Attributes=512,FileSize=439168,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.44.0,Language=1033,InstallMode=126091264,,,,,,,)
MSI (s) (24:68) [17:16:05:714]: File: C:\Program Files\Sophos\Sophos UI\SophosUITelemetry.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (24:68) [17:16:05:714]: Executing op: CacheSizeFlush(,)
MSI (s) (24:68) [17:16:05:714]: Executing op: ActionStart(Name=CreateShortcuts,Description=Creating shortcuts,Template=Shortcut: [1])
MSI (s) (24:68) [17:16:05:715]: Executing op: IconCreate(Icon=shield.ico,Data=BinaryData)
MSI (s) (24:68) [17:16:05:745]: Verifying accessibility of file: shield.ico
MSI (s) (24:68) [17:16:05:835]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:05:844]: Executing op: SetTargetFolder(Folder=23\Sophos\)
MSI (s) (24:68) [17:16:05:848]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (24:68) [17:16:05:848]: Executing op: ShortcutCreate(Name=fhtomaxb|Sophos Endpoint Agent,,,FileName=C:\Program Files\Sophos\Sophos UI\Sophos UI.exe,,,,,,,,,,,)
MSI (s) (24:68) [17:16:05:851]: Verifying accessibility of file: Sophos Endpoint Agent.lnk
MSI (s) (24:68) [17:16:06:013]: Executing op: ShortcutPropertyCreate(ShortcutName=fhtomaxb|Sophos Endpoint Agent,PropertyKey=System.AppUserModel.PreventPinning,PropVariantValue=1)
MSI (s) (24:68) [17:16:06:027]: Executing op: ShortcutPropertyCreate(ShortcutName=fhtomaxb|Sophos Endpoint Agent,PropertyKey=System.AppUserModel.ExcludeFromShowInNewInstall,PropVariantValue=1)
MSI (s) (24:68) [17:16:06:032]: Executing op: ShortcutPropertyCreate(ShortcutName=fhtomaxb|Sophos Endpoint Agent,PropertyKey=System.AppUserModel.ID,PropVariantValue=Sophos.UI)
MSI (s) (24:68) [17:16:06:036]: Executing op: ActionStart(Name=WriteRegistryValues,Description=Writing system registry values,Template=Key: [1], Name: [2], Value: [3])
MSI (s) (24:68) [17:16:06:037]: Executing op: ProgressTotal(Total=35,Type=1,ByteEquivalent=13200)
MSI (s) (24:68) [17:16:06:037]: Executing op: RegOpenKey(,Key=CLSID\{2dc0c89e-f684-41d4-b358-852de67fbcd9}\Programmable,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:037]: Executing op: RegCreateKey()
MSI (s) (24:68) [17:16:06:037]: Executing op: RegOpenKey(,Key=CLSID\{2dc0c89e-f684-41d4-b358-852de67fbcd9},,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:038]: Executing op: RegAddValue(,Value=SavMessageSink class,)
MSI (s) (24:68) [17:16:06:038]: Executing op: RegOpenKey(,Key=CLSID\{2dc0c89e-f684-41d4-b358-852de67fbcd9}\LocalServer32,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:038]: Executing op: RegAddValue(,Value=C:\Program Files\Sophos\Sophos UI\SavApi.exe,)
MSI (s) (24:68) [17:16:06:038]: Executing op: RegAddValue(Name=ServerExecutable,Value=C:\Program Files\Sophos\Sophos UI\SavApi.exe,)
MSI (s) (24:68) [17:16:06:038]: Executing op: RegOpenKey(,Key=CLSID\{2dc0c89e-f684-41d4-b358-852de67fbcd9}\ProgID,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:039]: Executing op: RegAddValue(,Value=Sophos.SavMessageSink.1,)
MSI (s) (24:68) [17:16:06:039]: Executing op: RegOpenKey(,Key=Sophos.SavMessageSink.1,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:039]: Executing op: RegAddValue(,Value=SavMessageSink class,)
MSI (s) (24:68) [17:16:06:039]: Executing op: RegOpenKey(,Key=CLSID\{2dc0c89e-f684-41d4-b358-852de67fbcd9}\TypeLib,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:039]: Executing op: RegAddValue(,Value={940018e1-d8dd-4303-a3ab-56d704187c67},)
MSI (s) (24:68) [17:16:06:040]: Executing op: RegOpenKey(,Key=CLSID\{2dc0c89e-f684-41d4-b358-852de67fbcd9}\Version,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:040]: Executing op: RegAddValue(,Value=1.0,)
MSI (s) (24:68) [17:16:06:040]: Executing op: RegOpenKey(,Key=CLSID\{2dc0c89e-f684-41d4-b358-852de67fbcd9}\VersionIndependentProgID,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:040]: Executing op: RegAddValue(,Value=Sophos.SavMessageSink,)
MSI (s) (24:68) [17:16:06:040]: Executing op: RegOpenKey(,Key=Sophos.SavMessageSink,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:040]: Executing op: RegAddValue(,Value=SavMessageSink class,)
MSI (s) (24:68) [17:16:06:041]: Executing op: RegOpenKey(,Key=Sophos.SavMessageSink\CurVer,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:041]: Executing op: RegAddValue(,Value=Sophos.SavMessageSink.1,)
MSI (s) (24:68) [17:16:06:041]: Executing op: RegOpenKey(,Key=Sophos.SavMessageSink.1\CLSID,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:041]: Executing op: RegAddValue(,Value={2dc0c89e-f684-41d4-b358-852de67fbcd9},)
MSI (s) (24:68) [17:16:06:041]: Executing op: RegOpenKey(,Key=TypeLib\{940018e1-d8dd-4303-a3ab-56d704187c67}\1.0,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:041]: Executing op: RegAddValue(,Value=SavApiLib,)
MSI (s) (24:68) [17:16:06:041]: Executing op: RegOpenKey(,Key=TypeLib\{940018e1-d8dd-4303-a3ab-56d704187c67}\1.0\0\win64,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:042]: Executing op: RegAddValue(,Value=C:\Program Files\Sophos\Sophos UI\SavApi.exe,)
MSI (s) (24:68) [17:16:06:042]: Executing op: RegOpenKey(,Key=TypeLib\{940018e1-d8dd-4303-a3ab-56d704187c67}\1.0\FLAGS,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:042]: Executing op: RegAddValue(,Value=0,)
MSI (s) (24:68) [17:16:06:042]: Executing op: RegOpenKey(,Key=Interface\{B11D0518-AA65-4A81-B1D5-151928CC1DB7},,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:042]: Executing op: RegAddValue(,Value=ISavMessageSink,)
MSI (s) (24:68) [17:16:06:042]: Executing op: RegOpenKey(,Key=Interface\{B11D0518-AA65-4A81-B1D5-151928CC1DB7}\ProxyStubClsid32,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:042]: Executing op: RegAddValue(,Value={00020424-0000-0000-C000-000000000046},)
MSI (s) (24:68) [17:16:06:043]: Executing op: RegOpenKey(,Key=Interface\{B11D0518-AA65-4A81-B1D5-151928CC1DB7}\TypeLib,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:043]: Executing op: RegAddValue(,Value={940018e1-d8dd-4303-a3ab-56d704187c67},)
MSI (s) (24:68) [17:16:06:043]: Executing op: RegAddValue(Name=Version,Value=1.0,)
MSI (s) (24:68) [17:16:06:043]: Executing op: RegOpenKey(,Key=Interface\{3D68FE9D-C67C-4A6A-AC10-19C0959F4437},,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:043]: Executing op: RegAddValue(,Value=IQueryBlockAllow,)
MSI (s) (24:68) [17:16:06:044]: Executing op: RegOpenKey(,Key=Interface\{3D68FE9D-C67C-4A6A-AC10-19C0959F4437}\ProxyStubClsid32,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:044]: Executing op: RegAddValue(,Value={00020424-0000-0000-C000-000000000046},)
MSI (s) (24:68) [17:16:06:044]: Executing op: RegOpenKey(,Key=Interface\{3D68FE9D-C67C-4A6A-AC10-19C0959F4437}\TypeLib,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:044]: Executing op: RegAddValue(,Value={940018e1-d8dd-4303-a3ab-56d704187c67},)
MSI (s) (24:68) [17:16:06:044]: Executing op: RegAddValue(Name=Version,Value=1.0,)
MSI (s) (24:68) [17:16:06:044]: Executing op: RegOpenKey(Root=-2147483647,Key=Software\Microsoft\SophosUI,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:044]: Executing op: RegAddValue(Name=installed,Value=#1,)
MSI (s) (24:68) [17:16:06:045]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Sophos UI\Application,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:045]: Executing op: RegAddValue(Name=ProductCode,Value={8D7BB12C-6854-46DF-A67D-F82D778D75C8},)
MSI (s) (24:68) [17:16:06:045]: Executing op: RegAddValue(Name=ProductVersion,Value=2.1.44.0,)
MSI (s) (24:68) [17:16:06:045]: Executing op: RegAddValue(Name=Path,Value=C:\Program Files\Sophos\Sophos UI\,)
MSI (s) (24:68) [17:16:06:045]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Run,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:046]: Executing op: RegAddValue(Name=Sophos UI.exe,Value="C:\Program Files\Sophos\Sophos UI\Sophos UI.exe" /hidden,)
MSI (s) (24:68) [17:16:06:046]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\sophosui,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:046]: Executing op: RegAddValue(,Value=URL:SophosUI,)
MSI (s) (24:68) [17:16:06:046]: Executing op: RegAddValue(Name=URL Protocol,,)
MSI (s) (24:68) [17:16:06:046]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\sophosui\DefaultIcon,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:046]: Executing op: RegAddValue(,Value="C:\Program Files\Sophos\Sophos UI\Sophos UI.exe",)
MSI (s) (24:68) [17:16:06:047]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\sophosui\shell\open\command,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:047]: Executing op: RegAddValue(,Value="C:\Program Files\Sophos\Sophos UI\Sophos UI.exe",)
MSI (s) (24:68) [17:16:06:047]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Telemetry\Plugins\UI,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:047]: Executing op: RegAddValue(Name=Path,Value=C:\Program Files\Sophos\Sophos UI\SophosUITelemetry.exe,)
MSI (s) (24:68) [17:16:06:047]: Executing op: RegAddValue(Name=Cmd,Value=SophosUITelemetry.exe,)
MSI (s) (24:68) [17:16:06:047]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Sophos UI\AdapterNotifications,,BinaryType=0,,)
MSI (s) (24:68) [17:16:06:047]: Executing op: RegCreateKey()
MSI (s) (24:68) [17:16:06:048]: Executing op: ActionStart(Name=RegisterManagementAdapterRollback,,)
MSI (s) (24:68) [17:16:06:048]: Executing op: CustomActionSchedule(Action=RegisterManagementAdapterRollback,ActionType=1345,Source=BinaryData,Target=UnregisterManagementAdapter,)
MSI (s) (24:68) [17:16:06:051]: Executing op: ActionStart(Name=RegisterManagementAdapter,,)
MSI (s) (24:68) [17:16:06:052]: Executing op: CustomActionSchedule(Action=RegisterManagementAdapter,ActionType=1025,Source=BinaryData,Target=RegisterManagementAdapter,CustomActionData=C:\Program Files\Sophos\Sophos UI\Adapter.dll)
MSI (s) (24:68) [17:16:06:054]: Creating MSIHANDLE (26) of type 790536 for thread 5736
MSI (s) (24:60) [17:16:06:054]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7AD6.tmp, Entrypoint: RegisterManagementAdapter
MSI (s) (24!40) [17:16:06:063]: Creating MSIHANDLE (27) of type 790531 for thread 2112
MSI (s) (24!40) [17:16:06:063]: Closing MSIHANDLE (27) of type 790531 for thread 2112
MSI (s) (24!40) [17:16:06:064]: Creating MSIHANDLE (28) of type 790531 for thread 2112
RegisterManagementAdapter: RegisterManagementAdapter called
MSI (s) (24!40) [17:16:06:064]: Closing MSIHANDLE (28) of type 790531 for thread 2112
MSI (s) (24!40) [17:16:06:065]: Creating MSIHANDLE (29) of type 790531 for thread 2112
RegisterManagementAdapter: Adapter path =C:\Program Files\Sophos\Sophos UI\Adapter.dll
MSI (s) (24!40) [17:16:06:066]: Closing MSIHANDLE (29) of type 790531 for thread 2112
MSI (s) (24:60) [17:16:06:066]: Closing MSIHANDLE (26) of type 790536 for thread 5736
MSI (s) (24:68) [17:16:06:066]: Executing op: ActionStart(Name=RegisterProduct,Description=Registering product,Template=[1])
RegisterManagementAdapter: Management adapter successfully registered
MSI (s) (24:68) [17:16:06:067]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,,BytesPerTick=0,CopierType=0,,,,,,IsFirstPhysicalMedia=1)
MSI (s) (24:68) [17:16:06:067]: Executing op: DatabaseCopy(DatabasePath=C:\Windows\Installer\b51b0.msi,ProductCode={8D7BB12C-6854-46DF-A67D-F82D778D75C8},,,)
MSI (s) (24:68) [17:16:06:068]: Verifying accessibility of file: 16a728.msi
MSI (s) (24:68) [17:16:06:103]: File will have security applied from OpCode.
MSI (s) (24:68) [17:16:06:105]: Executing op: ProductRegister(UpgradeCode={D7FA14A7-AEB7-449D-8176-A0A2C0F5DFE9},VersionString=2.1.44.0,HelpLink=www.sophos.com/support,,,InstallSource=C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\,Publisher=Sophos Limited,URLInfoAbout=www.sophos.com,URLUpdateInfo=http:/.../updates,,NoModify=1,NoRepair=1,,Comments=UI,Contact=Sophos Technical Support,,,SystemComponent=1,EstimatedSize=820,,,,)
MSI (s) (24:68) [17:16:06:111]: Executing op: ProductCPDisplayInfoRegister()
MSI (s) (24:68) [17:16:06:112]: Executing op: ActionStart(Name=PublishFeatures,Description=Publishing Product Features,Template=Feature: [1])
MSI (s) (24:68) [17:16:06:113]: Executing op: FeaturePublish(Feature=AllComponents,,Absent=2,Component=6cQ+dWH[l?`gBPY6rF`=.ba.-&)P@9{Vog]zFWtHOTFg*Gol_A14FHE]4W`mp+Z^A?}&h@mIwmzt`D[5OZB]1i(P(@1x^]AoV0)?68T-3l+D2?1F{^lu3!?LxqrH1&5S_Ai1bbCTB-^JItmidrEwy?4+Imh1XYZ^BV^1S2J+y9Vg.1ljhkX(M?](cYU@[83EGbXY&Vy@dMUB(V-N_8)5!g@EOOL[DPL5a&('RAAUby'ao_S+1r-P_)hzw8%Y}n?Kf7i?@~,$vh`X[A0P*{5`x0I'%v1dDcXV`?L-obIjB}hsy%8^QRw?u9gAN%Fw0c0t76kw`)TGM=c.y7_RpeH^hC&fI0thL@5EWqFrj3`5ATGwU!~Py92rF5OY8,-C7Pgs]lV@k@X`XXH!RofLvYV~r1T1*=10ompU9~qJHFq4(FPN~?~am*OkuXW!@LFbAPj%_@$V3=ZYS]zC-5eB]{J3`=E)O7l,&+BTK6bjtC3YbAOR!$+kp[fO4h,J9ew7t@b+47x-A*wgk!v(nnh4A?mTML[cjh%&E54F&J~NL=7S&[0EP.ci,]dPns=g}?[7~-ppx{m!B`!g4D4.4A_hO-ZnR3ff_VM3rPB5aA}^}Xa[D)B*Lg7r)Qu~l@C2?l8o161@KxIl'eODJALQtk7F['{`Vc^zf%wE596XvisKE=$4_]_`x*{&NAr+M@HSs*M2^C`F3icd8A`DH01=5kat=}t05'%RK9R`U]R4F)*aj[hdboy=G=_Sc*8_z{*^)
MSI (s) (24:68) [17:16:06:113]: Executing op: ActionStart(Name=PublishProduct,Description=Publishing product information,)
MSI (s) (24:68) [17:16:06:114]: Executing op: CleanupConfigData()
MSI (s) (24:68) [17:16:06:114]: Executing op: RegisterPatchOrder(Continue=0,SequenceType=1,Remove=0)
MSI (s) (24:68) [17:16:06:115]: Executing op: ProductPublishUpdate()
MSI (s) (24:68) [17:16:06:115]: Executing op: SourceListRegisterLastUsed(SourceProduct={8D7BB12C-6854-46DF-A67D-F82D778D75C8},LastUsedSource=C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\)
MSI (s) (24:68) [17:16:06:116]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (24:68) [17:16:06:116]: Using cached product context: machine assigned for product: C21BB7D84586FD646AD78FD277D8578C
MSI (s) (24:68) [17:16:06:116]: Specifed source is already in a list.
MSI (s) (24:68) [17:16:06:116]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (24:68) [17:16:06:116]: Adding new sources is allowed.
MSI (s) (24:68) [17:16:06:116]: Set LastUsedSource to: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\.
MSI (s) (24:68) [17:16:06:116]: Set LastUsedType to: n.
MSI (s) (24:68) [17:16:06:116]: Set LastUsedIndex to: 1.
MSI (s) (24:68) [17:16:06:116]: Executing op: ActionStart(Name=LaunchApplication,,)
MSI (s) (24:68) [17:16:06:116]: Executing op: CustomActionSchedule(Action=LaunchApplication,ActionType=3137,Source=BinaryData,Target=StartSophosUIForLoggedInUser,CustomActionData=C:\Program Files\Sophos\Sophos UI\Sophos UI.exe)
MSI (s) (24:68) [17:16:06:118]: Creating MSIHANDLE (30) of type 790536 for thread 5736
MSI (s) (24:D8) [17:16:06:119]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7B15.tmp, Entrypoint: StartSophosUIForLoggedInUser
MSI (s) (24!F0) [17:16:06:128]: Creating MSIHANDLE (31) of type 790531 for thread 5360
MSI (s) (24!F0) [17:16:06:128]: Closing MSIHANDLE (31) of type 790531 for thread 5360
MSI (s) (24!F0) [17:16:06:129]: Creating MSIHANDLE (32) of type 790531 for thread 5360
StartSophosUIForLoggedInUser: StartSophosUIForLoggedInUser called
MSI (s) (24!F0) [17:16:06:129]: Closing MSIHANDLE (32) of type 790531 for thread 5360
MSI (s) (24!F0) [17:16:06:143]: Creating MSIHANDLE (33) of type 790531 for thread 5360
StartSophosUIForLoggedInUser: Sophos UI executable path =C:\Program Files\Sophos\Sophos UI\Sophos UI.exe
MSI (s) (24!F0) [17:16:06:143]: Closing MSIHANDLE (33) of type 790531 for thread 5360
MSI (s) (24:D8) [17:16:06:144]: Closing MSIHANDLE (30) of type 790536 for thread 5736
MSI (s) (24:68) [17:16:06:144]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=6540724)
StartSophosUIForLoggedInUser: Successfully started Sophos UI process for currently logged-in user
MSI (s) (24:68) [17:16:06:146]: User policy value 'DisableRollback' is 0
MSI (s) (24:68) [17:16:06:146]: Machine policy value 'DisableRollback' is 0
MSI (s) (24:68) [17:16:06:173]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:06:174]: Note: 1: 2318 2:
MSI (s) (24:68) [17:16:06:175]: No System Restore sequence number for this installation.
MSI (s) (24:68) [17:16:06:175]: Unlocking Server
MSI (s) (24:68) [17:16:06:180]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
MSI (s) (24:68) [17:16:06:180]: Doing action: WixCheckRebootRequired
MSI (s) (24:68) [17:16:06:180]: Note: 1: 2205 2: 3: ActionText
Action ended 17:16:06: InstallFinalize. Return value 1.
MSI (s) (24:68) [17:16:06:182]: Creating MSIHANDLE (34) of type 790542 for thread 5736
MSI (s) (24:48) [17:16:06:183]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7B56.tmp, Entrypoint: WixCheckRebootRequired
MSI (s) (24!94) [17:16:06:188]: Creating MSIHANDLE (35) of type 790541 for thread 6036
MSI (s) (24!94) [17:16:06:189]: Closing MSIHANDLE (35) of type 790541 for thread 6036
MSI (s) (24:48) [17:16:06:189]: Closing MSIHANDLE (34) of type 790542 for thread 5736
Action start 17:16:06: WixCheckRebootRequired.
Action ended 17:16:06: WixCheckRebootRequired. Return value 1.
Action ended 17:16:06: INSTALL. Return value 1.
Property(S): UpgradeCode = {D7FA14A7-AEB7-449D-8176-A0A2C0F5DFE9}
Property(S): WIXNETFX4RELEASEINSTALLED = #379893
Property(S): INSTALLDIR = C:\Program Files\Sophos\Sophos UI\
Property(S): SophosProgramsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
Property(S): EventsDirectory = C:\Program Files\Sophos\Sophos UI\Events\
Property(S): CzechDirectory = C:\Program Files\Sophos\Sophos UI\cs\
Property(S): GermanDirectory = C:\Program Files\Sophos\Sophos UI\de\
Property(S): SpanishDirectory = C:\Program Files\Sophos\Sophos UI\es\
Property(S): FrenchDirectory = C:\Program Files\Sophos\Sophos UI\fr\
Property(S): ItalianDirectory = C:\Program Files\Sophos\Sophos UI\it\
Property(S): JapaneseDirectory = C:\Program Files\Sophos\Sophos UI\ja\
Property(S): PolishDirectory = C:\Program Files\Sophos\Sophos UI\pl\
Property(S): KoreanKoreaDirectory = C:\Program Files\Sophos\Sophos UI\ko-KR\
Property(S): PortugueseBrazilDirectory = C:\Program Files\Sophos\Sophos UI\pt-BR\
Property(S): ChineseSimplifiedDirectory = C:\Program Files\Sophos\Sophos UI\zh-Hans\
Property(S): ChineseTraditionalDirectory = C:\Program Files\Sophos\Sophos UI\zh-Hant\
Property(S): TARGETDIR = C:\
Property(S): WIX_IS_NETFRAMEWORK_452_OR_LATER_INSTALLED = 1
Property(S): WIX_IS_NETFRAMEWORK_451_OR_LATER_INSTALLED = 1
Property(S): UnregisterManagementAdapterRollback = C:\Program Files\Sophos\Sophos UI\Adapter.dll
Property(S): RegisterManagementAdapter = C:\Program Files\Sophos\Sophos UI\Adapter.dll
Property(S): LaunchApplication = C:\Program Files\Sophos\Sophos UI\Sophos UI.exe
Property(S): WixCloseApplicationsDeferred = Sophos UI.exe€40€5000€1
Property(S): Sophos = C:\Program Files\Sophos\
Property(S): ProgramFilesFolder = C:\Program Files\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\
Property(S): VersionNT = 601
Property(S): Installed = 00:00:00
Property(S): ALLUSERS = 1
Property(S): ARPCOMMENTS = UI
Property(S): ARPCONTACT = Sophos Technical Support
Property(S): ARPHELPLINK = http://www.sophos.com/support
Property(S): ARPNOMODIFY = 1
Property(S): ARPNOREPAIR = 1
Property(S): ARPPRODUCTICON = shield.ico
Property(S): ARPURLINFOABOUT = http://www.sophos.com
Property(S): ARPURLUPDATEINFO = www.sophos.com/.../updates
Property(S): MSIRESTARTMANAGERCONTROL = Disable
Property(S): Manufacturer = Sophos Limited
Property(S): ProductCode = {8D7BB12C-6854-46DF-A67D-F82D778D75C8}
Property(S): ProductLanguage = 1033
Property(S): ProductName = Sophos Endpoint Agent
Property(S): ProductVersion = 2.1.44.0
Property(S): SecureCustomProperties = WIX_DOWNGRADE_DETECTED;WIX_IS_NETFRAMEWORK_451_OR_LATER_INSTALLED;WIX_IS_NETFRAMEWORK_452_OR_LATER_INSTALLED;WIX_UPGRADE_DETECTED;WIXNETFX4RELEASEINSTALLED
Property(S): MsiLogFileLocation = C:\Windows\TEMP\Sophos UI Install Log 20210325 171557.txt
Property(S): PackageCode = {5C8C0B42-292F-4458-9945-96D6D5DBD920}
Property(S): ProductState = 5
Property(S): ProductToBeRegistered = 1
Property(S): REBOOT = ReallySuppress
Property(S): REINSTALLMODE = vmuso
Property(S): REINSTALL = ALL
Property(S): INSTALLINGVERSION = 2.1.44.0
Property(S): ARPSYSTEMCOMPONENT = 1
Property(S): CURRENTDIRECTORY = C:\Windows\system32
Property(S): CLIENTUILEVEL = 3
Property(S): MSICLIENTUSESEXTERNALUI = 1
Property(S): CLIENTPROCESSID = 6096
Property(S): PRODUCTLANGUAGE = 1033
Property(S): VersionDatabase = 405
Property(S): VersionMsi = 5.00
Property(S): WindowsBuild = 7601
Property(S): ServicePackLevel = 1
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 1
Property(S): WindowsFolder = C:\Windows\
Property(S): WindowsVolume = C:\
Property(S): SystemFolder = C:\Windows\system32\
Property(S): System16Folder = C:\Windows\system\
Property(S): RemoteAdminTS = 1
Property(S): TempFolder = C:\Windows\TEMP\
Property(S): CommonFilesFolder = C:\Program Files\Common Files\
Property(S): AppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\
Property(S): FavoritesFolder = C:\Windows\system32\config\systemprofile\Favorites\
Property(S): NetHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Windows\system32\config\systemprofile\Documents\
Property(S): PrintHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): SendToFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): LocalAppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Local\
Property(S): MyPicturesFolder = C:\Windows\system32\config\systemprofile\Pictures\
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FontsFolder = C:\Windows\Fonts\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): Intel = 6
Property(S): PhysicalMemory = 3241
Property(S): VirtualMemory = 4688
Property(S): AdminUser = 1
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = SYSTEM
Property(S): UserSID = S-1-5-18
Property(S): UserLanguageID = 1057
Property(S): ComputerName = PGN2PC20111536
Property(S): SystemLanguageID = 1057
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 22
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 17:16:06
Property(S): Date = 25/03/2021
Property(S): MsiNetAssemblySupport = 4.0.30319.34209
Property(S): MsiWin32AssemblySupport = 6.1.7601.17514
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): USERNAME = SBYJUAL20
Property(S): COMPANYNAME = Microsoft
Property(S): DATABASE = C:\Windows\Installer\b51b0.msi
Property(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\Sophos UI.msi
Property(S): UILevel = 2
Property(S): QFEUpgrade = 1
Property(S): Preselected = 1
Property(S): ACTION = INSTALL
Property(S): ROOTDRIVE = C:\
Property(S): CostingComplete = 1
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
Property(S): INSTALLLEVEL = 1
Property(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ui\
Property(S): SourcedirProduct = {8D7BB12C-6854-46DF-A67D-F82D778D75C8}
MSI (s) (24:68) [17:16:06:201]: Note: 1: 1728
MSI (s) (24:68) [17:16:06:201]: Note: 1: 2205 2: 3: Error
MSI (s) (24:68) [17:16:06:201]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1728
MSI (s) (24:68) [17:16:06:201]: Note: 1: 2205 2: 3: Error
MSI (s) (24:68) [17:16:06:201]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709
MSI (s) (24:68) [17:16:06:201]: Product: Sophos Endpoint Agent -- Configuration completed successfully.

MSI (s) (24:68) [17:16:06:202]: Windows Installer reconfigured the product. Product Name: Sophos Endpoint Agent. Product Version: 2.1.44.0. Product Language: 1033. Manufacturer: Sophos Limited. Reconfiguration success or error status: 0.

MSI (s) (24:68) [17:16:06:203]: Deferring clean up of packages/files, if any exist
MSI (s) (24:68) [17:16:06:203]: MainEngineThread is returning 0
MSI (s) (24:EC) [17:16:06:203]: No System Restore sequence number for this installation.
=== Logging stopped: 25/03/2021 17:16:06 ===
MSI (s) (24:EC) [17:16:06:204]: User policy value 'DisableRollback' is 0
MSI (s) (24:EC) [17:16:06:204]: Machine policy value 'DisableRollback' is 0
MSI (s) (24:EC) [17:16:06:204]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (24:EC) [17:16:06:204]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (24:EC) [17:16:06:204]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (24:EC) [17:16:06:205]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (24:EC) [17:16:06:205]: Restoring environment variables
MSI (s) (24:EC) [17:16:06:205]: Destroying RemoteAPI object.
MSI (s) (24:40) [17:16:06:205]: Custom Action Manager thread ending.
MSI (c) (D0:88) [17:16:06:206]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (D0:88) [17:16:06:206]: MainEngineThread is returning 0
=== Verbose logging stopped: 25/03/2021 17:16:06 ===

setup::MsiInstaller::installOrUpgrade: Install/upgrade returned 0
`anonymous-namespace'::setResult: installation successful
ProductSetup::~ProductSetup: End product setup

In addition to this, can you help us validate if you have the extended subscription support for Win7 OS? If no? then installation of endpoint for win7 device will fail since it’ll no longer able to download the full update and package. 

on the side of where to see subscription support?
win 7 should exist, because the license is directly from the company domain,

and is there a way that can be used if update support cannot be done?
like manual download from windows official site

Hi F M,

You can verify this when you log in to your central dashboard and go to licensing. If you have extended support for Win7 and server 2008, you’ll be able to see it on the list for your subscription. 

Also based on the shared snapshot that you have, It appears also shows that those missing components were caused to some conflict like an existing 3rd party security software is current installed on the device. If you can confirm that you have the extended support. Then a huge possibility that this installation issue was caused by a conflict of components as I mentioned. If so? You may try to check the AV remove logs which can be found on c//:temp or local users temp folder by opening run and typing %temp%.

After I delete all the temp, do I need to reinstall it again?

If the temp is already empty then you need to re-create the issue inorder for the logs to be re-created under temp folder.

which logs should I post here?

this is new sdu.log

2021-03-26T04:12:54.144Z [ 1432: 5120] [v6.7.306.0] INFO =========================
2021-03-26T04:12:54.144Z [ 1432: 5120] [v6.7.306.0] INFO Sophos Diagnostic Utility is starting
2021-03-26T04:12:54.144Z [ 1432: 5120] [v6.7.306.0] INFO AutoUpdate version : 6.7.352.0
2021-03-26T04:12:54.144Z [ 1432: 5120] [v6.7.306.0] INFO SDU version : 6.7.306.0
2021-03-26T04:12:54.144Z [ 1432: 5120] [v6.7.306.0] INFO Build : 20201112112223-467b32cd44f5298f621f2e439cded3f2f6f1c668-QxeNqW
2021-03-26T04:12:54.144Z [ 1432: 5120] [v6.7.306.0] INFO =========================
2021-03-26T04:12:54.144Z [ 1432: 5120] [v6.7.306.0] INFO [X] including system info
2021-03-26T04:12:54.144Z [ 1432: 5120] [v6.7.306.0] INFO [X] including Sophos product info
2021-03-26T04:12:54.144Z [ 1432: 5120] [v6.7.306.0] INFO [_] NOT including deep forensics
2021-03-26T04:12:54.145Z [ 1432: 5120] [v6.7.306.0] INFO Collecting sduconfig.xml: C:\Program Files\Sophos\Sophos Diagnostic Utility\sduconfig.xml
2021-03-26T04:12:54.148Z [ 1432: 5120] [v6.7.306.0] INFO Creating 3 worker threads
2021-03-26T04:12:54.150Z [ 1432: 4540] [v6.7.306.0] INFO AuditPol[SDU-SysInfo-AuditPol.txt] running auditpol.exe /backup /file:SDU-Sysinfo-AuditPol.txt
2021-03-26T04:12:54.150Z [ 1432: 404] [v6.7.306.0] INFO Bcdedit[SDU-Sysinfo-Bcdedit.txt] running bcdedit
2021-03-26T04:12:54.151Z [ 1432: 5120] [v6.7.306.0] INFO msinfo[SDU-Sysinfo-Msinfo32.nfo] running "C:\Windows\system32\msinfo32.exe" /nfo msinfo.nfo
2021-03-26T04:12:54.151Z [ 1432: 1880] [v6.7.306.0] INFO Bios[SDU-Sysinfo-Netbios.txt] running nbtstat -n
2021-03-26T04:12:54.255Z [ 1432: 1880] [v6.7.306.0] INFO Bios[SDU-Sysinfo-Netbios.txt] finished in 109ms, exit code 0
2021-03-26T04:12:54.257Z [ 1432: 1880] [v6.7.306.0] INFO Bootcfg[SDU-Sysinfo-Bootcfg.txt] running Bootcfg.exe /query
2021-03-26T04:12:54.273Z [ 1432: 4540] [v6.7.306.0] INFO AuditPol[SDU-SysInfo-AuditPol.txt] finished in 124ms, exit code 0
2021-03-26T04:12:54.275Z [ 1432: 4540] [v6.7.306.0] INFO Driverquery[SDU-Sysinfo-DrvQuery.csv] running Driverquery.exe /V /FO CSV
2021-03-26T04:12:54.448Z [ 1432: 1880] [v6.7.306.0] INFO Bootcfg[SDU-Sysinfo-Bootcfg.txt] FAILED in 187ms, exit code 1
2021-03-26T04:12:54.451Z [ 1432: 1880] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Application.evtx] collecting C:\Windows\System32\winevt\Logs\Application.evtx
2021-03-26T04:12:54.516Z [ 1432: 404] [v6.7.306.0] INFO Bcdedit[SDU-Sysinfo-Bcdedit.txt] finished in 374ms, exit code 0
2021-03-26T04:12:55.407Z [ 1432: 1880] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Application.evtx] collected C:\Windows\System32\winevt\Logs\Application.evtx in 967ms
2021-03-26T04:12:55.412Z [ 1432: 1880] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Security.evtx] collecting C:\Windows\System32\winevt\Logs\Security.evtx
2021-03-26T04:12:55.412Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\System.evtx] collecting C:\Windows\System32\winevt\Logs\System.evtx
2021-03-26T04:12:56.324Z [ 1432: 1880] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Security.evtx] collected C:\Windows\System32\winevt\Logs\Security.evtx in 905ms
2021-03-26T04:12:56.328Z [ 1432: 1880] [v6.7.306.0] WARN CollectFiles[%SYSTEMROOT%\System32\winevt\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx]: no files found
2021-03-26T04:12:56.330Z [ 1432: 1880] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx] collecting C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx
2021-03-26T04:12:57.240Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\System.evtx] collected C:\Windows\System32\winevt\Logs\System.evtx in 1825ms
2021-03-26T04:12:57.243Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx] collecting C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx
2021-03-26T04:12:57.299Z [ 1432: 1880] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx] collected C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx in 967ms
2021-03-26T04:12:57.303Z [ 1432: 1880] [v6.7.306.0] WARN CollectFiles[%SYSTEMROOT%\System32\winevt\Logs\Microsoft-Windows-Winsock-WS2HELP%4Operational.evtx]: no files found
2021-03-26T04:12:57.303Z [ 1432: 1880] [v6.7.306.0] WARN CollectFiles[%SYSTEMROOT%\System32\winevt\Logs\Microsoft-Windows-PowerShell%4Operational.evtx]: no files found
2021-03-26T04:12:57.303Z [ 1432: 1880] [v6.7.306.0] WARN CollectFiles[%SYSTEMROOT%\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Admin.evtx]: no files found
2021-03-26T04:12:57.303Z [ 1432: 1880] [v6.7.306.0] WARN CollectFiles[%SYSTEMROOT%\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Operational.evtx]: no files found
2021-03-26T04:12:57.304Z [ 1432: 1880] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx] collecting C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx
2021-03-26T04:12:58.191Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx] collected C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx in 952ms
2021-03-26T04:12:58.195Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx] collecting C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx
2021-03-26T04:12:58.265Z [ 1432: 1880] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx] collected C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx in 967ms
2021-03-26T04:12:58.269Z [ 1432: 1880] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Windows PowerShell.evtx] collecting C:\Windows\System32\winevt\Logs\Windows PowerShell.evtx
2021-03-26T04:12:58.339Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx] collected C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx in 156ms
2021-03-26T04:12:58.341Z [ 1432: 1880] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\winevt\Logs\Windows PowerShell.evtx] collected C:\Windows\System32\winevt\Logs\Windows PowerShell.evtx in 78ms
2021-03-26T04:12:58.344Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SYSTEMROOT%\System32\winevt\Logs\Sophos Network Threat Protection Diagnostics.etl]: no files found
2021-03-26T04:12:58.344Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SYSTEMROOT%\System32\winevt\Logs\Sophos Cloud AD Sync.evtx]: no files found
2021-03-26T04:12:58.347Z [ 1432: 1880] [v6.7.306.0] INFO GroupPolicy[SDU-Sysinfo-GroupPolicy.html] running gpresult /f /h SDU-Sysinfo-GroupPolicy.html
2021-03-26T04:12:59.985Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SYSTEMDRIVE%\Users\*\AppData\Roaming\Microsoft\Windows\PowerShell\PSReadLine\ConsoleHost_history.txt]: no files found
2021-03-26T04:12:59.986Z [ 1432: 404] [v6.7.306.0] INFO IpConfig[SDU-Sysinfo-IPConfig.txt] running ipconfig /all
2021-03-26T04:13:00.198Z [ 1432: 404] [v6.7.306.0] INFO IpConfig[SDU-Sysinfo-IPConfig.txt] finished in 218ms, exit code 0
2021-03-26T04:13:00.200Z [ 1432: 404] [v6.7.306.0] INFO NetShares[SDU-Sysinfo-NetShares.txt] running net share
2021-03-26T04:13:00.797Z [ 1432: 404] [v6.7.306.0] INFO NetShares[SDU-Sysinfo-NetShares.txt] finished in 593ms, exit code 0
2021-03-26T04:13:00.801Z [ 1432: 404] [v6.7.306.0] INFO NetStat[SDU-Sysinfo-NetStat.txt] running netstat -ban
2021-03-26T04:13:01.856Z [ 1432: 404] [v6.7.306.0] INFO NetStat[SDU-Sysinfo-NetStat.txt] finished in 1061ms, exit code 0
2021-03-26T04:13:01.858Z [ 1432: 404] [v6.7.306.0] INFO QueryLSPs[SDU-Sysinfo-LSPs.txt] running netsh winsock show catalog
2021-03-26T04:13:07.937Z [ 1432: 404] [v6.7.306.0] INFO QueryLSPs[SDU-Sysinfo-LSPs.txt] finished in 6084ms, exit code 0
2021-03-26T04:13:07.942Z [ 1432: 404] [v6.7.306.0] INFO RouteTable[SDU-Sysinfo-RoutingTable.txt] running route print
2021-03-26T04:13:08.038Z [ 1432: 404] [v6.7.306.0] INFO RouteTable[SDU-Sysinfo-RoutingTable.txt] finished in 94ms, exit code 0
2021-03-26T04:13:08.041Z [ 1432: 404] [v6.7.306.0] INFO scqueryex[SDU-Sysinfo-scqueryex.txt] running sc queryex state= all
2021-03-26T04:13:10.335Z [ 1432: 4540] [v6.7.306.0] INFO Driverquery[SDU-Sysinfo-DrvQuery.csv] finished in 16068ms, exit code 0
2021-03-26T04:13:10.345Z [ 1432: 4540] [v6.7.306.0] INFO gathertelem[SDU-Sysinfo-telemetry.json] running "C:\Program Files\Sophos\AutoUpdate\Telemetry\GatherTelem.exe" /dumpjob
2021-03-26T04:13:16.560Z [ 1432: 1880] [v6.7.306.0] INFO GroupPolicy[SDU-Sysinfo-GroupPolicy.html] finished in 18221ms, exit code 0
2021-03-26T04:13:16.562Z [ 1432: 1880] [v6.7.306.0] INFO arp[SDU-Sysinfo-ArpEntries.txt] running arp -a
2021-03-26T04:13:16.686Z [ 1432: 1880] [v6.7.306.0] INFO arp[SDU-Sysinfo-ArpEntries.txt] finished in 125ms, exit code 0
2021-03-26T04:13:16.688Z [ 1432: 1880] [v6.7.306.0] INFO assoc[SDU-Sysinfo-FileAssoc.txt] running cmd /c assoc
2021-03-26T04:13:16.716Z [ 1432: 1880] [v6.7.306.0] INFO assoc[SDU-Sysinfo-FileAssoc.txt] FAILED in 31ms, exit code 1
2021-03-26T04:13:16.717Z [ 1432: 1880] [v6.7.306.0] INFO ftype[SDU-Sysinfo-Ftype.txt] running cmd /c ftype
2021-03-26T04:13:23.727Z [ 1432: 1880] [v6.7.306.0] INFO ftype[SDU-Sysinfo-Ftype.txt] finished in 7004ms, exit code 0
2021-03-26T04:13:23.734Z [ 1432: 1880] [v6.7.306.0] INFO net-firewall[SDU-Sysinfo-MSWin-Adv-Firewall.txt] running netsh advfirewall show allprofiles
2021-03-26T04:13:24.022Z [ 1432: 1880] [v6.7.306.0] INFO net-firewall[SDU-Sysinfo-MSWin-Adv-Firewall.txt] finished in 281ms, exit code 0
2021-03-26T04:13:24.024Z [ 1432: 1880] [v6.7.306.0] INFO net-firewall[SDU-Sysinfo-MSWin-Firewall-Deprecated.txt] running netsh firewall show config
2021-03-26T04:13:24.452Z [ 1432: 1880] [v6.7.306.0] INFO net-firewall[SDU-Sysinfo-MSWin-Firewall-Deprecated.txt] finished in 437ms, exit code 0
2021-03-26T04:13:24.455Z [ 1432: 1880] [v6.7.306.0] INFO net-filters[SDU-Sysinfo-MSWin-Filters.xml] running netsh wfp show filters file="filters.xml" verbose=on
2021-03-26T04:13:24.675Z [ 1432: 1880] [v6.7.306.0] INFO net-filters[SDU-Sysinfo-MSWin-Filters.xml] finished in 218ms, exit code 0
2021-03-26T04:13:24.678Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosAdministrator.txt] running net localgroup SophosAdministrator
2021-03-26T04:13:24.728Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosAdministrator.txt] FAILED in 47ms, exit code 2
2021-03-26T04:13:24.729Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosConsoleAdministrators.txt] running net localgroup "Sophos Console Administrators"
2021-03-26T04:13:24.773Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosConsoleAdministrators.txt] FAILED in 47ms, exit code 2
2021-03-26T04:13:24.774Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosConsolePowerUsers.txt] running net localgroup "Sophos Console Power Users"
2021-03-26T04:13:24.818Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosConsolePowerUsers.txt] FAILED in 46ms, exit code 2
2021-03-26T04:13:24.819Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosDatabaseAdmins.txt] running net localgroup "Sophos DB Admins"
2021-03-26T04:13:24.864Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosDatabaseAdmins.txt] FAILED in 47ms, exit code 2
2021-03-26T04:13:24.865Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosDatabaseUsers.txt] running net localgroup "Sophos DB Users"
2021-03-26T04:13:24.908Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosDatabaseUsers.txt] FAILED in 47ms, exit code 2
2021-03-26T04:13:24.909Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosFullAdministrators.txt] running net localgroup "Sophos Full Administrators"
2021-03-26T04:13:24.955Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosFullAdministrators.txt] FAILED in 47ms, exit code 2
2021-03-26T04:13:24.956Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosOnAccess.txt] running net localgroup SophosOnAccess
2021-03-26T04:13:25.001Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosOnAccess.txt] FAILED in 47ms, exit code 2
2021-03-26T04:13:25.002Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosPowerUser.txt] running net localgroup SophosPowerUser
2021-03-26T04:13:25.046Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosPowerUser.txt] FAILED in 46ms, exit code 2
2021-03-26T04:13:25.047Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosUser.txt] running net localgroup SophosUser
2021-03-26T04:13:25.090Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Group-SophosUser.txt] FAILED in 47ms, exit code 2
2021-03-26T04:13:25.092Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Groups-Administrators.txt] running net localgroup Administrators
2021-03-26T04:13:25.142Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Groups-Administrators.txt] finished in 47ms, exit code 0
2021-03-26T04:13:25.145Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Groups-SophosConsoleServiceUsers.txt] running net localgroup "Sophos Console Service Users"
2021-03-26T04:13:25.188Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Groups-SophosConsoleServiceUsers.txt] FAILED in 47ms, exit code 2
2021-03-26T04:13:25.189Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Groups.txt] running net localgroup
2021-03-26T04:13:25.233Z [ 1432: 1880] [v6.7.306.0] INFO net-group[SDU-Sysinfo-Groups.txt] finished in 47ms, exit code 0
2021-03-26T04:13:25.235Z [ 1432: 1880] [v6.7.306.0] INFO net-user[SDU-Sysinfo-User-All.txt] running net user
2021-03-26T04:13:25.281Z [ 1432: 1880] [v6.7.306.0] INFO net-user[SDU-Sysinfo-User-All.txt] finished in 46ms, exit code 0
2021-03-26T04:13:25.284Z [ 1432: 1880] [v6.7.306.0] INFO netsh-http[SDU-Sysinfo-Http.txt] running netsh http show urlacl
2021-03-26T04:13:26.095Z [ 1432: 404] [v6.7.306.0] INFO scqueryex[SDU-Sysinfo-scqueryex.txt] finished in 18050ms, exit code 0
2021-03-26T04:13:26.100Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] running cacls "%SYSTEMDRIVE%\." /C
2021-03-26T04:13:26.300Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] finished in 202ms, exit code 0
2021-03-26T04:13:26.300Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] running cacls "%PROGRAMFILESX86%\Sophos\." /C
2021-03-26T04:13:26.327Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] finished in 32ms, exit code 0
2021-03-26T04:13:26.327Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] running cacls "%PROGRAMFILESX86%\Sophos\AutoUpdate\." /C
2021-03-26T04:13:26.353Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] finished in 31ms, exit code 0
2021-03-26T04:13:26.353Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] running cacls "%PROGRAMFILESX86%\Sophos\Sophos Anti-Virus\." /C
2021-03-26T04:13:26.366Z [ 1432: 1880] [v6.7.306.0] INFO netsh-http[SDU-Sysinfo-Http.txt] finished in 1077ms, exit code 0
2021-03-26T04:13:26.368Z [ 1432: 1880] [v6.7.306.0] INFO openfiles[SDU-Sysinfo-NetOpenFiles.txt] running openfiles
2021-03-26T04:13:26.442Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] FAILED in 78ms, exit code 2
2021-03-26T04:13:26.442Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] running cacls "%PROGRAMFILES%\Sophos\." /C
2021-03-26T04:13:26.476Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] finished in 31ms, exit code 0
2021-03-26T04:13:26.476Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] running cacls "%PROGRAMFILES%\Sophos\AutoUpdate\." /C
2021-03-26T04:13:26.502Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] finished in 31ms, exit code 0
2021-03-26T04:13:26.502Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] running cacls "%TEMP%" /C
2021-03-26T04:13:26.529Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] finished in 31ms, exit code 0
2021-03-26T04:13:26.529Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] running cacls "%WINDIR%" /C
2021-03-26T04:13:26.555Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] finished in 16ms, exit code 0
2021-03-26T04:13:26.555Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] running cacls "%WINDIR%\System32" /C
2021-03-26T04:13:26.573Z [ 1432: 4540] [v6.7.306.0] INFO gathertelem[SDU-Sysinfo-telemetry.json] finished in 16240ms, exit code 0
2021-03-26T04:13:26.577Z [ 1432: 4540] [v6.7.306.0] INFO schtasks[SDU-Sysinfo-Schtasks.txt] running schtasks.exe /Query /FO LIST /V
2021-03-26T04:13:26.592Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] finished in 47ms, exit code 0
2021-03-26T04:13:26.592Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] running cacls "%WINDIR%\Temp" /C
2021-03-26T04:13:26.617Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] finished in 15ms, exit code 0
2021-03-26T04:13:26.617Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] running cacls "%ALLUSERSPROFILE%" /C
2021-03-26T04:13:26.645Z [ 1432: 404] [v6.7.306.0] INFO ntfs-security[SDU-Sysinfo-NTFS-Permissions.txt] finished in 32ms, exit code 0
2021-03-26T04:13:26.646Z [ 1432: 404] [v6.7.306.0] INFO sql-helplogins[SDU-DB-HELPLOGINS.txt] running sqlcmd.exe -E -S .\SOPHOS -Q "exec sp_helplogins\" -y 0 -h -1
2021-03-26T04:13:26.651Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:26.651Z [ 1432: 404] [v6.7.306.0] INFO sql-helplogins[SDU-DB-HELPLOGINS.txt] FAILED in 15ms, exit code 1
2021-03-26T04:13:26.652Z [ 1432: 404] [v6.7.306.0] INFO sql-sysdbs[SDU-DB-SYSDBNAMES.txt] running sqlcmd.exe -E -S .\SOPHOS -Q "SELECT Name FROM sysDatabases" -y 0 -h -1
2021-03-26T04:13:26.656Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:26.656Z [ 1432: 404] [v6.7.306.0] INFO sql-sysdbs[SDU-DB-SYSDBNAMES.txt] FAILED in 0ms, exit code 1
2021-03-26T04:13:26.657Z [ 1432: 404] [v6.7.306.0] INFO sql-validatelogins[SDU-DB-VALIDATELOGINS.txt] running sqlcmd.exe -E -S .\SOPHOS -Q "exec sp_validatelogins" -y 0 -h -1
2021-03-26T04:13:26.662Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:26.662Z [ 1432: 404] [v6.7.306.0] INFO sql-validatelogins[SDU-DB-VALIDATELOGINS.txt] FAILED in 0ms, exit code 1
2021-03-26T04:13:26.663Z [ 1432: 404] [v6.7.306.0] INFO sql-ver[SDU-DB-SOPHOS-VER.txt] running sqlcmd.exe -E -S .\SOPHOS -Q "SELECT @@VERSION GO" -y 0 -h -1
2021-03-26T04:13:26.667Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:26.667Z [ 1432: 404] [v6.7.306.0] INFO sql-ver[SDU-DB-SOPHOS-VER.txt] FAILED in 16ms, exit code 1
2021-03-26T04:13:26.668Z [ 1432: 404] [v6.7.306.0] INFO sophosbkup[SDU-SophosReg-Native.reg] running "%systemroot%\regedit.exe" /e "out.reg" HKEY_LOCAL_MACHINE\SOFTWARE\Sophos
2021-03-26T04:13:26.788Z [ 1432: 1880] [v6.7.306.0] INFO openfiles[SDU-Sysinfo-NetOpenFiles.txt] finished in 421ms, exit code 0
2021-03-26T04:13:26.791Z [ 1432: 1880] [v6.7.306.0] INFO systeminfo[SDU-Sysinfo-Systeminfo.txt] running systeminfo /FO LIST
2021-03-26T04:13:27.177Z [ 1432: 404] [v6.7.306.0] INFO sophosbkup[SDU-SophosReg-Native.reg] finished in 499ms, exit code 0
2021-03-26T04:13:27.179Z [ 1432: 404] [v6.7.306.0] INFO tasklist-modules[SDU-Sysinfo-Tasklist-Modules.csv] running tasklist /M /FO CSV
2021-03-26T04:13:37.022Z [ 1432: 1880] [v6.7.306.0] INFO systeminfo[SDU-Sysinfo-Systeminfo.txt] finished in 10218ms, exit code 0
2021-03-26T04:13:37.024Z [ 1432: 1880] [v6.7.306.0] INFO tasklist[SDU-Sysinfo-Tasklist.csv] running tasklist /V /FO CSV
2021-03-26T04:13:38.081Z [ 1432: 1880] [v6.7.306.0] INFO tasklist[SDU-Sysinfo-Tasklist.csv] finished in 1045ms, exit code 0
2021-03-26T04:13:38.083Z [ 1432: 1880] [v6.7.306.0] INFO tasklist-services[SDU-Sysinfo-Tasklist-services.csv] running tasklist /SVC /FO CSV
2021-03-26T04:13:38.200Z [ 1432: 1880] [v6.7.306.0] INFO tasklist-services[SDU-Sysinfo-Tasklist-services.csv] finished in 125ms, exit code 0
2021-03-26T04:13:38.203Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-Drives.txt] running wmic DISKDRIVE GET /FORMAT:TEXTVALUELIST:"sortby=DisplayName"
2021-03-26T04:13:38.204Z [ 1432: 404] [v6.7.306.0] INFO tasklist-modules[SDU-Sysinfo-Tasklist-Modules.csv] finished in 11029ms, exit code 0
2021-03-26T04:13:38.208Z [ 1432: 404] [v6.7.306.0] INFO fltmc[SDU-Sysinfo-fltmc-filters.txt] running fltmc filters
2021-03-26T04:13:38.280Z [ 1432: 404] [v6.7.306.0] INFO fltmc[SDU-Sysinfo-fltmc-filters.txt] finished in 78ms, exit code 0
2021-03-26T04:13:38.284Z [ 1432: 404] [v6.7.306.0] INFO fltmc[SDU-Sysinfo-fltmc-instances.txt] running fltmc instances
2021-03-26T04:13:38.311Z [ 1432: 404] [v6.7.306.0] INFO fltmc[SDU-Sysinfo-fltmc-instances.txt] finished in 31ms, exit code 0
2021-03-26T04:13:38.313Z [ 1432: 404] [v6.7.306.0] INFO fltmc[SDU-Sysinfo-fltmc-volumes.txt] running fltmc volumes
2021-03-26T04:13:38.337Z [ 1432: 404] [v6.7.306.0] INFO fltmc[SDU-Sysinfo-fltmc-volumes.txt] finished in 32ms, exit code 0
2021-03-26T04:13:38.339Z [ 1432: 404] [v6.7.306.0] INFO manage-bde[SDU-manage-bde.txt] running manage-bde.exe -status
2021-03-26T04:13:39.846Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-Drives.txt] finished in 1638ms, exit code 0
2021-03-26T04:13:39.848Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-Env.txt] running wmic ENVIRONMENT GET Caption,SystemVariable,UserName,VariableValue /FORMAT:TEXTVALUELIST:"sortby=Caption"
2021-03-26T04:13:40.028Z [ 1432: 404] [v6.7.306.0] INFO manage-bde[SDU-manage-bde.txt] finished in 1684ms, exit code 0
2021-03-26T04:13:40.036Z [ 1432: 404] [v6.7.306.0] INFO CollectRegGroup[REG-Mal-Exeload.xml] collected REG-Mal-Exeload.xml in 16ms
2021-03-26T04:13:40.039Z [ 1432: 404] [v6.7.306.0] INFO CollectRegGroup[REG-Mal-IE.xml] collected REG-Mal-IE.xml in 0ms
2021-03-26T04:13:40.045Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-Mal-HKLM-ImageFileExeOptions.xml] collected REG-Mal-HKLM-ImageFileExeOptions.xml in 0ms
2021-03-26T04:13:40.047Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Classes-.exe.xml] collected REG-HKLM-Software-Classes-.exe.xml in 0ms
2021-03-26T04:13:40.051Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Classes-exefile.xml] collected REG-HKLM-Software-Classes-exefile.xml in 0ms
2021-03-26T04:13:40.055Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-Mal-HKLM-Svchost.xml] collected REG-Mal-HKLM-Svchost.xml in 0ms
2021-03-26T04:13:40.064Z [ 1432: 404] [v6.7.306.0] INFO CollectRegGroup[REG-Mal-HKLM-Windows.xml] collected REG-Mal-HKLM-Windows.xml in 0ms
2021-03-26T04:13:40.069Z [ 1432: 404] [v6.7.306.0] INFO CollectRegGroup[REG-Mal-Runkeys.xml] collected REG-Mal-Runkeys.xml in 0ms
2021-03-26T04:13:41.651Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\system.ini] collecting C:\Windows\system.ini
2021-03-26T04:13:41.653Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\system.ini] collected C:\Windows\system.ini in 0ms
2021-03-26T04:13:41.658Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\win.ini] collecting C:\Windows\win.ini
2021-03-26T04:13:41.659Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\win.ini] collected C:\Windows\win.ini in 0ms
2021-03-26T04:13:41.663Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\autoexec.bat] collecting C:\autoexec.bat
2021-03-26T04:13:41.665Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\autoexec.bat] collected C:\autoexec.bat in 0ms
2021-03-26T04:13:41.668Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SystemDrive%\config.sys]: no files found
2021-03-26T04:13:41.869Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Microsoft\Dr Watson\*.log]: no files found
2021-03-26T04:13:41.870Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%LOCALAPPDATA%\Microsoft\Windows\WER\ReportArchive\AppCrash_Savservice*\*]: no files found
2021-03-26T04:13:41.870Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%LOCALAPPDATA%\Microsoft\Windows\WER\ReportArchive\AppHang_Savservice*\*]: no files found
2021-03-26T04:13:41.870Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%LOCALAPPDATA%\Microsoft\Windows\WER\ReportArchive\Report*]: no files found
2021-03-26T04:13:41.870Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\Debug\NetSetup.LOG] collecting C:\Windows\Debug\NetSetup.LOG
2021-03-26T04:13:41.926Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\Debug\NetSetup.LOG] collected C:\Windows\Debug\NetSetup.LOG in 63ms
2021-03-26T04:13:41.931Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\Debug\netlogon.log] collecting C:\Windows\Debug\netlogon.log
2021-03-26T04:13:41.947Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\Debug\netlogon.log] collected C:\Windows\Debug\netlogon.log in 15ms
2021-03-26T04:13:41.949Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\Debug\UserMode\Userenv.log]: no files found
2021-03-26T04:13:41.949Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\Debug\mrt.log]: no files found
2021-03-26T04:13:41.950Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\DirectX.log] collecting C:\Windows\DirectX.log
2021-03-26T04:13:41.977Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\DirectX.log] collected C:\Windows\DirectX.log in 31ms
2021-03-26T04:13:41.981Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\Inf\setupapi.app.log] collecting C:\Windows\Inf\setupapi.app.log
2021-03-26T04:13:43.183Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\Inf\setupapi.app.log] collected C:\Windows\Inf\setupapi.app.log in 1202ms
2021-03-26T04:13:43.189Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\Inf\setupapi.dev.log] collecting C:\Windows\Inf\setupapi.dev.log
2021-03-26T04:13:43.637Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\Inf\setupapi.dev.log] collected C:\Windows\Inf\setupapi.dev.log in 453ms
2021-03-26T04:13:43.639Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\Inf\setupapi.setup.log]: no files found
2021-03-26T04:13:43.640Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\PFRO.log] collecting C:\Windows\PFRO.log
2021-03-26T04:13:43.837Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\PFRO.log] collected C:\Windows\PFRO.log in 187ms
2021-03-26T04:13:43.839Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\Schedlgu.txt]: no files found
2021-03-26T04:13:43.840Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\Security\winlogon.log]: no files found
2021-03-26T04:13:43.840Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\system32\drivers\etc\hosts] collecting C:\Windows\system32\drivers\etc\hosts
2021-03-26T04:13:43.866Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\system32\drivers\etc\hosts] collected C:\Windows\system32\drivers\etc\hosts in 16ms
2021-03-26T04:13:43.868Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\System32\drivers\etc\lmhosts]: no files found
2021-03-26T04:13:43.869Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\drivers\etc\networks] collecting C:\Windows\System32\drivers\etc\networks
2021-03-26T04:13:43.881Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\drivers\etc\networks] collected C:\Windows\System32\drivers\etc\networks in 16ms
2021-03-26T04:13:43.884Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\drivers\etc\protocol] collecting C:\Windows\System32\drivers\etc\protocol
2021-03-26T04:13:43.895Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\drivers\etc\protocol] collected C:\Windows\System32\drivers\etc\protocol in 15ms
2021-03-26T04:13:43.897Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\drivers\etc\services] collecting C:\Windows\System32\drivers\etc\services
2021-03-26T04:13:43.904Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\System32\drivers\etc\services] collected C:\Windows\System32\drivers\etc\services in 16ms
2021-03-26T04:13:43.907Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\Tasks\Adobe Flash Player Updater.job] collecting C:\Windows\Tasks\Adobe Flash Player Updater.job
2021-03-26T04:13:43.921Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\Tasks\Adobe Flash Player Updater.job] collected C:\Windows\Tasks\Adobe Flash Player Updater.job in 15ms
2021-03-26T04:13:43.927Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\Tasks\DCAgentUpdater.job] collecting C:\Windows\Tasks\DCAgentUpdater.job
2021-03-26T04:13:43.928Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\Tasks\DCAgentUpdater.job] collected C:\Windows\Tasks\DCAgentUpdater.job in 0ms
2021-03-26T04:13:43.933Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\WindowsUpdate.log] collecting C:\Windows\WindowsUpdate.log
2021-03-26T04:13:44.143Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Windows\WindowsUpdate.log] collected C:\Windows\WindowsUpdate.log in 219ms
2021-03-26T04:13:44.147Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\inf\iereset.inf]: no files found
2021-03-26T04:13:44.147Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\msmqinst.log]: no files found
2021-03-26T04:13:44.147Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\pfirewall.log]: no files found
2021-03-26T04:13:44.148Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\setupapi.log]: no files found
2021-03-26T04:13:44.155Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKCR-ALL-shellex.xml] collected REG-HKCR-ALL-shellex.xml in 15ms
2021-03-26T04:13:44.172Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKCR-Directory.xml] collected REG-HKCR-Directory.xml in 16ms
2021-03-26T04:13:44.189Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKCR-Drive.xml] collected REG-HKCR-Drive.xml in 16ms
2021-03-26T04:13:44.201Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKCR-Folder.xml] collected REG-HKCR-Folder.xml in 15ms
2021-03-26T04:13:44.205Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Microsoft-Windows-CurrentVersion-ShellExt.xml] collected REG-HKLM-Software-Microsoft-Windows-CurrentVersion-ShellExt.xml in 0ms
2021-03-26T04:13:44.399Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKCU-Installer-Products.xml] collected REG-HKCU-Installer-Products.xml in 187ms
2021-03-26T04:13:44.415Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKCU-Software-MS-IE.xml] collected REG-HKCU-Software-MS-IE.xml in 16ms
2021-03-26T04:13:44.419Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKCU-Software-WindowsNT-CurrentVersion.xml] collected REG-HKCU-Software-WindowsNT-CurrentVersion.xml in 0ms
2021-03-26T04:13:44.429Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKCU-Software-MS-WIN-IESettings.xml] collected REG-HKCU-Software-MS-WIN-IESettings.xml in 0ms
2021-03-26T04:13:44.432Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKCU-Software-Policies.xml] collected REG-HKCU-Software-Policies.xml in 0ms
2021-03-26T04:13:44.435Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKCU-Software-Sophos.xml] collected REG-HKCU-Software-Sophos.xml in 0ms
2021-03-26T04:13:44.498Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Classes-Installer-Components.xml] collected REG-HKLM-Software-Classes-Installer-Components.xml in 63ms
2021-03-26T04:13:44.503Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Classes-Installer-Dependencies.xml] collected REG-HKLM-Software-Classes-Installer-Dependencies.xml in 0ms
2021-03-26T04:13:44.525Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Classes-Installer-Features.xml] collected REG-HKLM-Software-Classes-Installer-Features.xml in 15ms
2021-03-26T04:13:44.542Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Classes-Installer-Patches.xml] collected REG-HKLM-Software-Classes-Installer-Patches.xml in 15ms
2021-03-26T04:13:44.606Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Classes-Installer-Products.xml] collected REG-HKLM-Software-Classes-Installer-Products.xml in 63ms
2021-03-26T04:13:44.614Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Classes-Installer-UpgradeCodes.xml] collected REG-HKLM-Software-Classes-Installer-UpgradeCodes.xml in 0ms
2021-03-26T04:13:44.617Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Microsoft-DriverSigning.xml] collected REG-HKLM-Software-Microsoft-DriverSigning.xml in 0ms
2021-03-26T04:13:44.708Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-IE.xml] collected REG-HKLM-Software-IE.xml in 78ms
2021-03-26T04:13:44.711Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Microsoft-NetworkAccessProtection.xml] collected REG-HKLM-Software-Microsoft-NetworkAccessProtection.xml in 0ms
2021-03-26T04:13:44.714Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Microsoft-RPC.xml] collected REG-HKLM-Software-Microsoft-RPC.xml in 16ms
2021-03-26T04:13:44.717Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Microsoft-SecurityCenter.xml] collected REG-HKLM-Software-Microsoft-SecurityCenter.xml in 0ms
2021-03-26T04:13:44.721Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MS-WinNT-CVer-AeDebug.xml] collected REG-HKLM-Software-MS-WinNT-CVer-AeDebug.xml in 0ms
2021-03-26T04:13:44.724Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MS-WinNT-CVer-NetworkCards.xml] collected REG-HKLM-Software-MS-WinNT-CVer-NetworkCards.xml in 0ms
2021-03-26T04:13:44.734Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MS-WinNT-CVer-PerHwIdStorage.xml] collected REG-HKLM-Software-MS-WinNT-CVer-PerHwIdStorage.xml in 16ms
2021-03-26T04:13:44.738Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MS-WinNT-CVer-Svchost.xml] collected REG-HKLM-Software-MS-WinNT-CVer-Svchost.xml in 0ms
2021-03-26T04:13:44.741Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MS-WinNT-CVer-SystemRestore.xml] collected REG-HKLM-Software-MS-WinNT-CVer-SystemRestore.xml in 0ms
2021-03-26T04:13:44.744Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MS-WinNT-CVer-Windows.xml] collected REG-HKLM-Software-MS-WinNT-CVer-Windows.xml in 0ms
2021-03-26T04:13:44.754Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MS-WinNT-CVer.xml-Winlogon.xml] collected REG-HKLM-Software-MS-WinNT-CVer.xml-Winlogon.xml in 0ms
2021-03-26T04:13:44.758Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MS-Win-CVer-Auth.xml] collected REG-HKLM-Software-MS-Win-CVer-Auth.xml in 0ms
2021-03-26T04:13:44.866Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MSWin-CurrentVersion-Explorer.xml] collected REG-HKLM-Software-MSWin-CurrentVersion-Explorer.xml in 109ms
2021-03-26T04:13:44.967Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MSWin-CurrentVersion-GroupPolicy.xml] collected REG-HKLM-Software-MSWin-CurrentVersion-GroupPolicy.xml in 110ms
2021-03-26T04:13:45.011Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MSWin-CurrentVersion-InternetSettings.xml] collected REG-HKLM-Software-MSWin-CurrentVersion-InternetSettings.xml in 46ms
2021-03-26T04:13:45.019Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MSWin-CurrentVersion-Setup.xml] collected REG-HKLM-Software-MSWin-CurrentVersion-Setup.xml in 0ms
2021-03-26T04:13:45.075Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Uninstall.xml] collected REG-HKLM-Software-Uninstall.xml in 63ms
2021-03-26T04:13:45.079Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MSWin-CurrentVersion-WindowsUpdate.xml] collected REG-HKLM-Software-MSWin-CurrentVersion-WindowsUpdate.xml in 0ms
2021-03-26T04:13:45.082Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MSWin-CurrentVersion-Policies.xml] collected REG-HKLM-Software-MSWin-CurrentVersion-Policies.xml in 0ms
2021-03-26T04:13:45.086Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MSWin-CurrentVersion-DIFx.xml] collected REG-HKLM-Software-MSWin-CurrentVersion-DIFx.xml in 0ms
2021-03-26T04:13:45.089Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MSWin-CurrentVersion-DIFxApp.xml] collected REG-HKLM-Software-MSWin-CurrentVersion-DIFxApp.xml in 0ms
2021-03-26T04:13:45.135Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Policies.xml] collected REG-HKLM-Software-Policies.xml in 47ms
2021-03-26T04:13:45.152Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Sophos.xml] collected REG-HKLM-Software-Sophos.xml in 16ms
2021-03-26T04:13:45.155Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-System-Control-CrashControl.xml] collected REG-HKLM-System-Control-CrashControl.xml in 0ms
2021-03-26T04:13:45.157Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-System-Control-FileSystem.xml] collected REG-HKLM-System-Control-FileSystem.xml in 0ms
2021-03-26T04:13:45.161Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-System-Control-GroupOrderList.xml] collected REG-HKLM-System-Control-GroupOrderList.xml in 0ms
2021-03-26T04:13:45.165Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-System-Control-LSA.xml] collected REG-HKLM-System-Control-LSA.xml in 0ms
2021-03-26T04:13:45.177Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-System-Control-Network.xml] collected REG-HKLM-System-Control-Network.xml in 0ms
2021-03-26T04:13:45.180Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-System-Control-SecureBoot.xml] collected REG-HKLM-System-Control-SecureBoot.xml in 0ms
2021-03-26T04:13:45.265Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-System-Control-SessionManager.xml] collected REG-HKLM-System-Control-SessionManager.xml in 78ms
2021-03-26T04:13:45.269Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-System-Control-Windows.xml] collected REG-HKLM-System-Control-Windows.xml in 0ms
2021-03-26T04:13:45.592Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-System-Enum.xml] collected REG-HKLM-System-Enum.xml in 328ms
2021-03-26T04:13:46.055Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-System-Services.xml] collected REG-HKLM-System-Services.xml in 468ms
2021-03-26T04:13:46.497Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Logs\SophosUpdate.log] collecting C:\ProgramData\Sophos\AutoUpdate\Logs\SophosUpdate.log
2021-03-26T04:13:46.507Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Logs\SophosUpdate.log] collected C:\ProgramData\Sophos\AutoUpdate\Logs\SophosUpdate.log in 15ms
2021-03-26T04:13:46.512Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Logs\susvc.log] collecting C:\ProgramData\Sophos\AutoUpdate\Logs\susvc.log
2021-03-26T04:13:46.514Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Logs\susvc.log] collected C:\ProgramData\Sophos\AutoUpdate\Logs\susvc.log in 0ms
2021-03-26T04:13:46.520Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Clean\Logs\Clean.log] collecting C:\ProgramData\Sophos\Clean\Logs\Clean.log
2021-03-26T04:13:46.549Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Clean\Logs\Clean.log] collected C:\ProgramData\Sophos\Clean\Logs\Clean.log in 31ms
2021-03-26T04:13:46.557Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\CloudInstaller\Logs\SophosCloudInstaller_20210326_032426.log] collecting C:\ProgramData\Sophos\CloudInstaller\Logs\SophosCloudInstaller_20210326_032426.log
2021-03-26T04:13:48.050Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\CloudInstaller\Logs\SophosCloudInstaller_20210326_032426.log] collected C:\ProgramData\Sophos\CloudInstaller\Logs\SophosCloudInstaller_20210326_032426.log in 1482ms
2021-03-26T04:13:48.058Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\sam.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\sam.log
2021-03-26T04:13:48.060Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\sam.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\sam.log in 0ms
2021-03-26T04:13:48.064Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\sed.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\sed.log
2021-03-26T04:13:48.319Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\sed.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\sed.log in 265ms
2021-03-26T04:13:48.324Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\seds.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\seds.log
2021-03-26T04:13:48.349Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\seds.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\seds.log in 31ms
2021-03-26T04:13:48.355Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP.log
2021-03-26T04:13:48.366Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP.log in 16ms
2021-03-26T04:13:48.371Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_00.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_00.log
2021-03-26T04:13:48.373Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_00.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_00.log in 0ms
2021-03-26T04:13:48.378Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_01.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_01.log
2021-03-26T04:13:48.380Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_01.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_01.log in 15ms
2021-03-26T04:13:48.386Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Firewall\Logs\Endpoint Firewall.log] collecting C:\ProgramData\Sophos\Endpoint Firewall\Logs\Endpoint Firewall.log
2021-03-26T04:13:48.387Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Firewall\Logs\Endpoint Firewall.log] collected C:\ProgramData\Sophos\Endpoint Firewall\Logs\Endpoint Firewall.log in 0ms
2021-03-26T04:13:48.393Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Logs\Health.log] collecting C:\ProgramData\Sophos\Health\Logs\Health.log
2021-03-26T04:13:48.429Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Logs\Health.log] collected C:\ProgramData\Sophos\Health\Logs\Health.log in 47ms
2021-03-26T04:13:48.435Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Heartbeat\Logs\Heartbeat.log] collecting C:\ProgramData\Sophos\Heartbeat\Logs\Heartbeat.log
2021-03-26T04:13:48.437Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Heartbeat\Logs\Heartbeat.log] collected C:\ProgramData\Sophos\Heartbeat\Logs\Heartbeat.log in 0ms
2021-03-26T04:13:48.443Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Safestore\Logs\Safestore.log] collecting C:\ProgramData\Sophos\Safestore\Logs\Safestore.log
2021-03-26T04:13:48.475Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Safestore\Logs\Safestore.log] collected C:\ProgramData\Sophos\Safestore\Logs\Safestore.log in 31ms
2021-03-26T04:13:48.481Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos File Scanner\Logs\SophosFileScanner.log] collecting C:\ProgramData\Sophos\Sophos File Scanner\Logs\SophosFileScanner.log
2021-03-26T04:13:48.549Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos File Scanner\Logs\SophosFileScanner.log] collected C:\ProgramData\Sophos\Sophos File Scanner\Logs\SophosFileScanner.log in 62ms
2021-03-26T04:13:48.556Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos File Scanner\Logs\SophosFileScanner.log.lock] collecting C:\ProgramData\Sophos\Sophos File Scanner\Logs\SophosFileScanner.log.lock
2021-03-26T04:13:48.558Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos File Scanner\Logs\SophosFileScanner.log.lock] collected C:\ProgramData\Sophos\Sophos File Scanner\Logs\SophosFileScanner.log.lock in 0ms
2021-03-26T04:13:48.564Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos File Scanner\Logs\SophosFS.log] collecting C:\ProgramData\Sophos\Sophos File Scanner\Logs\SophosFS.log
2021-03-26T04:13:48.733Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos File Scanner\Logs\SophosFS.log] collected C:\ProgramData\Sophos\Sophos File Scanner\Logs\SophosFS.log in 171ms
2021-03-26T04:13:48.736Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\SntpService.log] collecting C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\SntpService.log
2021-03-26T04:13:48.775Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\SntpService.log] collected C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\SntpService.log in 47ms
2021-03-26T04:13:48.779Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos UI\Logs\SophosUI.Net.log] collecting C:\ProgramData\Sophos\Sophos UI\Logs\SophosUI.Net.log
2021-03-26T04:13:48.852Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos UI\Logs\SophosUI.Net.log] collected C:\ProgramData\Sophos\Sophos UI\Logs\SophosUI.Net.log in 78ms
2021-03-26T04:13:48.855Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\Perf\SedPerformance.csv] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\Perf\SedPerformance.csv
2021-03-26T04:13:48.857Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\Perf\SedPerformance.csv] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\Perf\SedPerformance.csv in 0ms
2021-03-26T04:13:48.860Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos UI\Logs\telemetry\SophosUITelemetryLog.sess1.20210326T03.json] collecting C:\ProgramData\Sophos\Sophos UI\Logs\telemetry\SophosUITelemetryLog.sess1.20210326T03.json
2021-03-26T04:13:48.861Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos UI\Logs\telemetry\SophosUITelemetryLog.sess1.20210326T03.json] collected C:\ProgramData\Sophos\Sophos UI\Logs\telemetry\SophosUITelemetryLog.sess1.20210326T03.json in 0ms
2021-03-26T04:13:48.865Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos UI\Logs\telemetry\SophosUITelemetryLog.sess1.20210326T04.json] collecting C:\ProgramData\Sophos\Sophos UI\Logs\telemetry\SophosUITelemetryLog.sess1.20210326T04.json
2021-03-26T04:13:48.865Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos UI\Logs\telemetry\SophosUITelemetryLog.sess1.20210326T04.json] collected C:\ProgramData\Sophos\Sophos UI\Logs\telemetry\SophosUITelemetryLog.sess1.20210326T04.json in 0ms
2021-03-26T04:13:48.870Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\AutoUpdate\integrity.dat] collecting C:\Program Files\Sophos\AutoUpdate\integrity.dat
2021-03-26T04:13:48.919Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\AutoUpdate\integrity.dat] collected C:\Program Files\Sophos\AutoUpdate\integrity.dat in 47ms
2021-03-26T04:13:48.922Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Clean\integrity.dat] collecting C:\Program Files\Sophos\Clean\integrity.dat
2021-03-26T04:13:48.990Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Clean\integrity.dat] collected C:\Program Files\Sophos\Clean\integrity.dat in 78ms
2021-03-26T04:13:48.993Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Defense\integrity.dat] collecting C:\Program Files\Sophos\Endpoint Defense\integrity.dat
2021-03-26T04:13:49.056Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Defense\integrity.dat] collected C:\Program Files\Sophos\Endpoint Defense\integrity.dat in 62ms
2021-03-26T04:13:49.059Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Firewall\integrity.dat] collecting C:\Program Files\Sophos\Endpoint Firewall\integrity.dat
2021-03-26T04:13:49.072Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Firewall\integrity.dat] collected C:\Program Files\Sophos\Endpoint Firewall\integrity.dat in 16ms
2021-03-26T04:13:49.075Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Self Help\integrity.dat] collecting C:\Program Files\Sophos\Endpoint Self Help\integrity.dat
2021-03-26T04:13:49.095Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Self Help\integrity.dat] collected C:\Program Files\Sophos\Endpoint Self Help\integrity.dat in 15ms
2021-03-26T04:13:49.098Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Health\integrity.dat] collecting C:\Program Files\Sophos\Health\integrity.dat
2021-03-26T04:13:49.118Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Health\integrity.dat] collected C:\Program Files\Sophos\Health\integrity.dat in 15ms
2021-03-26T04:13:49.121Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos Endpoint Agent\integrity.dat] collecting C:\Program Files\Sophos\Sophos Endpoint Agent\integrity.dat
2021-03-26T04:13:49.125Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos Endpoint Agent\integrity.dat] collected C:\Program Files\Sophos\Sophos Endpoint Agent\integrity.dat in 0ms
2021-03-26T04:13:49.128Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos File Scanner\integrity.dat] collecting C:\Program Files\Sophos\Sophos File Scanner\integrity.dat
2021-03-26T04:13:49.133Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos File Scanner\integrity.dat] collected C:\Program Files\Sophos\Sophos File Scanner\integrity.dat in 0ms
2021-03-26T04:13:49.136Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos ML Engine\integrity.dat] collecting C:\Program Files\Sophos\Sophos ML Engine\integrity.dat
2021-03-26T04:13:49.147Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos ML Engine\integrity.dat] collected C:\Program Files\Sophos\Sophos ML Engine\integrity.dat in 16ms
2021-03-26T04:13:49.150Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos Network Threat Protection\integrity.dat] collecting C:\Program Files\Sophos\Sophos Network Threat Protection\integrity.dat
2021-03-26T04:13:49.175Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos Network Threat Protection\integrity.dat] collected C:\Program Files\Sophos\Sophos Network Threat Protection\integrity.dat in 31ms
2021-03-26T04:13:49.178Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos Standalone Engine\integrity.dat] collecting C:\Program Files\Sophos\Sophos Standalone Engine\integrity.dat
2021-03-26T04:13:49.207Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos Standalone Engine\integrity.dat] collected C:\Program Files\Sophos\Sophos Standalone Engine\integrity.dat in 31ms
2021-03-26T04:13:49.210Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos UI\integrity.dat] collecting C:\Program Files\Sophos\Sophos UI\integrity.dat
2021-03-26T04:13:49.230Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos UI\integrity.dat] collected C:\Program Files\Sophos\Sophos UI\integrity.dat in 16ms
2021-03-26T04:13:49.233Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\AutoUpdate\integrity.dat] collecting C:\Program Files\Sophos\AutoUpdate\integrity.dat
2021-03-26T04:13:49.233Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\AutoUpdate\integrity.dat] collected C:\Program Files\Sophos\AutoUpdate\integrity.dat in 0ms
2021-03-26T04:13:49.236Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Clean\integrity.dat] collecting C:\Program Files\Sophos\Clean\integrity.dat
2021-03-26T04:13:49.236Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Clean\integrity.dat] collected C:\Program Files\Sophos\Clean\integrity.dat in 0ms
2021-03-26T04:13:49.239Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Defense\integrity.dat] collecting C:\Program Files\Sophos\Endpoint Defense\integrity.dat
2021-03-26T04:13:49.239Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Defense\integrity.dat] collected C:\Program Files\Sophos\Endpoint Defense\integrity.dat in 0ms
2021-03-26T04:13:49.242Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Firewall\integrity.dat] collecting C:\Program Files\Sophos\Endpoint Firewall\integrity.dat
2021-03-26T04:13:49.242Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Firewall\integrity.dat] collected C:\Program Files\Sophos\Endpoint Firewall\integrity.dat in 0ms
2021-03-26T04:13:49.245Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Self Help\integrity.dat] collecting C:\Program Files\Sophos\Endpoint Self Help\integrity.dat
2021-03-26T04:13:49.245Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Self Help\integrity.dat] collected C:\Program Files\Sophos\Endpoint Self Help\integrity.dat in 0ms
2021-03-26T04:13:49.248Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Health\integrity.dat] collecting C:\Program Files\Sophos\Health\integrity.dat
2021-03-26T04:13:49.248Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Health\integrity.dat] collected C:\Program Files\Sophos\Health\integrity.dat in 0ms
2021-03-26T04:13:49.250Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos Endpoint Agent\integrity.dat] collecting C:\Program Files\Sophos\Sophos Endpoint Agent\integrity.dat
2021-03-26T04:13:49.250Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos Endpoint Agent\integrity.dat] collected C:\Program Files\Sophos\Sophos Endpoint Agent\integrity.dat in 0ms
2021-03-26T04:13:49.253Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos File Scanner\integrity.dat] collecting C:\Program Files\Sophos\Sophos File Scanner\integrity.dat
2021-03-26T04:13:49.253Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos File Scanner\integrity.dat] collected C:\Program Files\Sophos\Sophos File Scanner\integrity.dat in 0ms
2021-03-26T04:13:49.256Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos ML Engine\integrity.dat] collecting C:\Program Files\Sophos\Sophos ML Engine\integrity.dat
2021-03-26T04:13:49.256Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos ML Engine\integrity.dat] collected C:\Program Files\Sophos\Sophos ML Engine\integrity.dat in 0ms
2021-03-26T04:13:49.258Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos Network Threat Protection\integrity.dat] collecting C:\Program Files\Sophos\Sophos Network Threat Protection\integrity.dat
2021-03-26T04:13:49.258Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos Network Threat Protection\integrity.dat] collected C:\Program Files\Sophos\Sophos Network Threat Protection\integrity.dat in 0ms
2021-03-26T04:13:49.261Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos Standalone Engine\integrity.dat] collecting C:\Program Files\Sophos\Sophos Standalone Engine\integrity.dat
2021-03-26T04:13:49.261Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos Standalone Engine\integrity.dat] collected C:\Program Files\Sophos\Sophos Standalone Engine\integrity.dat in 0ms
2021-03-26T04:13:49.264Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos UI\integrity.dat] collecting C:\Program Files\Sophos\Sophos UI\integrity.dat
2021-03-26T04:13:49.264Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Sophos UI\integrity.dat] collected C:\Program Files\Sophos\Sophos UI\integrity.dat in 0ms
2021-03-26T04:13:49.270Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Management Communications System\Endpoint\integrity.dat] collecting C:\Program Files\Sophos\Management Communications System\Endpoint\integrity.dat
2021-03-26T04:13:49.282Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Management Communications System\Endpoint\integrity.dat] collected C:\Program Files\Sophos\Management Communications System\Endpoint\integrity.dat in 0ms
2021-03-26T04:13:49.286Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\MsiSavSP*]: no files found
2021-03-26T04:13:49.287Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\AGENT.status] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\AGENT.status
2021-03-26T04:13:49.301Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\AGENT.status] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\AGENT.status in 16ms
2021-03-26T04:13:49.306Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\ALC.status] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\ALC.status
2021-03-26T04:13:49.325Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\ALC.status] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\ALC.status in 15ms
2021-03-26T04:13:49.329Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\APPSPROXY.status] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\APPSPROXY.status
2021-03-26T04:13:49.347Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\APPSPROXY.status] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\APPSPROXY.status in 31ms
2021-03-26T04:13:49.351Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC.status] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC.status
2021-03-26T04:13:49.352Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC.status] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC.status in 0ms
2021-03-26T04:13:49.356Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-0498ef586ef9ebe5f50ca59934b15902b7394d6f30e5956e381a7e0362c81542] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-0498ef586ef9ebe5f50ca59934b15902b7394d6f30e5956e381a7e0362c81542
2021-03-26T04:13:49.357Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-0498ef586ef9ebe5f50ca59934b15902b7394d6f30e5956e381a7e0362c81542] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-0498ef586ef9ebe5f50ca59934b15902b7394d6f30e5956e381a7e0362c81542 in 0ms
2021-03-26T04:13:49.362Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-28bd77fd89b4e9abe91699fdcd47450ab1b33777600e11c10ba755ee89b4d576] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-28bd77fd89b4e9abe91699fdcd47450ab1b33777600e11c10ba755ee89b4d576
2021-03-26T04:13:49.363Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-28bd77fd89b4e9abe91699fdcd47450ab1b33777600e11c10ba755ee89b4d576] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-28bd77fd89b4e9abe91699fdcd47450ab1b33777600e11c10ba755ee89b4d576 in 0ms
2021-03-26T04:13:49.369Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-290d4a964de956c2cd86b0fbb4f70f2681d31fedd8f601a32266ab9447c8f6bb] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-290d4a964de956c2cd86b0fbb4f70f2681d31fedd8f601a32266ab9447c8f6bb
2021-03-26T04:13:49.370Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-290d4a964de956c2cd86b0fbb4f70f2681d31fedd8f601a32266ab9447c8f6bb] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-290d4a964de956c2cd86b0fbb4f70f2681d31fedd8f601a32266ab9447c8f6bb in 0ms
2021-03-26T04:13:49.376Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-41aeba262f8647b5bef3ef89639cc4101824725d61ee0d4827c130838c689cb6] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-41aeba262f8647b5bef3ef89639cc4101824725d61ee0d4827c130838c689cb6
2021-03-26T04:13:49.377Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-41aeba262f8647b5bef3ef89639cc4101824725d61ee0d4827c130838c689cb6] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-41aeba262f8647b5bef3ef89639cc4101824725d61ee0d4827c130838c689cb6 in 0ms
2021-03-26T04:13:49.383Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-6e4d52d03353c231eb0f8506b412a9bce6d3f991fd26b132425e92ebe4221d31] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-6e4d52d03353c231eb0f8506b412a9bce6d3f991fd26b132425e92ebe4221d31
2021-03-26T04:13:49.384Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-6e4d52d03353c231eb0f8506b412a9bce6d3f991fd26b132425e92ebe4221d31] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-6e4d52d03353c231eb0f8506b412a9bce6d3f991fd26b132425e92ebe4221d31 in 0ms
2021-03-26T04:13:49.389Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-9cd21edcdd43e8c9c0e8b23fd2dfa3253081a4731c2c5db6643e42eac602798e] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-9cd21edcdd43e8c9c0e8b23fd2dfa3253081a4731c2c5db6643e42eac602798e
2021-03-26T04:13:49.390Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-9cd21edcdd43e8c9c0e8b23fd2dfa3253081a4731c2c5db6643e42eac602798e] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-9cd21edcdd43e8c9c0e8b23fd2dfa3253081a4731c2c5db6643e42eac602798e in 0ms
2021-03-26T04:13:49.396Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-a7e09e77fd6d9b04d4c18814ba6fccc44e6655c35e4ac2e7c1040a8d2428235d] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-a7e09e77fd6d9b04d4c18814ba6fccc44e6655c35e4ac2e7c1040a8d2428235d
2021-03-26T04:13:49.397Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-a7e09e77fd6d9b04d4c18814ba6fccc44e6655c35e4ac2e7c1040a8d2428235d] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-a7e09e77fd6d9b04d4c18814ba6fccc44e6655c35e4ac2e7c1040a8d2428235d in 0ms
2021-03-26T04:13:49.403Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-b4da4d518cd940d62efc1d59b875dac96af9e369c528eab3e360e0cc96defe4e] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-b4da4d518cd940d62efc1d59b875dac96af9e369c528eab3e360e0cc96defe4e
2021-03-26T04:13:49.404Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-b4da4d518cd940d62efc1d59b875dac96af9e369c528eab3e360e0cc96defe4e] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-b4da4d518cd940d62efc1d59b875dac96af9e369c528eab3e360e0cc96defe4e in 0ms
2021-03-26T04:13:49.410Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-c72954840924410d4a893b345d700d0b694c6f93eda53c46b4c4c0feaa38fa15] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-c72954840924410d4a893b345d700d0b694c6f93eda53c46b4c4c0feaa38fa15
2021-03-26T04:13:49.411Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-c72954840924410d4a893b345d700d0b694c6f93eda53c46b4c4c0feaa38fa15] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-c72954840924410d4a893b345d700d0b694c6f93eda53c46b4c4c0feaa38fa15 in 0ms
2021-03-26T04:13:49.416Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-d4788d879b7cacf51fa74b5af81f3e6e9f94b9e9654af035a78d0579ed0fce21] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-d4788d879b7cacf51fa74b5af81f3e6e9f94b9e9654af035a78d0579ed0fce21
2021-03-26T04:13:49.417Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-d4788d879b7cacf51fa74b5af81f3e6e9f94b9e9654af035a78d0579ed0fce21] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-d4788d879b7cacf51fa74b5af81f3e6e9f94b9e9654af035a78d0579ed0fce21 in 0ms
2021-03-26T04:13:49.422Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-de8e46b12e2e204c34206397fd7fc9cb343c1dca4f28a0185b6545b91f9c61b4] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-de8e46b12e2e204c34206397fd7fc9cb343c1dca4f28a0185b6545b91f9c61b4
2021-03-26T04:13:49.423Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-de8e46b12e2e204c34206397fd7fc9cb343c1dca4f28a0185b6545b91f9c61b4] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-de8e46b12e2e204c34206397fd7fc9cb343c1dca4f28a0185b6545b91f9c61b4 in 0ms
2021-03-26T04:13:49.429Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-e6a2823d73bd4126f7b35e3c5cc626ec3c3bf0d130824adb9a666b76606687da] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-e6a2823d73bd4126f7b35e3c5cc626ec3c3bf0d130824adb9a666b76606687da
2021-03-26T04:13:49.430Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-e6a2823d73bd4126f7b35e3c5cc626ec3c3bf0d130824adb9a666b76606687da] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37-e6a2823d73bd4126f7b35e3c5cc626ec3c3bf0d130824adb9a666b76606687da in 0ms
2021-03-26T04:13:49.436Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37.policy] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37.policy
2021-03-26T04:13:49.455Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37.policy] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORC37.policy in 16ms
2021-03-26T04:13:49.459Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORE.status] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORE.status
2021-03-26T04:13:49.471Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORE.status] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORE.status in 15ms
2021-03-26T04:13:49.475Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORE36.policy] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORE36.policy
2021-03-26T04:13:49.503Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORE36.policy] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\CORE36.policy in 31ms
2021-03-26T04:13:49.507Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\EFW.status] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\EFW.status
2021-03-26T04:13:49.508Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\EFW.status] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\EFW.status in 0ms
2021-03-26T04:13:49.512Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\EFW33.policy] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\EFW33.policy
2021-03-26T04:13:49.512Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\EFW33.policy] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\EFW33.policy in 0ms
2021-03-26T04:13:49.516Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT.status] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT.status
2021-03-26T04:13:49.517Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT.status] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT.status in 0ms
2021-03-26T04:13:49.521Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-18e4bc0fa3e7302a7952ee0ff7a1ba75fa93009e51db37c6d8896dd4904dfd90] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-18e4bc0fa3e7302a7952ee0ff7a1ba75fa93009e51db37c6d8896dd4904dfd90
2021-03-26T04:13:49.522Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-18e4bc0fa3e7302a7952ee0ff7a1ba75fa93009e51db37c6d8896dd4904dfd90] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-18e4bc0fa3e7302a7952ee0ff7a1ba75fa93009e51db37c6d8896dd4904dfd90 in 0ms
2021-03-26T04:13:49.528Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-265ea0a024ca9a24680873269033cc167347b874a1e756fec2df57265def064e] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-265ea0a024ca9a24680873269033cc167347b874a1e756fec2df57265def064e
2021-03-26T04:13:49.529Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-265ea0a024ca9a24680873269033cc167347b874a1e756fec2df57265def064e] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-265ea0a024ca9a24680873269033cc167347b874a1e756fec2df57265def064e in 0ms
2021-03-26T04:13:49.534Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-3bfc83db177ea67dc617c7abd0cebd16fcb4d29ede4f4a8996304239fae2c55c] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-3bfc83db177ea67dc617c7abd0cebd16fcb4d29ede4f4a8996304239fae2c55c
2021-03-26T04:13:49.536Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-3bfc83db177ea67dc617c7abd0cebd16fcb4d29ede4f4a8996304239fae2c55c] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-3bfc83db177ea67dc617c7abd0cebd16fcb4d29ede4f4a8996304239fae2c55c in 0ms
2021-03-26T04:13:49.542Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-42ae2e96e057620f319cc567581c1866382cf16f1435b315581bcfaa2102718c] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-42ae2e96e057620f319cc567581c1866382cf16f1435b315581bcfaa2102718c
2021-03-26T04:13:49.543Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-42ae2e96e057620f319cc567581c1866382cf16f1435b315581bcfaa2102718c] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-42ae2e96e057620f319cc567581c1866382cf16f1435b315581bcfaa2102718c in 0ms
2021-03-26T04:13:49.548Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-efa482027ac23a65de130f834799a7c4cf3a05b126d09ebfdf82cb205a8df9c8] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-efa482027ac23a65de130f834799a7c4cf3a05b126d09ebfdf82cb205a8df9c8
2021-03-26T04:13:49.549Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-efa482027ac23a65de130f834799a7c4cf3a05b126d09ebfdf82cb205a8df9c8] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27-efa482027ac23a65de130f834799a7c4cf3a05b126d09ebfdf82cb205a8df9c8 in 15ms
2021-03-26T04:13:49.554Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27.policy] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27.policy
2021-03-26T04:13:49.555Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27.policy] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HBT27.policy in 0ms
2021-03-26T04:13:49.559Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HMPA.status] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HMPA.status
2021-03-26T04:13:49.565Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HMPA.status] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HMPA.status in 16ms
2021-03-26T04:13:49.569Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HMPA30.policy] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HMPA30.policy
2021-03-26T04:13:49.626Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HMPA30.policy] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\HMPA30.policy in 47ms
2021-03-26T04:13:49.630Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\MCS.status] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\MCS.status
2021-03-26T04:13:49.647Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\MCS.status] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\MCS.status in 16ms
2021-03-26T04:13:49.651Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\MCS25.policy] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\MCS25.policy
2021-03-26T04:13:49.669Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\MCS25.policy] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\MCS25.policy in 15ms
2021-03-26T04:13:49.674Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\NTP.status] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\NTP.status
2021-03-26T04:13:49.684Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\NTP.status] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\NTP.status in 0ms
2021-03-26T04:13:49.687Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\NTP24.policy] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\NTP24.policy
2021-03-26T04:13:49.699Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\NTP24.policy] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\NTP24.policy in 16ms
2021-03-26T04:13:49.703Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\SDU.status] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\SDU.status
2021-03-26T04:13:49.705Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\SDU.status] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\SDU.status in 15ms
2021-03-26T04:13:49.709Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\SHS.status] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\SHS.status
2021-03-26T04:13:49.709Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\SHS.status] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\SHS.status in 0ms
2021-03-26T04:13:49.713Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\UI.status] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\UI.status
2021-03-26T04:13:49.729Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\UI.status] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Cache\UI.status in 16ms
2021-03-26T04:13:49.733Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml
2021-03-26T04:13:49.752Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml in 31ms
2021-03-26T04:13:49.756Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\MessageRelayConfig.xml] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\MessageRelayConfig.xml
2021-03-26T04:13:49.756Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\MessageRelayConfig.xml] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\MessageRelayConfig.xml in 0ms
2021-03-26T04:13:49.760Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\Adapters] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\Adapters
2021-03-26T04:13:49.761Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\Adapters] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\Adapters in 0ms
2021-03-26T04:13:49.765Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\centralFlags.json] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\centralFlags.json
2021-03-26T04:13:49.765Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\centralFlags.json] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\centralFlags.json in 0ms
2021-03-26T04:13:49.770Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\CommandIds] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\CommandIds
2021-03-26T04:13:49.771Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\CommandIds] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\CommandIds in 0ms
2021-03-26T04:13:49.775Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\Credentials] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\Credentials
2021-03-26T04:13:49.776Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\Credentials] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\Credentials in 0ms
2021-03-26T04:13:49.779Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\CustomerIdentifier.txt] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\CustomerIdentifier.txt
2021-03-26T04:13:49.780Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\CustomerIdentifier.txt] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\CustomerIdentifier.txt in 0ms
2021-03-26T04:13:49.784Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\EndpointIdentity.txt] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\EndpointIdentity.txt
2021-03-26T04:13:49.785Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\EndpointIdentity.txt] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\EndpointIdentity.txt in 0ms
2021-03-26T04:13:49.789Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\mcsAgentData.xml] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\mcsAgentData.xml
2021-03-26T04:13:49.790Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\mcsAgentData.xml] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\mcsAgentData.xml in 0ms
2021-03-26T04:13:49.794Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\mcsAgentTelemetry.json] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\mcsAgentTelemetry.json
2021-03-26T04:13:49.795Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\mcsAgentTelemetry.json] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\mcsAgentTelemetry.json in 0ms
2021-03-26T04:13:49.798Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\ObjectNames] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\ObjectNames
2021-03-26T04:13:49.799Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\ObjectNames] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\ObjectNames in 16ms
2021-03-26T04:13:49.804Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\PolicyFragments] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\PolicyFragments
2021-03-26T04:13:49.805Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\PolicyFragments] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\PolicyFragments in 0ms
2021-03-26T04:13:49.809Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\PreferredServer] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\PreferredServer
2021-03-26T04:13:49.810Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\PreferredServer] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\PreferredServer in 0ms
2021-03-26T04:13:49.813Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\Suspended] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\Suspended
2021-03-26T04:13:49.814Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\Suspended] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\Suspended in 0ms
2021-03-26T04:13:49.817Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Management Communications System\Endpoint\Trail\*]: no files found
2021-03-26T04:13:49.818Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\McsAgent.log] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\McsAgent.log
2021-03-26T04:13:49.962Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\McsAgent.log] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\McsAgent.log in 141ms
2021-03-26T04:13:49.966Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\McsClient.log] collecting C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\McsClient.log
2021-03-26T04:13:49.968Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\McsClient.log] collected C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\McsClient.log in 0ms
2021-03-26T04:13:49.985Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crl] collecting C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crl
2021-03-26T04:13:49.986Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crl] collected C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crl in 16ms
2021-03-26T04:13:49.989Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crt] collecting C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crt
2021-03-26T04:13:50.007Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crt] collected C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crt in 16ms
2021-03-26T04:13:50.010Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crl] collecting C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crl
2021-03-26T04:13:50.011Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crl] collected C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crl in 0ms
2021-03-26T04:13:50.014Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crt] collecting C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crt
2021-03-26T04:13:50.015Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crt] collected C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crt in 0ms
2021-03-26T04:13:50.019Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca3.crl] collecting C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca3.crl
2021-03-26T04:13:50.030Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca3.crl] collected C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca3.crl in 0ms
2021-03-26T04:13:50.034Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca3.crt] collecting C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca3.crt
2021-03-26T04:13:50.035Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca3.crt] collected C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca3.crt in 0ms
2021-03-26T04:13:50.040Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca4.crl] collecting C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca4.crl
2021-03-26T04:13:50.057Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca4.crl] collected C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca4.crl in 15ms
2021-03-26T04:13:50.060Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca4.crt] collecting C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca4.crt
2021-03-26T04:13:50.065Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca4.crt] collected C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca4.crt in 16ms
2021-03-26T04:13:50.068Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Sophos Mobile Control\INSTALLATION\licence.sql]: no files found
2021-03-26T04:13:50.068Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Sophos Mobile Control\jboss\server\mdm\deploy\*.xml]: no files found
2021-03-26T04:13:50.068Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Sophos Mobile Control\jboss\server\mdm\deploy\jbossweb-tomcat55.sar\*.xml]: no files found
2021-03-26T04:13:50.068Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Sophos Mobile Control\jboss\server\mdm\log\*.log]: no files found
2021-03-26T04:13:50.068Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Sophos Mobile Control\jboss\server\mdm\log\server.log\*.log]: no files found
2021-03-26T04:13:50.068Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\SMCSVC_install.log]: no files found
2021-03-26T04:13:50.069Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[C:\smc_203_spc\*.log]: no files found
2021-03-26T04:13:50.069Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\sar*.log]: no files found
2021-03-26T04:13:50.069Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\Source of Infection*]: no files found
2021-03-26T04:13:50.069Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Sophos Anti-Virus\Config\*.xml]: no files found
2021-03-26T04:13:50.069Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\SAV for NetApp\*.txt]: no files found
2021-03-26T04:13:50.069Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SYSTEMDRIVE%\Documents and Settings\LocalService\Local Settings\Temp\Sophos*.txt]: no files found
2021-03-26T04:13:50.070Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Temp\sophos*.txt]: no files found
2021-03-26T04:13:50.070Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%USERPROFILE%\Local Settings\Application Data\Sophos\Sophos Anti-Virus\*]: no files found
2021-03-26T04:13:50.070Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%USERPROFILE%\local settings\application data\Sophos\Sophos Anti-Virus\Config\user.xml]: no files found
2021-03-26T04:13:50.070Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\SophosOfficeAV_pid_*_Log.txt]: no files found
2021-03-26T04:13:50.070Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\SAVService\Application\Path]\*.upd]: no files found
2021-03-26T04:13:50.070Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\SAVService\Application\Path]\scf.dat]: no files found
2021-03-26T04:13:50.070Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\SAVService\Application\Path]\vvf.xml]: no files found
2021-03-26T04:13:50.070Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\SBE\Management tools\CIDShare]\ESNT\svf.xml]: no files found
2021-03-26T04:13:50.070Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\SBE\Management tools\CIDShare]\SAVSCFXP\svf.xml]: no files found
2021-03-26T04:13:50.071Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\WebScanningTrace*.log]: no files found
2021-03-26T04:13:50.072Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKEY_CLASSES_ROOT-AppID-SophosBHO.DLL.xml] collected REG-HKEY_CLASSES_ROOT-AppID-SophosBHO.DLL.xml in 0ms
2021-03-26T04:13:50.074Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKEY_CLASSES_ROOT-AppID-{061CC07B-BA7A-44D1-81FA-D36BE1CE55D9}.xml] collected REG-HKEY_CLASSES_ROOT-AppID-{061CC07B-BA7A-44D1-81FA-D36BE1CE55D9}.xml in 0ms
2021-03-26T04:13:50.078Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKEY_CLASSES_ROOT-CLSID-{39EA7695-B3F2-4C44-A4BC-297ADA8FD235}.xml] collected REG-HKEY_CLASSES_ROOT-CLSID-{39EA7695-B3F2-4C44-A4BC-297ADA8FD235}.xml in 0ms
2021-03-26T04:13:50.082Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKEY_CLASSES_ROOT-SophosBHO.BrowserObject.xml] collected REG-HKEY_CLASSES_ROOT-SophosBHO.BrowserObject.xml in 0ms
2021-03-26T04:13:50.086Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKEY_CLASSES_ROOT-SophosBHO.BrowserObject.1.xml] collected REG-HKEY_CLASSES_ROOT-SophosBHO.BrowserObject.1.xml in 0ms
2021-03-26T04:13:50.090Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-SOFTWARE-Classes-AppID-SophosBHO.DLL.xml] collected REG-HKLM-SOFTWARE-Classes-AppID-SophosBHO.DLL.xml in 0ms
2021-03-26T04:13:50.093Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-SOFTWARE-Classes-AppID-{061CC07B-BA7A-44D1-81FA-D36BE1CE55D9}.xml] collected REG-HKLM-SOFTWARE-Classes-AppID-{061CC07B-BA7A-44D1-81FA-D36BE1CE55D9}.xml in 0ms
2021-03-26T04:13:50.096Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-SOFTWARE-Classes-CLSID-{39EA7695-B3F2-4C44-A4BC-297ADA8FD235}.xml] collected REG-HKLM-SOFTWARE-Classes-CLSID-{39EA7695-B3F2-4C44-A4BC-297ADA8FD235}.xml in 0ms
2021-03-26T04:13:50.099Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-SOFTWARE-Classes-SophosBHO.BrowserObject.xml] collected REG-HKLM-SOFTWARE-Classes-SophosBHO.BrowserObject.xml in 0ms
2021-03-26T04:13:50.102Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-SOFTWARE-Classes-SophosBHO.BrowserObject.1.xml] collected REG-HKLM-SOFTWARE-Classes-SophosBHO.BrowserObject.1.xml in 0ms
2021-03-26T04:13:50.105Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-IE-BHO.xml] collected REG-IE-BHO.xml in 0ms
2021-03-26T04:13:50.107Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SystemDrive%\Documents and Settings\LocalService\Local Settings\Temp\swisdiag.log]: no files found
2021-03-26T04:13:50.107Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\swi*.log]: no files found
2021-03-26T04:13:50.107Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\webintelligence.log]: no files found
2021-03-26T04:13:50.107Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\ServiceProfiles\LocalService\AppData\Local\Temp\swisdiag.log]: no files found
2021-03-26T04:13:50.107Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\Temp\swi*.log]: no files found
2021-03-26T04:13:50.107Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\Temp\webintelligence.log]: no files found
2021-03-26T04:13:50.108Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\SAVService\Application\Path]\Web Intelligence\scf.dat]: no files found
2021-03-26T04:13:50.108Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Common Files\Sophos\Web Control\*]: no files found
2021-03-26T04:13:50.108Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Web Control\*]: no files found
2021-03-26T04:13:50.108Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\swc_*.log]: no files found
2021-03-26T04:13:50.108Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\Temp\swc_*.log]: no files found
2021-03-26T04:13:50.109Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Policy.xml] collecting C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Policy.xml
2021-03-26T04:13:50.110Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Policy.xml] collected C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Policy.xml in 0ms
2021-03-26T04:13:50.113Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\2021032301.ips] collecting C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\2021032301.ips
2021-03-26T04:13:50.136Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\2021032301.ips] collected C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\2021032301.ips in 15ms
2021-03-26T04:13:50.139Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\extras.rules] collecting C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\extras.rules
2021-03-26T04:13:50.140Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\extras.rules] collected C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\extras.rules in 0ms
2021-03-26T04:13:50.143Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\system.rules] collecting C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\system.rules
2021-03-26T04:13:50.187Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\system.rules] collected C:\ProgramData\Sophos\Sophos Network Threat Protection\IPS\system.rules in 31ms
2021-03-26T04:13:50.191Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\SntpService.log] collecting C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\SntpService.log
2021-03-26T04:13:50.191Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\SntpService.log] collected C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\SntpService.log in 0ms
2021-03-26T04:13:50.194Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\status.xml] collecting C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\status.xml
2021-03-26T04:13:50.195Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\status.xml] collected C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\status.xml in 0ms
2021-03-26T04:13:50.197Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Sophos System Protection\Config\*]: no files found
2021-03-26T04:13:50.197Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Sophos System Protection\Data\feedback.dmp]: no files found
2021-03-26T04:13:50.198Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\BPALOGGING\File]\*.log]: no files found
2021-03-26T04:13:50.198Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\sam.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\sam.log
2021-03-26T04:13:50.198Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\sam.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\sam.log in 0ms
2021-03-26T04:13:50.200Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\sed.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\sed.log
2021-03-26T04:13:50.200Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\sed.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\sed.log in 0ms
2021-03-26T04:13:50.203Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\seds.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\seds.log
2021-03-26T04:13:50.203Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\seds.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\seds.log in 0ms
2021-03-26T04:13:50.205Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP.log
2021-03-26T04:13:50.205Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP.log in 0ms
2021-03-26T04:13:50.207Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_00.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_00.log
2021-03-26T04:13:50.207Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_00.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_00.log in 0ms
2021-03-26T04:13:50.209Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_01.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_01.log
2021-03-26T04:13:50.209Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_01.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_01.log in 0ms
2021-03-26T04:13:50.211Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\sam.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\sam.log
2021-03-26T04:13:50.211Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\sam.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\sam.log in 0ms
2021-03-26T04:13:50.214Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\sed.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\sed.log
2021-03-26T04:13:50.214Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\sed.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\sed.log in 0ms
2021-03-26T04:13:50.216Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\seds.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\seds.log
2021-03-26T04:13:50.216Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\seds.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\seds.log in 0ms
2021-03-26T04:13:50.218Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP.log
2021-03-26T04:13:50.218Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP.log in 0ms
2021-03-26T04:13:50.221Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_00.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_00.log
2021-03-26T04:13:50.221Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_00.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_00.log in 0ms
2021-03-26T04:13:50.224Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_01.log] collecting C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_01.log
2021-03-26T04:13:50.224Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_01.log] collected C:\ProgramData\Sophos\Endpoint Defense\Logs\SSP_01.log in 0ms
2021-03-26T04:13:50.227Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\056c1eee9e9c3aff963499aa0a43f850a372b5e9.crt] collecting C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\056c1eee9e9c3aff963499aa0a43f850a372b5e9.crt
2021-03-26T04:13:50.228Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\056c1eee9e9c3aff963499aa0a43f850a372b5e9.crt] collected C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\056c1eee9e9c3aff963499aa0a43f850a372b5e9.crt in 0ms
2021-03-26T04:13:50.232Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\27343835cecf0c17aeff4a0235862a69ecbc15e5.crt] collecting C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\27343835cecf0c17aeff4a0235862a69ecbc15e5.crt
2021-03-26T04:13:50.233Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\27343835cecf0c17aeff4a0235862a69ecbc15e5.crt] collected C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\27343835cecf0c17aeff4a0235862a69ecbc15e5.crt in 0ms
2021-03-26T04:13:50.237Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\7b51d3b18ebebe6ee083085f080c5f6a80803a6f.crt] collecting C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\7b51d3b18ebebe6ee083085f080c5f6a80803a6f.crt
2021-03-26T04:13:50.238Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\7b51d3b18ebebe6ee083085f080c5f6a80803a6f.crt] collected C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\7b51d3b18ebebe6ee083085f080c5f6a80803a6f.crt in 0ms
2021-03-26T04:13:50.242Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crl] collecting C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crl
2021-03-26T04:13:50.243Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crl] collected C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crl in 0ms
2021-03-26T04:13:50.245Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crt] collecting C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crt
2021-03-26T04:13:50.246Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crt] collected C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crt in 0ms
2021-03-26T04:13:50.248Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca384.crl] collecting C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca384.crl
2021-03-26T04:13:50.249Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca384.crl] collected C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca384.crl in 0ms
2021-03-26T04:13:50.252Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca384.crt] collecting C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca384.crt
2021-03-26T04:13:50.253Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca384.crt] collected C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca384.crt in 0ms
2021-03-26T04:13:50.256Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\AutoUpdate\Data Path]\Cache\*.map]: no files found
2021-03-26T04:13:50.257Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\AutoUpdate\Data Path]\Cache\escdp.dat]: no files found
2021-03-26T04:13:50.257Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\AutoUpdate\Data Path]\Cache\savxp\*.bat]: no files found
2021-03-26T04:13:50.257Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\AutoUpdate\Data Path]\Cache\savxp\*.vbs]: no files found
2021-03-26T04:13:50.257Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\AutoUpdate\Data Path]\Cache\savxp\sav.cfg]: no files found
2021-03-26T04:13:50.258Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Logs\SophosUpdate.log] collecting C:\ProgramData\Sophos\AutoUpdate\Logs\SophosUpdate.log
2021-03-26T04:13:50.258Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Logs\SophosUpdate.log] collected C:\ProgramData\Sophos\AutoUpdate\Logs\SophosUpdate.log in 0ms
2021-03-26T04:13:50.260Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Logs\susvc.log] collecting C:\ProgramData\Sophos\AutoUpdate\Logs\susvc.log
2021-03-26T04:13:50.260Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Logs\susvc.log] collected C:\ProgramData\Sophos\AutoUpdate\Logs\susvc.log in 0ms
2021-03-26T04:13:50.262Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Logs\SophosUpdate.log] collecting C:\ProgramData\Sophos\AutoUpdate\Logs\SophosUpdate.log
2021-03-26T04:13:50.262Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Logs\SophosUpdate.log] collected C:\ProgramData\Sophos\AutoUpdate\Logs\SophosUpdate.log in 0ms
2021-03-26T04:13:50.264Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Logs\susvc.log] collecting C:\ProgramData\Sophos\AutoUpdate\Logs\susvc.log
2021-03-26T04:13:50.264Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Logs\susvc.log] collected C:\ProgramData\Sophos\AutoUpdate\Logs\susvc.log in 0ms
2021-03-26T04:13:50.267Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\iconn.cfg] collecting C:\ProgramData\Sophos\AutoUpdate\Config\iconn.cfg
2021-03-26T04:13:50.267Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\iconn.cfg] collected C:\ProgramData\Sophos\AutoUpdate\Config\iconn.cfg in 0ms
2021-03-26T04:13:50.269Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\ilog.cfg] collecting C:\ProgramData\Sophos\AutoUpdate\Config\ilog.cfg
2021-03-26T04:13:50.270Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\ilog.cfg] collected C:\ProgramData\Sophos\AutoUpdate\Config\ilog.cfg in 0ms
2021-03-26T04:13:50.272Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\isched.cfg] collecting C:\ProgramData\Sophos\AutoUpdate\Config\isched.cfg
2021-03-26T04:13:50.273Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\isched.cfg] collected C:\ProgramData\Sophos\AutoUpdate\Config\isched.cfg in 0ms
2021-03-26T04:13:50.275Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\iupd.cfg] collecting C:\ProgramData\Sophos\AutoUpdate\Config\iupd.cfg
2021-03-26T04:13:50.289Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\iupd.cfg] collected C:\ProgramData\Sophos\AutoUpdate\Config\iupd.cfg in 15ms
2021-03-26T04:13:50.292Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\TelemetryConfig.json] collecting C:\ProgramData\Sophos\AutoUpdate\Config\TelemetryConfig.json
2021-03-26T04:13:50.292Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\TelemetryConfig.json] collected C:\ProgramData\Sophos\AutoUpdate\Config\TelemetryConfig.json in 0ms
2021-03-26T04:13:50.295Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\iconn.cfg] collecting C:\ProgramData\Sophos\AutoUpdate\Config\iconn.cfg
2021-03-26T04:13:50.295Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\iconn.cfg] collected C:\ProgramData\Sophos\AutoUpdate\Config\iconn.cfg in 0ms
2021-03-26T04:13:50.297Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\ilog.cfg] collecting C:\ProgramData\Sophos\AutoUpdate\Config\ilog.cfg
2021-03-26T04:13:50.297Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\ilog.cfg] collected C:\ProgramData\Sophos\AutoUpdate\Config\ilog.cfg in 0ms
2021-03-26T04:13:50.299Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\isched.cfg] collecting C:\ProgramData\Sophos\AutoUpdate\Config\isched.cfg
2021-03-26T04:13:50.299Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\isched.cfg] collected C:\ProgramData\Sophos\AutoUpdate\Config\isched.cfg in 0ms
2021-03-26T04:13:50.301Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\iupd.cfg] collecting C:\ProgramData\Sophos\AutoUpdate\Config\iupd.cfg
2021-03-26T04:13:50.301Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\iupd.cfg] collected C:\ProgramData\Sophos\AutoUpdate\Config\iupd.cfg in 0ms
2021-03-26T04:13:50.303Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\TelemetryConfig.json] collecting C:\ProgramData\Sophos\AutoUpdate\Config\TelemetryConfig.json
2021-03-26T04:13:50.303Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\Config\TelemetryConfig.json] collected C:\ProgramData\Sophos\AutoUpdate\Config\TelemetryConfig.json in 0ms
2021-03-26T04:13:50.305Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\AutoUpdate\Data Path]\DefaultConfig\*]: no files found
2021-03-26T04:13:50.306Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\machine_ID.txt] collecting C:\ProgramData\Sophos\AutoUpdate\data\machine_ID.txt
2021-03-26T04:13:50.306Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\machine_ID.txt] collected C:\ProgramData\Sophos\AutoUpdate\data\machine_ID.txt in 0ms
2021-03-26T04:13:50.309Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\machine_ID.txt] collecting C:\ProgramData\Sophos\AutoUpdate\data\machine_ID.txt
2021-03-26T04:13:50.309Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\machine_ID.txt] collected C:\ProgramData\Sophos\AutoUpdate\data\machine_ID.txt in 0ms
2021-03-26T04:13:50.314Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.dist.txt] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.dist.txt
2021-03-26T04:13:50.330Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.dist.txt] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.dist.txt in 15ms
2021-03-26T04:13:50.334Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\purge.txt] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\purge.txt
2021-03-26T04:13:50.335Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\purge.txt] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\purge.txt in 0ms
2021-03-26T04:13:50.337Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.local.xml.file.txt] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.local.xml.file.txt
2021-03-26T04:13:50.346Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.local.xml.file.txt] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.local.xml.file.txt in 16ms
2021-03-26T04:13:50.350Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.dist.txt] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.dist.txt
2021-03-26T04:13:50.350Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.dist.txt] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.dist.txt in 0ms
2021-03-26T04:13:50.354Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\purge.txt] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\purge.txt
2021-03-26T04:13:50.354Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\purge.txt] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\purge.txt in 0ms
2021-03-26T04:13:50.357Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.local.xml.file.txt] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.local.xml.file.txt
2021-03-26T04:13:50.357Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.local.xml.file.txt] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.local.xml.file.txt in 0ms
2021-03-26T04:13:50.361Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\cf.sdds.local.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\cf.sdds.local.xml
2021-03-26T04:13:50.362Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\cf.sdds.local.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\cf.sdds.local.xml in 0ms
2021-03-26T04:13:50.365Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.diststate.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.diststate.xml
2021-03-26T04:13:50.366Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.diststate.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.diststate.xml in 0ms
2021-03-26T04:13:50.370Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.APPFEED_d1.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.APPFEED_d1.xml
2021-03-26T04:13:50.371Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.APPFEED_d1.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.APPFEED_d1.xml in 0ms
2021-03-26T04:13:50.374Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.behave.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.behave.xml
2021-03-26T04:13:50.374Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.behave.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.behave.xml in 0ms
2021-03-26T04:13:50.377Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CEPNG_2-15-4_10-8-10-3.1.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CEPNG_2-15-4_10-8-10-3.1.xml
2021-03-26T04:13:50.378Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CEPNG_2-15-4_10-8-10-3.1.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CEPNG_2-15-4_10-8-10-3.1.xml in 0ms
2021-03-26T04:13:50.382Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cepng_flags.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cepng_flags.xml
2021-03-26T04:13:50.383Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cepng_flags.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cepng_flags.xml in 0ms
2021-03-26T04:13:50.386Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CIX_2-0-20.7.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CIX_2-0-20.7.xml
2021-03-26T04:13:50.387Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CIX_2-0-20.7.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CIX_2-0-20.7.xml in 0ms
2021-03-26T04:13:50.390Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cix_flags.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cix_flags.xml
2021-03-26T04:13:50.391Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cix_flags.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cix_flags.xml in 0ms
2021-03-26T04:13:50.394Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CRTSUPP.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CRTSUPP.xml
2021-03-26T04:13:50.395Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CRTSUPP.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CRTSUPP.xml in 0ms
2021-03-26T04:13:50.397Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.data0910.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.data0910.xml
2021-03-26T04:13:50.398Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.data0910.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.data0910.xml in 0ms
2021-03-26T04:13:50.401Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.epips_data.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.epips_data.xml
2021-03-26T04:13:50.402Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.epips_data.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.epips_data.xml in 0ms
2021-03-26T04:13:50.405Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ESHSUPP.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ESHSUPP.xml
2021-03-26T04:13:50.406Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ESHSUPP.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ESHSUPP.xml in 0ms
2021-03-26T04:13:50.408Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.esh_rules.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.esh_rules.xml
2021-03-26T04:13:50.409Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.esh_rules.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.esh_rules.xml in 0ms
2021-03-26T04:13:50.412Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hips.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hips.xml
2021-03-26T04:13:50.413Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hips.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hips.xml in 0ms
2021-03-26T04:13:50.416Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hmpa_data.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hmpa_data.xml
2021-03-26T04:13:50.416Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hmpa_data.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hmpa_data.xml in 0ms
2021-03-26T04:13:50.420Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata.xml
2021-03-26T04:13:50.421Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata.xml in 0ms
2021-03-26T04:13:50.424Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata_slow.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata_slow.xml
2021-03-26T04:13:50.424Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata_slow.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata_slow.xml in 0ms
2021-03-26T04:13:50.428Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ml_models.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ml_models.xml
2021-03-26T04:13:50.429Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ml_models.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ml_models.xml in 0ms
2021-03-26T04:13:50.431Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.repairkit_supp.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.repairkit_supp.xml
2021-03-26T04:13:50.432Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.repairkit_supp.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.repairkit_supp.xml in 0ms
2021-03-26T04:13:50.435Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.SAVCNTRL.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.SAVCNTRL.xml
2021-03-26T04:13:50.436Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.SAVCNTRL.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.SAVCNTRL.xml in 0ms
2021-03-26T04:13:50.439Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.scheduled_qp.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.scheduled_qp.xml
2021-03-26T04:13:50.440Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.scheduled_qp.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.scheduled_qp.xml in 0ms
2021-03-26T04:13:50.443Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.sxl_supp.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.sxl_supp.xml
2021-03-26T04:13:50.444Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.sxl_supp.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.sxl_supp.xml in 0ms
2021-03-26T04:13:50.447Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.TELEMSUPP.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.TELEMSUPP.xml
2021-03-26T04:13:50.448Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.TELEMSUPP.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.TELEMSUPP.xml in 0ms
2021-03-26T04:13:50.452Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.VDB_supp.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.VDB_supp.xml
2021-03-26T04:13:50.453Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.VDB_supp.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.VDB_supp.xml in 0ms
2021-03-26T04:13:50.456Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sulstate.sdds.local.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sulstate.sdds.local.xml
2021-03-26T04:13:50.457Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sulstate.sdds.local.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sulstate.sdds.local.xml in 0ms
2021-03-26T04:13:50.461Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\cf.sdds.local.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\cf.sdds.local.xml
2021-03-26T04:13:50.461Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\cf.sdds.local.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\cf.sdds.local.xml in 0ms
2021-03-26T04:13:50.464Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.diststate.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.diststate.xml
2021-03-26T04:13:50.464Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.diststate.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\da34d62626cffd3a585258bb8dc89c90.diststate.xml in 0ms
2021-03-26T04:13:50.468Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.APPFEED_d1.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.APPFEED_d1.xml
2021-03-26T04:13:50.469Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.APPFEED_d1.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.APPFEED_d1.xml in 0ms
2021-03-26T04:13:50.472Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.behave.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.behave.xml
2021-03-26T04:13:50.472Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.behave.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.behave.xml in 0ms
2021-03-26T04:13:50.475Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CEPNG_2-15-4_10-8-10-3.1.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CEPNG_2-15-4_10-8-10-3.1.xml
2021-03-26T04:13:50.475Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CEPNG_2-15-4_10-8-10-3.1.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CEPNG_2-15-4_10-8-10-3.1.xml in 0ms
2021-03-26T04:13:50.478Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cepng_flags.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cepng_flags.xml
2021-03-26T04:13:50.478Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cepng_flags.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cepng_flags.xml in 0ms
2021-03-26T04:13:50.482Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CIX_2-0-20.7.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CIX_2-0-20.7.xml
2021-03-26T04:13:50.482Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CIX_2-0-20.7.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CIX_2-0-20.7.xml in 0ms
2021-03-26T04:13:50.485Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cix_flags.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cix_flags.xml
2021-03-26T04:13:50.485Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cix_flags.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.cix_flags.xml in 0ms
2021-03-26T04:13:50.488Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CRTSUPP.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CRTSUPP.xml
2021-03-26T04:13:50.488Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CRTSUPP.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.CRTSUPP.xml in 0ms
2021-03-26T04:13:50.491Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.data0910.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.data0910.xml
2021-03-26T04:13:50.491Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.data0910.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.data0910.xml in 0ms
2021-03-26T04:13:50.494Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.epips_data.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.epips_data.xml
2021-03-26T04:13:50.494Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.epips_data.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.epips_data.xml in 0ms
2021-03-26T04:13:50.497Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ESHSUPP.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ESHSUPP.xml
2021-03-26T04:13:50.497Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ESHSUPP.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ESHSUPP.xml in 0ms
2021-03-26T04:13:50.500Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.esh_rules.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.esh_rules.xml
2021-03-26T04:13:50.500Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.esh_rules.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.esh_rules.xml in 0ms
2021-03-26T04:13:50.503Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hips.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hips.xml
2021-03-26T04:13:50.503Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hips.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hips.xml in 0ms
2021-03-26T04:13:50.505Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hmpa_data.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hmpa_data.xml
2021-03-26T04:13:50.505Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hmpa_data.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.hmpa_data.xml in 0ms
2021-03-26T04:13:50.508Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata.xml
2021-03-26T04:13:50.508Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata.xml in 0ms
2021-03-26T04:13:50.511Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata_slow.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata_slow.xml
2021-03-26T04:13:50.511Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata_slow.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ixdata_slow.xml in 0ms
2021-03-26T04:13:50.514Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ml_models.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ml_models.xml
2021-03-26T04:13:50.514Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ml_models.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.ml_models.xml in 0ms
2021-03-26T04:13:50.518Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.repairkit_supp.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.repairkit_supp.xml
2021-03-26T04:13:50.518Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.repairkit_supp.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.repairkit_supp.xml in 0ms
2021-03-26T04:13:50.521Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.SAVCNTRL.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.SAVCNTRL.xml
2021-03-26T04:13:50.521Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.SAVCNTRL.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.SAVCNTRL.xml in 0ms
2021-03-26T04:13:50.524Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.scheduled_qp.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.scheduled_qp.xml
2021-03-26T04:13:50.524Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.scheduled_qp.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.scheduled_qp.xml in 0ms
2021-03-26T04:13:50.528Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.sxl_supp.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.sxl_supp.xml
2021-03-26T04:13:50.528Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.sxl_supp.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.sxl_supp.xml in 0ms
2021-03-26T04:13:50.530Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.TELEMSUPP.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.TELEMSUPP.xml
2021-03-26T04:13:50.530Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.TELEMSUPP.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.TELEMSUPP.xml in 0ms
2021-03-26T04:13:50.534Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.VDB_supp.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.VDB_supp.xml
2021-03-26T04:13:50.534Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.VDB_supp.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sdds.VDB_supp.xml in 0ms
2021-03-26T04:13:50.537Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sulstate.sdds.local.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sulstate.sdds.local.xml
2021-03-26T04:13:50.537Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sulstate.sdds.local.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\warehouse\catalogue\sulstate.sdds.local.xml in 0ms
2021-03-26T04:13:50.540Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\status\metrics-2021-03-26.txt] collecting C:\ProgramData\Sophos\AutoUpdate\data\status\metrics-2021-03-26.txt
2021-03-26T04:13:50.541Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\status\metrics-2021-03-26.txt] collected C:\ProgramData\Sophos\AutoUpdate\data\status\metrics-2021-03-26.txt in 0ms
2021-03-26T04:13:50.543Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2021-03-26T04:13:50.544Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml in 0ms
2021-03-26T04:13:50.547Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\status\metrics-2021-03-26.txt] collecting C:\ProgramData\Sophos\AutoUpdate\data\status\metrics-2021-03-26.txt
2021-03-26T04:13:50.547Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\status\metrics-2021-03-26.txt] collected C:\ProgramData\Sophos\AutoUpdate\data\status\metrics-2021-03-26.txt in 0ms
2021-03-26T04:13:50.549Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml] collecting C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2021-03-26T04:13:50.549Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml] collected C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml in 0ms
2021-03-26T04:13:50.551Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\AutoUpdate\Installation Path]\Logs\*]: no files found
2021-03-26T04:13:50.552Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\AutoUpdate\Installation Path]\Config\*.cfg]: no files found
2021-03-26T04:13:50.552Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\AutoUpdate\Data Path]\Cache*.pem]: no files found
2021-03-26T04:13:50.553Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\ALC\SAUPolicy] collecting C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\ALC\SAUPolicy
2021-03-26T04:13:50.554Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\ALC\SAUPolicy] collected C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\ALC\SAUPolicy in 0ms
2021-03-26T04:13:50.558Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\CORC\policy] collecting C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\CORC\policy
2021-03-26T04:13:50.568Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\CORC\policy] collected C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\CORC\policy in 15ms
2021-03-26T04:13:50.572Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\CORE\policy] collecting C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\CORE\policy
2021-03-26T04:13:50.592Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\CORE\policy] collected C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\CORE\policy in 16ms
2021-03-26T04:13:50.596Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\EFW\policy] collecting C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\EFW\policy
2021-03-26T04:13:50.597Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\EFW\policy] collected C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\EFW\policy in 0ms
2021-03-26T04:13:50.600Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\EFW\status] collecting C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\EFW\status
2021-03-26T04:13:50.614Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\EFW\status] collected C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\EFW\status in 16ms
2021-03-26T04:13:50.618Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\policy] collecting C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\policy
2021-03-26T04:13:50.619Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\policy] collected C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HBT\policy in 0ms
2021-03-26T04:13:50.624Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HMPA\HitmanProQueue] collecting C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HMPA\HitmanProQueue
2021-03-26T04:13:50.624Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HMPA\HitmanProQueue] collected C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\HMPA\HitmanProQueue in 0ms
2021-03-26T04:13:50.628Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\MCS\referencePolicy] collecting C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\MCS\referencePolicy
2021-03-26T04:13:50.634Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\MCS\referencePolicy] collected C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\MCS\referencePolicy in 0ms
2021-03-26T04:13:50.638Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\MCS\referencePolicyCscResult] collecting C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\MCS\referencePolicyCscResult
2021-03-26T04:13:50.639Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\MCS\referencePolicyCscResult] collected C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\MCS\referencePolicyCscResult in 0ms
2021-03-26T04:13:50.643Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\MCS\referencePolicyRevisionId] collecting C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\MCS\referencePolicyRevisionId
2021-03-26T04:13:50.644Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\MCS\referencePolicyRevisionId] collected C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\MCS\referencePolicyRevisionId in 0ms
2021-03-26T04:13:50.649Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\UI\policy] collecting C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\UI\policy
2021-03-26T04:13:50.656Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\UI\policy] collected C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\UI\policy in 0ms
2021-03-26T04:13:50.659Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\ClientMrinit*.log]: no files found
2021-03-26T04:13:50.659Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\Createinitfile*.log]: no files found
2021-03-26T04:13:50.660Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\TEMP\ClientMrinit*.log]: no files found
2021-03-26T04:13:50.660Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Remote Management System\ManagementAgent\ServiceHomeDir]\svc.conf]: no files found
2021-03-26T04:13:50.660Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Remote Management System\ManagementAgent\ServiceHomeDir]\cac.pem]: no files found
2021-03-26T04:13:50.660Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Remote Management System\ManagementAgent\ServiceHomeDir]\mrinit*]: no files found
2021-03-26T04:13:50.660Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Remote Management System\ManagementAgent\ServiceHomeDir]\scapi_config.txt ]: no files found
2021-03-26T04:13:50.660Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Remote Management System\ManagementAgent\ServiceHomeDir]\scf.dat]: no files found
2021-03-26T04:13:50.660Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\cac.pem]: no files found
2021-03-26T04:13:50.660Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\mrinit.*]: no files found
2021-03-26T04:13:50.660Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Sophos Client Firewall\configuration.conf]: no files found
2021-03-26T04:13:50.660Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SYSTEMDRIVE%\scf-*]: no files found
2021-03-26T04:13:50.661Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%USERPROFILE%\Local Settings\Application Data\Sophos\Sophos Client Firewall\*]: no files found
2021-03-26T04:13:50.661Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Sophos Client Firewall\Application\Path]\scf.dat]: no files found
2021-03-26T04:13:50.661Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\SMC\PluginManager\Plugins\PatchPlugins\PatchEndpointCommunicator\PatchEndpointCommunicator.dll.config]: no files found
2021-03-26T04:13:50.661Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\avremove.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\avremove.log
2021-03-26T04:13:50.683Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\avremove.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\avremove.log in 15ms
2021-03-26T04:13:50.685Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\TEMP\avremove.log]: no files found
2021-03-26T04:13:50.685Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Microsoft SQL Server\MSSQL*\MSSQL\LOG\ERRORLOG*]: no files found
2021-03-26T04:13:50.685Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILES%\Microsoft SQL Server\MSSQL*\MSSQL\LOG\ERRORLOG*]: no files found
2021-03-26T04:13:50.685Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\SOPHOS\Setup\SQLPath]\Log\Errorlog.*]: no files found
2021-03-26T04:13:50.687Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-SOFTWARE-Microsoft-MSSQLServer.xml] collected REG-HKLM-SOFTWARE-Microsoft-MSSQLServer.xml in 0ms
2021-03-26T04:13:50.690Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-MicrosoftSQLServer.xml] collected REG-HKLM-Software-MicrosoftSQLServer.xml in 0ms
2021-03-26T04:13:50.692Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMDATA%\Sophos\Credential Store\*.log]: no files found
2021-03-26T04:13:50.692Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMDATA%\Sophos\Sophos Endpoint Management\log\*]: no files found
2021-03-26T04:13:50.692Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%APPDATA%\Sophos\Sophos Endpoint Management\*]: no files found
2021-03-26T04:13:50.692Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Management Installer\*]: no files found
2021-03-26T04:13:50.692Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\ManagementServer\5.0\log\*]: no files found
2021-03-26T04:13:50.692Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\ManagementServer\log\*]: no files found
2021-03-26T04:13:50.692Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Remote Management System\3\CertificationManager\IssuedCert\CMIssuedCertificates.log]: no files found
2021-03-26T04:13:50.693Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Sophos Endpoint Management\*.log]: no files found
2021-03-26T04:13:50.693Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Sophos Endpoint Management\*.xml]: no files found
2021-03-26T04:13:50.693Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%LOCALAPPDATA%\Sophos\Sophos Endpoint Management\*]: no files found
2021-03-26T04:13:50.693Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Enterprise Console\CertificationManager\IssuedCert\CMIssuedCertificates.log]: no files found
2021-03-26T04:13:50.693Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Enterprise Console\CertificationManager\Logs\CertManager*.log]: no files found
2021-03-26T04:13:50.693Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Enterprise Console\MetaData\*.xml]: no files found
2021-03-26T04:13:50.693Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILES%\Sophos\Enterprise Console\*.config]: no files found
2021-03-26T04:13:50.693Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILES%\Sophos\Enterprise Console\catalog\*.Plugin]: no files found
2021-03-26T04:13:50.693Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SYSTEMDRIVE%\SECTracing.txt]: no files found
2021-03-26T04:13:50.693Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\ServerInit*.log]: no files found
2021-03-26T04:13:50.694Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\SetSvcFailAction*.log]: no files found
2021-03-26T04:13:50.694Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\Setup.exe.debug]: no files found
2021-03-26T04:13:50.694Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\setup.exe.debug.log]: no files found
2021-03-26T04:13:50.694Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%USERPROFILE%\Local Settings\Application Data\Sophos\Sophos Endpoint Management\*]: no files found
2021-03-26T04:13:50.694Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\*.config]: no files found
2021-03-26T04:13:50.694Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\DB\InstallDB.log]: no files found
2021-03-26T04:13:50.694Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\Mgntsvc*.log]: no files found
2021-03-26T04:13:50.694Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\Remote Management System\CertificationManager\IssuedCert\CMIssuedCertificates.log]: no files found
2021-03-26T04:13:50.694Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\Remote Management System\CertificationManager\Logs\CertManager*.log]: no files found
2021-03-26T04:13:50.697Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Update Manager\Update Manager\CIDs\S000\SAVSCFXP\*.xml]: no files found
2021-03-26T04:13:50.697Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Update Manager\Update Manager\CIDs\S000\SAVSCFXP\cac.pem]: no files found
2021-03-26T04:13:50.697Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Update Manager\Update Manager\CIDs\S000\SAVSCFXP\customer_ID.txt]: no files found
2021-03-26T04:13:50.697Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Update Manager\Update Manager\CIDs\S000\SAVSCFXP\mrinit.*]: no files found
2021-03-26T04:13:50.697Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Update Manager\Update Manager\Warehouse\fileliststore.dat]: no files found
2021-03-26T04:13:50.697Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Update Manager\Update Manager\Warehouse\catalogue\*]: no files found
2021-03-26T04:13:50.697Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Update Manager\Working\Decoded-SDDM\*UpdaterLog.txt]: no files found
2021-03-26T04:13:50.697Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Update Manager\Working\Decoded-SDDM\*\SUMSelfUpdaterLog.txt]: no files found
2021-03-26T04:13:50.697Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Update Manager\*.log]: no files found
2021-03-26T04:13:50.698Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Update Manager\*.xml]: no files found
2021-03-26T04:13:50.698Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Update Manager\*.xml~]: no files found
2021-03-26T04:13:50.698Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Update Manager\cac.pem]: no files found
2021-03-26T04:13:50.698Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Update Manager\mrinit.conf]: no files found
2021-03-26T04:13:50.698Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\SUM*.log]: no files found
2021-03-26T04:13:50.698Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2C7A82DB-69BC-4198-AC26-BB862F1BE4D0}\InstallLocation]\*.log]: no files found
2021-03-26T04:13:50.698Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2C7A82DB-69BC-4198-AC26-BB862F1BE4D0}\InstallLocation]\*.xml]: no files found
2021-03-26T04:13:50.698Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2C7A82DB-69BC-4198-AC26-BB862F1BE4D0}\InstallLocation]\*.xml~]: no files found
2021-03-26T04:13:50.698Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2C7A82DB-69BC-4198-AC26-BB862F1BE4D0}\InstallLocation]\cac.pem]: no files found
2021-03-26T04:13:50.698Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2C7A82DB-69BC-4198-AC26-BB862F1BE4D0}\InstallLocation]\machine_ID.txt]: no files found
2021-03-26T04:13:50.698Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2C7A82DB-69BC-4198-AC26-BB862F1BE4D0}\InstallLocation]\mrinit.*]: no files found
2021-03-26T04:13:50.698Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2C7A82DB-69BC-4198-AC26-BB862F1BE4D0}\InstallLocation]\scf.dat]: no files found
2021-03-26T04:13:50.698Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\SUM\*.log]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\SUM\*.xml]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\SUM\*.xml~]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\SUM\cac.pem]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\SUM\machine_ID.txt]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\SUM\mrinit.*]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\SUM\scf.dat]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\SUM_*.log]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\Management Tools\SumInstallDir]\cac.pem]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\Management Tools\SumInstallDir]\mrinit.*]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Sophos SafeGuard Installers\InstallCache\*.txt]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Sophos SafeGuard Installers\InstallCache\*.xml]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Sophos SafeGuard Installers\staging\*.txt]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Encryption\*.config]: no files found
2021-03-26T04:13:50.699Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILES%\Sophos\Encryption\*.config]: no files found
2021-03-26T04:13:50.700Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\temp\SGNDE.LOG]: no files found
2021-03-26T04:13:50.700Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Enterprise Console\*.xml]: no files found
2021-03-26T04:13:50.700Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\*.xml]: no files found
2021-03-26T04:13:50.700Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\Catalog\*.Plugin]: no files found
2021-03-26T04:13:50.700Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\InstallDir]\Plugins\EncryptionFEService\*.config]: no files found
2021-03-26T04:13:50.700Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Patch\ThirdParty\*.xml]: no files found
2021-03-26T04:13:50.700Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Patch\ThirdParty\Warehouse\*.xml]: no files found
2021-03-26T04:13:50.700Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILES%\Sophos\Patch\*.config]: no files found
2021-03-26T04:13:50.700Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILES%\Sophos\Patch\*.log]: no files found
2021-03-26T04:13:50.700Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILES%\sophos\Sophos Patch Agent\*.dat]: no files found
2021-03-26T04:13:50.700Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILES%\sophos\Sophos Patch Agent\*.log]: no files found
2021-03-26T04:13:50.702Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210324 154332.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210324 154332.txt
2021-03-26T04:13:50.709Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210324 154332.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210324 154332.txt in 16ms
2021-03-26T04:13:50.712Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 140855.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 140855.txt
2021-03-26T04:13:50.713Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 140855.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 140855.txt in 0ms
2021-03-26T04:13:50.716Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 145332.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 145332.txt
2021-03-26T04:13:50.717Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 145332.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 145332.txt in 0ms
2021-03-26T04:13:50.721Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 155457.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 155457.txt
2021-03-26T04:13:50.722Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 155457.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 155457.txt in 0ms
2021-03-26T04:13:50.727Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 211809.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 211809.txt
2021-03-26T04:13:50.727Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 211809.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210325 211809.txt in 0ms
2021-03-26T04:13:50.731Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210326 103243.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210326 103243.txt
2021-03-26T04:13:50.731Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210326 103243.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos .NET setup log 20210326 103243.txt in 0ms
2021-03-26T04:13:50.735Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_021840.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_021840.txt
2021-03-26T04:13:50.759Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_021840.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_021840.txt in 15ms
2021-03-26T04:13:50.763Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_022110.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_022110.txt
2021-03-26T04:13:50.774Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_022110.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_022110.txt in 16ms
2021-03-26T04:13:50.778Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_022537.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_022537.txt
2021-03-26T04:13:50.779Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_022537.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_022537.txt in 0ms
2021-03-26T04:13:50.783Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_085801.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_085801.txt
2021-03-26T04:13:50.785Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_085801.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_085801.txt in 0ms
2021-03-26T04:13:50.790Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_090231.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_090231.txt
2021-03-26T04:13:50.797Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_090231.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210325_090231.txt in 15ms
2021-03-26T04:13:50.800Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210326_033312.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210326_033312.txt
2021-03-26T04:13:50.831Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210326_033312.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210326_033312.txt in 31ms
2021-03-26T04:13:50.835Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210326_033538.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210326_033538.txt
2021-03-26T04:13:50.866Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210326_033538.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210326_033538.txt in 32ms
2021-03-26T04:13:50.871Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210326_034002.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210326_034002.txt
2021-03-26T04:13:50.893Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210326_034002.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major CustomActions Log_210326_034002.txt in 31ms
2021-03-26T04:13:50.897Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_021840.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_021840.txt
2021-03-26T04:13:51.006Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_021840.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_021840.txt in 109ms
2021-03-26T04:13:51.010Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_022110.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_022110.txt
2021-03-26T04:13:51.051Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_022110.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_022110.txt in 47ms
2021-03-26T04:13:51.056Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_022537.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_022537.txt
2021-03-26T04:13:51.099Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_022537.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_022537.txt in 47ms
2021-03-26T04:13:51.104Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_085801.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_085801.txt
2021-03-26T04:13:51.208Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_085801.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_085801.txt in 109ms
2021-03-26T04:13:51.211Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_090231.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_090231.txt
2021-03-26T04:13:51.288Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_090231.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210325_090231.txt in 78ms
2021-03-26T04:13:51.292Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210326_033312.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210326_033312.txt
2021-03-26T04:13:51.632Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210326_033312.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210326_033312.txt in 343ms
2021-03-26T04:13:51.636Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210326_033538.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210326_033538.txt
2021-03-26T04:13:52.002Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210326_033538.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210326_033538.txt in 374ms
2021-03-26T04:13:52.006Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210326_034002.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210326_034002.txt
2021-03-26T04:13:52.157Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210326_034002.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Major Install Log_210326_034002.txt in 156ms
2021-03-26T04:13:52.161Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Startup Log_210325_010039.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Startup Log_210325_010039.txt
2021-03-26T04:13:52.161Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Startup Log_210325_010039.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Anti-Virus Startup Log_210325_010039.txt in 0ms
2021-03-26T04:13:52.165Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210324 085632.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210324 085632.txt
2021-03-26T04:13:52.213Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210324 085632.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210324 085632.txt in 47ms
2021-03-26T04:13:52.217Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 071702.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 071702.txt
2021-03-26T04:13:52.256Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 071702.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 071702.txt in 31ms
2021-03-26T04:13:52.260Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 080132.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 080132.txt
2021-03-26T04:13:52.351Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 080132.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 080132.txt in 94ms
2021-03-26T04:13:52.355Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 090304.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 090304.txt
2021-03-26T04:13:52.402Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 090304.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 090304.txt in 46ms
2021-03-26T04:13:52.406Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 142614.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 142614.txt
2021-03-26T04:13:52.448Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 142614.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210325 142614.txt in 31ms
2021-03-26T04:13:52.452Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210326 034036.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210326 034036.txt
2021-03-26T04:13:52.669Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210326 034036.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Autoupdate 6.7.352.0 install log 20210326 034036.txt in 218ms
2021-03-26T04:13:52.673Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210324 085632.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210324 085632.txt
2021-03-26T04:13:52.695Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210324 085632.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210324 085632.txt in 16ms
2021-03-26T04:13:52.699Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 071702.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 071702.txt
2021-03-26T04:13:52.730Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 071702.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 071702.txt in 31ms
2021-03-26T04:13:52.735Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 080132.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 080132.txt
2021-03-26T04:13:52.757Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 080132.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 080132.txt in 15ms
2021-03-26T04:13:52.761Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 090304.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 090304.txt
2021-03-26T04:13:52.774Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 090304.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 090304.txt in 16ms
2021-03-26T04:13:52.778Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 142614.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 142614.txt
2021-03-26T04:13:52.779Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 142614.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210325 142614.txt in 0ms
2021-03-26T04:13:52.782Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210326 034036.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210326 034036.txt
2021-03-26T04:13:52.805Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210326 034036.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate 6.7.352.0 setup log 20210326 034036.txt in 16ms
2021-03-26T04:13:52.809Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_06_56_30Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_06_56_30Z.log
2021-03-26T04:13:52.844Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_06_56_30Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_06_56_30Z.log in 47ms
2021-03-26T04:13:52.848Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_07_38_33Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_07_38_33Z.log
2021-03-26T04:13:52.876Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_07_38_33Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_07_38_33Z.log in 31ms
2021-03-26T04:13:52.880Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_08_28_24Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_08_28_24Z.log
2021-03-26T04:13:52.908Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_08_28_24Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_08_28_24Z.log in 31ms
2021-03-26T04:13:52.912Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_14_01_48Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_14_01_48Z.log
2021-03-26T04:13:52.928Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_14_01_48Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_25_14_01_48Z.log in 16ms
2021-03-26T04:13:52.932Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_26_03_21_24Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_26_03_21_24Z.log
2021-03-26T04:13:53.021Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_26_03_21_24Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos AutoUpdate Uninstall 2021_03_26_03_21_24Z.log in 93ms
2021-03-26T04:13:53.025Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210324T084758.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210324T084758.txt
2021-03-26T04:13:53.032Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210324T084758.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210324T084758.txt in 16ms
2021-03-26T04:13:53.036Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T070903.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T070903.txt
2021-03-26T04:13:53.063Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T070903.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T070903.txt in 31ms
2021-03-26T04:13:53.067Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T075340.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T075340.txt
2021-03-26T04:13:53.073Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T075340.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T075340.txt in 0ms
2021-03-26T04:13:53.076Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T085504.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T085504.txt
2021-03-26T04:13:53.091Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T085504.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T085504.txt in 15ms
2021-03-26T04:13:53.095Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T141818.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T141818.txt
2021-03-26T04:13:53.113Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T141818.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210325T141818.txt in 16ms
2021-03-26T04:13:53.116Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210326T033251.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210326T033251.txt
2021-03-26T04:13:53.158Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210326T033251.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Install log 20210326T033251.txt in 47ms
2021-03-26T04:13:53.162Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T065627.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T065627.txt
2021-03-26T04:13:53.173Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T065627.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T065627.txt in 15ms
2021-03-26T04:13:53.176Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T073830.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T073830.txt
2021-03-26T04:13:53.186Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T073830.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T073830.txt in 16ms
2021-03-26T04:13:53.191Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T082821.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T082821.txt
2021-03-26T04:13:53.210Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T082821.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T082821.txt in 16ms
2021-03-26T04:13:53.214Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T140143.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T140143.txt
2021-03-26T04:13:53.228Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T140143.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210325T140143.txt in 15ms
2021-03-26T04:13:53.232Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210326T032120.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210326T032120.txt
2021-03-26T04:13:53.246Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210326T032120.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Clean Uninstall log 20210326T032120.txt in 15ms
2021-03-26T04:13:53.249Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_06_56_43Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_06_56_43Z.log
2021-03-26T04:13:53.295Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_06_56_43Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_06_56_43Z.log in 47ms
2021-03-26T04:13:53.299Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_07_38_46Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_07_38_46Z.log
2021-03-26T04:13:53.316Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_07_38_46Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_07_38_46Z.log in 16ms
2021-03-26T04:13:53.320Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_08_28_40Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_08_28_40Z.log
2021-03-26T04:13:53.333Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_08_28_40Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_08_28_40Z.log in 15ms
2021-03-26T04:13:53.338Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_14_02_02Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_14_02_02Z.log
2021-03-26T04:13:53.352Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_14_02_02Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_25_14_02_02Z.log in 16ms
2021-03-26T04:13:53.356Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_26_03_21_39Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_26_03_21_39Z.log
2021-03-26T04:13:53.409Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_26_03_21_39Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Diagnostic Utility Uninstall 2021_03_26_03_21_39Z.log in 46ms
2021-03-26T04:13:53.413Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_24_08_43_04Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_24_08_43_04Z.log
2021-03-26T04:13:53.444Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_24_08_43_04Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_24_08_43_04Z.log in 32ms
2021-03-26T04:13:53.448Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_07_08_40Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_07_08_40Z.log
2021-03-26T04:13:53.457Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_07_08_40Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_07_08_40Z.log in 15ms
2021-03-26T04:13:53.460Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_07_53_17Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_07_53_17Z.log
2021-03-26T04:13:53.483Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_07_53_17Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_07_53_17Z.log in 31ms
2021-03-26T04:13:53.487Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_08_54_41Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_08_54_41Z.log
2021-03-26T04:13:53.488Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_08_54_41Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_08_54_41Z.log in 0ms
2021-03-26T04:13:53.492Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_14_17_53Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_14_17_53Z.log
2021-03-26T04:13:53.500Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_14_17_53Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_25_14_17_53Z.log in 16ms
2021-03-26T04:13:53.505Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_26_03_32_29Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_26_03_32_29Z.log
2021-03-26T04:13:53.536Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_26_03_32_29Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Setup 1.10 2021_03_26_03_32_29Z.log in 31ms
2021-03-26T04:13:53.540Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_03_54_02Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_03_54_02Z.log
2021-03-26T04:13:53.554Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_03_54_02Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_03_54_02Z.log in 16ms
2021-03-26T04:13:53.558Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_06_50_51Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_06_50_51Z.log
2021-03-26T04:13:53.573Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_06_50_51Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_06_50_51Z.log in 0ms
2021-03-26T04:13:53.577Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_06_55_05Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_06_55_05Z.log
2021-03-26T04:13:53.591Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_06_55_05Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_06_55_05Z.log in 16ms
2021-03-26T04:13:53.595Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_07_37_03Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_07_37_03Z.log
2021-03-26T04:13:53.611Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_07_37_03Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_07_37_03Z.log in 15ms
2021-03-26T04:13:53.615Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_08_27_01Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_08_27_01Z.log
2021-03-26T04:13:53.624Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_08_27_01Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_08_27_01Z.log in 16ms
2021-03-26T04:13:53.628Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_14_00_06Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_14_00_06Z.log
2021-03-26T04:13:53.653Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_14_00_06Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_25_14_00_06Z.log in 31ms
2021-03-26T04:13:53.657Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_26_03_17_58Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_26_03_17_58Z.log
2021-03-26T04:13:53.746Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_26_03_17_58Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_26_03_17_58Z.log in 94ms
2021-03-26T04:13:53.750Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_26_03_19_49Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_26_03_19_49Z.log
2021-03-26T04:13:53.806Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_26_03_19_49Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Agent Uninstall 2021_03_26_03_19_49Z.log in 46ms
2021-03-26T04:13:53.810Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 24-03-2021 15_43_04.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 24-03-2021 15_43_04.log
2021-03-26T04:13:53.823Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 24-03-2021 15_43_04.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 24-03-2021 15_43_04.log in 0ms
2021-03-26T04:13:53.827Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 14_08_40.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 14_08_40.log
2021-03-26T04:13:53.869Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 14_08_40.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 14_08_40.log in 31ms
2021-03-26T04:13:53.875Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 14_53_17.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 14_53_17.log
2021-03-26T04:13:53.906Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 14_53_17.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 14_53_17.log in 32ms
2021-03-26T04:13:53.910Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 15_54_42.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 15_54_42.log
2021-03-26T04:13:53.942Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 15_54_42.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 15_54_42.log in 31ms
2021-03-26T04:13:53.946Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 21_17_54.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 21_17_54.log
2021-03-26T04:13:53.980Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 21_17_54.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 25-03-2021 21_17_54.log in 47ms
2021-03-26T04:13:53.984Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 26-03-2021 10_32_29.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 26-03-2021 10_32_29.log
2021-03-26T04:13:54.048Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 26-03-2021 10_32_29.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Setup 2.2.6 26-03-2021 10_32_29.log in 62ms
2021-03-26T04:13:54.053Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 13_56_34.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 13_56_34.log
2021-03-26T04:13:54.061Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 13_56_34.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 13_56_34.log in 16ms
2021-03-26T04:13:54.066Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 14_38_36.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 14_38_36.log
2021-03-26T04:13:54.074Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 14_38_36.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 14_38_36.log in 15ms
2021-03-26T04:13:54.078Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 15_28_28.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 15_28_28.log
2021-03-26T04:13:54.102Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 15_28_28.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 15_28_28.log in 16ms
2021-03-26T04:13:54.106Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 21_01_52.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 21_01_52.log
2021-03-26T04:13:54.122Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 21_01_52.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 25-03-2021 21_01_52.log in 16ms
2021-03-26T04:13:54.127Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 26-03-2021 10_21_28.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 26-03-2021 10_21_28.log
2021-03-26T04:13:54.162Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 26-03-2021 10_21_28.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Defense Uninstallation 2.2.6 26-03-2021 10_21_28.log in 31ms
2021-03-26T04:13:54.166Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210324 154811.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210324 154811.txt
2021-03-26T04:13:54.200Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210324 154811.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210324 154811.txt in 31ms
2021-03-26T04:13:54.205Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 140915.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 140915.txt
2021-03-26T04:13:54.250Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 140915.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 140915.txt in 47ms
2021-03-26T04:13:54.255Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 145350.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 145350.txt
2021-03-26T04:13:54.273Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 145350.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 145350.txt in 15ms
2021-03-26T04:13:54.277Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 155517.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 155517.txt
2021-03-26T04:13:54.320Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 155517.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 155517.txt in 31ms
2021-03-26T04:13:54.325Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 211829.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 211829.txt
2021-03-26T04:13:54.356Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 211829.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210325 211829.txt in 31ms
2021-03-26T04:13:54.360Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210326 103301.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210326 103301.txt
2021-03-26T04:13:54.432Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210326 103301.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 install log 20210326 103301.txt in 78ms
2021-03-26T04:13:54.436Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210324 154811.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210324 154811.txt
2021-03-26T04:13:54.451Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210324 154811.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210324 154811.txt in 16ms
2021-03-26T04:13:54.456Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 140915.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 140915.txt
2021-03-26T04:13:54.481Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 140915.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 140915.txt in 31ms
2021-03-26T04:13:54.485Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 145350.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 145350.txt
2021-03-26T04:13:54.504Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 145350.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 145350.txt in 15ms
2021-03-26T04:13:54.508Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 155517.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 155517.txt
2021-03-26T04:13:54.518Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 155517.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 155517.txt in 16ms
2021-03-26T04:13:54.523Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 211829.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 211829.txt
2021-03-26T04:13:54.534Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 211829.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210325 211829.txt in 16ms
2021-03-26T04:13:54.539Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210326 103301.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210326 103301.txt
2021-03-26T04:13:54.551Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210326 103301.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall 1.2.0.17 setup log 20210326 103301.txt in 15ms
2021-03-26T04:13:54.556Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_06_56_29Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_06_56_29Z.log
2021-03-26T04:13:54.605Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_06_56_29Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_06_56_29Z.log in 47ms
2021-03-26T04:13:54.609Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_07_38_32Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_07_38_32Z.log
2021-03-26T04:13:54.627Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_07_38_32Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_07_38_32Z.log in 15ms
2021-03-26T04:13:54.631Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_08_28_23Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_08_28_23Z.log
2021-03-26T04:13:54.645Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_08_28_23Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_08_28_23Z.log in 16ms
2021-03-26T04:13:54.649Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_14_01_45Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_14_01_45Z.log
2021-03-26T04:13:54.664Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_14_01_45Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_25_14_01_45Z.log in 15ms
2021-03-26T04:13:54.668Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_26_03_21_23Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_26_03_21_23Z.log
2021-03-26T04:13:54.777Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_26_03_21_23Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Firewall Uninstall 2021_03_26_03_21_23Z.log in 109ms
2021-03-26T04:13:54.782Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210324 154803.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210324 154803.txt
2021-03-26T04:13:54.804Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210324 154803.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210324 154803.txt in 16ms
2021-03-26T04:13:54.808Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 140908.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 140908.txt
2021-03-26T04:13:54.830Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 140908.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 140908.txt in 16ms
2021-03-26T04:13:54.834Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 145344.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 145344.txt
2021-03-26T04:13:54.851Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 145344.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 145344.txt in 16ms
2021-03-26T04:13:54.856Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 155509.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 155509.txt
2021-03-26T04:13:54.859Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-Env.txt] finished in 15007ms, exit code 0
2021-03-26T04:13:54.862Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-LoadOrder.txt] running wmic LOADORDER GET GroupOrder,Name,DriverEnabled /FORMAT:TEXTVALUELIST:"sortby=GroupOrder"
2021-03-26T04:13:54.869Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 155509.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 155509.txt in 16ms
2021-03-26T04:13:54.874Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 211822.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 211822.txt
2021-03-26T04:13:54.892Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 211822.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210325 211822.txt in 15ms
2021-03-26T04:13:54.896Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210326 103255.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210326 103255.txt
2021-03-26T04:13:55.038Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210326 103255.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Install Log 20210326 103255.txt in 141ms
2021-03-26T04:13:55.042Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_06_56_32Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_06_56_32Z.log
2021-03-26T04:13:55.067Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_06_56_32Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_06_56_32Z.log in 16ms
2021-03-26T04:13:55.071Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_07_38_34Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_07_38_34Z.log
2021-03-26T04:13:55.083Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_07_38_34Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_07_38_34Z.log in 0ms
2021-03-26T04:13:55.088Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_08_28_26Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_08_28_26Z.log
2021-03-26T04:13:55.115Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_08_28_26Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_08_28_26Z.log in 16ms
2021-03-26T04:13:55.119Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_14_01_50Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_14_01_50Z.log
2021-03-26T04:13:55.139Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_14_01_50Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_25_14_01_50Z.log in 16ms
2021-03-26T04:13:55.143Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_26_03_21_26Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_26_03_21_26Z.log
2021-03-26T04:13:55.179Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_26_03_21_26Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Endpoint Self Help Uninstall 2021_03_26_03_21_26Z.log in 31ms
2021-03-26T04:13:55.183Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210324 154752.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210324 154752.txt
2021-03-26T04:13:55.192Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210324 154752.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210324 154752.txt in 0ms
2021-03-26T04:13:55.196Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 135523.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 135523.txt
2021-03-26T04:13:55.208Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 135523.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 135523.txt in 0ms
2021-03-26T04:13:55.212Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 140859.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 140859.txt
2021-03-26T04:13:55.219Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 140859.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 140859.txt in 0ms
2021-03-26T04:13:55.224Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 143720.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 143720.txt
2021-03-26T04:13:55.236Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 143720.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 143720.txt in 16ms
2021-03-26T04:13:55.240Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 145336.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 145336.txt
2021-03-26T04:13:55.246Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 145336.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 145336.txt in 15ms
2021-03-26T04:13:55.250Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 152716.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 152716.txt
2021-03-26T04:13:55.255Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 152716.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 152716.txt in 0ms
2021-03-26T04:13:55.259Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 155500.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 155500.txt
2021-03-26T04:13:55.271Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 155500.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 155500.txt in 0ms
2021-03-26T04:13:55.276Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 210027.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 210027.txt
2021-03-26T04:13:55.277Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 210027.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 210027.txt in 0ms
2021-03-26T04:13:55.281Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 211813.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 211813.txt
2021-03-26T04:13:55.284Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 211813.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210325 211813.txt in 0ms
2021-03-26T04:13:55.288Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210326 102016.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210326 102016.txt
2021-03-26T04:13:55.308Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210326 102016.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210326 102016.txt in 32ms
2021-03-26T04:13:55.312Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210326 103247.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210326 103247.txt
2021-03-26T04:13:55.347Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210326 103247.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos File Scanner Install Log 20210326 103247.txt in 31ms
2021-03-26T04:13:55.351Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210324 084801.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210324 084801.txt
2021-03-26T04:13:55.366Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210324 084801.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210324 084801.txt in 15ms
2021-03-26T04:13:55.370Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 070906.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 070906.txt
2021-03-26T04:13:55.382Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 070906.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 070906.txt in 0ms
2021-03-26T04:13:55.386Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 075343.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 075343.txt
2021-03-26T04:13:55.397Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 075343.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 075343.txt in 0ms
2021-03-26T04:13:55.401Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 085507.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 085507.txt
2021-03-26T04:13:55.407Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 085507.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 085507.txt in 0ms
2021-03-26T04:13:55.411Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 141821.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 141821.txt
2021-03-26T04:13:55.420Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 141821.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210325 141821.txt in 16ms
2021-03-26T04:13:55.424Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210326 033254.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210326 033254.txt
2021-03-26T04:13:55.463Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210326 033254.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Install Log 20210326 033254.txt in 47ms
2021-03-26T04:13:55.467Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 065519.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 065519.txt
2021-03-26T04:13:55.478Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 065519.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 065519.txt in 15ms
2021-03-26T04:13:55.482Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 073716.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 073716.txt
2021-03-26T04:13:55.488Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 073716.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 073716.txt in 0ms
2021-03-26T04:13:55.492Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 082712.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 082712.txt
2021-03-26T04:13:55.498Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 082712.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 082712.txt in 16ms
2021-03-26T04:13:55.502Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 140021.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 140021.txt
2021-03-26T04:13:55.508Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 140021.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210325 140021.txt in 15ms
2021-03-26T04:13:55.512Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210326 032003.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210326 032003.txt
2021-03-26T04:13:55.542Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210326 032003.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Health 2.5.153.0 Uninstall Log 20210326 032003.txt in 32ms
2021-03-26T04:13:55.546Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210324T085619.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210324T085619.txt
2021-03-26T04:13:55.561Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210324T085619.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210324T085619.txt in 15ms
2021-03-26T04:13:55.565Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T071659.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T071659.txt
2021-03-26T04:13:55.574Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T071659.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T071659.txt in 16ms
2021-03-26T04:13:55.577Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T080128.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T080128.txt
2021-03-26T04:13:55.584Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T080128.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T080128.txt in 0ms
2021-03-26T04:13:55.588Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T090301.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T090301.txt
2021-03-26T04:13:55.600Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T090301.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T090301.txt in 0ms
2021-03-26T04:13:55.604Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T142610.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T142610.txt
2021-03-26T04:13:55.610Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T142610.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210325T142610.txt in 0ms
2021-03-26T04:13:55.614Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210326T034033.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210326T034033.txt
2021-03-26T04:13:55.653Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210326T034033.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert install log 20210326T034033.txt in 47ms
2021-03-26T04:13:55.656Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T065556.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T065556.txt
2021-03-26T04:13:55.668Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T065556.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T065556.txt in 15ms
2021-03-26T04:13:55.673Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T073757.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T073757.txt
2021-03-26T04:13:55.695Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T073757.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T073757.txt in 32ms
2021-03-26T04:13:55.699Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T082749.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T082749.txt
2021-03-26T04:13:55.706Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T082749.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T082749.txt in 0ms
2021-03-26T04:13:55.710Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T140110.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T140110.txt
2021-03-26T04:13:55.736Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T140110.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210325T140110.txt in 31ms
2021-03-26T04:13:55.741Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210326T032049.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210326T032049.txt
2021-03-26T04:13:55.771Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210326T032049.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos HitmanPro Alert uninstall log 20210326T032049.txt in 31ms
2021-03-26T04:13:55.775Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210324 084326.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210324 084326.txt
2021-03-26T04:13:55.789Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210324 084326.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210324 084326.txt in 15ms
2021-03-26T04:13:55.794Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 065520.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 065520.txt
2021-03-26T04:13:55.804Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 065520.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 065520.txt in 0ms
2021-03-26T04:13:55.809Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 070852.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 070852.txt
2021-03-26T04:13:55.821Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 070852.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 070852.txt in 15ms
2021-03-26T04:13:55.825Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 073717.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 073717.txt
2021-03-26T04:13:55.834Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 073717.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 073717.txt in 0ms
2021-03-26T04:13:55.839Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 075330.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 075330.txt
2021-03-26T04:13:55.846Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 075330.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 075330.txt in 0ms
2021-03-26T04:13:55.850Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 082714.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 082714.txt
2021-03-26T04:13:55.869Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-LoadOrder.txt] finished in 1014ms, exit code 0
2021-03-26T04:13:55.873Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-NICs.txt] running wmic NIC GET
2021-03-26T04:13:55.880Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 082714.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 082714.txt in 31ms
2021-03-26T04:13:55.884Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 085453.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 085453.txt
2021-03-26T04:13:55.893Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 085453.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 085453.txt in 0ms
2021-03-26T04:13:55.897Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 140023.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 140023.txt
2021-03-26T04:13:55.905Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 140023.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 140023.txt in 15ms
2021-03-26T04:13:55.909Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 141806.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 141806.txt
2021-03-26T04:13:55.919Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 141806.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210325 141806.txt in 16ms
2021-03-26T04:13:55.923Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210326 032006.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210326 032006.txt
2021-03-26T04:13:55.961Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210326 032006.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210326 032006.txt in 47ms
2021-03-26T04:13:55.965Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210326 033240.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210326 033240.txt
2021-03-26T04:13:56.030Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210326 033240.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Management Communications System Install Log 20210326 033240.txt in 62ms
2021-03-26T04:13:56.034Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210324 155546.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210324 155546.txt
2021-03-26T04:13:56.053Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210324 155546.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210324 155546.txt in 16ms
2021-03-26T04:13:56.057Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 141646.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 141646.txt
2021-03-26T04:13:56.073Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 141646.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 141646.txt in 16ms
2021-03-26T04:13:56.077Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 150117.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 150117.txt
2021-03-26T04:13:56.082Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 150117.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 150117.txt in 0ms
2021-03-26T04:13:56.086Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 160251.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 160251.txt
2021-03-26T04:13:56.097Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 160251.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 160251.txt in 0ms
2021-03-26T04:13:56.101Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 212556.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 212556.txt
2021-03-26T04:13:56.109Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 212556.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210325 212556.txt in 0ms
2021-03-26T04:13:56.113Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210326 104021.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210326 104021.txt
2021-03-26T04:13:56.179Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210326 104021.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Install Log 20210326 104021.txt in 78ms
2021-03-26T04:13:56.183Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Uninstall Log 20210326 102031.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Uninstall Log 20210326 102031.txt
2021-03-26T04:13:56.192Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Uninstall Log 20210326 102031.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Uninstall Log 20210326 102031.txt in 0ms
2021-03-26T04:13:56.196Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210324 155546.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210324 155546.txt
2021-03-26T04:13:56.204Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210324 155546.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210324 155546.txt in 0ms
2021-03-26T04:13:56.208Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210324 155547.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210324 155547.txt
2021-03-26T04:13:56.215Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210324 155547.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210324 155547.txt in 15ms
2021-03-26T04:13:56.219Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 141646.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 141646.txt
2021-03-26T04:13:56.245Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 141646.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 141646.txt in 32ms
2021-03-26T04:13:56.249Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 150118.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 150118.txt
2021-03-26T04:13:56.259Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 150118.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 150118.txt in 15ms
2021-03-26T04:13:56.263Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 160251.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 160251.txt
2021-03-26T04:13:56.350Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 160251.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 160251.txt in 78ms
2021-03-26T04:13:56.355Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 212556.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 212556.txt
2021-03-26T04:13:56.369Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 212556.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210325 212556.txt in 15ms
2021-03-26T04:13:56.373Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210326 104022.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210326 104022.txt
2021-03-26T04:13:56.388Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210326 104022.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos ML Engine Validator Log 20210326 104022.txt in 16ms
2021-03-26T04:13:56.392Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210324 155549.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210324 155549.txt
2021-03-26T04:13:56.432Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210324 155549.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210324 155549.txt in 47ms
2021-03-26T04:13:56.436Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 141647.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 141647.txt
2021-03-26T04:13:56.468Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 141647.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 141647.txt in 31ms
2021-03-26T04:13:56.472Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 150118.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 150118.txt
2021-03-26T04:13:56.497Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 150118.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 150118.txt in 31ms
2021-03-26T04:13:56.501Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 160251.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 160251.txt
2021-03-26T04:13:56.550Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 160251.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 160251.txt in 47ms
2021-03-26T04:13:56.555Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 212557.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 212557.txt
2021-03-26T04:13:56.653Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 212557.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210325 212557.txt in 93ms
2021-03-26T04:13:56.657Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210326 104022.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210326 104022.txt
2021-03-26T04:13:56.818Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210326 104022.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Install Log 20210326 104022.txt in 156ms
2021-03-26T04:13:56.822Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_06_55_47Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_06_55_47Z.log
2021-03-26T04:13:56.852Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_06_55_47Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_06_55_47Z.log in 31ms
2021-03-26T04:13:56.856Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_07_37_45Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_07_37_45Z.log
2021-03-26T04:13:56.882Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_07_37_45Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_07_37_45Z.log in 31ms
2021-03-26T04:13:56.886Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_08_27_41Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_08_27_41Z.log
2021-03-26T04:13:56.924Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_08_27_41Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_08_27_41Z.log in 31ms
2021-03-26T04:13:56.928Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_14_00_56Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_14_00_56Z.log
2021-03-26T04:13:56.949Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_14_00_56Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_25_14_00_56Z.log in 16ms
2021-03-26T04:13:56.953Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_26_03_20_41Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_26_03_20_41Z.log
2021-03-26T04:13:57.022Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_26_03_20_41Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Network Threat Protection Uninstall 2021_03_26_03_20_41Z.log in 78ms
2021-03-26T04:13:57.026Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210324 084301Z.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210324 084301Z.txt
2021-03-26T04:13:57.041Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210324 084301Z.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210324 084301Z.txt in 15ms
2021-03-26T04:13:57.045Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 070820Z.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 070820Z.txt
2021-03-26T04:13:57.061Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 070820Z.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 070820Z.txt in 16ms
2021-03-26T04:13:57.065Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 075311Z.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 075311Z.txt
2021-03-26T04:13:57.083Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 075311Z.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 075311Z.txt in 15ms
2021-03-26T04:13:57.087Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 085435Z.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 085435Z.txt
2021-03-26T04:13:57.103Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 085435Z.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 085435Z.txt in 16ms
2021-03-26T04:13:57.108Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 141752Z.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 141752Z.txt
2021-03-26T04:13:57.121Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 141752Z.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210325 141752Z.txt in 15ms
2021-03-26T04:13:57.125Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210326 033149Z.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210326 033149Z.txt
2021-03-26T04:13:57.206Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210326 033149Z.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 install log 20210326 033149Z.txt in 78ms
2021-03-26T04:13:57.210Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210324 084301Z.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210324 084301Z.txt
2021-03-26T04:13:57.230Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210324 084301Z.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210324 084301Z.txt in 15ms
2021-03-26T04:13:57.234Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 070820Z.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 070820Z.txt
2021-03-26T04:13:57.245Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 070820Z.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 070820Z.txt in 16ms
2021-03-26T04:13:57.250Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 075310Z.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 075310Z.txt
2021-03-26T04:13:57.258Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 075310Z.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 075310Z.txt in 16ms
2021-03-26T04:13:57.262Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 085435Z.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 085435Z.txt
2021-03-26T04:13:57.275Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 085435Z.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 085435Z.txt in 15ms
2021-03-26T04:13:57.278Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 141752Z.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 141752Z.txt
2021-03-26T04:13:57.280Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 141752Z.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210325 141752Z.txt in 0ms
2021-03-26T04:13:57.284Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210326 033149Z.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210326 033149Z.txt
2021-03-26T04:13:57.293Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210326 033149Z.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos SDU 6.7.306.0 setup log 20210326 033149Z.txt in 16ms
2021-03-26T04:13:57.297Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210326 102019.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210326 102019.txt
2021-03-26T04:13:57.309Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210326 102019.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210326 102019.txt in 15ms
2021-03-26T04:13:57.313Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210324 154740.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210324 154740.txt
2021-03-26T04:13:57.325Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210324 154740.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210324 154740.txt in 16ms
2021-03-26T04:13:57.329Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 140855.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 140855.txt
2021-03-26T04:13:57.346Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 140855.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 140855.txt in 16ms
2021-03-26T04:13:57.350Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 145333.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 145333.txt
2021-03-26T04:13:57.362Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 145333.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 145333.txt in 0ms
2021-03-26T04:13:57.366Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 155457.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 155457.txt
2021-03-26T04:13:57.386Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 155457.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 155457.txt in 15ms
2021-03-26T04:13:57.390Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 211810.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 211810.txt
2021-03-26T04:13:57.553Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 211810.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210325 211810.txt in 172ms
2021-03-26T04:13:57.557Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210326 103243.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210326 103243.txt
2021-03-26T04:13:57.881Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-NICs.txt] finished in 2013ms, exit code 0
2021-03-26T04:13:57.935Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210326 103243.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Install Log 20210326 103243.txt in 374ms
2021-03-26T04:13:57.940Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210324 154748.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210324 154748.txt
2021-03-26T04:13:57.941Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-NetLogin.txt] running wmic NETLOGIN GET Name,Comment,Description,HomeDirectory,LastLogoff,LastLogon,NumberOfLogons,BadPasswordCount,AccountExpires /FORMAT:TEXTVALUELIST:"sortby=Name"
2021-03-26T04:13:57.957Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210324 154748.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210324 154748.txt in 32ms
2021-03-26T04:13:57.961Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 140856.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 140856.txt
2021-03-26T04:13:57.972Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 140856.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 140856.txt in 0ms
2021-03-26T04:13:57.976Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 145334.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 145334.txt
2021-03-26T04:13:57.987Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 145334.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 145334.txt in 0ms
2021-03-26T04:13:57.991Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 155458.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 155458.txt
2021-03-26T04:13:58.005Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 155458.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 155458.txt in 15ms
2021-03-26T04:13:58.010Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 211811.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 211811.txt
2021-03-26T04:13:58.021Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 211811.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210325 211811.txt in 16ms
2021-03-26T04:13:58.025Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210326 103244.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210326 103244.txt
2021-03-26T04:13:58.044Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210326 103244.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos Standalone Engine Validator Log 20210326 103244.txt in 16ms
2021-03-26T04:13:58.048Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210324 154809.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210324 154809.txt
2021-03-26T04:13:58.101Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210324 154809.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210324 154809.txt in 62ms
2021-03-26T04:13:58.105Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 140912.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 140912.txt
2021-03-26T04:13:58.205Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 140912.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 140912.txt in 94ms
2021-03-26T04:13:58.209Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 145348.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 145348.txt
2021-03-26T04:13:58.242Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 145348.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 145348.txt in 31ms
2021-03-26T04:13:58.246Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 155513.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 155513.txt
2021-03-26T04:13:58.271Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 155513.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 155513.txt in 32ms
2021-03-26T04:13:58.274Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 211825.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 211825.txt
2021-03-26T04:13:58.331Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 211825.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210325 211825.txt in 46ms
2021-03-26T04:13:58.335Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210326 103258.txt] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210326 103258.txt
2021-03-26T04:13:58.492Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210326 103258.txt] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Install Log 20210326 103258.txt in 156ms
2021-03-26T04:13:58.496Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_06_55_10Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_06_55_10Z.log
2021-03-26T04:13:58.538Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_06_55_10Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_06_55_10Z.log in 47ms
2021-03-26T04:13:58.541Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_07_37_07Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_07_37_07Z.log
2021-03-26T04:13:58.573Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_07_37_07Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_07_37_07Z.log in 31ms
2021-03-26T04:13:58.577Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_08_27_04Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_08_27_04Z.log
2021-03-26T04:13:58.647Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_08_27_04Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_08_27_04Z.log in 78ms
2021-03-26T04:13:58.650Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_14_00_12Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_14_00_12Z.log
2021-03-26T04:13:58.741Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_14_00_12Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_25_14_00_12Z.log in 94ms
2021-03-26T04:13:58.744Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_26_03_19_51Z.log] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_26_03_19_51Z.log
2021-03-26T04:13:58.932Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_26_03_19_51Z.log] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos UI Uninstall 2021_03_26_03_19_51Z.log in 187ms
2021-03-26T04:13:58.936Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos_ESH_State_210325_032005.json] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos_ESH_State_210325_032005.json
2021-03-26T04:13:58.950Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos_ESH_State_210325_032005.json] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos_ESH_State_210325_032005.json in 15ms
2021-03-26T04:13:58.954Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos_ESH_State_210325_081301.json] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos_ESH_State_210325_081301.json
2021-03-26T04:13:58.973Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos_ESH_State_210325_081301.json] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos_ESH_State_210325_081301.json in 32ms
2021-03-26T04:13:58.976Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos_ESH_State_210326_041251.json] collecting C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos_ESH_State_210326_041251.json
2021-03-26T04:13:58.977Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos_ESH_State_210326_041251.json] collected C:\Users\BANG ADMIN\AppData\Local\Temp\Sophos_ESH_State_210326_041251.json in 0ms
2021-03-26T04:13:58.979Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\Temp\Sophos*]: no files found
2021-03-26T04:13:58.979Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SYSTEMDRIVE%\PMDEBUGLOGS\*]: no files found
2021-03-26T04:13:58.980Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\ICD*.tmp]: no files found
2021-03-26T04:13:58.980Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\MsiPureMessage*.log]: no files found
2021-03-26T04:13:58.980Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%TEMP%\PureMessage*.txt]: no files found
2021-03-26T04:13:58.980Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\MMex\InstallPath]\Config\LastKnown\*.xml]: no files found
2021-03-26T04:13:58.980Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[[HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\MMex\InstallPath]\logs\*.log]: no files found
2021-03-26T04:13:58.981Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKCU-Software-Utimaco.xml] collected REG-HKCU-Software-Utimaco.xml in 0ms
2021-03-26T04:13:58.983Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Policies-Utimaco.xml] collected REG-HKLM-Software-Policies-Utimaco.xml in 0ms
2021-03-26T04:13:58.986Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-System-CurrentControlSet-Utimaco.xml] collected REG-HKLM-System-CurrentControlSet-Utimaco.xml in 0ms
2021-03-26T04:13:58.988Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-Utimaco.xml] collected REG-HKLM-Software-Utimaco.xml in 0ms
2021-03-26T04:13:58.990Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-GOM.txt] running "%PROGRAMFILESX86%\Sophos\SafeGuard Enterprise\FileEncryption\FETool.exe" GOM
2021-03-26T04:13:58.990Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:58.991Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-GOM.txt] FAILED in 0ms, exit code 1
2021-03-26T04:13:58.991Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-RLI-A.txt] running "%PROGRAMFILESX86%\Sophos\SafeGuard Enterprise\FileEncryption\FETool.exe" RLI -A
2021-03-26T04:13:58.992Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:58.992Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-RLI-A.txt] FAILED in 0ms, exit code 1
2021-03-26T04:13:58.992Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-RLS.txt] running "%PROGRAMFILESX86%\Sophos\SafeGuard Enterprise\FileEncryption\FETool.exe" RLS
2021-03-26T04:13:58.993Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:58.993Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-RLS.txt] FAILED in 0ms, exit code 1
2021-03-26T04:13:58.994Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-SGE-A-A.txt] running "%PROGRAMFILESX86%\Sophos\SafeGuard Enterprise\FileEncryption\FETool.exe" SGE -A -A
2021-03-26T04:13:58.994Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:58.994Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-SGE-A-A.txt] FAILED in 0ms, exit code 1
2021-03-26T04:13:58.995Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-SGE-A-I.txt] running "%PROGRAMFILESX86%\Sophos\SafeGuard Enterprise\FileEncryption\FETool.exe" SGE -A -I
2021-03-26T04:13:58.995Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:58.995Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-SGE-A-I.txt] FAILED in 0ms, exit code 1
2021-03-26T04:13:58.996Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-SGE-A-P.txt] running "%PROGRAMFILESX86%\Sophos\SafeGuard Enterprise\FileEncryption\FETool.exe" SGE -A -P
2021-03-26T04:13:58.996Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:58.996Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-SGE-A-P.txt] FAILED in 0ms, exit code 1
2021-03-26T04:13:58.997Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-SGE-A-R.txt] running "%PROGRAMFILESX86%\Sophos\SafeGuard Enterprise\FileEncryption\FETool.exe" SGE -A -R
2021-03-26T04:13:58.997Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:58.997Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-SGE-A-R.txt] FAILED in 0ms, exit code 1
2021-03-26T04:13:58.998Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-SGE-A-T.txt] running "%PROGRAMFILESX86%\Sophos\SafeGuard Enterprise\FileEncryption\FETool.exe" SGE -A -T
2021-03-26T04:13:58.998Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:58.998Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-FETool-SGE-A-T.txt] FAILED in 0ms, exit code 1
2021-03-26T04:13:58.999Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-Safeguard-SGNState.txt] running "%PROGRAMFILESX86%\Sophos\SafeGuard Enterprise\Client\SGNState.exe" /LD
2021-03-26T04:13:58.999Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:58.999Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-Safeguard-SGNState.txt] FAILED in 0ms, exit code 1
2021-03-26T04:13:59.000Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-Safeguard-SyncEncPolicy.txt] running "%PROGRAMFILESX86%\Sophos\SafeGuard Enterprise\FileEncryption\ShowSyncEncPolicy.exe" -A
2021-03-26T04:13:59.000Z [ 1432: 404] [v6.7.306.0] WARN CreateProcess: 2
2021-03-26T04:13:59.001Z [ 1432: 404] [v6.7.306.0] INFO SafeGuardEnterprise[SDU-Safeguard-SyncEncPolicy.txt] FAILED in 0ms, exit code 1
2021-03-26T04:13:59.001Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Utimaco\SafeGuard Enterprise\Import\*]: no files found
2021-03-26T04:13:59.001Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Utimaco\SafeGuard Enterprise\LocalCache\*]: no files found
2021-03-26T04:13:59.001Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Utimaco\SafeGuard Enterprise\logfile.sgt]: no files found
2021-03-26T04:13:59.001Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SystemDrive%\Sophos\Computer Security Scan\Console.log]: no files found
2021-03-26T04:13:59.001Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SystemDrive%\Sophos\Computer Security Scan\SCSS_Share\Config.ini]: no files found
2021-03-26T04:13:59.002Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SystemDrive%\Sophos\Computer Security Scan\Report\Published\*.html]: no files found
2021-03-26T04:13:59.002Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SystemDrive%\Sophos\Computer Security Scan\SUM\SUM_Status.xml]: no files found
2021-03-26T04:13:59.002Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SystemDrive%\Sophos\Computer Security Scan\SUM\config.xml]: no files found
2021-03-26T04:13:59.002Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SystemDrive%\Sophos\Computer Security Scan Client\config.ini]: no files found
2021-03-26T04:13:59.002Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SystemDrive%\Sophos\Computer Security Scan Client\SCSSCLOG.txt]: no files found
2021-03-26T04:13:59.002Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%USERPROFILE%\local settings\temp\scssclog*.txt]: no files found
2021-03-26T04:13:59.002Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SystemDrive%\svsc_10\SavScanController.*]: no files found
2021-03-26T04:13:59.002Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SystemDrive%\svsc_10\*.cfg]: no files found
2021-03-26T04:13:59.002Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SystemDrive%\svsc_20\SavScanController.*]: no files found
2021-03-26T04:13:59.002Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SystemDrive%\svsc_20\*.cfg]: no files found
2021-03-26T04:13:59.002Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\SLD\*]: no files found
2021-03-26T04:13:59.005Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-1505bd5c-f726-41de-bdab-6ba3066a51e0.json] collecting C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-1505bd5c-f726-41de-bdab-6ba3066a51e0.json
2021-03-26T04:13:59.032Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-1505bd5c-f726-41de-bdab-6ba3066a51e0.json] collected C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-1505bd5c-f726-41de-bdab-6ba3066a51e0.json in 15ms
2021-03-26T04:13:59.036Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-233cb0d5-c926-4813-b4d0-af6e32a87386.json] collecting C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-233cb0d5-c926-4813-b4d0-af6e32a87386.json
2021-03-26T04:13:59.045Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-233cb0d5-c926-4813-b4d0-af6e32a87386.json] collected C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-233cb0d5-c926-4813-b4d0-af6e32a87386.json in 0ms
2021-03-26T04:13:59.049Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-96829721-9712-4f13-ad05-e02e4e7d87eb.json] collecting C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-96829721-9712-4f13-ad05-e02e4e7d87eb.json
2021-03-26T04:13:59.050Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-96829721-9712-4f13-ad05-e02e4e7d87eb.json] collected C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-96829721-9712-4f13-ad05-e02e4e7d87eb.json in 0ms
2021-03-26T04:13:59.054Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-9ee53569-357b-4422-ad3e-11b4e7de1ae1.json] collecting C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-9ee53569-357b-4422-ad3e-11b4e7de1ae1.json
2021-03-26T04:13:59.067Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-9ee53569-357b-4422-ad3e-11b4e7de1ae1.json] collected C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-9ee53569-357b-4422-ad3e-11b4e7de1ae1.json in 15ms
2021-03-26T04:13:59.072Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-b59dfe22-3fd5-4afa-8dd6-44a9543dbeed.json] collecting C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-b59dfe22-3fd5-4afa-8dd6-44a9543dbeed.json
2021-03-26T04:13:59.080Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-b59dfe22-3fd5-4afa-8dd6-44a9543dbeed.json] collected C:\ProgramData\Sophos\Health\Event Store\Trail\2021-03-26T034055Z-b59dfe22-3fd5-4afa-8dd6-44a9543dbeed.json in 16ms
2021-03-26T04:13:59.084Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Event Store\Trail\794e4cf8-e8c7-4190-8e24-a5b6a741601a.json] collecting C:\ProgramData\Sophos\Health\Event Store\Trail\794e4cf8-e8c7-4190-8e24-a5b6a741601a.json
2021-03-26T04:13:59.085Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Health\Event Store\Trail\794e4cf8-e8c7-4190-8e24-a5b6a741601a.json] collected C:\ProgramData\Sophos\Health\Event Store\Trail\794e4cf8-e8c7-4190-8e24-a5b6a741601a.json in 0ms
2021-03-26T04:13:59.089Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Config\EPH.conf] collecting C:\ProgramData\Sophos\Endpoint Defense\Config\EPH.conf
2021-03-26T04:13:59.089Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Config\EPH.conf] collected C:\ProgramData\Sophos\Endpoint Defense\Config\EPH.conf in 0ms
2021-03-26T04:13:59.092Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Config\SXA.conf] collecting C:\ProgramData\Sophos\Endpoint Defense\Config\SXA.conf
2021-03-26T04:13:59.092Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Config\SXA.conf] collected C:\ProgramData\Sophos\Endpoint Defense\Config\SXA.conf in 0ms
2021-03-26T04:13:59.094Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Endpoint Defense\Config\*.dat]: no files found
2021-03-26T04:13:59.096Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Config\Rules\RCA-binary-load.dat] collecting C:\ProgramData\Sophos\Endpoint Defense\Config\Rules\RCA-binary-load.dat
2021-03-26T04:13:59.114Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Config\Rules\RCA-binary-load.dat] collected C:\ProgramData\Sophos\Endpoint Defense\Config\Rules\RCA-binary-load.dat in 16ms
2021-03-26T04:13:59.117Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Endpoint Defense\Data\Edr Saved Data\Backup\*.dat]: no files found
2021-03-26T04:13:59.118Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Data\LuaTelemetry\LuaTelemetry-2021-03-26_10-42-02_318.dat] collecting C:\ProgramData\Sophos\Endpoint Defense\Data\LuaTelemetry\LuaTelemetry-2021-03-26_10-42-02_318.dat
2021-03-26T04:13:59.150Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Data\LuaTelemetry\LuaTelemetry-2021-03-26_10-42-02_318.dat] collected C:\ProgramData\Sophos\Endpoint Defense\Data\LuaTelemetry\LuaTelemetry-2021-03-26_10-42-02_318.dat in 31ms
2021-03-26T04:13:59.155Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Data\LuaTelemetry\LuaTelemetry-2021-03-26_11-01-09_501.dat] collecting C:\ProgramData\Sophos\Endpoint Defense\Data\LuaTelemetry\LuaTelemetry-2021-03-26_11-01-09_501.dat
2021-03-26T04:13:59.156Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Endpoint Defense\Data\LuaTelemetry\LuaTelemetry-2021-03-26_11-01-09_501.dat] collected C:\ProgramData\Sophos\Endpoint Defense\Data\LuaTelemetry\LuaTelemetry-2021-03-26_11-01-09_501.dat in 0ms
2021-03-26T04:13:59.160Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Defense\SophosED.inf] collecting C:\Program Files\Sophos\Endpoint Defense\SophosED.inf
2021-03-26T04:13:59.212Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Defense\SophosED.inf] collected C:\Program Files\Sophos\Endpoint Defense\SophosED.inf in 47ms
2021-03-26T04:13:59.215Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Defense\SophosED.inf] collecting C:\Program Files\Sophos\Endpoint Defense\SophosED.inf
2021-03-26T04:13:59.215Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Endpoint Defense\SophosED.inf] collected C:\Program Files\Sophos\Endpoint Defense\SophosED.inf in 0ms
2021-03-26T04:13:59.218Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Heartbeat\Config\Heartbeat.xml] collecting C:\ProgramData\Sophos\Heartbeat\Config\Heartbeat.xml
2021-03-26T04:13:59.218Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Heartbeat\Config\Heartbeat.xml] collected C:\ProgramData\Sophos\Heartbeat\Config\Heartbeat.xml in 0ms
2021-03-26T04:13:59.221Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Heartbeat\Logs\Heartbeat.log] collecting C:\ProgramData\Sophos\Heartbeat\Logs\Heartbeat.log
2021-03-26T04:13:59.221Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Heartbeat\Logs\Heartbeat.log] collected C:\ProgramData\Sophos\Heartbeat\Logs\Heartbeat.log in 0ms
2021-03-26T04:13:59.224Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Heartbeat\Persist\ObjectNames] collecting C:\ProgramData\Sophos\Heartbeat\Persist\ObjectNames
2021-03-26T04:13:59.225Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Heartbeat\Persist\ObjectNames] collected C:\ProgramData\Sophos\Heartbeat\Persist\ObjectNames in 0ms
2021-03-26T04:13:59.228Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\UpdateCache\Config\*]: no files found
2021-03-26T04:13:59.228Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\UpdateCache\Status\*]: no files found
2021-03-26T04:13:59.228Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\File Integrity Monitoring\Config\*]: no files found
2021-03-26T04:13:59.229Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\HitmanPro.Alert\hmpalert.bf] collecting C:\ProgramData\HitmanPro.Alert\hmpalert.bf
2021-03-26T04:13:59.244Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\HitmanPro.Alert\hmpalert.bf] collected C:\ProgramData\HitmanPro.Alert\hmpalert.bf in 16ms
2021-03-26T04:13:59.246Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\HitmanPro.Alert\Logs\Sophos.log] collecting C:\ProgramData\HitmanPro.Alert\Logs\Sophos.log
2021-03-26T04:13:59.400Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\HitmanPro.Alert\Logs\Sophos.log] collected C:\ProgramData\HitmanPro.Alert\Logs\Sophos.log in 156ms
2021-03-26T04:13:59.403Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\HitmanPro.Alert\integrity.dat] collecting C:\Program Files\HitmanPro.Alert\integrity.dat
2021-03-26T04:13:59.419Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\HitmanPro.Alert\integrity.dat] collected C:\Program Files\HitmanPro.Alert\integrity.dat in 15ms
2021-03-26T04:13:59.421Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\HitmanPro.Alert\integrity.dat] collecting C:\Program Files\HitmanPro.Alert\integrity.dat
2021-03-26T04:13:59.421Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\HitmanPro.Alert\integrity.dat] collected C:\Program Files\HitmanPro.Alert\integrity.dat in 0ms
2021-03-26T04:13:59.426Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-HitmanProAlert.xml] collected REG-HKLM-Software-HitmanProAlert.xml in 16ms
2021-03-26T04:13:59.428Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Clean\Logs\Clean.log] collecting C:\ProgramData\Sophos\Clean\Logs\Clean.log
2021-03-26T04:13:59.429Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Clean\Logs\Clean.log] collected C:\ProgramData\Sophos\Clean\Logs\Clean.log in 0ms
2021-03-26T04:13:59.431Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Clean\integrity.dat] collecting C:\Program Files\Sophos\Clean\integrity.dat
2021-03-26T04:13:59.431Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Clean\integrity.dat] collected C:\Program Files\Sophos\Clean\integrity.dat in 0ms
2021-03-26T04:13:59.433Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Clean\integrity.dat] collecting C:\Program Files\Sophos\Clean\integrity.dat
2021-03-26T04:13:59.433Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\Program Files\Sophos\Clean\integrity.dat] collected C:\Program Files\Sophos\Clean\integrity.dat in 0ms
2021-03-26T04:13:59.436Z [ 1432: 404] [v6.7.306.0] INFO CollectReg[REG-HKLM-Software-SophosClean.xml] collected REG-HKLM-Software-SophosClean.xml in 0ms
2021-03-26T04:13:59.445Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos UI\logs\SophosUI.Net.log] collecting C:\ProgramData\Sophos\Sophos UI\logs\SophosUI.Net.log
2021-03-26T04:13:59.445Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos UI\logs\SophosUI.Net.log] collected C:\ProgramData\Sophos\Sophos UI\logs\SophosUI.Net.log in 0ms
2021-03-26T04:13:59.448Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos UI\logs\telemetry\SophosUITelemetryLog.sess1.20210326T03.json] collecting C:\ProgramData\Sophos\Sophos UI\logs\telemetry\SophosUITelemetryLog.sess1.20210326T03.json
2021-03-26T04:13:59.448Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos UI\logs\telemetry\SophosUITelemetryLog.sess1.20210326T03.json] collected C:\ProgramData\Sophos\Sophos UI\logs\telemetry\SophosUITelemetryLog.sess1.20210326T03.json in 0ms
2021-03-26T04:13:59.451Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos UI\logs\telemetry\SophosUITelemetryLog.sess1.20210326T04.json] collecting C:\ProgramData\Sophos\Sophos UI\logs\telemetry\SophosUITelemetryLog.sess1.20210326T04.json
2021-03-26T04:13:59.452Z [ 1432: 404] [v6.7.306.0] INFO CollectFiles[C:\ProgramData\Sophos\Sophos UI\logs\telemetry\SophosUITelemetryLog.sess1.20210326T04.json] collected C:\ProgramData\Sophos\Sophos UI\logs\telemetry\SophosUITelemetryLog.sess1.20210326T04.json in 0ms
2021-03-26T04:13:59.454Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\MessageRelay\Config\*]: no files found
2021-03-26T04:13:59.454Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\MessageRelay\Status\*]: no files found
2021-03-26T04:13:59.454Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMDATA%\Sophos\Policy Evaluation Tool\Logs\*]: no files found
2021-03-26T04:13:59.455Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%WINDIR%\Temp\scmt*.log]: no files found
2021-03-26T04:13:59.455Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILESX86%\Sophos\Cloud Migration Tool\*.config]: no files found
2021-03-26T04:13:59.455Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%PROGRAMFILES%\Sophos\Cloud Migration Tool\*.config]: no files found
2021-03-26T04:13:59.455Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SYSTEMROOT%\System32\winevt\Logs\Sophos-SVE-*.evtx]: no files found
2021-03-26T04:13:59.455Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SGVM_INSTALL_DIR%Sophos for Virtual Environments\SGVM Scanning Service\SGVMScanningServiceEtw.man]: no files found
2021-03-26T04:13:59.455Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SGVM_INSTALL_DIR%Sophos for Virtual Environments\SGVM Scanning Service\SGVMScanningIntegrationServiceETW.man]: no files found
2021-03-26T04:13:59.455Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SGVM_INSTALL_DIR%Sophos for Virtual Environments\SGVM Management Service\SGVMManagementServiceEtw.man]: no files found
2021-03-26T04:13:59.455Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%SGVM_INSTALL_DIR%Sophos for Virtual Environments\SGVM Deployment Service\SGVMDeploymentServiceEtw.man]: no files found
2021-03-26T04:13:59.455Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Managed Detection and Response\Config\*]: no files found
2021-03-26T04:13:59.458Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Managed Threat Response\Config\*]: no files found
2021-03-26T04:13:59.460Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Live Query\Config\*]: no files found
2021-03-26T04:13:59.462Z [ 1432: 404] [v6.7.306.0] WARN CollectFiles[%COMMON_APPDATA%\Sophos\Sophos AMSI Protection\Logs\*]: no files found
2021-03-26T04:13:59.463Z [ 1432: 404] [v6.7.306.0] INFO CollectRegGroup[REG-HKLM-Software-AMSI.xml] collected REG-HKLM-Software-AMSI.xml in 0ms
2021-03-26T04:14:03.948Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-NetLogin.txt] finished in 6022ms, exit code 0
2021-03-26T04:14:03.951Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-Partitions.txt] running wmic PARTITION GET /FORMAT:TEXTVALUELIST:"sortby=DisplayName"
2021-03-26T04:14:04.048Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-Partitions.txt] finished in 94ms, exit code 0
2021-03-26T04:14:04.051Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-Process.txt] running wmic PROCESS GET Name,CommandLine,HandleCount,ProcessID,ParentProcessID,PageFileUsage,PeakPageFileUsage,WorkingSetSize,PeakWorkingSetSize,ReadTransferCount,WriteTransferCount,ThreadCount,UserModeTime /FORMAT:TEXTVALUELIST:"sortby=Name"
2021-03-26T04:14:10.060Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-Process.txt] finished in 6006ms, exit code 0
2021-03-26T04:14:10.063Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-ProcessList.txt] running wmic process list statistics
2021-03-26T04:14:11.632Z [ 1432: 4540] [v6.7.306.0] INFO schtasks[SDU-Sysinfo-Schtasks.txt] finished in 45053ms, exit code 0
2021-03-26T04:14:18.072Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-ProcessList.txt] finished in 8003ms, exit code 0
2021-03-26T04:14:18.076Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-SecCenter-AV.txt] running wmic /namespace:\\root\SecurityCenter PATH AntiVirusProduct GET /value
2021-03-26T04:14:18.184Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-SecCenter-AV.txt] finished in 109ms, exit code 0
2021-03-26T04:14:18.186Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-SecCenter-FW.txt] running wmic /namespace:\\root\SecurityCenter PATH FirewallProduct GET /value
2021-03-26T04:14:18.258Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-SecCenter-FW.txt] finished in 78ms, exit code 0
2021-03-26T04:14:18.260Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-SecCenter2-AV.txt] running wmic /namespace:\\root\SecurityCenter2 PATH AntiVirusProduct GET /value
2021-03-26T04:14:18.333Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-SecCenter2-AV.txt] finished in 78ms, exit code 0
2021-03-26T04:14:18.335Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-SecCenter2-FW.txt] running wmic /namespace:\\root\SecurityCenter2 PATH FirewallProduct GET /value
2021-03-26T04:14:18.406Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-SecCenter2-FW.txt] finished in 63ms, exit code 0
2021-03-26T04:14:18.408Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-Startup.txt] running wmic STARTUP GET Description,Command,Location,User /FORMAT:TEXTVALUELIST:"sortby=Description"
2021-03-26T04:14:20.953Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-Startup.txt] finished in 2543ms, exit code 0
2021-03-26T04:14:20.956Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-Win32_PnPSignedDriver.txt] running wmic path Win32_PnPSignedDriver
2021-03-26T04:14:51.970Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-Win32_PnPSignedDriver.txt] finished in 31013ms, exit code 0
2021-03-26T04:14:51.975Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-WindowsUpdates.txt] running wmic qfe list
2021-03-26T04:14:52.886Z [ 1432: 1880] [v6.7.306.0] INFO wmic[SDU-WMIC-WindowsUpdates.txt] finished in 921ms, exit code 0
2021-03-26T04:15:06.776Z [ 1432: 5120] [v6.7.306.0] INFO msinfo[SDU-Sysinfo-Msinfo32.nfo] finished in 132632ms, exit code 0
2021-03-26T04:15:06.778Z [ 1432: 5120] [v6.7.306.0] INFO Finished gathering information

Can you confirm first if you have the extended support for win7?
the logs we need here was the AVRemove logs which can be found on temp folder/s and SophosAvti-virus major install logs which can also be found on the same path. 

Can you confirm first if you have the extended support for win7?
the logs we need here was the AVRemove logs which can be found on temp folder/s and SophosAvti-virus major install logs which can also be found on the same path. 

sorry, I don't know where to see the win 7 support, this is what is seen in windows >> properties

I had time to do a manual update as shown below

the following contents of sophos Anti-Virus Major Install Log :

2021-03-26 11:24:37 Info: Running competitor removal tool
2021-03-26 11:24:37 Unable to delete registry value: SOFTWARE\Sophos\AutoUpdate\UpdateStatus\CrtResult, assuming it does not exist
2021-03-26 11:24:37 Searching for third-party security software.
2021-03-26 11:24:42 Return Code 10 from third-party security software removal tool.
2021-03-26 11:24:42 INFO: CRT telemetry Json file does not exist so no need to create plugin key.
2021-03-26 11:24:42 No third-party security software found.
2021-03-26 11:24:42 GetProperty() - Unable to get product-type
2021-03-26 11:24:42 Info: productType: 0
2021-03-26 11:24:42 PROCESSOR_ARCHITECTURE environment variable is: x86
2021-03-26 11:24:42 Info: Logging started: installing/upgrading Sophos Anti-Virus
2021-03-26 11:24:42 Info: InstallFromPath is: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\
2021-03-26 11:24:42 Info: InstallToPath is:
2021-03-26 11:24:42 Info: SAV is not installed. Installing to {InstallToPath}
2021-03-26 11:24:42 INFO: Checking the validity of the VDL manifest file.
2021-03-26 11:24:43 INFO: The manifest file has been successfully validated.
2021-03-26 11:24:43 INFO: Checking the validity of the AppFeed manifest file.
2021-03-26 11:24:43 INFO: The manifest file has been successfully validated.
2021-03-26 11:24:43 Info: Managed install (from SAU)
2021-03-26 11:24:43 Info: MSXML6 is installed
2021-03-26 11:24:43 Check for UI changes
2021-03-26 11:24:43 Info: Performing major update of Sophos Anti-Virus using msi.
2021-03-26 11:24:43 Info: Update is signalled.
2021-03-26 11:24:43 Info: Added SAVService to ServicesList.
2021-03-26 11:24:43 Info: Added SAVAdminService to ServicesList.
2021-03-26 11:24:43 Info: Added Sophos Device Control Service to ServicesList.
2021-03-26 11:24:43 Info: Added SophosBootDriver to ServicesList.
2021-03-26 11:24:43 Info: Added swi_service to ServicesList.
2021-03-26 11:24:43 Info: Added swi_filter to ServicesList.
2021-03-26 11:24:43 Info: Added swi_callout to ServicesList.
2021-03-26 11:24:43 Info: Added swi_update to ServicesList.
2021-03-26 11:24:43 Info: Added swi_update_64 to ServicesList.
2021-03-26 11:24:43 Info: Added Sophos Web Control Service to ServicesList.
2021-03-26 11:24:43 Info: Added SAVOnAccess to ServicesList.
2021-03-26 11:24:43 Info: component SAV is not registered - skipping.
2021-03-26 11:24:43 Info: component SDC is not registered - skipping.
2021-03-26 11:24:43 Info: component SCS is not registered - skipping.
2021-03-26 11:24:43 Info: component SWI is not registered - skipping.
2021-03-26 11:24:43 Info: component SWC is not registered - skipping.
2021-03-26 11:24:43 Info: PutSetupOptionsToRegistry
2021-03-26 11:24:43 Info: Check MSXML
2021-03-26 11:24:43 Info: MSXML6 is installed
2021-03-26 11:24:43 Info: Check boot driver and kms driver
2021-03-26 11:24:43 Info: no existing installation of Sophos Anti-Virus was found
2021-03-26 11:24:43 Info: Restart required for Data Control (clean managed full install)
2021-03-26 11:24:43 Info: Transform file returned:
2021-03-26 11:24:43 Info: SAV Setup plugin: running MsiInstallProduct (C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi, INSTALLDIR="" ARPSYSTEMCOMPONENT=1 REBOOT=ReallySuppress UITYPE=none SYNCMODE=1 PRODUCTTYPE=0 UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1)
=== Verbose logging started: 26/03/2021 11:24:43 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\Cache\sophos_autoupdate1.dir\su-setup32.exe ===
MSI (c) (30:84) [11:24:43:220]: Resetting cached policy values
MSI (c) (30:84) [11:24:43:220]: Machine policy value 'Debug' is 0
MSI (c) (30:84) [11:24:43:220]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi
******* Action:
******* CommandLine: **********
MSI (c) (30:84) [11:24:43:220]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (30:84) [11:24:43:220]: Grabbed execution mutex.
MSI (c) (30:84) [11:24:43:446]: Cloaking enabled.
MSI (c) (30:84) [11:24:43:446]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (30:84) [11:24:43:449]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (40:6C) [11:24:43:477]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi
MSI (s) (40:6C) [11:24:43:477]: Grabbed execution mutex.
MSI (s) (40:A8) [11:24:43:480]: Resetting cached policy values
MSI (s) (40:A8) [11:24:43:480]: Machine policy value 'Debug' is 0
MSI (s) (40:A8) [11:24:43:480]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi
******* Action:
******* CommandLine: **********
MSI (s) (40:A8) [11:24:43:481]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (40:A8) [11:24:43:505]: SRSetRestorePoint skipped for this transaction.
MSI (s) (40:A8) [11:24:43:508]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (s) (40:A8) [11:24:43:511]: File will have security applied from OpCode.
MSI (s) (40:A8) [11:24:43:666]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi' against software restriction policy
MSI (s) (40:A8) [11:24:43:666]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi has a digital signature
MSI (s) (40:A8) [11:24:43:667]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi is permitted to run because the user token authorizes execution (system or service token).
MSI (s) (40:A8) [11:24:43:667]: End dialog not enabled
MSI (s) (40:A8) [11:24:43:667]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi
MSI (s) (40:A8) [11:24:43:667]: Package we're running from ==> C:\Windows\Installer\14feb8.msi
MSI (s) (40:A8) [11:24:43:674]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (40:A8) [11:24:43:675]: APPCOMPAT: looking for appcompat database entry with ProductCode '{31616A98-3852-49E9-BDD6-77A1AB85571A}'.
MSI (s) (40:A8) [11:24:43:675]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (40:A8) [11:24:43:682]: MSCOREE not loaded loading copy from system32
MSI (s) (40:A8) [11:24:43:685]: Machine policy value 'TransformsSecure' is 0
MSI (s) (40:A8) [11:24:43:685]: User policy value 'TransformsAtSource' is 0
MSI (s) (40:A8) [11:24:43:686]: Machine policy value 'DisablePatch' is 0
MSI (s) (40:A8) [11:24:43:686]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (40:A8) [11:24:43:686]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (40:A8) [11:24:43:686]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (40:A8) [11:24:43:686]: APPCOMPAT: looking for appcompat database entry with ProductCode '{31616A98-3852-49E9-BDD6-77A1AB85571A}'.
MSI (s) (40:A8) [11:24:43:686]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (40:A8) [11:24:43:687]: Transforms are not secure.
MSI (s) (40:A8) [11:24:43:687]: Note: 1: 2205 2: 3: Control
MSI (s) (40:A8) [11:24:43:687]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos Anti-Virus Major Install Log_210326_042443.txt'.
MSI (s) (40:A8) [11:24:43:687]: Command Line: INSTALLDIR= ARPSYSTEMCOMPONENT=1 REBOOT=ReallySuppress UITYPE=none SYNCMODE=1 PRODUCTTYPE=0 UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1 CURRENTDIRECTORY=C:\Windows\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=5680
MSI (s) (40:A8) [11:24:43:687]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{DA891FEE-A03E-4AE7-98FD-7F1E6F27DD3B}'.
MSI (s) (40:A8) [11:24:43:687]: Product Code passed to Engine.Initialize: ''
MSI (s) (40:A8) [11:24:43:687]: Product Code from property table before transforms: '{31616A98-3852-49E9-BDD6-77A1AB85571A}'
MSI (s) (40:A8) [11:24:43:687]: Product Code from property table after transforms: '{31616A98-3852-49E9-BDD6-77A1AB85571A}'
MSI (s) (40:A8) [11:24:43:687]: Product not registered: beginning first-time install
MSI (s) (40:A8) [11:24:43:687]: Product {31616A98-3852-49E9-BDD6-77A1AB85571A} is not managed.
MSI (s) (40:A8) [11:24:43:687]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (40:A8) [11:24:43:687]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (40:A8) [11:24:43:687]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (40:A8) [11:24:43:687]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (40:A8) [11:24:43:687]: Adding new sources is allowed.
MSI (s) (40:A8) [11:24:43:687]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (40:A8) [11:24:43:688]: Package name extracted from package path: 'Sophos Anti-Virus.msi'
MSI (s) (40:A8) [11:24:43:688]: Package to be registered: 'Sophos Anti-Virus.msi'
MSI (s) (40:A8) [11:24:43:689]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (40:A8) [11:24:43:689]: Machine policy value 'DisableMsi' is 0
MSI (s) (40:A8) [11:24:43:689]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (40:A8) [11:24:43:689]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (40:A8) [11:24:43:689]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (40:A8) [11:24:43:689]: Running product '{31616A98-3852-49E9-BDD6-77A1AB85571A}' with elevated privileges: Product is assigned.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Adding ARPSYSTEMCOMPONENT property. Its value is '1'.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Modifying UITYPE property. Its current value is 'full'. Its new value: 'none'.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Modifying SYNCMODE property. Its current value is '0'. Its new value: '1'.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Modifying UPDATECLASSFILTER property. Its current value is '0'. Its new value: '1'.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Adding UPDATEKMSDRIVERS property. Its value is '1'.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Adding RECOVERYMODE property. Its value is '0'.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Modifying DATACONTROL property. Its current value is '0'. Its new value: '1'.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Modifying DEVICECONTROL property. Its current value is '0'. Its new value: '1'.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Adding WEBCONTROL property. Its value is '1'.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Windows\system32'.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '5680'.
MSI (s) (40:A8) [11:24:43:689]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (40:A8) [11:24:43:689]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
MSI (s) (40:A8) [11:24:43:689]: TRANSFORMS property is now:
MSI (s) (40:A8) [11:24:43:689]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (s) (40:A8) [11:24:43:691]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming
MSI (s) (40:A8) [11:24:43:692]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites
MSI (s) (40:A8) [11:24:43:693]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (40:A8) [11:24:43:693]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents
MSI (s) (40:A8) [11:24:43:694]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (40:A8) [11:24:43:695]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (40:A8) [11:24:43:695]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (40:A8) [11:24:43:696]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (40:A8) [11:24:43:696]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (40:A8) [11:24:43:697]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local
MSI (s) (40:A8) [11:24:43:698]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures
MSI (s) (40:A8) [11:24:43:699]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (40:A8) [11:24:43:700]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (40:A8) [11:24:43:700]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (40:A8) [11:24:43:701]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (40:A8) [11:24:43:701]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (40:A8) [11:24:43:703]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (40:A8) [11:24:43:703]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (40:A8) [11:24:43:704]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (40:A8) [11:24:43:705]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (40:A8) [11:24:43:706]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop
MSI (s) (40:A8) [11:24:43:707]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (40:A8) [11:24:43:707]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (s) (40:A8) [11:24:43:707]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (40:A8) [11:24:43:715]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (40:A8) [11:24:43:715]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (40:A8) [11:24:43:715]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (40:A8) [11:24:43:715]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (40:A8) [11:24:43:715]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'SBYJUAL20'.
MSI (s) (40:A8) [11:24:43:715]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (40:A8) [11:24:43:715]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Microsoft'.
MSI (s) (40:A8) [11:24:43:715]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\14feb8.msi'.
MSI (s) (40:A8) [11:24:43:715]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi'.
MSI (s) (40:A8) [11:24:43:715]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (40:A8) [11:24:43:715]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (s) (40:A8) [11:24:43:715]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (40:A8) [11:24:43:716]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (40:A8) [11:24:43:716]: Machine policy value 'DisableRollback' is 0
MSI (s) (40:A8) [11:24:43:716]: User policy value 'DisableRollback' is 0
MSI (s) (40:A8) [11:24:43:716]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
=== Logging started: 26/03/2021 11:24:43 ===
MSI (s) (40:A8) [11:24:43:716]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (40:A8) [11:24:43:716]: Doing action: INSTALL
Action start 11:24:43: INSTALL.
MSI (s) (40:A8) [11:24:43:717]: Running ExecuteSequence
MSI (s) (40:A8) [11:24:43:717]: Doing action: AppSearch
Action start 11:24:43: AppSearch.
MSI (s) (40:A8) [11:24:43:718]: Note: 1: 1322 2:
MSI (s) (40:A8) [11:24:43:718]: Note: 1: 1322 2:
MSI (s) (40:A8) [11:24:43:724]: Note: 1: 1322 2:
MSI (s) (40:A8) [11:24:43:724]: Note: 1: 1322 2:
MSI (s) (40:A8) [11:24:43:726]: Doing action: LaunchConditions
Action ended 11:24:43: AppSearch. Return value 1.
Action start 11:24:43: LaunchConditions.
MSI (s) (40:A8) [11:24:43:727]: Skipping action: TP_CheckRemoveAllowed (condition is false)
MSI (s) (40:A8) [11:24:43:727]: Doing action: FindRelatedProducts
Action ended 11:24:43: LaunchConditions. Return value 1.
MSI (s) (40:A8) [11:24:43:728]: Note: 1: 2205 2: 3: Upgrade
MSI (s) (40:A8) [11:24:43:728]: Note: 1: 2228 2: 3: Upgrade 4: SELECT `UpgradeCode`,`VersionMin`,`VersionMax`,`Language`,`Attributes`,`ActionProperty` FROM `Upgrade`
Action start 11:24:43: FindRelatedProducts.
MSI (s) (40:A8) [11:24:43:728]: Skipping action: CCPSearch (condition is false)
MSI (s) (40:A8) [11:24:43:728]: Skipping action: IsSafeToDowngrade (condition is false)
MSI (s) (40:A8) [11:24:43:728]: Skipping action: RMCCPSearch (condition is false)
MSI (s) (40:A8) [11:24:43:728]: Doing action: ValidateProductID
Action ended 11:24:43: FindRelatedProducts. Return value 0.
Action start 11:24:43: ValidateProductID.
MSI (s) (40:A8) [11:24:43:728]: Doing action: setUserProfileNT
Action ended 11:24:43: ValidateProductID. Return value 1.
MSI (s) (40:A8) [11:24:43:728]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Users\Default'.
Action start 11:24:43: setUserProfileNT.
MSI (s) (40:A8) [11:24:43:729]: Skipping action: SetAllUsersProfileNT (condition is false)
MSI (s) (40:A8) [11:24:43:729]: Doing action: setAllUsersProfile2K
Action ended 11:24:43: setUserProfileNT. Return value 1.
MSI (s) (40:A8) [11:24:43:729]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\ProgramData'.
Action start 11:24:43: setAllUsersProfile2K.
MSI (s) (40:A8) [11:24:43:729]: Doing action: CostInitialize
Action ended 11:24:43: setAllUsersProfile2K. Return value 1.
MSI (s) (40:A8) [11:24:43:729]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (s) (40:A8) [11:24:43:731]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (s) (40:A8) [11:24:43:731]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (40:A8) [11:24:43:731]: Note: 1: 2205 2: 3: Patch
MSI (s) (40:A8) [11:24:43:731]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (40:A8) [11:24:43:731]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (40:A8) [11:24:43:731]: Note: 1: 2205 2: 3: __MsiPatchFileList
MSI (s) (40:A8) [11:24:43:731]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (40:A8) [11:24:43:731]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
MSI (s) (40:A8) [11:24:43:732]: Note: 1: 2205 2: 3: Patch
Action start 11:24:43: CostInitialize.
MSI (s) (40:A8) [11:24:43:732]: Doing action: FileCost
Action ended 11:24:43: CostInitialize. Return value 1.
MSI (s) (40:A8) [11:24:43:732]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (40:A8) [11:24:43:734]: Note: 1: 2205 2: 3: Class
MSI (s) (40:A8) [11:24:43:734]: Note: 1: 2205 2: 3: Extension
MSI (s) (40:A8) [11:24:43:734]: Note: 1: 2205 2: 3: TypeLib
Action start 11:24:43: FileCost.
MSI (s) (40:A8) [11:24:43:735]: Doing action: SetMFC71
Action ended 11:24:43: FileCost. Return value 1.
Action start 11:24:43: SetMFC71.
MSI (s) (40:A8) [11:24:43:735]: Doing action: IsolateComponents
Action ended 11:24:43: SetMFC71. Return value 1.
Action start 11:24:43: IsolateComponents.
MSI (s) (40:A8) [11:24:43:735]: Doing action: CostFinalize
Action ended 11:24:43: IsolateComponents. Return value 0.
MSI (s) (40:A8) [11:24:43:736]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (40:A8) [11:24:43:736]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (40:A8) [11:24:43:736]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (40:A8) [11:24:43:736]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (40:A8) [11:24:43:736]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (40:A8) [11:24:43:736]: Note: 1: 2205 2: 3: Patch
MSI (s) (40:A8) [11:24:43:736]: Note: 1: 2205 2: 3: Condition
MSI (s) (40:A8) [11:24:43:736]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
MSI (s) (40:A8) [11:24:43:736]: PROPERTY CHANGE: Adding newfolder1 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\'.
MSI (s) (40:A8) [11:24:43:736]: PROPERTY CHANGE: Adding newfolder2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\'.
MSI (s) (40:A8) [11:24:43:736]: PROPERTY CHANGE: Adding NEW_DIRECTORY2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding ProgramFiles64Folder property. Its value is 'C:\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'C:\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding GlobalAssemblyCache property. Its value is 'C:\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding CommonFiles64Folder property. Its value is 'C:\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Users\Default'. Its new value: 'C:\Users\Default\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Modifying ALLUSERSPROFILE property. Its current value is 'C:\ProgramData'. Its new value: 'C:\ProgramData\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding System64Folder property. Its value is 'C:\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding SOPHOS property. Its value is 'C:\Program Files\Sophos\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding SOPHOS_ANTI_VIRUS property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding SWIDIRLSP.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\lsp\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding INSTALLDIR_HOME property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding INSTALLDIR_X64 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding INSTALLDIR_WIN32 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding NEW_DIRECTORY1 property. Its value is 'C:\ProgramData\Sophos\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding SOPHOS_TAMPER_PROTECTION property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding LOGS3 property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\logs\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding SOPHOS_DEVICE_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding LOGS2 property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\logs\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding SOPHOS_DATA_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding LOGS1 property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\logs\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding RESOURCES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding RES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding NEW_DIRECTORY3 property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding CACHE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding TEMP property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding DATAOUTPUT property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\DataOutput\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding SAFESTORE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding LOGS property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\logs\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding INFECTED property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding LOW property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\'.
MSI (s) (40:A8) [11:24:43:737]: PROPERTY CHANGE: Adding CONFIG property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (40:A8) [11:24:43:737]: Target path resolution complete. Dumping Directory table...
MSI (s) (40:A8) [11:24:43:737]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: TARGETDIR , Object: C:\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: ProgramMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: newfolder1 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: newfolder2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: StartMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: WindowsVolume , Object: C:\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: WindowsFolder , Object: C:\Windows\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: TemplateFolder , Object: C:\ProgramData\Microsoft\Windows\Templates\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: TempFolder , Object: C:\Windows\TEMP\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: System16Folder , Object: C:\Windows\system\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: StartupFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: SendToFolder , Object: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: ProgramFiles64Folder , Object: C:\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: PrimaryVolumePath , Object: C:\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: LocalAppDataFolder , Object: C:\Windows\system32\config\systemprofile\AppData\Local\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: GlobalAssemblyCache , Object: C:\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: FontsFolder , Object: C:\Windows\Fonts\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: FavoritesFolder , Object: C:\Windows\system32\config\systemprofile\Favorites\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: DesktopFolder , Object: C:\Users\Public\Desktop\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: CommonFiles64Folder , Object: C:\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: AdminToolsFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: USERPROFILE , Object: C:\Users\Default\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: ALLUSERSPROFILE , Object: C:\ProgramData\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: SystemFolder , Object: C:\Windows\system32\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: System64Folder , Object: C:\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: SOPHOS , Object: C:\Program Files\Sophos\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: SOPHOS_ANTI_VIRUS , Object: C:\Program Files\Sophos\Sophos Anti-Virus\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files\Sophos\Sophos Anti-Virus\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\
MSI (s) (40:A8) [11:24:43:737]: Dir (target): Key: SWIDIRLSP.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\lsp\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: INSTALLDIR_HOME , Object: C:\Program Files\Sophos\Sophos Anti-Virus\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: INSTALLDIR_X64 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: INSTALLDIR_WIN32 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: LOGS3 , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\logs\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\Sophos Device Control\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: LOGS2 , Object: C:\ProgramData\Sophos\Sophos Device Control\logs\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\Sophos Data Control\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: LOGS1 , Object: C:\ProgramData\Sophos\Sophos Data Control\logs\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: RESOURCES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: RES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: CACHE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: TEMP , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: DATAOUTPUT , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\DataOutput\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: SAFESTORE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: LOGS , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\logs\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: INFECTED , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: LOW , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\
MSI (s) (40:A8) [11:24:43:738]: Dir (target): Key: CONFIG , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\
MSI (s) (40:A8) [11:24:43:738]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (40:A8) [11:24:43:738]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
Action start 11:24:43: CostFinalize.
MSI (s) (40:A8) [11:24:43:743]: Doing action: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 11:24:43: CostFinalize. Return value 1.
MSI (s) (40:A8) [11:24:43:744]: PROPERTY CHANGE: Modifying SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its current value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'. Its new value: 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
Action start 11:24:43: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (40:A8) [11:24:43:744]: Doing action: SetSwiDirLsp.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 11:24:43: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (40:A8) [11:24:43:745]: PROPERTY CHANGE: Modifying SWIDIRLSP.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its current value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\lsp\'. Its new value: 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
Action start 11:24:43: SetSwiDirLsp.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (40:A8) [11:24:43:745]: Doing action: ResolveSource
Action ended 11:24:43: SetSwiDirLsp.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (40:A8) [11:24:43:745]: Resolving source.
MSI (s) (40:A8) [11:24:43:745]: Resolving source to launched-from source.
MSI (s) (40:A8) [11:24:43:745]: Setting launched-from source as last-used.
MSI (s) (40:A8) [11:24:43:745]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\'.
MSI (s) (40:A8) [11:24:43:745]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\'.
MSI (s) (40:A8) [11:24:43:745]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{31616A98-3852-49E9-BDD6-77A1AB85571A}'.
MSI (s) (40:A8) [11:24:43:745]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\
MSI (s) (40:A8) [11:24:43:745]: SOURCEDIR product ==> {31616A98-3852-49E9-BDD6-77A1AB85571A}
MSI (s) (40:A8) [11:24:43:745]: Determining source type
MSI (s) (40:A8) [11:24:43:746]: Source type from package 'Sophos Anti-Virus.msi': 0
MSI (s) (40:A8) [11:24:43:746]: Source path resolution complete. Dumping Directory table...
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: TARGETDIR , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\ , LongSubPath: , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: ProgramMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Programs\ , LongSubPath: Programs\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: newfolder1 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Programs\Sophos\ , LongSubPath: Programs\Sophos\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: newfolder2 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Programs\Sophos\Sophos Endpoint Security and Control\ , LongSubPath: Programs\Sophos\Sophos Endpoint Security and Control\ , ShortSubPath: Programs\Sophos\SOPHOS~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: StartMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Start Menu\ , LongSubPath: Start Menu\ , ShortSubPath: STARTM~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Start Menu\Sophos\ , LongSubPath: Start Menu\Sophos\ , ShortSubPath: STARTM~1\Sophos\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: WindowsVolume , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\WinRoot\ , LongSubPath: WinRoot\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: WindowsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: TemplateFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\ShellNew\ , LongSubPath: ShellNew\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: TempFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Temp\ , LongSubPath: Temp\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: System16Folder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\System\ , LongSubPath: System\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: StartupFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\StartUp\ , LongSubPath: StartUp\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: SendToFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\SendTo\ , LongSubPath: SendTo\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: ProgramFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Program Files 64\ , LongSubPath: Program Files 64\ , ShortSubPath: Prog64~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: PrimaryVolumePath , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\PrimaryVolumePath\ , LongSubPath: PrimaryVolumePath\ , ShortSubPath: Primar~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: LocalAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\LocalAppData\ , LongSubPath: LocalAppData\ , ShortSubPath: LocalA~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: GlobalAssemblyCache , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\GlobalAssemblyCache\ , LongSubPath: GlobalAssemblyCache\ , ShortSubPath: Global~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: FontsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Fonts\ , LongSubPath: Fonts\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: FavoritesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Favorites\ , LongSubPath: Favorites\ , ShortSubPath: FAVORI~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: DesktopFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Desktop\ , LongSubPath: Desktop\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: CommonFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Common64\ , LongSubPath: Common64\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: AdminToolsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\AdminTools\ , LongSubPath: AdminTools\ , ShortSubPath: Admint~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: USERPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\UserProfile\ , LongSubPath: UserProfile\ , ShortSubPath: USERPR~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: ALLUSERSPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\All Users\ , LongSubPath: All Users\ , ShortSubPath: ALLUSE~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: SystemFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\System32\ , LongSubPath: System32\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: System64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\System64\ , LongSubPath: System64\ , ShortSubPath:
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: ProgramFilesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\ , LongSubPath: program files\ , ShortSubPath: PROGRA~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: SOPHOS , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\ , LongSubPath: program files\Sophos\ , ShortSubPath: PROGRA~1\Sophos\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: SOPHOS_ANTI_VIRUS , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: INSTALLDIR , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: SWIDIRLSP.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\lsp\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\lsp\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\lsp\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Control\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: INSTALLDIR_HOME , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\Home\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Home\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\Home\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: INSTALLDIR_X64 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\WSC_X64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_X64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\WSC_X64\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: INSTALLDIR_WIN32 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\jwgiamqy\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: CommonAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\ , LongSubPath: CommonAppData\ , ShortSubPath: Common~1\
MSI (s) (40:A8) [11:24:43:746]: Dir (source): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\ , LongSubPath: CommonAppData\Sophos\ , ShortSubPath: Common~1\Sophos\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Tamper Protection\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: LOGS3 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Tamper Protection\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\logs\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Device Control\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: LOGS2 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Device Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\logs\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Data Control\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: LOGS1 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Data Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\logs\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: RESOURCES , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: RES , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: CACHE , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Cache\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: TEMP , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Temp\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: DATAOUTPUT , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\DataOutput\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\DataOutput\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\orfv1fyp\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: SAFESTORE , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Safestore\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Safestore\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\ynotdaxl\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: LOGS , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\logs\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: INFECTED , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: LOW , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\Low\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\Low\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\Low\
MSI (s) (40:A8) [11:24:43:747]: Dir (source): Key: CONFIG , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Config\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Config\
Action start 11:24:43: ResolveSource.
MSI (s) (40:A8) [11:24:43:747]: Doing action: SetInstallDir
Action ended 11:24:43: ResolveSource. Return value 1.
Action start 11:24:43: SetInstallDir.
MSI (s) (40:A8) [11:24:43:747]: Skipping action: UninstallDowngradeCheck (condition is false)
MSI (s) (40:A8) [11:24:43:747]: Doing action: SetScriptProperty
Action ended 11:24:43: SetInstallDir. Return value 1.
MSI (s) (40:A8) [11:24:43:748]: PROPERTY CHANGE: Adding RunPreLaunchScript property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""10.8.10.810"'.
Action start 11:24:43: SetScriptProperty.
MSI (s) (40:A8) [11:24:43:748]: Skipping action: CheckForSophosClientFirewall (condition is false)
MSI (s) (40:A8) [11:24:43:748]: Doing action: ISInitAllUsers
Action ended 11:24:43: SetScriptProperty. Return value 1.
MSI (s) (40:A8) [11:24:43:748]: PROPERTY CHANGE: Modifying ALLUSERS property. Its current value is '1'. Its new value: '2'.
Action start 11:24:43: ISInitAllUsers.
MSI (s) (40:A8) [11:24:43:748]: Doing action: SetODBCFolders
Action ended 11:24:43: ISInitAllUsers. Return value 1.
MSI (s) (40:A8) [11:24:43:749]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (40:A8) [11:24:43:749]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCDriver`, `Component` WHERE `ODBCDriver`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2)
MSI (s) (40:A8) [11:24:43:749]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (40:A8) [11:24:43:749]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCTranslator`, `Component` WHERE `ODBCTranslator`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2)
Action start 11:24:43: SetODBCFolders.
MSI (s) (40:A8) [11:24:43:749]: Doing action: MigrateFeatureStates
Action ended 11:24:43: SetODBCFolders. Return value 0.
Action start 11:24:43: MigrateFeatureStates.
MSI (s) (40:A8) [11:24:43:749]: Doing action: InstallValidate
Action ended 11:24:43: MigrateFeatureStates. Return value 0.
MSI (s) (40:A8) [11:24:43:749]: Note: 1: 2205 2: 3: Dialog
MSI (s) (40:A8) [11:24:43:749]: Feature: SAVService; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Feature: MainComponents; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Feature: HomeEdition; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Feature: ConfigFiles; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Feature: Resources; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Feature: EngineFiles; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Feature: ServiceComponents; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: ConfigFilesNoReplace; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: ConfigFilesReplace; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: ConfigFilesReplaceHome; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: AllOtherFiles2; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: AllOtherFiles9; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: AllOtherFiles1; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: SAFESTOREDIR; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: DATAOUTPUTDIR; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: AllOtherFiles3; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: AllOtherFiles8; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: AllOtherFiles5; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: AllOtherFiles6; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: AllOtherFiles7; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: UseAMPPL; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: ControlSAVAdminService; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: ControlSAVService; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: SophosCleanupService.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: scs_integrity_dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: SophosOfficeAV.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: SophosOfficeAVx64.dll; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: sav32cli.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: bpaif.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: AllOtherFiles4; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: SAVHelpChs.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: SAVHelpCht.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: SAVHelpDeu.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: SAVHelpEsp.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: SAVHelpFra.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: SAVHelpIta.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: SAVHelpJap.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: SCF.dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: SOF.dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:749]: Component: SavHelpEng.chm; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: Licences_Engine; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: SavShellExtx64; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: TamperProtectionControlx64; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: Shortcut_de; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: Shortcut_es; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:749]: Component: Shortcut_fr; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: Shortcut_it; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: Shortcut_ja; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: Shortcut_zh_cn; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: Shortcut_zh_tw; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: Shortcuts; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: Categories.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavNeutralRes.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavRes.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavResChs.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavResCht.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavResDeu.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavResEng.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavResEsp.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavResFra.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavResIt.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavResJap.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: BackgroundScanClient.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavAdapter.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SecurityProductInformationReplace; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: concrt140.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: msvcp140.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: vccorlib140.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: vcruntime140.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: PsRootCertificate; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: PsCertificateRevocationList; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: integrity_dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: ForceUpdateAlongSideSGN.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WSCClientW32; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WSCClientX64; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: SecurityProductInformationReplaceHome; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: SAVService; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SAVAdminService; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: AllOtherFiles; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: AuthorisedLists.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: AppFeedManager.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: ApplicationManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: DCManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: DataControlManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: DataControlPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: DetectionFeedback.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: DeviceControlPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: BHOManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: BackgroundScanning.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: ComponentManager.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: Configuration.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: DesktopMessaging.dll; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: SAVUserContext.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: DriveProcessor.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: EEConsumer.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: FSDecomposer.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: FilterProcessors.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: ICAdapter.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: ICManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: ICProcessors.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: Instrumentation.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: Instrumentation.man; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: LegacyConsumers.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: Localisation.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: Logging.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: Persistance.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SAVControl.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavPlugin.dll; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: SIPSManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SWIManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavMain.exe; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: SavProgress.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavShellExt.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SAVTelem.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: ScanEditExports.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: ScanEditFacade.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: ScanManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavSecurity.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SophtainerAdapter.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SystemInformation.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: TamperProtectionControl.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: TamperProtectionManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: TamperProtectionPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: ThreatDetection.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: ThreatManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: Translators.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: VEController.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SEDManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: VirusDetection.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SafeStore32.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SafeStore64.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: ssr32.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: ssr64.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: HomeEditionComponent; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: cmpAE7B7822B7B9D9D4A42CEA9CAA287CAE; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp727A35C661306D786121BE393A048DC5; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpF4124CC7C5B219D733F8E8BDCF405477; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp1276D015EF7CB70FD5A3E228ED92199E; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp53F427E70990C843ECDC3521482949F4; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpF2061F9762163E84154ED5B5531FF01A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp3D07BD24FBD91EFDB4CBD36360B27993; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpCBCAED06415BE4238AA00F88C59EB111; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp45F4A1FB4398D59167BB24DE79F43FA3; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp8303347AC7189594EE49A46ADA3BC0AB; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp8252FE882879E9262BC7128A5001B4E2; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp911B6A7A3A0538C77E573FB019F2E1C6; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpE82EAC2008C21AF018A01C7E89CC106D; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp72064FA5D26095008B368BE2EA82A6BF; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpE1C5F0E675ACFF4083941F05E89CD94B; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp7DA01311D2621AEC3C1828D5173563A5; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpC9343F99F9406896305AEE4AB52E708B; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp39AC4BD4F64E55960B3B827BBE796094; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp5B3071E35554337D7738FB99889196E3; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpC7DEC9EC7E17B4E018C51AA115B55DD2; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp1CF597D6FD5A4213FE30C209D79764F4; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp92B8DC816AA307088A7E4E89EF62C7EA; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp8F94BBF01ED325B6F68168E075A37635; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp5999D5E616AF2B700B16B2205E49162D; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp2B39580E3091B6676242011361C9A1BA; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp0F6A393A1377B5A54E1B6B88680A7727; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpCD376E0E12B3FEC78A01B66152D3EDEA; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp3EC95C41B75609CF616F426F10FE0F0C; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp4BE3A9DAAFED0372262033E5AA1DB102; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpFC12439287970154B6EDEA9745EA7AE4; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp01E02360BE3A0102E0CD4754817274ED; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpB202958314AAA4ACE3C75FEA719B08C7; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpC849FFF7157E5EE893828C26ABF12CB5; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp8382ACAAE83A1CECC95FCAE7015A1002; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpB00FF6EDBC3FD53C5142BE5AB7D60289; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmp5F1A26300665DFA41E32BC08B0C430B6; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpC73A3E8EEC8356D9887F12C52272A3C5; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpF4428129F117B6AE5EB40538A852ECF9; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpE7D614F1FA74CD3AC7C4FE3B83F21438; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpB33D620C3B560B9F46C54420C89D7972; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: cmpFA435889D7D833103537773BECA04928; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: swc_service_exe.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: integrity_dat.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SWCAdapter_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCPResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCPResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCPResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCPResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCPResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCPResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCPResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCPResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WebControlMessaging_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCMResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCMResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCMResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCMResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCMResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCMResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCMResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WCMResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: WebControlMessaging_dll_reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SwiCallout64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: SwiDi.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: Difx_dll_64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SwiComponent32OnlyNotWFP_SwiUpdate32.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:750]: Component: SwiComponent64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:750]: Component: SwiCallout_cat.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: Swi_di.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: Difx_dll.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: SwiProxy.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: SwiProxyChild.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: integrity.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: integrity_lsp.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __Shortcuts65; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __Shortcut_de65; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __Shortcuts66; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __Shortcuts67; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __SavMain.exe65; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __Shortcut_es65; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __Shortcut_fr65; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __Shortcut_it65; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __Shortcut_ja65; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __Shortcut_zh_cn65; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __Shortcut_zh_tw65; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __UseAMPPL65; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __SAFESTOREDIR65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __SAVService65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __SWIManagement.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __SAVTelem.exe65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __VirusDetection.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __SafeStore32.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C10165; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __SavShellExt.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __SavMain.exe66; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __SavProgress.exe65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __DesktopMessaging.dll65; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __SavPlugin.dll65; Installed: Null; Request: Local; Action: Null
MSI (s) (40:A8) [11:24:43:751]: Component: __DataControlManagement.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Component: __DCManagement.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (40:A8) [11:24:43:751]: Note: 1: 2205 2: 3: BindImage
MSI (s) (40:A8) [11:24:43:751]: Note: 1: 2205 2: 3: ProgId
MSI (s) (40:A8) [11:24:43:751]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (40:A8) [11:24:43:751]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (40:A8) [11:24:43:751]: Note: 1: 2205 2: 3: Extension
MSI (s) (40:A8) [11:24:43:751]: Note: 1: 2205 2: 3: Font
MSI (s) (40:A8) [11:24:43:751]: Note: 1: 2205 2: 3: Class
MSI (s) (40:A8) [11:24:43:751]: Note: 1: 2205 2: 3: TypeLib
Action start 11:24:43: InstallValidate.
MSI (s) (40:A8) [11:24:43:751]: Note: 1: 2205 2: 3: _RemoveFilePath
MSI (s) (40:A8) [11:24:43:778]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (40:A8) [11:24:43:778]: Note: 1: 2205 2: 3: BindImage
MSI (s) (40:A8) [11:24:43:778]: Note: 1: 2205 2: 3: ProgId
MSI (s) (40:A8) [11:24:43:778]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (40:A8) [11:24:43:778]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (40:A8) [11:24:43:778]: Note: 1: 2205 2: 3: Extension
MSI (s) (40:A8) [11:24:43:778]: Note: 1: 2205 2: 3: Font
MSI (s) (40:A8) [11:24:43:778]: Note: 1: 2205 2: 3: Class
MSI (s) (40:A8) [11:24:43:778]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (40:A8) [11:24:43:778]: Note: 1: 2727 2:
MSI (s) (40:A8) [11:24:43:790]: Note: 1: 2727 2:
MSI (s) (40:A8) [11:24:43:790]: Doing action: SetARPINSTALLLOCATION
Action ended 11:24:43: InstallValidate. Return value 1.
MSI (s) (40:A8) [11:24:43:791]: PROPERTY CHANGE: Adding ARPINSTALLLOCATION property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:43: SetARPINSTALLLOCATION.
MSI (s) (40:A8) [11:24:43:791]: Skipping action: SetSAVSERVICEUSER (condition is false)
MSI (s) (40:A8) [11:24:43:791]: Doing action: RemoveExistingProducts
Action ended 11:24:43: SetARPINSTALLLOCATION. Return value 1.
MSI (s) (40:A8) [11:24:43:792]: Note: 1: 2205 2: 3: Upgrade
MSI (s) (40:A8) [11:24:43:792]: Note: 1: 2228 2: 3: Upgrade 4: SELECT `Attributes`, `ActionProperty`, `Remove` FROM `Upgrade`
Action start 11:24:43: RemoveExistingProducts.
MSI (s) (40:A8) [11:24:43:792]: Doing action: InstallInitialize
Action ended 11:24:43: RemoveExistingProducts. Return value 0.
MSI (s) (40:A8) [11:24:43:792]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (40:A8) [11:24:43:792]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (40:A8) [11:24:43:792]: BeginTransaction: Locking Server
MSI (s) (40:A8) [11:24:43:793]: SRSetRestorePoint skipped for this transaction.
MSI (s) (40:A8) [11:24:43:793]: Server not locked: locking for product {31616A98-3852-49E9-BDD6-77A1AB85571A}
Action start 11:24:43: InstallInitialize.
MSI (s) (40:A8) [11:24:43:815]: Doing action: SetUpdateFailed
Action ended 11:24:43: InstallInitialize. Return value 1.
MSI (s) (40:A8) [11:24:43:816]: Note: 1: 2205 2: 3: MsiPatchCertificate
MSI (s) (40:A8) [11:24:43:816]: LUA patching is disabled: missing MsiPatchCertificate table
Action start 11:24:43: SetUpdateFailed.
MSI (s) (40:A8) [11:24:43:842]: Doing action: SetRestoreMovedFiles
Action ended 11:24:43: SetUpdateFailed. Return value 1.
MSI (s) (40:A8) [11:24:43:842]: PROPERTY CHANGE: Adding RestoreMovedFiles property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:43: SetRestoreMovedFiles.
MSI (s) (40:A8) [11:24:43:843]: Doing action: RestoreMovedFiles
Action ended 11:24:43: SetRestoreMovedFiles. Return value 1.
Action start 11:24:43: RestoreMovedFiles.
MSI (s) (40:A8) [11:24:43:867]: Doing action: CheckRegForNullDACLs
Action ended 11:24:43: RestoreMovedFiles. Return value 1.
Action start 11:24:43: CheckRegForNullDACLs.
MSI (s) (40:A8) [11:24:43:892]: Doing action: SetErrorScriptProperty
Action ended 11:24:43: CheckRegForNullDACLs. Return value 1.
MSI (s) (40:A8) [11:24:43:892]: PROPERTY CHANGE: Adding RunErrorScript property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""10.8.10.810"'.
Action start 11:24:43: SetErrorScriptProperty.
MSI (s) (40:A8) [11:24:43:893]: Doing action: RunErrorScript
Action ended 11:24:43: SetErrorScriptProperty. Return value 1.
Action start 11:24:43: RunErrorScript.
MSI (s) (40:A8) [11:24:43:958]: Doing action: ExtractClassicConfig
Action ended 11:24:43: RunErrorScript. Return value 1.
MSI (s) (40:3C) [11:24:43:966]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7E.tmp, Entrypoint: ExtractClassicConfig
MSI (s) (40:50) [11:24:43:967]: Generating random cookie.
MSI (s) (40:50) [11:24:43:971]: Created Custom Action Server with PID 4956 (0x135C).
MSI (s) (40:60) [11:24:44:019]: Running as a service.
MSI (s) (40:60) [11:24:44:020]: Hello, I'm your 32bit Elevated custom action server.
Action start 11:24:43: ExtractClassicConfig.
MSI (s) (40:A8) [11:24:44:228]: Doing action: PreInstallChecks
Action ended 11:24:44: ExtractClassicConfig. Return value 1.
MSI (s) (40:C0) [11:24:44:237]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI188.tmp, Entrypoint: PreInstallChecks
Action start 11:24:44: PreInstallChecks.
MSI (s) (40:A8) [11:24:44:376]: Skipping action: SetUpdateBegin (condition is false)
MSI (s) (40:A8) [11:24:44:376]: Doing action: SetBootDriverStartupProperty
Action ended 11:24:44: PreInstallChecks. Return value 1.
MSI (s) (40:F4) [11:24:44:386]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI225.tmp, Entrypoint: SetBootDriverStartupProperty
Action start 11:24:44: SetBootDriverStartupProperty.
MSI (s) (40:A8) [11:24:44:446]: Skipping action: CloseSavMainWindow (condition is false)
MSI (s) (40:A8) [11:24:44:446]: Doing action: AllocateRegistrySpace
Action ended 11:24:44: SetBootDriverStartupProperty. Return value 1.
Action start 11:24:44: AllocateRegistrySpace.
MSI (s) (40:A8) [11:24:44:447]: Doing action: ProcessComponents
Action ended 11:24:44: AllocateRegistrySpace. Return value 1.
Action start 11:24:44: ProcessComponents.
MSI (s) (40:A8) [11:24:44:469]: Doing action: UnpublishComponents
Action ended 11:24:44: ProcessComponents. Return value 1.
MSI (s) (40:A8) [11:24:44:470]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (40:A8) [11:24:44:470]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND (`Feature`.`Action` = 0 OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 11:24:44: UnpublishComponents.
MSI (s) (40:A8) [11:24:44:470]: Doing action: MsiUnpublishAssemblies
Action ended 11:24:44: UnpublishComponents. Return value 0.
MSI (s) (40:A8) [11:24:44:472]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (40:A8) [11:24:44:472]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT null, null, `Component`.`Component`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `MsiAssembly`, `Component`, `Feature` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Feature_` = `Feature`.`Feature` AND `MsiAssembly`.`File_Application` = null AND (`Feature`.`Action` = 0 OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 11:24:44: MsiUnpublishAssemblies.
MSI (s) (40:A8) [11:24:44:472]: Doing action: UnpublishFeatures
Action ended 11:24:44: MsiUnpublishAssemblies. Return value 0.
Action start 11:24:44: UnpublishFeatures.
MSI (s) (40:A8) [11:24:44:473]: Doing action: SchedSecureObjectsRollback
Action ended 11:24:44: UnpublishFeatures. Return value 1.
MSI (s) (40:B4) [11:24:44:478]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI284.tmp, Entrypoint: SchedSecureObjectsRollback
Action start 11:24:44: SchedSecureObjectsRollback.
SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070002 - continuing
SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070002 - continuing
MSI (s) (40!D8) [11:24:44:537]: PROPERTY CHANGE: Adding ExecSecureObjectsRollback property. Its value is '**********'.
SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070002 - continuing
MSI (s) (40!D8) [11:24:44:538]: Doing action: ExecSecureObjectsRollback
Action start 11:24:44: ExecSecureObjectsRollback.
Action ended 11:24:44: ExecSecureObjectsRollback. Return value 1.
MSI (s) (40:A8) [11:24:44:546]: Skipping action: RollbackDisableServices (condition is false)
MSI (s) (40:A8) [11:24:44:546]: Skipping action: DisableServices (condition is false)
MSI (s) (40:A8) [11:24:44:546]: Doing action: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:24:44: SchedSecureObjectsRollback. Return value 1.
MSI (s) (40:3C) [11:24:44:551]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2D3.tmp, Entrypoint: SwcDisableSwcServiceStart
Action start 11:24:44: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:24:44:562]: Skipping action: SwiServiceUnregister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:44:562]: Skipping action: SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:44:562]: Doing action: StopServices
Action ended 11:24:44: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 11:24:44: StopServices.
MSI (s) (40:A8) [11:24:44:564]: Skipping action: DeleteSwiFc.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:44:564]: Skipping action: DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:44:564]: Skipping action: DeleteScfDotDat.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:44:564]: Skipping action: DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:44:564]: Skipping action: SwiCalloutUninstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:44:564]: Skipping action: SwiFilterUninstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:44:564]: Skipping action: SwiFilterUninstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:44:564]: Skipping action: SwiCalloutUninstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:44:564]: Skipping action: ForceStopSAVService (condition is false)
MSI (s) (40:A8) [11:24:44:564]: Doing action: WaitForSAVService
Action ended 11:24:44: StopServices. Return value 1.
Action start 11:24:44: WaitForSAVService.
MSI (s) (40:A8) [11:24:44:607]: Skipping action: CleanUpSsspUserAccount.SetProperty (condition is false)
MSI (s) (40:A8) [11:24:44:607]: Skipping action: CleanUpSsspUserAccountRollback.SetProperty (condition is false)
MSI (s) (40:A8) [11:24:44:607]: Skipping action: CleanUpSsspUserAccountRollback (condition is false)
MSI (s) (40:A8) [11:24:44:607]: Skipping action: CleanUpSsspUserAccount (condition is false)
MSI (s) (40:A8) [11:24:44:607]: Skipping action: RemoveSIPSSubmitterUserAccount.SetProperty (condition is false)
MSI (s) (40:A8) [11:24:44:607]: Skipping action: RemoveSIPSSubmitterUserAccountRollback.SetProperty (condition is false)
MSI (s) (40:A8) [11:24:44:607]: Skipping action: RemoveSIPSSubmitterUserAccountRollback (condition is false)
MSI (s) (40:A8) [11:24:44:607]: Skipping action: RemoveSIPSSubmitterUserAccount (condition is false)
MSI (s) (40:A8) [11:24:44:607]: Skipping action: RemoveTamperProtectionRegKeyRollback (condition is false)
MSI (s) (40:A8) [11:24:44:607]: Skipping action: RemoveTamperProtectionRegKey (condition is false)
MSI (s) (40:A8) [11:24:44:607]: Doing action: DeleteServices
Action ended 11:24:44: WaitForSAVService. Return value 1.
Action start 11:24:44: DeleteServices.
MSI (s) (40:A8) [11:24:44:609]: Doing action: SetRollbackUpdateSavAdapterDllProperty
Action ended 11:24:44: DeleteServices. Return value 1.
MSI (s) (40:A8) [11:24:44:609]: PROPERTY CHANGE: Adding RollbackUpdateSavAdapterDll property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:44: SetRollbackUpdateSavAdapterDllProperty.
MSI (s) (40:A8) [11:24:44:609]: Doing action: RollbackUpdateSavAdapterDll
Action ended 11:24:44: SetRollbackUpdateSavAdapterDllProperty. Return value 1.
Action start 11:24:44: RollbackUpdateSavAdapterDll.
MSI (s) (40:A8) [11:24:44:634]: Doing action: SetUpdateSavAdapterDllProperty
Action ended 11:24:44: RollbackUpdateSavAdapterDll. Return value 1.
MSI (s) (40:A8) [11:24:44:635]: PROPERTY CHANGE: Adding UpdateSavAdapterDll property. Its value is ';10.8.10.810;'.
Action start 11:24:44: SetUpdateSavAdapterDllProperty.
MSI (s) (40:A8) [11:24:44:635]: Doing action: UpdateSavAdapterDll
Action ended 11:24:44: SetUpdateSavAdapterDllProperty. Return value 1.
MSI (s) (40:D8) [11:24:44:640]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI322.tmp, Entrypoint: UpdateSavAdapterDll
Action start 11:24:44: UpdateSavAdapterDll.
MSI (s) (40:A8) [11:24:54:699]: Skipping action: RemoveSophosCleanupService (condition is false)
MSI (s) (40:A8) [11:24:54:699]: Doing action: UnregisterComPlus
Action ended 11:24:54: UpdateSavAdapterDll. Return value 1.
MSI (s) (40:A8) [11:24:54:699]: Note: 1: 2205 2: 3: Complus
MSI (s) (40:A8) [11:24:54:699]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND `Action` = 0
Action start 11:24:54: UnregisterComPlus.
MSI (s) (40:A8) [11:24:54:700]: Doing action: SelfUnregModules
Action ended 11:24:54: UnregisterComPlus. Return value 0.
MSI (s) (40:A8) [11:24:54:700]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (40:A8) [11:24:54:700]: Note: 1: 2228 2: 3: SelfReg 4: Select `File`.`FileName`,`Component`.`Directory_`,`Component`.`Installed`, `File`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `File`, `Component` Where `SelfReg`.`File_` = `File`.`File` And `File`.`Component_` = `Component`.`Component` And `Component`.`Action` = 0
Action start 11:24:54: SelfUnregModules.
MSI (s) (40:A8) [11:24:54:700]: Doing action: UnregisterTypeLibraries
Action ended 11:24:54: SelfUnregModules. Return value 1.
MSI (s) (40:A8) [11:24:54:700]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (40:A8) [11:24:54:700]: Note: 1: 2228 2: 3: TypeLib 4: SELECT `LibID`, `TypeLib`.`Version`, `TypeLib`.`Language`, `TypeLib`.`Directory_`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `BinaryType`, `Component`.`Component`, `Component`.`Attributes` FROM `TypeLib`, `Component`, `File` WHERE `TypeLib`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Component`.`Action`=0)
Action start 11:24:54: UnregisterTypeLibraries.
MSI (s) (40:A8) [11:24:54:700]: Doing action: RemoveODBC
Action ended 11:24:54: UnregisterTypeLibraries. Return value 0.
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ?
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ?
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2711 2: ODBCDriverManager
Action start 11:24:54: RemoveODBC.
MSI (s) (40:A8) [11:24:54:701]: Note: 1: 2711 2: ODBCDriverManager64
MSI (s) (40:A8) [11:24:54:701]: Doing action: UnregisterFonts
Action ended 11:24:54: RemoveODBC. Return value 1.
MSI (s) (40:A8) [11:24:54:702]: Note: 1: 2205 2: 3: Font
MSI (s) (40:A8) [11:24:54:702]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Installed`From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And `FileAction`.`Action` = 0 ORDER BY `FileAction`.`Directory_`
Action start 11:24:54: UnregisterFonts.
MSI (s) (40:A8) [11:24:54:702]: Doing action: SetUninstallSecurityCenterProperty
Action ended 11:24:54: UnregisterFonts. Return value 1.
MSI (s) (40:A8) [11:24:54:702]: PROPERTY CHANGE: Adding UninstallSecurityCenter property. Its value is '10.8.10.810;'.
Action start 11:24:54: SetUninstallSecurityCenterProperty.
MSI (s) (40:A8) [11:24:54:702]: Skipping action: UninstallSecurityCenter (condition is false)
MSI (s) (40:A8) [11:24:54:702]: Doing action: RemoveRegistryValues
Action ended 11:24:54: SetUninstallSecurityCenterProperty. Return value 1.
Action start 11:24:54: RemoveRegistryValues.
MSI (s) (40:A8) [11:24:54:718]: Skipping action: SwcPauseForUnload.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (40:A8) [11:24:54:718]: Doing action: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:24:54: RemoveRegistryValues. Return value 1.
Action start 11:24:54: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:24:54:719]: Skipping action: SwcDeleteReg.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (40:A8) [11:24:54:719]: Skipping action: SwcService_unreg_rb.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (40:A8) [11:24:54:719]: Skipping action: SwcService_unregister.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (40:A8) [11:24:54:719]: Skipping action: Swc_postcleanup.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (40:A8) [11:24:54:719]: Doing action: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:24:54: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 11:24:54: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:24:54:722]: Doing action: UnregisterClassInfo
Action ended 11:24:54: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (40:A8) [11:24:54:723]: Note: 1: 2205 2: 3: Class
MSI (s) (40:A8) [11:24:54:723]: Note: 1: 2228 2: 3: Class 4: SELECT `BinaryType`, `CLSID`, `ProgId_Default`, `Class`.`Description`, `Context`, `Feature_`, `ComponentId`, `Component`, `Class`.`Attributes`, `AppId_`, `FileTypeMask`, `Icon_`, `IconIndex`, `DefInprocHandler`, `Argument`, `Component`.`RuntimeFlags`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action`, `Component`.`Attributes` FROM `Class`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 11:24:54: UnregisterClassInfo.
MSI (s) (40:A8) [11:24:54:723]: Doing action: UnregisterExtensionInfo
Action ended 11:24:54: UnregisterClassInfo. Return value 0.
MSI (s) (40:A8) [11:24:54:723]: Note: 1: 2205 2: 3: Extension
MSI (s) (40:A8) [11:24:54:723]: Note: 1: 2228 2: 3: Extension 4: SELECT `Extension`, `BinaryType`, `ProgId_`, null, null, `MIME_`, `Feature_`, `ComponentId`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action` FROM `Extension`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 11:24:54: UnregisterExtensionInfo.
MSI (s) (40:A8) [11:24:54:723]: Doing action: UnregisterProgIdInfo
Action ended 11:24:54: UnregisterExtensionInfo. Return value 0.
MSI (s) (40:A8) [11:24:54:724]: Note: 1: 2205 2: 3: ProgId
MSI (s) (40:A8) [11:24:54:724]: Note: 1: 2228 2: 3: ProgId 4: SELECT DISTINCT `BinaryType`, `ProgId`, `Class_`, `ProgId`.`Description`, `ProgId`.`Icon_`, `ProgId`.`IconIndex`, null, `Component`.`RuntimeFlags` , `Component`.`Component`, `Component`.`Attributes` FROM `ProgId`, `Class`, `Feature`, `Component` WHERE `ProgId`.`Class_` = `Class`.`CLSID` AND `Class`.`Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 11:24:54: UnregisterProgIdInfo.
MSI (s) (40:A8) [11:24:54:724]: Doing action: UnregisterMIMEInfo
Action ended 11:24:54: UnregisterProgIdInfo. Return value 0.
MSI (s) (40:A8) [11:24:54:724]: Note: 1: 2205 2: 3: MIME
MSI (s) (40:A8) [11:24:54:724]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 11:24:54: UnregisterMIMEInfo.
MSI (s) (40:A8) [11:24:54:724]: Doing action: RemoveIniValues
Action ended 11:24:54: UnregisterMIMEInfo. Return value 0.
MSI (s) (40:A8) [11:24:54:724]: Note: 1: 2205 2: 3: IniFile
MSI (s) (40:A8) [11:24:54:724]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND `Component`.`Action`=0 ORDER BY `FileName`,`Section`
Action start 11:24:54: RemoveIniValues.
MSI (s) (40:A8) [11:24:54:724]: Doing action: RemoveShortcuts
Action ended 11:24:54: RemoveIniValues. Return value 1.
Action start 11:24:54: RemoveShortcuts.
MSI (s) (40:A8) [11:24:54:725]: Doing action: RemoveEnvironmentStrings
Action ended 11:24:54: RemoveShortcuts. Return value 1.
MSI (s) (40:A8) [11:24:54:725]: Note: 1: 2205 2: 3: Environment
MSI (s) (40:A8) [11:24:54:725]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 0)
Action start 11:24:54: RemoveEnvironmentStrings.
MSI (s) (40:A8) [11:24:54:725]: Doing action: SetRemoveSAVIProperty
Action ended 11:24:54: RemoveEnvironmentStrings. Return value 1.
MSI (s) (40:A8) [11:24:54:726]: PROPERTY CHANGE: Modifying RemoveSAVI property. Its current value is 'INSTALLDIR'. Its new value: 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:54: SetRemoveSAVIProperty.
MSI (s) (40:A8) [11:24:54:726]: Skipping action: RemoveSAVI (condition is false)
MSI (s) (40:A8) [11:24:54:726]: Doing action: SetUninstallDriverFilesOnUpdateProperty
Action ended 11:24:54: SetRemoveSAVIProperty. Return value 1.
MSI (s) (40:A8) [11:24:54:726]: PROPERTY CHANGE: Adding UninstallDriverFilesOnUpdate property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF"""'.
Action start 11:24:54: SetUninstallDriverFilesOnUpdateProperty.
MSI (s) (40:A8) [11:24:54:726]: Doing action: SetUninstallBootDriverProperty
Action ended 11:24:54: SetUninstallDriverFilesOnUpdateProperty. Return value 1.
MSI (s) (40:A8) [11:24:54:726]: PROPERTY CHANGE: Adding UninstallBootDriver property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF"""'.
Action start 11:24:54: SetUninstallBootDriverProperty.
MSI (s) (40:A8) [11:24:54:727]: Doing action: SetUninstallBootDriverOnUpdateProperty
Action ended 11:24:54: SetUninstallBootDriverProperty. Return value 1.
MSI (s) (40:A8) [11:24:54:727]: PROPERTY CHANGE: Adding UninstallBootDriverOnUpdate property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF"""'.
Action start 11:24:54: SetUninstallBootDriverOnUpdateProperty.
MSI (s) (40:A8) [11:24:54:727]: Doing action: SetUninstallKMSDriverProperty
Action ended 11:24:54: SetUninstallBootDriverOnUpdateProperty. Return value 1.
MSI (s) (40:A8) [11:24:54:727]: PROPERTY CHANGE: Adding UninstallKMSDriver property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\SKMSCAN.INF"""'.
Action start 11:24:54: SetUninstallKMSDriverProperty.
MSI (s) (40:A8) [11:24:54:727]: Doing action: SetUninstallKMSDriverOnUpdateProperty
Action ended 11:24:54: SetUninstallKMSDriverProperty. Return value 1.
MSI (s) (40:A8) [11:24:54:728]: PROPERTY CHANGE: Adding UninstallKMSDriverOnUpdate property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\SKMSCAN.INF"""'.
Action start 11:24:54: SetUninstallKMSDriverOnUpdateProperty.
MSI (s) (40:A8) [11:24:54:728]: Doing action: SetUninstallDriverFilesVistaProperty
Action ended 11:24:54: SetUninstallKMSDriverOnUpdateProperty. Return value 1.
MSI (s) (40:A8) [11:24:54:728]: PROPERTY CHANGE: Adding UninstallDriverFilesVista property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF"""'.
Action start 11:24:54: SetUninstallDriverFilesVistaProperty.
MSI (s) (40:A8) [11:24:54:728]: Doing action: SetUninstallClassFilterVistaProperty
Action ended 11:24:54: SetUninstallDriverFilesVistaProperty. Return value 1.
MSI (s) (40:A8) [11:24:54:728]: PROPERTY CHANGE: Adding UninstallClassFilterVista property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\sdcfilter.inf"""'.
Action start 11:24:54: SetUninstallClassFilterVistaProperty.
MSI (s) (40:A8) [11:24:54:729]: Doing action: SetClassFilterPresentProperty
Action ended 11:24:54: SetUninstallClassFilterVistaProperty. Return value 1.
MSI (s) (40:F4) [11:24:54:733]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2A90.tmp, Entrypoint: SetClassFilterPresentProperty
Action start 11:24:54: SetClassFilterPresentProperty.
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallDriverFilesOnUpdate (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallDriverFiles64OnUpdate (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallDriverFiles (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallDriverFiles64 (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallDriverFilesVista (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallDriverFiles64Vista (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallBootDriverOnUpdate (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallBootDriverOnUpdate64 (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallBootDriver (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallBootDriver64 (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallClassFilterCleanReg (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallClassFilter64 (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallClassFilter64Vista (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallClassFilter (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallClassFilterVista (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallKMSDriver (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UninstallKMSDriverOnUpdate (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UnregisterTamperProtectionControlX64 (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UnregisterSavShellExtX64 (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UnregisterSophosOfficeAV (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Skipping action: UnregisterSophosOfficeAVX64 (condition is false)
MSI (s) (40:A8) [11:24:54:797]: Doing action: SetUninstallDeviceControlProperty
Action ended 11:24:54: SetClassFilterPresentProperty. Return value 1.
MSI (s) (40:A8) [11:24:54:798]: PROPERTY CHANGE: Adding UninstallDeviceControl property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'.
Action start 11:24:54: SetUninstallDeviceControlProperty.
MSI (s) (40:A8) [11:24:54:798]: Skipping action: UninstallDeviceControl (condition is false)
MSI (s) (40:A8) [11:24:54:798]: Doing action: SetDeleteDriverKeysProperty
Action ended 11:24:54: SetUninstallDeviceControlProperty. Return value 1.
MSI (s) (40:A8) [11:24:54:798]: PROPERTY CHANGE: Adding DeleteDriverKeys property. Its value is '0'.
Action start 11:24:54: SetDeleteDriverKeysProperty.
MSI (s) (40:A8) [11:24:54:799]: Skipping action: DeleteDriverKeys (condition is false)
MSI (s) (40:A8) [11:24:54:799]: Skipping action: DeleteSKMScanDriverKeys (condition is false)
MSI (s) (40:A8) [11:24:54:799]: Skipping action: DeleteSDCFilterDriverKeys (condition is false)
MSI (s) (40:A8) [11:24:54:799]: Skipping action: DeleteSDCFilterDriverFiles (condition is false)
MSI (s) (40:A8) [11:24:54:799]: Doing action: SetUnregisterSophosDetours
Action ended 11:24:54: SetDeleteDriverKeysProperty. Return value 1.
MSI (s) (40:A8) [11:24:54:799]: PROPERTY CHANGE: Adding UnregisterSophosDetours property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:54: SetUnregisterSophosDetours.
MSI (s) (40:A8) [11:24:54:800]: Skipping action: UnregisterSophosDetours (condition is false)
MSI (s) (40:A8) [11:24:54:800]: Doing action: SetUnregisterSedInjectionProperty
Action ended 11:24:54: SetUnregisterSophosDetours. Return value 1.
MSI (s) (40:A8) [11:24:54:800]: PROPERTY CHANGE: Adding UnregisterSedInjection property. Its value is '10.8.10.810;'.
Action start 11:24:54: SetUnregisterSedInjectionProperty.
MSI (s) (40:A8) [11:24:54:801]: Skipping action: UnregisterSedInjection (condition is false)
MSI (s) (40:A8) [11:24:54:801]: Doing action: SetDeleteNonEngineFilesProperty
Action ended 11:24:54: SetUnregisterSedInjectionProperty. Return value 1.
MSI (s) (40:A8) [11:24:54:801]: PROPERTY CHANGE: Adding DeleteNonEngineFiles property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:54: SetDeleteNonEngineFilesProperty.
MSI (s) (40:A8) [11:24:54:801]: Skipping action: DeleteNonEngineFiles (condition is false)
MSI (s) (40:A8) [11:24:54:801]: Doing action: SetDeleteOtherFilesProperty
Action ended 11:24:54: SetDeleteNonEngineFilesProperty. Return value 1.
MSI (s) (40:A8) [11:24:54:801]: PROPERTY CHANGE: Adding DeleteOtherFiles property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:54: SetDeleteOtherFilesProperty.
MSI (s) (40:A8) [11:24:54:802]: Skipping action: DeleteOtherFiles (condition is false)
MSI (s) (40:A8) [11:24:54:802]: Skipping action: CreateRebootTestFile (condition is false)
MSI (s) (40:A8) [11:24:54:802]: Skipping action: CheckCTAInstalled (condition is false)
MSI (s) (40:A8) [11:24:54:802]: Doing action: RemoveDuplicateFiles
Action ended 11:24:54: SetDeleteOtherFilesProperty. Return value 1.
Action start 11:24:54: RemoveDuplicateFiles.
MSI (s) (40:A8) [11:24:54:802]: Skipping action: EnableWindowsDefender (condition is false)
MSI (s) (40:A8) [11:24:54:802]: Skipping action: SwiUpdateCleanup.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:54:802]: Skipping action: SwiUpdateCleanup.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:54:802]: Skipping action: Win8Cleanup.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:54:802]: Skipping action: SwiUpdateCleanup64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:54:802]: Skipping action: SwiUpdateCleanup64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:24:54:802]: Doing action: RemoveFiles
Action ended 11:24:54: RemoveDuplicateFiles. Return value 1.
Action start 11:24:54: RemoveFiles.
MSI (s) (40:A8) [11:24:54:803]: Doing action: RemoveFolders
Action ended 11:24:54: RemoveFiles. Return value 1.
Action start 11:24:54: RemoveFolders.
MSI (s) (40:A8) [11:24:54:803]: Doing action: CreateFolders
Action ended 11:24:54: RemoveFolders. Return value 1.
Action start 11:24:54: CreateFolders.
MSI (s) (40:A8) [11:24:54:804]: Doing action: SetDeleteIDEsProperty
Action ended 11:24:54: CreateFolders. Return value 1.
MSI (s) (40:A8) [11:24:54:804]: PROPERTY CHANGE: Modifying DeleteIDEs property. Its current value is '0'. Its new value: 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:54: SetDeleteIDEsProperty.
MSI (s) (40:A8) [11:24:54:805]: Doing action: DeleteIDEs
Action ended 11:24:54: SetDeleteIDEsProperty. Return value 1.
Action start 11:24:54: DeleteIDEs.
MSI (s) (40:A8) [11:24:54:830]: Doing action: SetDeleteBDLsProperty
Action ended 11:24:54: DeleteIDEs. Return value 1.
MSI (s) (40:A8) [11:24:54:831]: PROPERTY CHANGE: Modifying DeleteBDLs property. Its current value is '0'. Its new value: 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:54: SetDeleteBDLsProperty.
MSI (s) (40:A8) [11:24:54:831]: Doing action: DeleteBDLs
Action ended 11:24:54: SetDeleteBDLsProperty. Return value 1.
Action start 11:24:54: DeleteBDLs.
MSI (s) (40:A8) [11:24:54:858]: Doing action: SetDeleteHIPSConfigProperty
Action ended 11:24:54: DeleteBDLs. Return value 1.
MSI (s) (40:A8) [11:24:54:858]: PROPERTY CHANGE: Adding DeleteHIPSConfig property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:54: SetDeleteHIPSConfigProperty.
MSI (s) (40:A8) [11:24:54:859]: Doing action: DeleteHIPSConfig
Action ended 11:24:54: SetDeleteHIPSConfigProperty. Return value 1.
Action start 11:24:54: DeleteHIPSConfig.
MSI (s) (40:A8) [11:24:54:885]: Doing action: SetRemoveFilesOnUpgradeProperty
Action ended 11:24:54: DeleteHIPSConfig. Return value 1.
MSI (s) (40:A8) [11:24:54:885]: PROPERTY CHANGE: Adding RemoveFilesOnUpgrade property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:54: SetRemoveFilesOnUpgradeProperty.
MSI (s) (40:A8) [11:24:54:886]: Skipping action: RemoveFilesOnUpgrade (condition is false)
MSI (s) (40:A8) [11:24:54:886]: Doing action: SetRollbackForceProperty
Action ended 11:24:54: SetRemoveFilesOnUpgradeProperty. Return value 1.
MSI (s) (40:A8) [11:24:54:886]: PROPERTY CHANGE: Adding RollbackForceDeleteFiles property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:54: SetRollbackForceProperty.
MSI (s) (40:A8) [11:24:54:886]: Doing action: RollbackForceDeleteFiles
Action ended 11:24:54: SetRollbackForceProperty. Return value 1.
Action start 11:24:54: RollbackForceDeleteFiles.
MSI (s) (40:A8) [11:24:54:916]: Doing action: SetRollbackForceUserProperty
Action ended 11:24:54: RollbackForceDeleteFiles. Return value 1.
MSI (s) (40:A8) [11:24:54:917]: PROPERTY CHANGE: Adding RollbackForceDeleteUserPlugin property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:54: SetRollbackForceUserProperty.
MSI (s) (40:A8) [11:24:54:917]: Doing action: RollbackForceDeleteUserPlugin
Action ended 11:24:54: SetRollbackForceUserProperty. Return value 1.
Action start 11:24:54: RollbackForceDeleteUserPlugin.
MSI (s) (40:A8) [11:24:54:944]: Doing action: SetRollbackOtherFilesProperty
Action ended 11:24:54: RollbackForceDeleteUserPlugin. Return value 1.
MSI (s) (40:A8) [11:24:54:945]: PROPERTY CHANGE: Modifying RollbackOtherFiles property. Its current value is '0'. Its new value: 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:54: SetRollbackOtherFilesProperty.
MSI (s) (40:A8) [11:24:54:945]: Doing action: RollbackOtherFiles
Action ended 11:24:54: SetRollbackOtherFilesProperty. Return value 1.
Action start 11:24:54: RollbackOtherFiles.
MSI (s) (40:A8) [11:24:54:971]: Doing action: SetRollbackUpdateDesktopMessagingProperty
Action ended 11:24:54: RollbackOtherFiles. Return value 1.
MSI (s) (40:A8) [11:24:54:971]: PROPERTY CHANGE: Adding RollbackUpdateDesktopMessaging property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:54: SetRollbackUpdateDesktopMessagingProperty.
MSI (s) (40:A8) [11:24:54:972]: Doing action: RollbackUpdateDesktopMessaging
Action ended 11:24:54: SetRollbackUpdateDesktopMessagingProperty. Return value 1.
Action start 11:24:54: RollbackUpdateDesktopMessaging.
MSI (s) (40:A8) [11:24:54:998]: Doing action: SetUpdateDesktopMessagingProperty
Action ended 11:24:54: RollbackUpdateDesktopMessaging. Return value 1.
MSI (s) (40:A8) [11:24:54:999]: PROPERTY CHANGE: Adding UpdateDesktopMessaging property. Its value is ';10.8.10.810;'.
Action start 11:24:54: SetUpdateDesktopMessagingProperty.
MSI (s) (40:A8) [11:24:54:999]: Doing action: UpdateDesktopMessaging
Action ended 11:24:54: SetUpdateDesktopMessagingProperty. Return value 1.
Action start 11:24:54: UpdateDesktopMessaging.
MSI (s) (40:A8) [11:24:55:026]: Doing action: SetInitialDriverProperty
Action ended 11:24:55: UpdateDesktopMessaging. Return value 1.
Action start 11:24:55: SetInitialDriverProperty.
MSI (s) (40:A8) [11:24:55:027]: Doing action: SetInstallDriverProperty
Action ended 11:24:55: SetInitialDriverProperty. Return value 1.
MSI (s) (40:F0) [11:24:55:031]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2BC9.tmp, Entrypoint: SetDriverProperty
MSI (s) (40!E0) [11:24:55:195]: PROPERTY CHANGE: Modifying DRIVERVERSION property. Its current value is '0'. Its new value: 'WIN7_I386'.
MSI (s) (40!E0) [11:24:55:196]: PROPERTY CHANGE: Modifying BOOTDRIVERSIGNED property. Its current value is '0'. Its new value: '1'.
MSI (s) (40!E0) [11:24:55:196]: PROPERTY CHANGE: Adding KMSDRIVERSIGNED property. Its value is '1'.
Action start 11:24:55: SetInstallDriverProperty.
MSI (s) (40:A8) [11:24:55:198]: Doing action: SetProcessorProperties
Action ended 11:24:55: SetInstallDriverProperty. Return value 1.
MSI (s) (40:FC) [11:24:55:203]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2C75.tmp, Entrypoint: SetProcessorProperties
MSI (s) (40!EC) [11:24:55:265]: PROPERTY CHANGE: Modifying PROCESSOR_NX_ENABLED property. Its current value is '0'. Its new value: '1'.
Action start 11:24:55: SetProcessorProperties.
MSI (s) (40:A8) [11:24:55:267]: Doing action: SetCopyOtherFilesProperty
Action ended 11:24:55: SetProcessorProperties. Return value 1.
MSI (s) (40:A8) [11:24:55:268]: PROPERTY CHANGE: Adding CopyOtherFiles property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""WIN7_I386"'.
Action start 11:24:55: SetCopyOtherFilesProperty.
MSI (s) (40:A8) [11:24:55:268]: Doing action: CopyOtherFiles
Action ended 11:24:55: SetCopyOtherFilesProperty. Return value 1.
Action start 11:24:55: CopyOtherFiles.
MSI (s) (40:A8) [11:24:55:295]: Doing action: SetForceDeleteUserPluginProperty
Action ended 11:24:55: CopyOtherFiles. Return value 1.
MSI (s) (40:A8) [11:24:55:296]: PROPERTY CHANGE: Adding ForceDeleteUserPlugin property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:55: SetForceDeleteUserPluginProperty.
MSI (s) (40:A8) [11:24:55:296]: Skipping action: ForceDeleteUserPlugin (condition is false)
MSI (s) (40:A8) [11:24:55:296]: Doing action: SetRegisterSophosDetours
Action ended 11:24:55: SetForceDeleteUserPluginProperty. Return value 1.
MSI (s) (40:A8) [11:24:55:297]: PROPERTY CHANGE: Adding RegisterSophosDetours property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:24:55: SetRegisterSophosDetours.
MSI (s) (40:A8) [11:24:55:297]: Doing action: RegisterSophosDetours
Action ended 11:24:55: SetRegisterSophosDetours. Return value 1.
Action start 11:24:55: RegisterSophosDetours.
MSI (s) (40:A8) [11:24:55:323]: Skipping action: RollbackClassFilter (condition is false)
MSI (s) (40:A8) [11:24:55:323]: Skipping action: RollbackClassFilter64 (condition is false)
MSI (s) (40:A8) [11:24:55:323]: Skipping action: RollbackClassFilter64Vista (condition is false)
MSI (s) (40:A8) [11:24:55:323]: Skipping action: RollbackDriverFiles (condition is false)
MSI (s) (40:A8) [11:24:55:323]: Skipping action: RollbackBootDriver (condition is false)
MSI (s) (40:A8) [11:24:55:323]: Doing action: SetRestoreExcludedProcessesProperty
Action ended 11:24:55: RegisterSophosDetours. Return value 1.
MSI (s) (40:64) [11:24:55:328]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2CF3.tmp, Entrypoint: SetRestoreExcludedProcessesProperty
Action start 11:24:55: SetRestoreExcludedProcessesProperty.
MSI (s) (40:A8) [11:24:55:525]: Skipping action: RollbackDriverFiles64 (condition is false)
MSI (s) (40:A8) [11:24:55:525]: Skipping action: RollbackBootDriver64 (condition is false)
MSI (s) (40:A8) [11:24:55:525]: Skipping action: RollbackKMSDriver (condition is false)
MSI (s) (40:A8) [11:24:55:525]: Doing action: SetRollbackDriverFilesVistaProperty
Action ended 11:24:55: SetRestoreExcludedProcessesProperty. Return value 1.
MSI (s) (40:A8) [11:24:55:526]: PROPERTY CHANGE: Adding RollbackDriverFilesVista property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF"""'.
Action start 11:24:55: SetRollbackDriverFilesVistaProperty.
MSI (s) (40:A8) [11:24:55:526]: Doing action: SetRollbackBootDriverVistaProperty
Action ended 11:24:55: SetRollbackDriverFilesVistaProperty. Return value 1.
MSI (s) (40:A8) [11:24:55:526]: PROPERTY CHANGE: Adding RollbackBootDriverVista property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF"""'.
Action start 11:24:55: SetRollbackBootDriverVistaProperty.
MSI (s) (40:A8) [11:24:55:527]: Doing action: SetRollbackClassFilterVistaProperty
Action ended 11:24:55: SetRollbackBootDriverVistaProperty. Return value 1.
MSI (s) (40:A8) [11:24:55:527]: PROPERTY CHANGE: Adding RollbackClassFilterVista property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\sdcfilter.inf"""'.
Action start 11:24:55: SetRollbackClassFilterVistaProperty.
MSI (s) (40:A8) [11:24:55:527]: Doing action: SetRollbackKMSDriverVistaProperty
Action ended 11:24:55: SetRollbackClassFilterVistaProperty. Return value 1.
MSI (s) (40:A8) [11:24:55:527]: PROPERTY CHANGE: Adding RollbackKMSDriverVista property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\skmscan.inf"""'.
Action start 11:24:55: SetRollbackKMSDriverVistaProperty.
MSI (s) (40:A8) [11:24:55:528]: Doing action: RollbackBootDriverVista
Action ended 11:24:55: SetRollbackKMSDriverVistaProperty. Return value 1.
Action start 11:24:55: RollbackBootDriverVista.
MSI (s) (40:A8) [11:24:55:557]: Doing action: RollbackDriverFilesVista
Action ended 11:24:55: RollbackBootDriverVista. Return value 1.
Action start 11:24:55: RollbackDriverFilesVista.
MSI (s) (40:A8) [11:24:55:584]: Doing action: RollbackClassFilterVista
Action ended 11:24:55: RollbackDriverFilesVista. Return value 1.
Action start 11:24:55: RollbackClassFilterVista.
MSI (s) (40:A8) [11:24:55:611]: Skipping action: RollbackBootDriver64Vista (condition is false)
MSI (s) (40:A8) [11:24:55:611]: Skipping action: RollbackDriverFiles64Vista (condition is false)
MSI (s) (40:A8) [11:24:55:611]: Doing action: RestoreExcludedProcesses
Action ended 11:24:55: RollbackClassFilterVista. Return value 1.
Action start 11:24:55: RestoreExcludedProcesses.
MSI (s) (40:A8) [11:24:55:638]: Doing action: RollbackKMSDriverVista
Action ended 11:24:55: RestoreExcludedProcesses. Return value 1.
Action start 11:24:55: RollbackKMSDriverVista.
MSI (s) (40:A8) [11:24:55:665]: Skipping action: InstallDriverFilesXP (condition is false)
MSI (s) (40:A8) [11:24:55:665]: Skipping action: InstallBootDriverXP (condition is false)
MSI (s) (40:A8) [11:24:55:665]: Doing action: SetInstallDriverFilesVistaProperty
Action ended 11:24:55: RollbackKMSDriverVista. Return value 1.
MSI (s) (40:A8) [11:24:55:666]: PROPERTY CHANGE: Adding InstallDriverFilesVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\onaccess\wlh_i386\SAVONACCESSDRIV.INF'.
Action start 11:24:55: SetInstallDriverFilesVistaProperty.
MSI (s) (40:A8) [11:24:55:666]: Skipping action: InstallDriverFilesVista (condition is false)
MSI (s) (40:A8) [11:24:55:666]: Doing action: SetInstallDriverFilesWin7Property
Action ended 11:24:55: SetInstallDriverFilesVistaProperty. Return value 1.
MSI (s) (40:A8) [11:24:55:666]: PROPERTY CHANGE: Adding InstallDriverFilesWin7 property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\onaccess\win7_i386\SAVONACCESSDRIV.INF"""'.
Action start 11:24:55: SetInstallDriverFilesWin7Property.
MSI (s) (40:A8) [11:24:55:667]: Doing action: InstallDriverFilesWin7
Action ended 11:24:55: SetInstallDriverFilesWin7Property. Return value 1.
Action start 11:24:55: InstallDriverFilesWin7.
MSI (s) (40:A8) [11:24:55:693]: Doing action: SetInstallClassFilterVistaProperty
Action ended 11:24:55: InstallDriverFilesWin7. Return value 1.
MSI (s) (40:A8) [11:24:55:693]: PROPERTY CHANGE: Adding InstallClassFilterVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\sdcfilter\wxp_i386\sdcfilter.inf'.
Action start 11:24:55: SetInstallClassFilterVistaProperty.
MSI (s) (40:A8) [11:24:55:693]: Doing action: SetInstallClassFilterWin7Property
Action ended 11:24:55: SetInstallClassFilterVistaProperty. Return value 1.
MSI (s) (40:A8) [11:24:55:694]: PROPERTY CHANGE: Adding InstallClassFilterWin7 property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\sdcfilter\win7_i386\sdcfilter.inf"""'.
Action start 11:24:55: SetInstallClassFilterWin7Property.
MSI (s) (40:A8) [11:24:55:694]: Skipping action: InstallClassFilterVista (condition is false)
MSI (s) (40:A8) [11:24:55:694]: Doing action: InstallClassFilterWin7
Action ended 11:24:55: SetInstallClassFilterWin7Property. Return value 1.
Action start 11:24:55: InstallClassFilterWin7.
MSI (s) (40:A8) [11:24:55:719]: Doing action: SetInstallBootDriverVistaProperty
Action ended 11:24:55: InstallClassFilterWin7. Return value 1.
MSI (s) (40:A8) [11:24:55:720]: PROPERTY CHANGE: Adding InstallBootDriverVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\boottasks\wxp_i386\SOPHOSBOOTDRIVER.INF'.
Action start 11:24:55: SetInstallBootDriverVistaProperty.
MSI (s) (40:A8) [11:24:55:720]: Doing action: SetInstallBootDriverWin7Property
Action ended 11:24:55: SetInstallBootDriverVistaProperty. Return value 1.
MSI (s) (40:A8) [11:24:55:721]: PROPERTY CHANGE: Adding InstallBootDriverWin7 property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\boottasks\win7_i386\SOPHOSBOOTDRIVER.INF"""'.
Action start 11:24:55: SetInstallBootDriverWin7Property.
MSI (s) (40:A8) [11:24:55:721]: Skipping action: InstallBootDriverVista (condition is false)
MSI (s) (40:A8) [11:24:55:721]: Doing action: InstallBootDriverWin7
Action ended 11:24:55: SetInstallBootDriverWin7Property. Return value 1.
Action start 11:24:55: InstallBootDriverWin7.
MSI (s) (40:A8) [11:24:55:746]: Skipping action: InstallBootDriverAMD64 (condition is false)
MSI (s) (40:A8) [11:24:55:746]: Skipping action: InstallDriverFilesAMD64 (condition is false)
MSI (s) (40:A8) [11:24:55:746]: Skipping action: InstallBootDriverAMD64Vista (condition is false)
MSI (s) (40:A8) [11:24:55:746]: Skipping action: InstallBootDriverAMD64Win7 (condition is false)
MSI (s) (40:A8) [11:24:55:746]: Skipping action: InstallDriverFilesAMD64Vista (condition is false)
MSI (s) (40:A8) [11:24:55:746]: Skipping action: InstallDriverFilesAMD64Win7 (condition is false)
MSI (s) (40:A8) [11:24:55:746]: Doing action: SetInstallUnsignedBootDriver
Action ended 11:24:55: InstallBootDriverWin7. Return value 1.
MSI (s) (40:A8) [11:24:55:747]: PROPERTY CHANGE: Adding InstallUnsignedBootDriver property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""WIN7_I386"'.
Action start 11:24:55: SetInstallUnsignedBootDriver.
MSI (s) (40:A8) [11:24:55:747]: Doing action: SetInstallUnsignedDrivers
Action ended 11:24:55: SetInstallUnsignedBootDriver. Return value 1.
MSI (s) (40:A8) [11:24:55:748]: PROPERTY CHANGE: Adding InstallUnsignedDrivers property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""WIN7_I386"'.
Action start 11:24:55: SetInstallUnsignedDrivers.
MSI (s) (40:A8) [11:24:55:748]: Skipping action: InstallUnsignedBootDriver (condition is false)
MSI (s) (40:A8) [11:24:55:748]: Skipping action: InstallUnsignedDrivers (condition is false)
MSI (s) (40:A8) [11:24:55:748]: Skipping action: InstallUnsignedBootDriverAMD64 (condition is false)
MSI (s) (40:A8) [11:24:55:748]: Skipping action: InstallUnsignedDriversAMD64 (condition is false)
MSI (s) (40:A8) [11:24:55:748]: Skipping action: InstallClassFilterXP (condition is false)
MSI (s) (40:A8) [11:24:55:748]: Skipping action: InstallClassFilterAMD64 (condition is false)
MSI (s) (40:A8) [11:24:55:748]: Skipping action: InstallClassFilterAMD64Vista (condition is false)
MSI (s) (40:A8) [11:24:55:748]: Skipping action: InstallClassFilterAMD64Win7 (condition is false)
MSI (s) (40:A8) [11:24:55:748]: Doing action: SetInstallKMSDriverProperty
Action ended 11:24:55: SetInstallUnsignedDrivers. Return value 1.
MSI (s) (40:A8) [11:24:55:748]: PROPERTY CHANGE: Adding InstallKMSDriver property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\kms\wxp_i386\skmscan.inf'.
Action start 11:24:55: SetInstallKMSDriverProperty.
MSI (s) (40:A8) [11:24:55:748]: Skipping action: InstallKMSDriver (condition is false)
MSI (s) (40:A8) [11:24:55:748]: Doing action: SetInstallKMSDriverWin7Property
Action ended 11:24:55: SetInstallKMSDriverProperty. Return value 1.
MSI (s) (40:A8) [11:24:55:749]: PROPERTY CHANGE: Adding InstallKMSDriverWin7 property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\kms\win7_i386\skmscan.inf"""'.
Action start 11:24:55: SetInstallKMSDriverWin7Property.
MSI (s) (40:A8) [11:24:55:749]: Doing action: InstallKMSDriverWin7
Action ended 11:24:55: SetInstallKMSDriverWin7Property. Return value 1.
Action start 11:24:55: InstallKMSDriverWin7.
MSI (s) (40:A8) [11:24:55:774]: Doing action: SetMoveLockedFiles
Action ended 11:24:55: InstallKMSDriverWin7. Return value 1.
MSI (s) (40:A8) [11:24:55:775]: PROPERTY CHANGE: Adding MoveLockedFiles property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\|'.
Action start 11:24:55: SetMoveLockedFiles.
MSI (s) (40:A8) [11:24:55:775]: Skipping action: MoveLockedFiles (condition is false)
MSI (s) (40:A8) [11:24:55:775]: Doing action: MoveFiles
Action ended 11:24:55: SetMoveLockedFiles. Return value 1.
Action start 11:24:55: MoveFiles.
MSI (s) (40:A8) [11:24:55:776]: Doing action: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:24:55: MoveFiles. Return value 1.
MSI (s) (40:E4) [11:24:55:778]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2EB9.tmp, Entrypoint: SwcDeleteSAUPluginRegistry
Action start 11:24:55: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:24:55:851]: Doing action: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:24:55: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (40:6C) [11:24:55:854]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2EF8.tmp, Entrypoint: SwcDeleteRMSPluginRegistry
Action start 11:24:55: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:24:55:870]: Doing action: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:24:55: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (40:EC) [11:24:55:874]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2F18.tmp, Entrypoint: SwcPauseForUnhook
Action start 11:24:55: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:25:00:882]: Doing action: InstallFiles
Action ended 11:25:00: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 11:25:00: InstallFiles.
MSI (s) (40:A8) [11:25:00:896]: Note: 1: 2205 2: 3: Patch
MSI (s) (40:A8) [11:25:00:896]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence`
MSI (s) (40:A8) [11:25:00:896]: Note: 1: 2205 2: 3: MsiSFCBypass
MSI (s) (40:A8) [11:25:00:896]: Note: 1: 2228 2: 3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ?
MSI (s) (40:A8) [11:25:00:896]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (40:A8) [11:25:00:896]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ?
MSI (s) (40:A8) [11:25:00:898]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (40:A8) [11:25:00:898]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (40:A8) [11:25:00:898]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (40:A8) [11:25:00:925]: Skipping action: SwcService_unreg_nc.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (40:A8) [11:25:00:925]: Doing action: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:25:00: InstallFiles. Return value 1.
Action start 11:25:00: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:25:00:925]: Doing action: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:25:00: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 11:25:00: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:25:00:926]: Skipping action: SwcDeleteRegExceptId.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (40:A8) [11:25:00:926]: Doing action: PatchFiles
Action ended 11:25:00: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (40:A8) [11:25:00:926]: Note: 1: 2205 2: 3: Patch
MSI (s) (40:A8) [11:25:00:926]: Note: 1: 2228 2: 3: Patch 4: SELECT `File`,`FileName`,`FileSize`,`Directory_`,`PatchSize`,`File`.`Attributes`,`Patch`.`Attributes`,`Patch`.`Sequence`,`Component`.`Component`,`Component`.`ComponentId` FROM `File`,`Component`,`Patch` WHERE `Patch`.`#_MsiActive`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
Action start 11:25:00: PatchFiles.
MSI (s) (40:A8) [11:25:00:926]: Doing action: DuplicateFiles
Action ended 11:25:00: PatchFiles. Return value 0.
Action start 11:25:00: DuplicateFiles.
MSI (s) (40:A8) [11:25:00:927]: Skipping action: DeleteUserGroups (condition is false)
MSI (s) (40:A8) [11:25:00:927]: Doing action: RollbackUserGroups
Action ended 11:25:00: DuplicateFiles. Return value 1.
Action start 11:25:00: RollbackUserGroups.
MSI (s) (40:A8) [11:25:00:951]: Doing action: SetUserGroupsProperty
Action ended 11:25:00: RollbackUserGroups. Return value 1.
MSI (s) (40:A8) [11:25:00:952]: PROPERTY CHANGE: Adding CreateUserGroups property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 11:25:00: SetUserGroupsProperty.
MSI (s) (40:A8) [11:25:00:952]: Doing action: CreateUserGroups
Action ended 11:25:00: SetUserGroupsProperty. Return value 1.
Action start 11:25:00: CreateUserGroups.
MSI (s) (40:A8) [11:25:00:978]: Doing action: PurgeIOfficeAVCache
Action ended 11:25:00: CreateUserGroups. Return value 1.
Action start 11:25:00: PurgeIOfficeAVCache.
MSI (s) (40:A8) [11:25:01:004]: Doing action: EnableAttachmentScanning
Action ended 11:25:01: PurgeIOfficeAVCache. Return value 1.
Action start 11:25:01: EnableAttachmentScanning.
MSI (s) (40:A8) [11:25:01:029]: Doing action: AddDomainGroups
Action ended 11:25:01: EnableAttachmentScanning. Return value 1.
Action start 11:25:01: AddDomainGroups.
MSI (s) (40:A8) [11:25:01:055]: Doing action: BindImage
Action ended 11:25:01: AddDomainGroups. Return value 1.
Action start 11:25:01: BindImage.
MSI (s) (40:A8) [11:25:01:056]: Doing action: CreateShortcuts
Action ended 11:25:01: BindImage. Return value 1.
Action start 11:25:01: CreateShortcuts.
MSI (s) (40:A8) [11:25:01:064]: Doing action: RegisterClassInfo
Action ended 11:25:01: CreateShortcuts. Return value 1.
MSI (s) (40:A8) [11:25:01:065]: Note: 1: 2205 2: 3: Class
MSI (s) (40:A8) [11:25:01:065]: Note: 1: 2228 2: 3: Class 4: SELECT `BinaryType`, `CLSID`, `ProgId_Default`, `Class`.`Description`, `Context`, `Feature_`, `ComponentId`, `Component`, `Class`.`Attributes`, `AppId_`, `FileTypeMask`, `Icon_`, `IconIndex`, `DefInprocHandler`, `Argument`, `Component`.`RuntimeFlags`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action`, `Component`.`Attributes` FROM `Class`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 11:25:01: RegisterClassInfo.
MSI (s) (40:A8) [11:25:01:065]: Doing action: RegisterExtensionInfo
Action ended 11:25:01: RegisterClassInfo. Return value 0.
MSI (s) (40:A8) [11:25:01:065]: Note: 1: 2205 2: 3: Extension
MSI (s) (40:A8) [11:25:01:065]: Note: 1: 2228 2: 3: Extension 4: SELECT `Extension`, `BinaryType`, `ProgId_`, null, null, `MIME_`, `Feature_`, `ComponentId`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action` FROM `Extension`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 11:25:01: RegisterExtensionInfo.
MSI (s) (40:A8) [11:25:01:066]: Doing action: RegisterProgIdInfo
Action ended 11:25:01: RegisterExtensionInfo. Return value 0.
MSI (s) (40:A8) [11:25:01:066]: Note: 1: 2205 2: 3: ProgId
MSI (s) (40:A8) [11:25:01:066]: Note: 1: 2228 2: 3: ProgId 4: SELECT DISTINCT `BinaryType`, `ProgId`, `Class_`, `ProgId`.`Description`, `ProgId`.`Icon_`, `ProgId`.`IconIndex`, null, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `ProgId`, `Class`, `Feature`, `Component` WHERE `ProgId`.`Class_` = `Class`.`CLSID` AND `Class`.`Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 11:25:01: RegisterProgIdInfo.
MSI (s) (40:A8) [11:25:01:066]: Doing action: RegisterMIMEInfo
Action ended 11:25:01: RegisterProgIdInfo. Return value 0.
MSI (s) (40:A8) [11:25:01:067]: Note: 1: 2205 2: 3: MIME
MSI (s) (40:A8) [11:25:01:067]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 11:25:01: RegisterMIMEInfo.
MSI (s) (40:A8) [11:25:01:067]: Doing action: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:25:01: RegisterMIMEInfo. Return value 0.
Action start 11:25:01: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:25:01:069]: Doing action: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:25:01: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (40:A8) [11:25:01:069]: PROPERTY CHANGE: Adding SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll'.
Action start 11:25:01: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:25:01:069]: Doing action: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:25:01: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 11:25:01: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:25:01:072]: Doing action: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:25:01: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (40:A8) [11:25:01:072]: PROPERTY CHANGE: Adding SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll'.
Action start 11:25:01: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:25:01:072]: Doing action: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:25:01: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 11:25:01: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:25:01:074]: Doing action: WriteRegistryValues
Action ended 11:25:01: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 11:25:01: WriteRegistryValues.
MSI (s) (40:A8) [11:25:01:687]: Doing action: SetSAVAdminUpdateBegin
Action ended 11:25:01: WriteRegistryValues. Return value 1.
Action start 11:25:01: SetSAVAdminUpdateBegin.
MSI (s) (40:A8) [11:25:01:714]: Doing action: SetRollBackSaviProperty
Action ended 11:25:01: SetSAVAdminUpdateBegin. Return value 1.
MSI (s) (40:A8) [11:25:01:714]: PROPERTY CHANGE: Modifying RollbackSavi property. Its current value is '0'. Its new value: 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:25:01: SetRollBackSaviProperty.
MSI (s) (40:A8) [11:25:01:715]: Doing action: RollbackSavi
Action ended 11:25:01: SetRollBackSaviProperty. Return value 1.
Action start 11:25:01: RollbackSavi.
MSI (s) (40:A8) [11:25:01:741]: Doing action: SetUpdateSaviProperty
Action ended 11:25:01: RollbackSavi. Return value 1.
MSI (s) (40:A8) [11:25:01:742]: PROPERTY CHANGE: Modifying UpdateSAVI property. Its current value is '0'. Its new value: '"C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\"'.
Action start 11:25:01: SetUpdateSaviProperty.
MSI (s) (40:A8) [11:25:01:742]: Doing action: UpdateSAVI
Action ended 11:25:01: SetUpdateSaviProperty. Return value 1.
Action start 11:25:01: UpdateSAVI.
MSI (s) (40:A8) [11:25:01:768]: Doing action: SetSetFolderPermissions
Action ended 11:25:01: UpdateSAVI. Return value 1.
MSI (s) (40:A8) [11:25:01:769]: PROPERTY CHANGE: Adding SetFolderPermissions property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:25:01: SetSetFolderPermissions.
MSI (s) (40:A8) [11:25:01:769]: Doing action: SetFolderPermissions
Action ended 11:25:01: SetSetFolderPermissions. Return value 1.
Action start 11:25:01: SetFolderPermissions.
MSI (s) (40:A8) [11:25:01:795]: Doing action: WriteIniValues
Action ended 11:25:01: SetFolderPermissions. Return value 1.
MSI (s) (40:A8) [11:25:01:796]: Note: 1: 2205 2: 3: IniFile
MSI (s) (40:A8) [11:25:01:796]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND (`Component`.`Action`=1 OR `Component`.`Action`=2) ORDER BY `FileName`,`Section`
Action start 11:25:01: WriteIniValues.
MSI (s) (40:A8) [11:25:01:796]: Doing action: WriteEnvironmentStrings
Action ended 11:25:01: WriteIniValues. Return value 1.
MSI (s) (40:A8) [11:25:01:796]: Note: 1: 2205 2: 3: Environment
MSI (s) (40:A8) [11:25:01:796]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2)
Action start 11:25:01: WriteEnvironmentStrings.
MSI (s) (40:A8) [11:25:01:797]: Doing action: RegisterFonts
Action ended 11:25:01: WriteEnvironmentStrings. Return value 1.
MSI (s) (40:A8) [11:25:01:797]: Note: 1: 2205 2: 3: Font
MSI (s) (40:A8) [11:25:01:797]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Action` From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 Or `FileAction`.`Action` = 2) ORDER BY `FileAction`.`Directory_`
Action start 11:25:01: RegisterFonts.
MSI (s) (40:A8) [11:25:01:797]: Doing action: InstallODBC
Action ended 11:25:01: RegisterFonts. Return value 1.
MSI (s) (40:A8) [11:25:01:797]: Note: 1: 2711 2: ODBCDriverManager
MSI (s) (40:A8) [11:25:01:797]: Note: 1: 2711 2: ODBCDriverManager64
MSI (s) (40:A8) [11:25:01:797]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (40:A8) [11:25:01:797]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (40:A8) [11:25:01:797]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (40:A8) [11:25:01:797]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (40:A8) [11:25:01:797]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (40:A8) [11:25:01:797]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (40:A8) [11:25:01:798]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (40:A8) [11:25:01:798]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (40:A8) [11:25:01:798]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (40:A8) [11:25:01:798]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ?
MSI (s) (40:A8) [11:25:01:798]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (40:A8) [11:25:01:798]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ?
Action start 11:25:01: InstallODBC.
MSI (s) (40:A8) [11:25:01:798]: Doing action: RegisterTypeLibraries
Action ended 11:25:01: InstallODBC. Return value 0.
MSI (s) (40:A8) [11:25:01:798]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (40:A8) [11:25:01:798]: Note: 1: 2228 2: 3: TypeLib 4: SELECT `LibID`, `TypeLib`.`Version`, `TypeLib`.`Language`, `TypeLib`.`Directory_`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `BinaryType`, `Component`.`Component`, `Component`.`Attributes`, `Component`.`RuntimeFlags` FROM `TypeLib`, `Component`, `File` WHERE `TypeLib`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Component`.`Action`=1 OR `Component`.`Action`=2) OR (`Component`.`Action` = null AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2)))
Action start 11:25:01: RegisterTypeLibraries.
MSI (s) (40:A8) [11:25:01:798]: Doing action: RegisterComPlus
Action ended 11:25:01: RegisterTypeLibraries. Return value 0.
MSI (s) (40:A8) [11:25:01:798]: Note: 1: 2205 2: 3: Complus
MSI (s) (40:A8) [11:25:01:798]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Action` = 1 OR `Action` = 2)
Action start 11:25:01: RegisterComPlus.
MSI (s) (40:A8) [11:25:01:799]: Doing action: SelfRegModules
Action ended 11:25:01: RegisterComPlus. Return value 0.
MSI (s) (40:A8) [11:25:01:799]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (40:A8) [11:25:01:799]: Note: 1: 2228 2: 3: SelfReg 4: Select `FileAction`.`FileName`,`FileAction`.`Directory_`,`FileAction`.`Action`, `FileAction`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `FileAction` Where `SelfReg`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 OR `FileAction`.`Action` = 2)
Action start 11:25:01: SelfRegModules.
MSI (s) (40:A8) [11:25:01:799]: Doing action: InstallServices
Action ended 11:25:01: SelfRegModules. Return value 1.
Action start 11:25:01: InstallServices.
MSI (s) (40:A8) [11:25:01:800]: Doing action: SetServiceXP
Action ended 11:25:01: InstallServices. Return value 1.
Action start 11:25:01: SetServiceXP.
MSI (s) (40:A8) [11:25:01:827]: Doing action: CreateTamperProtectionRegKeyRollback
Action ended 11:25:01: SetServiceXP. Return value 1.
Action start 11:25:01: CreateTamperProtectionRegKeyRollback.
MSI (s) (40:A8) [11:25:01:853]: Doing action: CreateTamperProtectionRegKey
Action ended 11:25:01: CreateTamperProtectionRegKeyRollback. Return value 1.
Action start 11:25:01: CreateTamperProtectionRegKey.
MSI (s) (40:A8) [11:25:01:879]: Doing action: SchedSecureObjects
Action ended 11:25:01: CreateTamperProtectionRegKey. Return value 1.
MSI (s) (40:50) [11:25:01:882]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI468F.tmp, Entrypoint: SchedSecureObjects
MSI (s) (40!30) [11:25:01:892]: PROPERTY CHANGE: Adding ExecSecureObjects property. Its value is '**********'.
Action start 11:25:01: SchedSecureObjects.
MSI (s) (40!30) [11:25:01:892]: Doing action: ExecSecureObjects
Action start 11:25:01: ExecSecureObjects.
Action ended 11:25:01: ExecSecureObjects. Return value 1.
MSI (s) (40:A8) [11:25:01:896]: Doing action: SetSAVServiceSID
Action ended 11:25:01: SchedSecureObjects. Return value 1.
Action start 11:25:01: SetSAVServiceSID.
MSI (s) (40:A8) [11:25:01:921]: Doing action: AddSIPSSubmitterUserAccount.SetProperty
Action ended 11:25:01: SetSAVServiceSID. Return value 1.
MSI (s) (40:A8) [11:25:01:922]: PROPERTY CHANGE: Adding AddSIPSSubmitterUserAccount property. Its value is 'NT SERVICE\SAVService'.
Action start 11:25:01: AddSIPSSubmitterUserAccount.SetProperty.
MSI (s) (40:A8) [11:25:01:922]: Doing action: AddSIPSSubmitterUserAccountRollback.SetProperty
Action ended 11:25:01: AddSIPSSubmitterUserAccount.SetProperty. Return value 1.
MSI (s) (40:A8) [11:25:01:923]: PROPERTY CHANGE: Adding AddSIPSSubmitterUserAccountRollback property. Its value is 'NT SERVICE\SAVService'.
Action start 11:25:01: AddSIPSSubmitterUserAccountRollback.SetProperty.
MSI (s) (40:A8) [11:25:01:923]: Doing action: AddSIPSSubmitterUserAccountRollback
Action ended 11:25:01: AddSIPSSubmitterUserAccountRollback.SetProperty. Return value 1.
Action start 11:25:01: AddSIPSSubmitterUserAccountRollback.
MSI (s) (40:A8) [11:25:01:925]: Doing action: AddSIPSSubmitterUserAccount
Action ended 11:25:01: AddSIPSSubmitterUserAccountRollback. Return value 1.
Action start 11:25:01: AddSIPSSubmitterUserAccount.
MSI (s) (40:A8) [11:25:01:927]: Doing action: SetStartDriverServicesProperty
Action ended 11:25:01: AddSIPSSubmitterUserAccount. Return value 1.
MSI (s) (40:A8) [11:25:01:927]: PROPERTY CHANGE: Adding StartDriverServices property. Its value is 'WIN7_I386'.
Action start 11:25:01: SetStartDriverServicesProperty.
MSI (s) (40:A8) [11:25:01:927]: Doing action: StartDriverServices
Action ended 11:25:01: SetStartDriverServicesProperty. Return value 1.
Action start 11:25:01: StartDriverServices.
MSI (s) (40:A8) [11:25:01:952]: Doing action: SetThreatLifeTimeRegistryKeyPermissions
Action ended 11:25:01: StartDriverServices. Return value 1.
Action start 11:25:01: SetThreatLifeTimeRegistryKeyPermissions.
MSI (s) (40:A8) [11:25:01:978]: Doing action: SetupSspUserAccount.SetProperty
Action ended 11:25:01: SetThreatLifeTimeRegistryKeyPermissions. Return value 1.
MSI (s) (40:A8) [11:25:01:978]: PROPERTY CHANGE: Adding SetupSspUserAccount property. Its value is 'NT SERVICE\SAVService'.
Action start 11:25:01: SetupSspUserAccount.SetProperty.
MSI (s) (40:A8) [11:25:01:979]: Doing action: SetupSspUserAccountRollback.SetProperty
Action ended 11:25:01: SetupSspUserAccount.SetProperty. Return value 1.
MSI (s) (40:A8) [11:25:01:979]: PROPERTY CHANGE: Adding SetupSspUserAccountRollback property. Its value is 'NT SERVICE\SAVService'.
Action start 11:25:01: SetupSspUserAccountRollback.SetProperty.
MSI (s) (40:A8) [11:25:01:979]: Doing action: SetupSspUserAccountRollback
Action ended 11:25:01: SetupSspUserAccountRollback.SetProperty. Return value 1.
Action start 11:25:01: SetupSspUserAccountRollback.
MSI (s) (40:A8) [11:25:01:982]: Doing action: SetupSspUserAccount
Action ended 11:25:01: SetupSspUserAccountRollback. Return value 1.
Action start 11:25:01: SetupSspUserAccount.
MSI (s) (40:A8) [11:25:01:986]: Skipping action: RestartDriversAfterSecurityChange (condition is false)
MSI (s) (40:A8) [11:25:01:986]: Doing action: SetServiceSecurity
Action ended 11:25:01: SetupSspUserAccount. Return value 1.
Action start 11:25:01: SetServiceSecurity.
MSI (s) (40:A8) [11:25:02:010]: Doing action: SetServiceRecoveryActions
Action ended 11:25:02: SetServiceSecurity. Return value 1.
Action start 11:25:02: SetServiceRecoveryActions.
MSI (s) (40:A8) [11:25:02:037]: Doing action: SetRollbackInstallDeviceControlProperty
Action ended 11:25:02: SetServiceRecoveryActions. Return value 1.
MSI (s) (40:A8) [11:25:02:038]: PROPERTY CHANGE: Adding RollBackInstallDeviceControl property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:25:02: SetRollbackInstallDeviceControlProperty.
MSI (s) (40:A8) [11:25:02:038]: Doing action: RollbackInstallDeviceControl
Action ended 11:25:02: SetRollbackInstallDeviceControlProperty. Return value 1.
Action start 11:25:02: RollbackInstallDeviceControl.
MSI (s) (40:A8) [11:25:02:064]: Doing action: SetInstallDeviceControlProperty
Action ended 11:25:02: RollbackInstallDeviceControl. Return value 1.
MSI (s) (40:A8) [11:25:02:064]: PROPERTY CHANGE: Adding InstallDeviceControl property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\"'.
Action start 11:25:02: SetInstallDeviceControlProperty.
MSI (s) (40:A8) [11:25:02:065]: Doing action: InstallDeviceControl
Action ended 11:25:02: SetInstallDeviceControlProperty. Return value 1.
Action start 11:25:02: InstallDeviceControl.
MSI (s) (40:A8) [11:25:02:091]: Doing action: SetAdminGroupDescription
Action ended 11:25:02: InstallDeviceControl. Return value 1.
Action start 11:25:02: SetAdminGroupDescription.
MSI (s) (40:A8) [11:25:02:118]: Doing action: SetPowerGroupDescription
Action ended 11:25:02: SetAdminGroupDescription. Return value 1.
Action start 11:25:02: SetPowerGroupDescription.
MSI (s) (40:A8) [11:25:02:142]: Doing action: SetUserGroupDescription
Action ended 11:25:02: SetPowerGroupDescription. Return value 1.
Action start 11:25:02: SetUserGroupDescription.
MSI (s) (40:A8) [11:25:02:166]: Doing action: MsiConfigureServices
Action ended 11:25:02: SetUserGroupDescription. Return value 1.
Action start 11:25:02: MsiConfigureServices.
MSI (s) (40:A8) [11:25:02:168]: Note: 1: 2205 2: 3: MsiServiceConfigFailureActions
MSI (s) (40:A8) [11:25:02:168]: Note: 1: 2228 2: 3: MsiServiceConfigFailureActions 4: SELECT `Name`, `Event`, `ResetPeriod`, `RebootMessage`,`Command`, `Actions`, `DelayActions`, `Action` FROM `MsiServiceConfigFailureActions`, `Component` WHERE `Component_` = `Component` AND (`Action` = 0 OR `Action` = 1 OR `Action` = 3)
MSI (s) (40:A8) [11:25:02:168]: Doing action: SetOnAccessGroupDescription
Action ended 11:25:02: MsiConfigureServices. Return value 1.
Action start 11:25:02: SetOnAccessGroupDescription.
MSI (s) (40:A8) [11:25:02:192]: Skipping action: DisableOnAccess (condition is false)
MSI (s) (40:A8) [11:25:02:192]: Doing action: DisablePUADetection_setprop
Action ended 11:25:02: SetOnAccessGroupDescription. Return value 1.
MSI (s) (40:A8) [11:25:02:193]: PROPERTY CHANGE: Adding DisablePUADetection property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 11:25:02: DisablePUADetection_setprop.
MSI (s) (40:A8) [11:25:02:193]: Doing action: DisablePUADetection
Action ended 11:25:02: DisablePUADetection_setprop. Return value 1.
Action start 11:25:02: DisablePUADetection.
MSI (s) (40:A8) [11:25:02:217]: Doing action: DeleteExpiredCaches
Action ended 11:25:02: DisablePUADetection. Return value 1.
Action start 11:25:02: DeleteExpiredCaches.
MSI (s) (40:A8) [11:25:02:242]: Doing action: EnableJournals
Action ended 11:25:02: DeleteExpiredCaches. Return value 1.
Action start 11:25:02: EnableJournals.
MSI (s) (40:A8) [11:25:02:266]: Doing action: DisableWebProtection_setprop
Action ended 11:25:02: EnableJournals. Return value 1.
MSI (s) (40:A8) [11:25:02:267]: PROPERTY CHANGE: Adding DisableWebProtection property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 11:25:02: DisableWebProtection_setprop.
MSI (s) (40:A8) [11:25:02:267]: Doing action: DisableWebProtection
Action ended 11:25:02: DisableWebProtection_setprop. Return value 1.
Action start 11:25:02: DisableWebProtection.
MSI (s) (40:A8) [11:25:02:290]: Doing action: DisableSxlLookups_setprop
Action ended 11:25:02: DisableWebProtection. Return value 1.
MSI (s) (40:A8) [11:25:02:291]: PROPERTY CHANGE: Adding DisableSxlLookups property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 11:25:02: DisableSxlLookups_setprop.
MSI (s) (40:A8) [11:25:02:291]: Doing action: DisableSxlLookups
Action ended 11:25:02: DisableSxlLookups_setprop. Return value 1.
Action start 11:25:02: DisableSxlLookups.
MSI (s) (40:A8) [11:25:02:314]: Doing action: CheckSNMPDLLPresence_setprop
Action ended 11:25:02: DisableSxlLookups. Return value 1.
MSI (s) (40:A8) [11:25:02:315]: PROPERTY CHANGE: Adding CheckSNMPDLLPresence property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 11:25:02: CheckSNMPDLLPresence_setprop.
MSI (s) (40:A8) [11:25:02:315]: Doing action: CheckSNMPDLLPresence
Action ended 11:25:02: CheckSNMPDLLPresence_setprop. Return value 1.
Action start 11:25:02: CheckSNMPDLLPresence.
MSI (s) (40:A8) [11:25:02:340]: Doing action: SetUpdateSXLServerList
Action ended 11:25:02: CheckSNMPDLLPresence. Return value 1.
MSI (s) (40:A8) [11:25:02:341]: PROPERTY CHANGE: Adding UpdateSXLServerList property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'.
Action start 11:25:02: SetUpdateSXLServerList.
MSI (s) (40:A8) [11:25:02:341]: Doing action: UpdateSXLServerList
Action ended 11:25:02: SetUpdateSXLServerList. Return value 1.
Action start 11:25:02: UpdateSXLServerList.
MSI (s) (40:A8) [11:25:02:364]: Doing action: SetApplySAVControlFile
Action ended 11:25:02: UpdateSXLServerList. Return value 1.
MSI (s) (40:A8) [11:25:02:365]: PROPERTY CHANGE: Adding ApplySAVControlFile property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'.
Action start 11:25:02: SetApplySAVControlFile.
MSI (s) (40:A8) [11:25:02:365]: Doing action: ApplySAVControlFile
Action ended 11:25:02: SetApplySAVControlFile. Return value 1.
Action start 11:25:02: ApplySAVControlFile.
MSI (s) (40:A8) [11:25:02:389]: Doing action: GenerateSavMachineId
Action ended 11:25:02: ApplySAVControlFile. Return value 1.
Action start 11:25:02: GenerateSavMachineId.
MSI (s) (40:A8) [11:25:02:415]: Doing action: RegisterUser
Action ended 11:25:02: GenerateSavMachineId. Return value 1.
Action start 11:25:02: RegisterUser.
MSI (s) (40:A8) [11:25:02:415]: Skipping action: ConfigureScanMyComputerScan_setprop (condition is false)
MSI (s) (40:A8) [11:25:02:415]: Skipping action: ConfigureScanMyComputerScan (condition is false)
MSI (s) (40:A8) [11:25:02:415]: Skipping action: DisableWindowsDefender (condition is false)
MSI (s) (40:A8) [11:25:02:415]: Doing action: RegisterProduct
Action ended 11:25:02: RegisterUser. Return value 1.
Action start 11:25:02: RegisterProduct.
MSI (s) (40:A8) [11:25:02:417]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
MSI (s) (40:A8) [11:25:02:417]: Doing action: PublishComponents
Action ended 11:25:02: RegisterProduct. Return value 1.
MSI (s) (40:A8) [11:25:02:417]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (40:A8) [11:25:02:417]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))
Action start 11:25:02: PublishComponents.
MSI (s) (40:A8) [11:25:02:417]: Doing action: MsiPublishAssemblies
Action ended 11:25:02: PublishComponents. Return value 0.
MSI (s) (40:A8) [11:25:02:418]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (40:A8) [11:25:02:418]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT null, null, `Component`.`Component`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `MsiAssembly`, `Component`, `Feature` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Feature_` = `Feature`.`Feature` AND `MsiAssembly`.`File_Application` = null AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))
Action start 11:25:02: MsiPublishAssemblies.
MSI (s) (40:A8) [11:25:02:418]: Doing action: PublishFeatures
Action ended 11:25:02: MsiPublishAssemblies. Return value 0.
Action start 11:25:02: PublishFeatures.
MSI (s) (40:A8) [11:25:02:420]: Doing action: PublishProduct
Action ended 11:25:02: PublishFeatures. Return value 1.
Action start 11:25:02: PublishProduct.
MSI (s) (40:A8) [11:25:02:421]: Skipping action: RollbackRegisterTamperProtectionControlX64 (condition is false)
MSI (s) (40:A8) [11:25:02:421]: Skipping action: RollbackRegisterSavShellExtX64 (condition is false)
MSI (s) (40:A8) [11:25:02:421]: Doing action: RollbackRegisterSophosOfficeAV
Action ended 11:25:02: PublishProduct. Return value 1.
Action start 11:25:02: RollbackRegisterSophosOfficeAV.
MSI (s) (40:A8) [11:25:02:421]: Skipping action: RollbackRegisterSophosOfficeAVX64 (condition is false)
MSI (s) (40:A8) [11:25:02:421]: Skipping action: RegisterTamperProtectionControlX64 (condition is false)
MSI (s) (40:A8) [11:25:02:421]: Skipping action: RegisterSavShellExtX64 (condition is false)
MSI (s) (40:A8) [11:25:02:421]: Doing action: RegisterSophosOfficeAV
Action ended 11:25:02: RollbackRegisterSophosOfficeAV. Return value 1.
Action start 11:25:02: RegisterSophosOfficeAV.
MSI (s) (40:A8) [11:25:02:422]: Skipping action: RegisterSophosOfficeAVX64 (condition is false)
MSI (s) (40:A8) [11:25:02:422]: Doing action: SetRollbackInstallSecurityCenterProperty
Action ended 11:25:02: RegisterSophosOfficeAV. Return value 1.
MSI (s) (40:A8) [11:25:02:422]: PROPERTY CHANGE: Adding RollbackInstallSecurityCenter property. Its value is '10.8.10.810;'.
Action start 11:25:02: SetRollbackInstallSecurityCenterProperty.
MSI (s) (40:A8) [11:25:02:422]: Doing action: RollbackInstallSecurityCenter
Action ended 11:25:02: SetRollbackInstallSecurityCenterProperty. Return value 1.
Action start 11:25:02: RollbackInstallSecurityCenter.
MSI (s) (40:A8) [11:25:02:449]: Doing action: SetRestoreFirstInstallTimeProperty
Action ended 11:25:02: RollbackInstallSecurityCenter. Return value 1.
MSI (s) (40:A8) [11:25:02:449]: PROPERTY CHANGE: Adding RestoreFirstInstallTime property. Its value is '0'.
Action start 11:25:02: SetRestoreFirstInstallTimeProperty.
MSI (s) (40:A8) [11:25:02:450]: Skipping action: RestoreFirstInstallTime (condition is false)
MSI (s) (40:A8) [11:25:02:450]: Doing action: RunPreLaunchScript
Action ended 11:25:02: SetRestoreFirstInstallTimeProperty. Return value 1.
Action start 11:25:02: RunPreLaunchScript.
MSI (s) (40:A8) [11:25:02:475]: Doing action: RegisterDCIfEnabled
Action ended 11:25:02: RunPreLaunchScript. Return value 1.
Action start 11:25:02: RegisterDCIfEnabled.
MSI (s) (40:A8) [11:25:02:500]: Doing action: StartSAVServices
Action ended 11:25:02: RegisterDCIfEnabled. Return value 1.
Action start 11:25:02: StartSAVServices.
MSI (s) (40:A8) [11:25:02:524]: Skipping action: ApplyCachedPolicies (condition is false)
MSI (s) (40:A8) [11:25:02:524]: Skipping action: CopySwiFcRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:524]: Skipping action: CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:524]: Skipping action: CopySwiFcToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:524]: Skipping action: CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:524]: Skipping action: CopyScfDotDatToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:524]: Skipping action: CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:524]: Doing action: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 11:25:02: StartSAVServices. Return value 1.
MSI (s) (40:A8) [11:25:02:524]: PROPERTY CHANGE: Adding SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'swi_service'.
Action start 11:25:02: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (40:A8) [11:25:02:525]: Doing action: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 11:25:02: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 11:25:02: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (40:A8) [11:25:02:529]: Doing action: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 11:25:02: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (40:A8) [11:25:02:529]: PROPERTY CHANGE: Adding SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /registerService'.
Action start 11:25:02: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (40:A8) [11:25:02:530]: Doing action: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 11:25:02: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 11:25:02: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (40:A8) [11:25:02:532]: Skipping action: SwiCalloutInstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:532]: Skipping action: SwiCalloutRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:532]: Skipping action: SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:532]: Skipping action: SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:532]: Skipping action: SwiFilterRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:532]: Skipping action: SwiFilterRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:532]: Skipping action: SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:532]: Skipping action: SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:532]: Doing action: StartServices
Action ended 11:25:02: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 11:25:02: StartServices.
MSI (s) (40:A8) [11:25:02:532]: Doing action: SwiUpdateInstallRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 11:25:02: StartServices. Return value 1.
Action start 11:25:02: SwiUpdateInstallRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (40:A8) [11:25:02:536]: Doing action: SwiUpdateInstall.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 11:25:02: SwiUpdateInstallRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (40:A8) [11:25:02:537]: PROPERTY CHANGE: Adding SwiUpdateInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe" /update'.
Action start 11:25:02: SwiUpdateInstall.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (40:A8) [11:25:02:537]: Doing action: SwiUpdateInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 11:25:02: SwiUpdateInstall.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 11:25:02: SwiUpdateInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (40:A8) [11:25:02:539]: Skipping action: SwiUpdateInstall64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:539]: Skipping action: SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:539]: Skipping action: SwiUpdateUpgradeRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:539]: Skipping action: SwiUpdateUpgrade.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:539]: Skipping action: SwiUpdateUpgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:539]: Skipping action: SwiUpdateUpgrade64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:539]: Skipping action: SwiUpdateUpgrade64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (40:A8) [11:25:02:539]: Doing action: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 11:25:02: SwiUpdateInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (40:00) [11:25:02:541]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI491F.tmp, Entrypoint: SwcEnableSwcServiceStart
Action start 11:25:02: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (40:A8) [11:25:02:550]: Doing action: BootDriverStartup
Action ended 11:25:02: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 11:25:02: BootDriverStartup.
MSI (s) (40:A8) [11:25:02:573]: Doing action: SetUpdateDriversProperty
Action ended 11:25:02: BootDriverStartup. Return value 1.
MSI (s) (40:A8) [11:25:02:574]: PROPERTY CHANGE: Modifying UPDATEDRIVERS property. Its current value is '1'. Its new value: '0'.
Action start 11:25:02: SetUpdateDriversProperty.
MSI (s) (40:A8) [11:25:02:574]: Doing action: SetConfigureSAVProperty
Action ended 11:25:02: SetUpdateDriversProperty. Return value 1.
MSI (s) (40:A8) [11:25:02:575]: PROPERTY CHANGE: Adding ConfigureSAV property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\""0"'.
Action start 11:25:02: SetConfigureSAVProperty.
MSI (s) (40:A8) [11:25:02:575]: Skipping action: ScheduleReboot (condition is false)
MSI (s) (40:A8) [11:25:02:575]: Doing action: ConfigureSAV
Action ended 11:25:02: SetConfigureSAVProperty. Return value 1.
Action start 11:25:02: ConfigureSAV.
MSI (s) (40:A8) [11:25:02:598]: Skipping action: SetUpdateFinished (condition is false)
MSI (s) (40:A8) [11:25:02:598]: Doing action: SetSAVAdminUpdateComplete
Action ended 11:25:02: ConfigureSAV. Return value 1.
Action start 11:25:02: SetSAVAdminUpdateComplete.
MSI (s) (40:A8) [11:25:02:623]: Doing action: SetInstallationComplete
Action ended 11:25:02: SetSAVAdminUpdateComplete. Return value 1.
Action start 11:25:02: SetInstallationComplete.
MSI (s) (40:A8) [11:25:02:647]: Doing action: SetCreateSavAdapterDllRegistryEntryProperty
Action ended 11:25:02: SetInstallationComplete. Return value 1.
MSI (s) (40:A8) [11:25:02:647]: PROPERTY CHANGE: Adding CreateSavAdapterDllRegistryEntry property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:25:02: SetCreateSavAdapterDllRegistryEntryProperty.
MSI (s) (40:A8) [11:25:02:648]: Doing action: CreateSavAdapterDllRegistryEntry
Action ended 11:25:02: SetCreateSavAdapterDllRegistryEntryProperty. Return value 1.
Action start 11:25:02: CreateSavAdapterDllRegistryEntry.
MSI (s) (40:A8) [11:25:02:671]: Doing action: SetForceDeleteFilesProperty
Action ended 11:25:02: CreateSavAdapterDllRegistryEntry. Return value 1.
MSI (s) (40:A8) [11:25:02:672]: PROPERTY CHANGE: Adding ForceDeleteFiles property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
Action start 11:25:02: SetForceDeleteFilesProperty.
MSI (s) (40:A8) [11:25:02:672]: Skipping action: ForceDeleteFiles (condition is false)
MSI (s) (40:A8) [11:25:02:672]: Skipping action: UnregisterSEDComponents (condition is false)
MSI (s) (40:A8) [11:25:02:672]: Doing action: SetAfterScriptProperty
Action ended 11:25:02: SetForceDeleteFilesProperty. Return value 1.
MSI (s) (40:A8) [11:25:02:672]: PROPERTY CHANGE: Adding RunAfterScript property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""10.8.10.810"'.
Action start 11:25:02: SetAfterScriptProperty.
MSI (s) (40:A8) [11:25:02:673]: Doing action: RunAfterScript
Action ended 11:25:02: SetAfterScriptProperty. Return value 1.
Action start 11:25:02: RunAfterScript.
MSI (s) (40:A8) [11:25:02:697]: Doing action: SetUnregisterSavSetupTelemetryProperty
Action ended 11:25:02: RunAfterScript. Return value 1.
Action start 11:25:02: SetUnregisterSavSetupTelemetryProperty.
MSI (s) (40:A8) [11:25:02:697]: Skipping action: UnregisterSavSetupTelemetry (condition is false)
MSI (s) (40:A8) [11:25:02:697]: Doing action: SetCopySavSyncFileProperty
Action ended 11:25:02: SetUnregisterSavSetupTelemetryProperty. Return value 1.
MSI (s) (40:A8) [11:25:02:698]: PROPERTY CHANGE: Adding CopySAVSyncFile property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\"'.
Action start 11:25:02: SetCopySavSyncFileProperty.
MSI (s) (40:A8) [11:25:02:698]: Doing action: CopySAVSyncFile
Action ended 11:25:02: SetCopySavSyncFileProperty. Return value 1.
Action start 11:25:02: CopySAVSyncFile.
MSI (s) (40:A8) [11:25:02:722]: Skipping action: RestoreWindowsDefender (condition is false)
MSI (s) (40:A8) [11:25:02:722]: Skipping action: WixFailWhenDeferred (condition is false)
MSI (s) (40:A8) [11:25:02:722]: Doing action: InstallFinalize
Action ended 11:25:02: CopySAVSyncFile. Return value 1.
MSI (s) (40:A8) [11:25:02:723]: Running Script: C:\Windows\Installer\MSIFFF0.tmp
MSI (s) (40:A8) [11:25:02:723]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'.
MSI (s) (40:A8) [11:25:02:724]: Machine policy value 'DisableRollback' is 0
MSI (s) (40:A8) [11:25:02:740]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (40:A8) [11:25:02:743]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1383750422,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
Action start 11:25:02: InstallFinalize.
MSI (s) (40:A8) [11:25:02:743]: Executing op: ProductInfo(ProductKey={31616A98-3852-49E9-BDD6-77A1AB85571A},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=168296458,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={DA891FEE-A03E-4AE7-98FD-7F1E6F27DD3B},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
MSI (s) (40:A8) [11:25:02:743]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (40:A8) [11:25:02:743]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus)
MSI (s) (40:A8) [11:25:02:743]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (40:A8) [11:25:02:743]: Executing op: SetBaseline(Baseline=0,)
MSI (s) (40:A8) [11:25:02:743]: Executing op: SetBaseline(Baseline=1,)
MSI (s) (40:A8) [11:25:02:743]: Executing op: ActionStart(Name=SetUpdateFailed,,)
MSI (s) (40:A8) [11:25:02:745]: Executing op: CustomActionSchedule(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,)
MSI (s) (40:A8) [11:25:02:766]: Executing op: ActionStart(Name=RestoreMovedFiles,,)
MSI (s) (40:A8) [11:25:02:767]: Executing op: CustomActionSchedule(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files\Sophos\Sophos Anti-Virus\)
MSI (s) (40:A8) [11:25:02:788]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,)
MSI (s) (40:A8) [11:25:02:790]: Executing op: CustomActionSchedule(Action=CheckRegForNullDACLs,ActionType=1025,Source=BinaryData,Target=CheckRegForNullDACLs,)
MSI (s) (40:9C) [11:25:02:794]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI4A1B.tmp, Entrypoint: CheckRegForNullDACLs
MSI (s) (40!04) [11:25:02:878]: Product: Sophos Anti-Virus -- Error 3004.Sophos Anti-Virus cannot be installed. Some registry keys do not have the correct permissions. Contact your support personnel.

CustomAction CheckRegForNullDACLs returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (40:A8) [11:25:02:906]: User policy value 'DisableRollback' is 0
MSI (s) (40:A8) [11:25:02:906]: Machine policy value 'DisableRollback' is 0
Action ended 11:25:02: InstallFinalize. Return value 3.
MSI (s) (40:A8) [11:25:02:910]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1383750434,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (40:A8) [11:25:02:910]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (40:A8) [11:25:02:911]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus)
MSI (s) (40:A8) [11:25:02:911]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (40:A8) [11:25:02:911]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,)
MSI (s) (40:A8) [11:25:02:911]: Executing op: ProductInfo(ProductKey={31616A98-3852-49E9-BDD6-77A1AB85571A},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=168296458,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={DA891FEE-A03E-4AE7-98FD-7F1E6F27DD3B},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
MSI (s) (40:A8) [11:25:02:912]: Executing op: ActionStart(Name=RestoreMovedFiles,,)
MSI (s) (40:A8) [11:25:02:913]: Executing op: CustomActionRollback(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files\Sophos\Sophos Anti-Virus\)
MSI (s) (40:68) [11:25:02:917]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI4A99.tmp, Entrypoint: RestoreMovedFiles
MSI (s) (40:A8) [11:25:03:096]: Executing op: ActionStart(Name=SetUpdateFailed,,)
MSI (s) (40:A8) [11:25:03:099]: Executing op: CustomActionRollback(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,)
MSI (s) (40:70) [11:25:03:107]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI4B55.tmp, Entrypoint: SetUpdateFailed
MSI (s) (40:A8) [11:25:03:167]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (40:A8) [11:25:03:168]: Error in rollback skipped. Return: 5
MSI (s) (40:A8) [11:25:03:179]: Note: 1: 2318 2:
MSI (s) (40:A8) [11:25:03:180]: No System Restore sequence number for this installation.
MSI (s) (40:A8) [11:25:03:180]: Unlocking Server
MSI (s) (40:A8) [11:25:03:185]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 11:25:03: INSTALL. Return value 3.
Property(S): DiskPrompt = [1]
Property(S): CONFIG = C:\ProgramData\Sophos\Sophos Anti-Virus\Config\
Property(S): INFECTED = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\
Property(S): LOW = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\
Property(S): LOGS = C:\ProgramData\Sophos\Sophos Anti-Virus\logs\
Property(S): SAFESTORE = C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\
Property(S): DATAOUTPUT = C:\ProgramData\Sophos\Sophos Anti-Virus\DataOutput\
Property(S): TEMP = C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\
Property(S): CACHE = C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\
Property(S): LOGS1 = C:\ProgramData\Sophos\Sophos Data Control\logs\
Property(S): LOGS2 = C:\ProgramData\Sophos\Sophos Device Control\logs\
Property(S): LOGS3 = C:\ProgramData\Sophos\Sophos Tamper Protection\logs\
Property(S): INSTALLDIR = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): INSTALLDIR_WIN32 = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): INSTALLDIR_X64 = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): INSTALLDIR_HOME = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): SOPHOS_ANTI_VIRUS = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): BootDriverStartup = 0
Property(S): CheckSNMPDLLPresence = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): ConfigureSAV = "C:\Program Files\Sophos\Sophos Anti-Virus\""0"
Property(S): CopyOtherFiles = "C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""WIN7_I386"
Property(S): CopySAVSyncFile = "C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\"
Property(S): CreateSavAdapterDllRegistryEntry = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): CreateUserGroups = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): DeleteBDLs = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): DeleteDriverKeys = 0
Property(S): DeleteHIPSConfig = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): DeleteIDEs = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): DeleteNonEngineFiles = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): DeleteOtherFiles = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): DisablePUADetection = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): DisableSxlLookups = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): DisableWebProtection = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): ForceDeleteFiles = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): ForceDeleteUserPlugin = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): ALLUSERS = 2
Property(S): System64Folder = C:\
Property(S): InstallBootDriverVista = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\boottasks\wxp_i386\SOPHOSBOOTDRIVER.INF
Property(S): InstallBootDriverWin7 = "C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\boottasks\win7_i386\SOPHOSBOOTDRIVER.INF"""
Property(S): SystemFolder = C:\Windows\system32\
Property(S): InstallClassFilterVista = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\sdcfilter\wxp_i386\sdcfilter.inf
Property(S): InstallClassFilterWin7 = "C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\sdcfilter\win7_i386\sdcfilter.inf"""
Property(S): InstallDeviceControl = "C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\"
Property(S): InstallDriverFilesVista = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\onaccess\wlh_i386\SAVONACCESSDRIV.INF
Property(S): InstallDriverFilesWin7 = "C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\onaccess\win7_i386\SAVONACCESSDRIV.INF"""
Property(S): InstallKMSDriver = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\kms\wxp_i386\skmscan.inf
Property(S): InstallKMSDriverWin7 = "C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\drivers\kms\win7_i386\skmscan.inf"""
Property(S): InstallUnsignedBootDriver = "C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""WIN7_I386"
Property(S): InstallUnsignedDrivers = "C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""WIN7_I386"
Property(S): MoveLockedFiles = C:\Program Files\Sophos\Sophos Anti-Virus\|
Property(S): RegisterSophosDetours = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): RemoveFilesOnUpgrade = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): RemoveSAVI = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): RestoreFirstInstallTime = 0
Property(S): RestoreMovedFiles = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): RollbackBootDriverVista = "C:\Program Files\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF"""
Property(S): RollbackClassFilterVista = "C:\Program Files\Sophos\Sophos Anti-Virus\sdcfilter.inf"""
Property(S): RollbackDriverFilesVista = "C:\Program Files\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF"""
Property(S): RollbackForceDeleteFiles = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): RollbackForceDeleteUserPlugin = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): UninstallSecurityCenter = 10.8.10.810;
Property(S): RollbackInstallSecurityCenter = 10.8.10.810;
Property(S): RollbackKMSDriverVista = "C:\Program Files\Sophos\Sophos Anti-Virus\skmscan.inf"""
Property(S): RollbackOtherFiles = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): RollbackSavi = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): RollbackUpdateSavAdapterDll = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): RollbackUpdateDesktopMessaging = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): UpdateDesktopMessaging = ;10.8.10.810;
Property(S): RunAfterScript = "C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""10.8.10.810"
Property(S): RunErrorScript = "C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""10.8.10.810"
Property(S): RunPreLaunchScript = "C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""10.8.10.810"
Property(S): SetAdminGroupDescription = SophosAdministrators may run Sophos Anti-Virus with complete access
Property(S): ALLUSERSPROFILE = C:\ProgramData\
Property(S): SetFolderPermissions = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): UPDATEDRIVERS = 0
Property(S): TARGETDIR = C:\
Property(S): SetOnAccessGroupDescription = Contains accounts used by Sophos Anti-Virus when it performs threat scanning and cleanup functions
Property(S): SetPowerGroupDescription = SophosPowerUsers may run Sophos Anti-Virus with the access that SophosUsers have, plus greater access to cleanup
Property(S): RollBackInstallDeviceControl = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): StartDriverServices = WIN7_I386
Property(S): UninstallBootDriverOnUpdate = "C:\Program Files\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF"""
Property(S): UninstallBootDriver = "C:\Program Files\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF"""
Property(S): UninstallClassFilterVista = "C:\Program Files\Sophos\Sophos Anti-Virus\sdcfilter.inf"""
Property(S): UninstallDeviceControl = "C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"
Property(S): UninstallDriverFilesOnUpdate = "C:\Program Files\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF"""
Property(S): UninstallDriverFilesVista = "C:\Program Files\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF"""
Property(S): UninstallKMSDriverOnUpdate = "C:\Program Files\Sophos\Sophos Anti-Virus\SKMSCAN.INF"""
Property(S): UninstallKMSDriver = "C:\Program Files\Sophos\Sophos Anti-Virus\SKMSCAN.INF"""
Property(S): UnregisterSophosDetours = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): UnregisterSedInjection = 10.8.10.810;
Property(S): UpdateSXLServerList = "C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"
Property(S): ApplySAVControlFile = "C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"
Property(S): UpdateSAVI = "C:\Program Files\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\"
Property(S): SetUserGroupDescription = SophosUsers may run Sophos Anti-Virus with limited access to scanning configuration and cleanup
Property(S): UpdateSavAdapterDll = ;10.8.10.810;
Property(S): USERPROFILE = C:\Users\Default\
Property(S): EventType = BEGIN_SYSTEM_CHANGE
Property(S): SetupSspUserAccount = NT SERVICE\SAVService
Property(S): SetupSspUserAccountRollback = NT SERVICE\SAVService
Property(S): AddSIPSSubmitterUserAccount = NT SERVICE\SAVService
Property(S): AddSIPSSubmitterUserAccountRollback = NT SERVICE\SAVService
Property(S): ARPINSTALLLOCATION = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): SAVSERVICEUSER = NT SERVICE\SavService
Property(S): ExecSecureObjects = **********
Property(S): ExecSecureObjectsRollback = **********
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): CommonFiles64Folder = C:\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FavoritesFolder = C:\Windows\system32\config\systemprofile\Favorites\
Property(S): FontsFolder = C:\Windows\Fonts\
Property(S): GlobalAssemblyCache = C:\
Property(S): LocalAppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Local\
Property(S): PrimaryVolumePath = C:\
Property(S): ProgramFiles64Folder = C:\
Property(S): SendToFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): System16Folder = C:\Windows\system\
Property(S): TempFolder = C:\Windows\TEMP\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): WindowsFolder = C:\Windows\
Property(S): WindowsVolume = C:\
Property(S): RESOURCES = C:\ProgramData\Sophos\Sophos Anti-Virus\
Property(S): NEW_DIRECTORY3 = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
Property(S): RES = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
Property(S): NEW_DIRECTORY1 = C:\ProgramData\Sophos\
Property(S): SOPHOS_DATA_CONTROL = C:\ProgramData\Sophos\Sophos Data Control\
Property(S): SOPHOS_DEVICE_CONTROL = C:\ProgramData\Sophos\Sophos Device Control\
Property(S): SOPHOS_TAMPER_PROTECTION = C:\ProgramData\Sophos\Sophos Tamper Protection\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): SOPHOS = C:\Program Files\Sophos\
Property(S): ProgramFilesFolder = C:\Program Files\
Property(S): NEW_DIRECTORY2 = C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): newfolder2 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\
Property(S): newfolder1 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\
Property(S): VersionNT = 601
Property(S): AdminUser = 1
Property(S): _IsMaintenance = Change
Property(S): _IsSetupTypeMin = Typical
Property(S): AFTERREBOOT = 0
Property(S): AgreeToLicense = No
Property(S): ApplicationUsers = AllUsers
Property(S): APPLYCLASSICCONFIG = 0
Property(S): ARPCOMMENTS = Protects your computer and network from threats
Property(S): ARPCONTACT = Sophos Technical Support
Property(S): ARPHELPLINK = http://www.sophos.com/support
Property(S): ARPHELPTELEPHONE =
Property(S): ARPNOMODIFY = 1
Property(S): ARPNOREPAIR = 1
Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe
Property(S): ARPURLINFOABOUT = http://www.sophos.com
Property(S): ARPURLUPDATEINFO = www.sophos.com/.../updates
Property(S): RegisterWithAutoUpdate = {E17FE03B-0501-4aaa-BC69-0129D965F311};savxp;0;0
Property(S): BOOTDRIVERSIGNED = 1
Property(S): CHECKFORCOMPETITORS = 1
Property(S): CHECKFORSCF = 1
Property(S): CLASSFILTERPRESENT = 0
Property(S): CopyBDLs = 0
Property(S): CopyIDEs = 0
Property(S): DATACONTROL = 1
Property(S): DefaultUIFont = Tahoma8
Property(S): DEVICECONTROL = 1
Property(S): DialogCaption = Sophos Installer
Property(S): DISABLEONACCESS = 0
Property(S): Display_IsBitmapDlg = 1
Property(S): DisplayNameCustom = Custom
Property(S): DisplayNameMinimal = Minimal
Property(S): DisplayNameTypical = Typical
Property(S): DRIVERVERSION = WIN7_I386
Property(S): FIRST_INSTALL_DATE = 0
Property(S): IDEONLY = 0
Property(S): InstallChoice = AR
Property(S): INSTALLLEVEL = 100
Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1]
Property(S): IS_PROGMSG_XML_COSTING = Costing XML files...
Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s...
Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes...
Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s...
Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes...
Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s...
Property(S): IS_SQLSERVER_AUTHENTICATION = 0
Property(S): IS_SQLSERVER_USERNAME = sa
Property(S): ISReleaseFlags = SAV
Property(S): ISVROOT_PORT_NO = 0
Property(S): MAJORUPGRADE = 0
Property(S): MANAGED = 1
Property(S): MSIRESTARTMANAGERCONTROL = Disable
Property(S): NEEDREBOOT = 0
Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@
Property(S): PRODUCTTYPE = 0
Property(S): PROCESSOR_NX_ENABLED = 1
Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s
Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools...
Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s
Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories...
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions...
Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories...
Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool
Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools...
Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d
Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s
Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions...
Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools...
Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes...
Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions...
Property(S): ProgressType0 = install
Property(S): ProgressType1 = Installing
Property(S): ProgressType2 = installed
Property(S): ProgressType3 = installs
Property(S): RebootYesNo = Yes
Property(S): Registration = No
Property(S): ReinstallModeText = omus
Property(S): SAVIONLY = 0
Property(S): SCRIPTDIR = [SOURCEDIR]
Property(S): SequenceNumber = 0
Property(S): SetupType = Typical
Property(S): SYNCMODE = 1
Property(S): UITYPE = none
Property(S): UNINSTALLBOOTDRIVERS = 1
Property(S): UNINSTALLCLASSFILTER = 1
Property(S): UNINSTALLDRIVERS = 1
Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus.
Property(S): UNINSTALLKMSDRIVERS = 1
Property(S): UPDATEBOOTDRIVERS = 1
Property(S): UPDATECLASSFILTER = 1
Property(S): VIRUSDATAUPDATE = 0
Property(S): Manufacturer = Sophos Limited
Property(S): ProductCode = {31616A98-3852-49E9-BDD6-77A1AB85571A}
Property(S): ProductLanguage = 1033
Property(S): ProductName = Sophos Anti-Virus
Property(S): ProductVersion = 10.8.10.810
Property(S): UpgradeCode = {597B239E-3032-491A-A322-817737925E8A}
Property(S): SecureCustomProperties = EXCLUDEDPROCESSES;INSTALLINGVERSION;MAJORUPGRADE;WEBCONTROL
Property(S): MsiHiddenProperties = ExecSecureObjects;ExecSecureObjectsRollback
Property(S): INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\
Property(S): SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll
Property(S): SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll
Property(S): SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\
Property(S): SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\
Property(S): SWIDIRLSP.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\
Property(S): SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = swi_service
Property(S): SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /registerService
Property(S): SwiUpdateInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update.exe" /update
Property(S): REBOOTREQUIREDFILE.11DACB83_28A7_4FA6_AF5B_C006E340C101 = SwiRebootRequired.txt
Property(S): MsiLogFileLocation = C:\Windows\TEMP\Sophos Anti-Virus Major Install Log_210326_042443.txt
Property(S): PackageCode = {DA891FEE-A03E-4AE7-98FD-7F1E6F27DD3B}
Property(S): ProductState = -1
Property(S): PackagecodeChanging = 1
Property(S): ARPSYSTEMCOMPONENT = 1
Property(S): REBOOT = ReallySuppress
Property(S): UPDATEKMSDRIVERS = 1
Property(S): RECOVERYMODE = 0
Property(S): WEBCONTROL = 1
Property(S): CURRENTDIRECTORY = C:\Windows\system32
Property(S): CLIENTUILEVEL = 3
Property(S): MSICLIENTUSESEXTERNALUI = 1
Property(S): CLIENTPROCESSID = 5680
Property(S): VersionDatabase = 200
Property(S): VersionMsi = 5.00
Property(S): WindowsBuild = 7601
Property(S): ServicePackLevel = 1
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 1
Property(S): RemoteAdminTS = 1
Property(S): CommonFilesFolder = C:\Program Files\Common Files\
Property(S): AppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\
Property(S): NetHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Windows\system32\config\systemprofile\Documents\
Property(S): PrintHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): MyPicturesFolder = C:\Windows\system32\config\systemprofile\Pictures\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): Intel = 6
Property(S): PhysicalMemory = 3241
Property(S): VirtualMemory = 4609
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = SYSTEM
Property(S): UserSID = S-1-5-18
Property(S): UserLanguageID = 1057
Property(S): ComputerName = PGN2PC20111536
Property(S): SystemLanguageID = 1057
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 22
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 11:25:03
Property(S): Date = 26/03/2021
Property(S): MsiNetAssemblySupport = 4.0.30319.34209
Property(S): MsiWin32AssemblySupport = 6.1.7601.17514
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): USERNAME = SBYJUAL20
Property(S): COMPANYNAME = Microsoft
Property(S): DATABASE = C:\Windows\Installer\14feb8.msi
Property(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\Sophos Anti-Virus.msi
Property(S): UILevel = 2
Property(S): ACTION = INSTALL
Property(S): ROOTDRIVE = C:\
Property(S): CostingComplete = 1
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
Property(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\savxp\
Property(S): SourcedirProduct = {31616A98-3852-49E9-BDD6-77A1AB85571A}
Property(S): KMSDRIVERSIGNED = 1
Property(S): ProductToBeRegistered = 1
MSI (s) (40:A8) [11:25:03:222]: Note: 1: 1708
MSI (s) (40:A8) [11:25:03:222]: Product: Sophos Anti-Virus -- Installation operation failed.

MSI (s) (40:A8) [11:25:03:223]: Windows Installer installed the product. Product Name: Sophos Anti-Virus. Product Version: 10.8.10.810. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1603.

MSI (s) (40:A8) [11:25:03:226]: Deferring clean up of packages/files, if any exist
MSI (s) (40:A8) [11:25:03:226]: MainEngineThread is returning 1603
MSI (s) (40:6C) [11:25:03:226]: No System Restore sequence number for this installation.
=== Logging stopped: 26/03/2021 11:25:03 ===
MSI (s) (40:6C) [11:25:03:227]: User policy value 'DisableRollback' is 0
MSI (s) (40:6C) [11:25:03:227]: Machine policy value 'DisableRollback' is 0
MSI (s) (40:6C) [11:25:03:227]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (40:6C) [11:25:03:227]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (40:6C) [11:25:03:227]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (40:6C) [11:25:03:228]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (40:6C) [11:25:03:228]: Restoring environment variables
MSI (s) (40:6C) [11:25:03:228]: Destroying RemoteAPI object.
MSI (s) (40:50) [11:25:03:228]: Custom Action Manager thread ending.
MSI (c) (30:84) [11:25:03:229]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (30:84) [11:25:03:229]: MainEngineThread is returning 1603
=== Verbose logging stopped: 26/03/2021 11:25:03 ===

2021-03-26 11:25:03 ERROR: Installation failed
2021-03-26 11:25:03 ERROR: SetupPlugin: Unable to get buffer size for Application registry key Path value.
2021-03-26 11:25:03 ERROR: Failed to get current install location to register with tamper protection. Error 0x80070002
2021-03-26 11:25:03 ERROR: Failed to update the major update counters (The result of the last run has not been set)

To check if you have the extended support for win7 and win2008 servers, You need to login to your central dashboard in the upper right corner you’ll b able to see your super admin account with a drop-down option then select licensing. You’ll be able to see the list of your subscriptions for Sophos. 
Also on the logs, We can see that an existing Sophos AV was still detected on the machine.

Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus.

If you have validated that you have the right subscription please proceed on running Sophos ZAP to totally clean the device before proceeding with the installation.

In addition, we're observing a permission issue on the account being used to perform the installation. 

MSI (s) (40!04) [11:25:02:878]: Product: Sophos Anti-Virus -- Error 3004.Sophos Anti-Virus cannot be installed. Some registry keys do not have the correct permissions. Contact your support personnel.
CustomAction CheckRegForNullDACLs returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (40:A8) [11:25:02:906]: User policy value 'DisableRollback' is 0
MSI (s) (40:A8) [11:25:02:906]: Machine policy value 'DisableRollback' is 0
Action ended 11:25:02: InstallFinalize. Return value 3.

Ensure that you have the right admin permission as well on performing the installation on the said machine.

The CA CheckRegForNullDACLs is checking the same registry key as mentioned in this article:
Article Detail (sophos.com)