This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Installation caught error ′CreateProcess′ failed. Error: 2.

When I am trying to Uninstall Sophos Endpoint and reinstall using .exe below error comes.

Installation caught error ′CreateProcess′ failed. Error: 2.

Any reasons.???????????



This thread was automatically locked due to age.
Parents Reply Children
  • Hi Yashraj, I am using Windows Server 2016 and There was an older installation.?

    I Uninstalled the earlier instalation and tried to re-install using Sophos.Setup.exe

    === Verbose logging started: 24/08/2021 14:11:22 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\Program Files (x86)\Sophos\CloudInstaller\SophosSetup_Stage2.exe ===
    MSI (c) (94:A4) [14:11:22:118]: Resetting cached policy values
    MSI (c) (94:A4) [14:11:22:118]: Machine policy value 'Debug' is 0
    MSI (c) (94:A4) [14:11:22:118]: ******* RunEngine:
    ******* Product: {1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8}
    ******* Action:
    ******* CommandLine: **********
    MSI (c) (94:A4) [14:11:22:119]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (94:A4) [14:11:22:119]: Grabbed execution mutex.
    MSI (c) (94:A4) [14:11:22:336]: Cloaking enabled.
    MSI (c) (94:A4) [14:11:22:336]: Attempting to enable all disabled privileges before calling Install on Server
    MSI (c) (94:A4) [14:11:22:338]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (20:58) [14:11:22:404]: Running installation inside multi-package transaction {1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8}
    MSI (s) (20:58) [14:11:22:404]: Grabbed execution mutex.
    MSI (s) (20:4C) [14:11:22:412]: Resetting cached policy values
    MSI (s) (20:4C) [14:11:22:412]: Machine policy value 'Debug' is 0
    MSI (s) (20:4C) [14:11:22:412]: ******* RunEngine:
    ******* Product: {1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8}
    ******* Action:
    ******* CommandLine: **********
    MSI (s) (20:4C) [14:11:22:415]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (20:4C) [14:11:22:428]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (20:4C) [14:11:22:439]: SRSetRestorePoint skipped for this transaction.
    MSI (s) (20:4C) [14:11:22:448]: MSCOREE not loaded loading copy from system32
    MSI (s) (20:4C) [14:11:22:521]: End dialog not enabled
    MSI (s) (20:4C) [14:11:22:522]: Original package ==> C:\Windows\Installer\1b920c.msi
    MSI (s) (20:4C) [14:11:22:522]: Package we're running from ==> C:\Windows\Installer\1b920c.msi
    MSI (s) (20:4C) [14:11:22:524]: APPCOMPAT: Uninstall Flags override found.
    MSI (s) (20:4C) [14:11:22:524]: APPCOMPAT: Uninstall VersionNT override found.
    MSI (s) (20:4C) [14:11:22:524]: APPCOMPAT: Uninstall ServicePackLevel override found.
    MSI (s) (20:4C) [14:11:22:557]: APPCOMPAT: looking for appcompat database entry with ProductCode '{1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8}'.
    MSI (s) (20:4C) [14:11:22:578]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (20:4C) [14:11:22:974]: Machine policy value 'DisablePatch' is 0
    MSI (s) (20:4C) [14:11:22:974]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (20:4C) [14:11:22:974]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (20:4C) [14:11:22:974]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (20:4C) [14:11:22:982]: APPCOMPAT: looking for appcompat database entry with ProductCode '{1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8}'.
    MSI (s) (20:4C) [14:11:22:982]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (20:4C) [14:11:22:982]: Transforms are not secure.
    MSI (s) (20:4C) [14:11:22:983]: Note: 1: 2205 2: 3: Control
    MSI (s) (20:4C) [14:11:22:983]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\ProgramData\Sophos\CloudInstaller\Logs\Sophos_Sophos AutoUpdate 20210824_084122.log'.
    MSI (s) (20:4C) [14:11:22:983]: Command Line: REBOOT=ReallySuppress SOPHOS_TP_TOKEN=1 REMOVE=ALL CURRENTDIRECTORY=C:\Program Files (x86)\Sophos\CloudInstaller CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=7060
    MSI (s) (20:4C) [14:11:22:983]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{B0F55E8F-8FC7-4100-9222-7152B085E33A}'.
    MSI (s) (20:4C) [14:11:22:983]: Product Code passed to Engine.Initialize: '{1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8}'
    MSI (s) (20:4C) [14:11:22:983]: Product Code from property table before transforms: '{1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8}'
    MSI (s) (20:4C) [14:11:22:983]: Product Code from property table after transforms: '{1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8}'
    MSI (s) (20:4C) [14:11:22:983]: Product registered: entering maintenance mode
    MSI (s) (20:4C) [14:11:22:983]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
    MSI (s) (20:4C) [14:11:22:983]: Product {1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8} is admin assigned: LocalSystem owns the publish key.
    MSI (s) (20:4C) [14:11:22:983]: Product {1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8} is managed.
    MSI (s) (20:4C) [14:11:22:983]: MSI_LUA: Credential prompt not required, user is an admin
    MSI (s) (20:4C) [14:11:22:983]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'.
    MSI (s) (20:4C) [14:11:22:983]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
    MSI (s) (20:4C) [14:11:22:984]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
    MSI (s) (20:4C) [14:11:22:985]: Package name retrieved from configuration data: 'Sophos AutoUpdate.msi'
    MSI (s) (20:4C) [14:11:22:985]: Note: 1: 2205 2: 3: Error
    MSI (s) (20:4C) [14:11:22:992]: Note: 1: 2262 2: AdminProperties 3: -2147287038
    MSI (s) (20:4C) [14:11:22:992]: Machine policy value 'DisableMsi' is 1
    MSI (s) (20:4C) [14:11:22:992]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (20:4C) [14:11:22:992]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (20:4C) [14:11:22:992]: Product {1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8} is admin assigned: LocalSystem owns the publish key.
    MSI (s) (20:4C) [14:11:22:992]: Product {1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8} is managed.
    MSI (s) (20:4C) [14:11:22:992]: Running product '{1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8}' with elevated privileges: Product is assigned.
    MSI (s) (20:4C) [14:11:22:992]: PROPERTY CHANGE: Adding SOPHOS_TP_TOKEN property. Its value is '1'.
    MSI (s) (20:4C) [14:11:22:992]: PROPERTY CHANGE: Adding REMOVE property. Its value is 'ALL'.
    MSI (s) (20:4C) [14:11:22:992]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Program Files (x86)\Sophos\CloudInstaller'.
    MSI (s) (20:4C) [14:11:22:992]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
    MSI (s) (20:4C) [14:11:22:992]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
    MSI (s) (20:4C) [14:11:22:992]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '7060'.
    MSI (s) (20:4C) [14:11:22:997]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
    MSI (s) (20:4C) [14:11:22:997]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
    MSI (s) (20:4C) [14:11:22:997]: TRANSFORMS property is now:
    MSI (s) (20:4C) [14:11:22:997]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'.
    MSI (s) (20:4C) [14:11:22:997]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '500'.
    MSI (s) (20:4C) [14:11:23:007]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\AppData\Roaming
    MSI (s) (20:4C) [14:11:23:009]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\Favorites
    MSI (s) (20:4C) [14:11:23:010]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\AppData\Roaming\Microsoft\Windows\Network Shortcuts
    MSI (s) (20:4C) [14:11:23:011]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\Documents
    MSI (s) (20:4C) [14:11:23:013]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
    MSI (s) (20:4C) [14:11:23:014]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\AppData\Roaming\Microsoft\Windows\Recent
    MSI (s) (20:4C) [14:11:23:016]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\AppData\Roaming\Microsoft\Windows\SendTo
    MSI (s) (20:4C) [14:11:23:017]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\AppData\Roaming\Microsoft\Windows\Templates
    MSI (s) (20:4C) [14:11:23:017]: SHELL32::SHGetFolderPath returned: C:\ProgramData
    MSI (s) (20:4C) [14:11:23:019]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\AppData\Local
    MSI (s) (20:4C) [14:11:23:020]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\Pictures
    MSI (s) (20:4C) [14:11:23:023]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (20:4C) [14:11:23:024]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (20:4C) [14:11:23:025]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
    MSI (s) (20:4C) [14:11:23:027]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
    MSI (s) (20:4C) [14:11:23:028]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
    MSI (s) (20:4C) [14:11:23:031]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (20:4C) [14:11:23:032]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (20:4C) [14:11:23:033]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
    MSI (s) (20:4C) [14:11:23:035]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\AppData\Roaming\Microsoft\Windows\Start Menu
    MSI (s) (20:4C) [14:11:23:036]: SHELL32::SHGetFolderPath returned: C:\Users\Administrator.RAINWEAR\Desktop
    MSI (s) (20:4C) [14:11:23:038]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
    MSI (s) (20:4C) [14:11:23:038]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
    MSI (s) (20:4C) [14:11:23:039]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
    MSI (s) (20:4C) [14:11:23:049]: MSI_LUA: Setting AdminUser property to 1 because the product is already installed managed and per-machine
    MSI (s) (20:4C) [14:11:23:049]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
    MSI (s) (20:4C) [14:11:23:049]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
    MSI (s) (20:4C) [14:11:23:049]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
    MSI (s) (20:4C) [14:11:23:049]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (20:4C) [14:11:23:049]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Windows User'.
    MSI (s) (20:4C) [14:11:23:049]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (20:4C) [14:11:23:049]: PROPERTY CHANGE: Adding Installed property. Its value is '00:00:00'.
    MSI (s) (20:4C) [14:11:23:049]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\1b920c.msi'.
    MSI (s) (20:4C) [14:11:23:049]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Windows\Installer\1b920c.msi'.
    MSI (s) (20:4C) [14:11:23:049]: Machine policy value 'MsiDisableEmbeddedUI' is 0
    MSI (s) (20:4C) [14:11:23:049]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
    MSI (s) (20:4C) [14:11:23:049]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
    MSI (s) (20:4C) [14:11:23:050]: Note: 1: 2205 2: 3: PatchPackage
    MSI (s) (20:4C) [14:11:23:050]: Machine policy value 'DisableRollback' is 0
    MSI (s) (20:4C) [14:11:23:050]: User policy value 'DisableRollback' is 0
    MSI (s) (20:4C) [14:11:23:050]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
    === Logging started: 24/08/2021 14:11:23 ===
    MSI (s) (20:4C) [14:11:23:051]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (20:4C) [14:11:23:051]: PROPERTY CHANGE: Adding Preselected property. Its value is '1'.
    MSI (s) (20:4C) [14:11:23:057]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
    MSI (s) (20:4C) [14:11:23:060]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
    MSI (s) (20:4C) [14:11:23:060]: Doing action: INSTALL
    MSI (s) (20:4C) [14:11:23:061]: Note: 1: 2205 2: 3: ActionText
    Action start 14:11:23: INSTALL.
    MSI (s) (20:4C) [14:11:23:064]: Running ExecuteSequence
    MSI (s) (20:4C) [14:11:23:064]: Doing action: FindRelatedProducts
    MSI (s) (20:4C) [14:11:23:064]: Note: 1: 2205 2: 3: ActionText
    MSI (s) (20:4C) [14:11:23:070]: Skipping FindRelatedProducts action: not run in maintenance mode
    Action start 14:11:23: FindRelatedProducts.
    MSI (s) (20:4C) [14:11:23:071]: Doing action: AppSearch
    MSI (s) (20:4C) [14:11:23:071]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: FindRelatedProducts. Return value 0.
    Action start 14:11:23: AppSearch.
    MSI (s) (20:4C) [14:11:23:072]: Note: 1: 2262 2: Signature 3: -2147287038
    MSI (s) (20:4C) [14:11:23:077]: Doing action: LaunchConditions
    MSI (s) (20:4C) [14:11:23:077]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: AppSearch. Return value 1.
    Action start 14:11:23: LaunchConditions.
    MSI (s) (20:4C) [14:11:23:079]: Doing action: ValidateProductID
    MSI (s) (20:4C) [14:11:23:079]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: LaunchConditions. Return value 1.
    Action start 14:11:23: ValidateProductID.
    MSI (s) (20:4C) [14:11:23:080]: Doing action: CostInitialize
    MSI (s) (20:4C) [14:11:23:080]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: ValidateProductID. Return value 1.
    MSI (s) (20:4C) [14:11:23:081]: Machine policy value 'MaxPatchCacheSize' is 10
    MSI (s) (20:4C) [14:11:23:082]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
    MSI (s) (20:4C) [14:11:23:082]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
    MSI (s) (20:4C) [14:11:23:083]: Note: 1: 2205 2: 3: Patch
    MSI (s) (20:4C) [14:11:23:083]: Note: 1: 2205 2: 3: PatchPackage
    MSI (s) (20:4C) [14:11:23:083]: Note: 1: 2205 2: 3: MsiPatchHeaders
    MSI (s) (20:4C) [14:11:23:083]: Note: 1: 2205 2: 3: __MsiPatchFileList
    MSI (s) (20:4C) [14:11:23:083]: Note: 1: 2205 2: 3: PatchPackage
    MSI (s) (20:4C) [14:11:23:084]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
    MSI (s) (20:4C) [14:11:23:085]: Note: 1: 2205 2: 3: Patch
    Action start 14:11:23: CostInitialize.
    MSI (s) (20:4C) [14:11:23:085]: Doing action: FileCost
    MSI (s) (20:4C) [14:11:23:085]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: CostInitialize. Return value 1.
    MSI (s) (20:4C) [14:11:23:087]: Note: 1: 2205 2: 3: MsiAssembly
    MSI (s) (20:4C) [14:11:23:087]: Note: 1: 2205 2: 3: Class
    MSI (s) (20:4C) [14:11:23:087]: Note: 1: 2205 2: 3: Extension
    MSI (s) (20:4C) [14:11:23:087]: Note: 1: 2205 2: 3: TypeLib
    Action start 14:11:23: FileCost.
    MSI (s) (20:4C) [14:11:23:087]: Doing action: CostFinalize
    MSI (s) (20:4C) [14:11:23:088]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: FileCost. Return value 1.
    MSI (s) (20:4C) [14:11:23:089]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
    MSI (s) (20:4C) [14:11:23:089]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
    MSI (s) (20:4C) [14:11:23:089]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
    MSI (s) (20:4C) [14:11:23:089]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
    MSI (s) (20:4C) [14:11:23:089]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
    MSI (s) (20:4C) [14:11:23:089]: Note: 1: 2205 2: 3: MsiAssembly
    MSI (s) (20:4C) [14:11:23:089]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
    MSI (s) (20:4C) [14:11:23:089]: PROPERTY CHANGE: Adding CertificatesAutoUpdate property. Its value is 'C:\ProgramData\Sophos\Certificates\AutoUpdate'.
    MSI (s) (20:4C) [14:11:23:089]: PROPERTY CHANGE: Adding CertificatesManifest property. Its value is 'C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest'.
    MSI (s) (20:4C) [14:11:23:090]: PROPERTY CHANGE: Adding CertificatesCache property. Its value is 'C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache'.
    MSI (s) (20:4C) [14:11:23:090]: PROPERTY CHANGE: Adding CacheFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache'.
    MSI (s) (20:4C) [14:11:23:090]: PROPERTY CHANGE: Adding DataFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\data'.
    MSI (s) (20:4C) [14:11:23:090]: PROPERTY CHANGE: Adding EventsFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Events'.
    MSI (s) (20:4C) [14:11:23:090]: PROPERTY CHANGE: Adding EventsStagingFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Events\Staging'.
    MSI (s) (20:4C) [14:11:23:090]: PROPERTY CHANGE: Adding EventsQueueFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Events\Queue'.
    MSI (s) (20:4C) [14:11:23:091]: PROPERTY CHANGE: Adding EventsProcessedFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Events\Processed'.
    MSI (s) (20:4C) [14:11:23:091]: PROPERTY CHANGE: Adding ConfigFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Config'.
    MSI (s) (20:4C) [14:11:23:091]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files (x86)\Sophos\AutoUpdate'.
    MSI (s) (20:4C) [14:11:23:093]: PROPERTY CHANGE: Adding TelemetryFolder property. Its value is 'C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry'.
    MSI (s) (20:4C) [14:11:23:093]: Note: 1: 2205 2: 3: Patch
    MSI (s) (20:4C) [14:11:23:093]: Note: 1: 2205 2: 3: Condition
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Adding SophosProgramFilesFolder property. Its value is 'C:\Program Files (x86)\Sophos\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Adding AutoUpdateProgramFilesFolder property. Its value is 'C:\Program Files (x86)\Sophos\AutoUpdate\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Modifying INSTALLDIR property. Its current value is 'C:\Program Files (x86)\Sophos\AutoUpdate'. Its new value: 'C:\Program Files (x86)\Sophos\AutoUpdate\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Modifying TelemetryFolder property. Its current value is 'C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry'. Its new value: 'C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Adding SophosAppDataFolder property. Its value is 'C:\ProgramData\Sophos\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Adding SAUAppDataFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Adding AutoUpdateDataFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Adding LogsFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Logs\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Modifying ConfigFolder property. Its current value is 'C:\ProgramData\Sophos\AutoUpdate\Config'. Its new value: 'C:\ProgramData\Sophos\AutoUpdate\Config\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Modifying EventsFolder property. Its current value is 'C:\ProgramData\Sophos\AutoUpdate\Events'. Its new value: 'C:\ProgramData\Sophos\AutoUpdate\Events\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Modifying EventsProcessedFolder property. Its current value is 'C:\ProgramData\Sophos\AutoUpdate\Events\Processed'. Its new value: 'C:\ProgramData\Sophos\AutoUpdate\Events\Processed\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Modifying EventsQueueFolder property. Its current value is 'C:\ProgramData\Sophos\AutoUpdate\Events\Queue'. Its new value: 'C:\ProgramData\Sophos\AutoUpdate\Events\Queue\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Modifying EventsStagingFolder property. Its current value is 'C:\ProgramData\Sophos\AutoUpdate\Events\Staging'. Its new value: 'C:\ProgramData\Sophos\AutoUpdate\Events\Staging\'.
    MSI (s) (20:4C) [14:11:23:094]: PROPERTY CHANGE: Modifying DataFolder property. Its current value is 'C:\ProgramData\Sophos\AutoUpdate\data'. Its new value: 'C:\ProgramData\Sophos\AutoUpdate\data\'.
    MSI (s) (20:4C) [14:11:23:095]: PROPERTY CHANGE: Modifying CacheFolder property. Its current value is 'C:\ProgramData\Sophos\AutoUpdate\Cache'. Its new value: 'C:\ProgramData\Sophos\AutoUpdate\Cache\'.
    MSI (s) (20:4C) [14:11:23:095]: PROPERTY CHANGE: Adding Certificates property. Its value is 'C:\ProgramData\Sophos\Certificates\'.
    MSI (s) (20:4C) [14:11:23:095]: PROPERTY CHANGE: Modifying CertificatesAutoUpdate property. Its current value is 'C:\ProgramData\Sophos\Certificates\AutoUpdate'. Its new value: 'C:\ProgramData\Sophos\Certificates\AutoUpdate\'.
    MSI (s) (20:4C) [14:11:23:095]: PROPERTY CHANGE: Modifying CertificatesCache property. Its current value is 'C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache'. Its new value: 'C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\'.
    MSI (s) (20:4C) [14:11:23:095]: PROPERTY CHANGE: Modifying CertificatesManifest property. Its current value is 'C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest'. Its new value: 'C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\'.
    MSI (s) (20:4C) [14:11:23:095]: Target path resolution complete. Dumping Directory table...
    MSI (s) (20:4C) [14:11:23:095]: Note: target paths subject to change (via custom actions or browsing)
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: TARGETDIR , Object: C:\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: WindowsFolder , Object: C:\Windows\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files (x86)\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: SophosProgramFilesFolder , Object: C:\Program Files (x86)\Sophos\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: AutoUpdateProgramFilesFolder , Object: C:\Program Files (x86)\Sophos\AutoUpdate\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files (x86)\Sophos\AutoUpdate\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: TelemetryFolder , Object: C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: SophosAppDataFolder , Object: C:\ProgramData\Sophos\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: SAUAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: AutoUpdateDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: LogsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Logs\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: ConfigFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Config\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: EventsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Events\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: EventsProcessedFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Events\Processed\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: EventsQueueFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Events\Queue\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: EventsStagingFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Events\Staging\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: DataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\data\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: CacheFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: Certificates , Object: C:\ProgramData\Sophos\Certificates\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: CertificatesAutoUpdate , Object: C:\ProgramData\Sophos\Certificates\AutoUpdate\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: CertificatesCache , Object: C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\
    MSI (s) (20:4C) [14:11:23:095]: Dir (target): Key: CertificatesManifest , Object: C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\
    MSI (s) (20:4C) [14:11:23:095]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
    MSI (s) (20:4C) [14:11:23:095]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\telem.man' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:098]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\SubmitTelem.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:098]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\GatherTelem.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:099]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\AUTelem.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:101]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:101]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:101]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:102]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:102]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\license_agreements.txt' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:102]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\su-setup64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:103]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\su-setup32.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:103]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\su-repair.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:104]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\SophosUpdate.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:104]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\AUAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (20:4C) [14:11:23:105]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    Action start 14:11:23: CostFinalize.
    MSI (s) (20:4C) [14:11:23:112]: Doing action: MigrateFeatureStates
    MSI (s) (20:4C) [14:11:23:112]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: CostFinalize. Return value 1.
    MSI (s) (20:4C) [14:11:23:113]: Skipping MigrateFeatureStates action: not run in maintenance mode
    Action start 14:11:23: MigrateFeatureStates.
    MSI (s) (20:4C) [14:11:23:114]: Doing action: InstallValidate
    MSI (s) (20:4C) [14:11:23:114]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: MigrateFeatureStates. Return value 0.
    MSI (s) (20:4C) [14:11:23:115]: Note: 1: 2205 2: 3: Dialog
    MSI (s) (20:4C) [14:11:23:115]: Feature: Main; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: SAU_Certificate_Folder; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: RevocationList; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: RootCertificate; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: RevocationList384; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: RootCertificate384; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: SAU_Certificate_Cache_Folder; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: CacheFolderPermissions; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: DataFolderPermissions; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: EventsFolderPermissions; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: EventsStagingFolderId; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: EventsQueueFolderId; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: EventsProcessedFolderId; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: iconn; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: ilog; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: isched; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: iupd; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: AutoUpdateService; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: AUAdapter; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: SophosUpdate; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: su.repair; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: su.setup32; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: su.setup64; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: License; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: Integrity; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: RootKeyPermissions; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: ServiceKeyPermissions; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: PolicyFeaturesPermissions; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: InstallationPath; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: DataPath; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: ProductVersion; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: AdapterRegistry; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: Metrics; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: CloudUpdating; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: IsManaged; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: TELEMAUTelem.exe; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: TELEMGatherTelem.exe; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: TELEMSubmitTelem.exe; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: TELEMtelem.man; Installed: Local; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: __RootKeyPermissions65; Installed: Null; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: __ServiceKeyPermissions65; Installed: Null; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: __PolicyFeaturesPermissions65; Installed: Null; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: __InstallationPath65; Installed: Null; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: __DataPath65; Installed: Null; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: __ProductVersion65; Installed: Null; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: __AdapterRegistry65; Installed: Null; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: __Metrics65; Installed: Null; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: __CloudUpdating65; Installed: Null; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: __IsManaged65; Installed: Null; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: __TELEMGatherTelem.exe65; Installed: Null; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: __AutoUpdateService65; Installed: Null; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Component: __TELEMAUTelem.exe65; Installed: Null; Request: Absent; Action: Absent
    MSI (s) (20:4C) [14:11:23:115]: Note: 1: 2205 2: 3: BindImage
    MSI (s) (20:4C) [14:11:23:115]: Note: 1: 2205 2: 3: ProgId
    MSI (s) (20:4C) [14:11:23:115]: Note: 1: 2205 2: 3: PublishComponent
    MSI (s) (20:4C) [14:11:23:115]: Note: 1: 2205 2: 3: SelfReg
    MSI (s) (20:4C) [14:11:23:115]: Note: 1: 2205 2: 3: Extension
    MSI (s) (20:4C) [14:11:23:115]: Note: 1: 2205 2: 3: Font
    MSI (s) (20:4C) [14:11:23:115]: Note: 1: 2205 2: 3: Shortcut
    MSI (s) (20:4C) [14:11:23:115]: Note: 1: 2205 2: 3: Class
    MSI (s) (20:4C) [14:11:23:115]: Note: 1: 2205 2: 3: Icon
    MSI (s) (20:4C) [14:11:23:115]: Note: 1: 2205 2: 3: TypeLib
    Action start 14:11:23: InstallValidate.
    MSI (s) (20:4C) [14:11:23:116]: Note: 1: 2205 2: 3: _RemoveFilePath
    MSI (s) (20:4C) [14:11:23:130]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
    MSI (s) (20:4C) [14:11:23:130]: Note: 1: 2205 2: 3: BindImage
    MSI (s) (20:4C) [14:11:23:130]: Note: 1: 2205 2: 3: ProgId
    MSI (s) (20:4C) [14:11:23:130]: Note: 1: 2205 2: 3: PublishComponent
    MSI (s) (20:4C) [14:11:23:130]: Note: 1: 2205 2: 3: SelfReg
    MSI (s) (20:4C) [14:11:23:130]: Note: 1: 2205 2: 3: Extension
    MSI (s) (20:4C) [14:11:23:130]: Note: 1: 2205 2: 3: Font
    MSI (s) (20:4C) [14:11:23:130]: Note: 1: 2205 2: 3: Shortcut
    MSI (s) (20:4C) [14:11:23:130]: Note: 1: 2205 2: 3: Class
    MSI (s) (20:4C) [14:11:23:130]: Note: 1: 2205 2: 3: Icon
    MSI (s) (20:4C) [14:11:23:130]: Note: 1: 2205 2: 3: TypeLib
    MSI (s) (20:4C) [14:11:23:130]: Note: 1: 2727 2:
    MSI (s) (20:4C) [14:11:23:147]: Note: 1: 2727 2:
    MSI (s) (20:4C) [14:11:23:147]: Doing action: RemoveExistingProducts
    MSI (s) (20:4C) [14:11:23:147]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: InstallValidate. Return value 1.
    MSI (s) (20:4C) [14:11:23:148]: Skipping RemoveExistingProducts action: current configuration is maintenance mode or an uninstall
    Action start 14:11:23: RemoveExistingProducts.
    MSI (s) (20:4C) [14:11:23:149]: Doing action: InstallInitialize
    MSI (s) (20:4C) [14:11:23:149]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: RemoveExistingProducts. Return value 0.
    MSI (s) (20:4C) [14:11:23:149]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (20:4C) [14:11:23:149]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (20:4C) [14:11:23:149]: BeginTransaction: Locking Server
    MSI (s) (20:4C) [14:11:23:153]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (20:4C) [14:11:23:153]: SRSetRestorePoint skipped for this transaction.
    MSI (s) (20:4C) [14:11:23:153]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (20:4C) [14:11:23:153]: Server not locked: locking for product {1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8}
    MSI (s) (20:4C) [14:11:23:197]: Note: 1: 2205 2: 3: ActionText
    MSI (s) (20:4C) [14:11:23:198]: Note: 1: 2205 2: 3: ActionText
    MSI (s) (20:4C) [14:11:23:204]: Note: 1: 2205 2: 3: ActionText
    Action start 14:11:23: InstallInitialize.
    MSI (s) (20:4C) [14:11:23:206]: PROPERTY CHANGE: Deleting ProductToBeRegistered property. Its current value is '1'.
    MSI (s) (20:4C) [14:11:23:207]: Note: 1: 2205 2: 3: Icon
    MSI (s) (20:4C) [14:11:23:207]: Note: 1: 2228 2: 3: Icon 4: SELECT `Name`, `Data` FROM `Icon`
    MSI (s) (20:4C) [14:11:23:208]: Doing action: ProcessComponents
    MSI (s) (20:4C) [14:11:23:208]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: InstallInitialize. Return value 1.
    Action start 14:11:23: ProcessComponents.
    MSI (s) (20:4C) [14:11:23:228]: Doing action: UnpublishFeatures
    MSI (s) (20:4C) [14:11:23:228]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: ProcessComponents. Return value 1.
    Action start 14:11:23: UnpublishFeatures.
    MSI (s) (20:4C) [14:11:23:231]: Doing action: StopServices
    MSI (s) (20:4C) [14:11:23:231]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: UnpublishFeatures. Return value 1.
    Action start 14:11:23: StopServices.
    MSI (s) (20:4C) [14:11:23:233]: Doing action: DeleteServices
    MSI (s) (20:4C) [14:11:23:233]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: StopServices. Return value 1.
    Action start 14:11:23: DeleteServices.
    MSI (s) (20:4C) [14:11:23:235]: Doing action: RemoveRegistryValues
    MSI (s) (20:4C) [14:11:23:235]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: DeleteServices. Return value 1.
    Action start 14:11:23: RemoveRegistryValues.
    MSI (s) (20:4C) [14:11:23:264]: Skipping action: ISSAUTPRemoveAllowed (condition is false)
    MSI (s) (20:4C) [14:11:23:264]: Skipping action: SetWaitAUAdapterUnlocked (condition is false)
    MSI (s) (20:4C) [14:11:23:264]: Skipping action: WaitAUAdapterUnlocked (condition is false)
    MSI (s) (20:4C) [14:11:23:264]: Doing action: RemoveFiles
    MSI (s) (20:4C) [14:11:23:264]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: RemoveRegistryValues. Return value 1.
    Action start 14:11:23: RemoveFiles.
    MSI (s) (20:4C) [14:11:23:270]: Counted 2 foreign folders to be removed.
    MSI (s) (20:4C) [14:11:23:270]: Removing child folder of C:\ProgramData\Sophos\Certificates\AutoUpdate\ (child: C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\)
    MSI (s) (20:4C) [14:11:23:270]: Removing foreign folder: C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\
    MSI (s) (20:4C) [14:11:23:270]: Removing foreign folder: C:\ProgramData\Sophos\Certificates\AutoUpdate\
    MSI (s) (20:4C) [14:11:23:270]: Doing action: RemoveFolders
    MSI (s) (20:4C) [14:11:23:270]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: RemoveFiles. Return value 1.
    Action start 14:11:23: RemoveFolders.
    MSI (s) (20:4C) [14:11:23:274]: Doing action: CreateFolders
    MSI (s) (20:4C) [14:11:23:274]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: RemoveFolders. Return value 1.
    Action start 14:11:23: CreateFolders.
    MSI (s) (20:4C) [14:11:23:276]: Doing action: InstallFiles
    MSI (s) (20:4C) [14:11:23:276]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: CreateFolders. Return value 1.
    MSI (s) (20:4C) [14:11:23:278]: Note: 1: 2205 2: 3: Patch
    MSI (s) (20:4C) [14:11:23:278]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence`
    MSI (s) (20:4C) [14:11:23:278]: Note: 1: 2205 2: 3: Error
    MSI (s) (20:4C) [14:11:23:278]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1302
    MSI (s) (20:4C) [14:11:23:278]: Note: 1: 2205 2: 3: MsiSFCBypass
    MSI (s) (20:4C) [14:11:23:278]: Note: 1: 2228 2: 3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ?
    MSI (s) (20:4C) [14:11:23:278]: Note: 1: 2205 2: 3: MsiPatchHeaders
    MSI (s) (20:4C) [14:11:23:278]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ?
    Action start 14:11:23: InstallFiles.
    MSI (s) (20:4C) [14:11:23:279]: Doing action: WriteRegistryValues
    MSI (s) (20:4C) [14:11:23:279]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: InstallFiles. Return value 1.
    Action start 14:11:23: WriteRegistryValues.
    MSI (s) (20:4C) [14:11:23:280]: Doing action: InstallServices
    MSI (s) (20:4C) [14:11:23:280]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: WriteRegistryValues. Return value 1.
    Action start 14:11:23: InstallServices.
    MSI (s) (20:4C) [14:11:23:282]: Skipping action: SchedServiceConfig (condition is false)
    MSI (s) (20:4C) [14:11:23:282]: Doing action: StartServices
    MSI (s) (20:4C) [14:11:23:282]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: InstallServices. Return value 1.
    Action start 14:11:23: StartServices.
    MSI (s) (20:4C) [14:11:23:283]: Doing action: RegisterUser
    MSI (s) (20:4C) [14:11:23:283]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: StartServices. Return value 1.
    Action start 14:11:23: RegisterUser.
    MSI (s) (20:4C) [14:11:23:285]: Doing action: RegisterProduct
    MSI (s) (20:4C) [14:11:23:285]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: RegisterUser. Return value 0.
    Action start 14:11:23: RegisterProduct.
    MSI (s) (20:4C) [14:11:23:286]: Doing action: PublishFeatures
    MSI (s) (20:4C) [14:11:23:286]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: RegisterProduct. Return value 1.
    Action start 14:11:23: PublishFeatures.
    MSI (s) (20:4C) [14:11:23:287]: Doing action: PublishProduct
    MSI (s) (20:4C) [14:11:23:287]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: PublishFeatures. Return value 1.
    Action start 14:11:23: PublishProduct.
    MSI (s) (20:4C) [14:11:23:289]: Doing action: InstallFinalize
    MSI (s) (20:4C) [14:11:23:289]: Note: 1: 2205 2: 3: ActionText
    Action ended 14:11:23: PublishProduct. Return value 1.
    MSI (s) (20:4C) [14:11:23:290]: Running Script: C:\Windows\Installer\MSI332C.tmp
    MSI (s) (20:4C) [14:11:23:290]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'.
    MSI (s) (20:4C) [14:11:23:301]: Note: 1: 2265 2: 3: -2147287035
    MSI (s) (20:4C) [14:11:23:302]: Machine policy value 'DisableRollback' is 0
    MSI (s) (20:4C) [14:11:23:308]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:311]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:311]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (20:4C) [14:11:23:312]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1394110828,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
    Action start 14:11:23: InstallFinalize.
    MSI (s) (20:4C) [14:11:23:315]: Executing op: ProductInfo(ProductKey={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8},ProductName=Sophos AutoUpdate XG,PackageName=Sophos AutoUpdate.msi,Language=1033,Version=101122400,Assignment=1,ObsoleteArg=0,,,PackageCode={B0F55E8F-8FC7-4100-9222-7152B085E33A},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
    MSI (s) (20:4C) [14:11:23:316]: Executing op: DialogInfo(Type=0,Argument=1033)
    MSI (s) (20:4C) [14:11:23:317]: Executing op: DialogInfo(Type=1,Argument=Sophos AutoUpdate XG)
    MSI (s) (20:4C) [14:11:23:317]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
    MSI (s) (20:4C) [14:11:23:321]: Executing op: SetBaseline(Baseline=0,)
    MSI (s) (20:4C) [14:11:23:321]: Executing op: SetBaseline(Baseline=1,)
    MSI (s) (20:4C) [14:11:23:321]: Executing op: ActionStart(Name=InstallInitialize,,)
    MSI (s) (20:4C) [14:11:23:322]: Executing op: ProductUnregister(UpgradeCode={3B8886D0-98A2-4992-A0AC-893AEDBB494B})
    MSI (s) (20:4C) [14:11:23:322]: Note: 1: 1402 2: UNKNOWN\Products\71DCBBF1304249742B8A3ADADDB3A08F\Transforms 3: 2
    MSI (s) (20:4C) [14:11:23:323]: Note: 1: 1402 2: UNKNOWN\Products\71DCBBF1304249742B8A3ADADDB3A08F\Transforms 3: 2
    MSI (s) (20:4C) [14:11:23:323]: Scheduling file 'C:\Windows\Installer\1b920c.msi' for deletion during post-install cleanup (not post-reboot).
    MSI (s) (20:4C) [14:11:23:339]: Note: 1: 1402 2: UNKNOWN\Products\71DCBBF1304249742B8A3ADADDB3A08F\Usage 3: 2
    MSI (s) (20:4C) [14:11:23:340]: Executing op: ProductCPDisplayInfoUnregister()
    MSI (s) (20:4C) [14:11:23:341]: Executing op: ProductUnpublish(PackageKey={B0F55E8F-8FC7-4100-9222-7152B085E33A})
    MSI (s) (20:4C) [14:11:23:348]: Executing op: UpgradeCodeUnpublish(UpgradeCode={3B8886D0-98A2-4992-A0AC-893AEDBB494B})
    MSI (s) (20:4C) [14:11:23:349]: Executing op: ProductUnpublishClient(,,)
    MSI (s) (20:4C) [14:11:23:349]: Note: 1: 1402 2: UNKNOWN\Installer\Products\71DCBBF1304249742B8A3ADADDB3A08F 3: 2
    MSI (s) (20:4C) [14:11:23:349]: Executing op: SourceListUnpublish(,)
    MSI (s) (20:4C) [14:11:23:349]: Note: 1: 1402 2: UNKNOWN\Installer\Products\71DCBBF1304249742B8A3ADADDB3A08F\SourceList 3: 2
    MSI (s) (20:4C) [14:11:23:349]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
    MSI (s) (20:4C) [14:11:23:350]: Executing op: ProgressTotal(Total=38,Type=1,ByteEquivalent=24000)
    MSI (s) (20:4C) [14:11:23:350]: Executing op: UnregisterSharedComponentProvider(Component={7B32C653-BFD1-4DBF-9967-DCC72D363BCC},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:350]: Executing op: ComponentUnregister(ComponentId={7B32C653-BFD1-4DBF-9967-DCC72D363BCC},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:351]: Executing op: UnregisterSharedComponentProvider(Component={1A5FBAAA-8A81-4FB0-AAC7-87FADDD97277},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:351]: Executing op: ComponentUnregister(ComponentId={1A5FBAAA-8A81-4FB0-AAC7-87FADDD97277},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:352]: Executing op: UnregisterSharedComponentProvider(Component={0559090D-440E-4FA8-9549-16179DD07404},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:352]: Executing op: ComponentUnregister(ComponentId={0559090D-440E-4FA8-9549-16179DD07404},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:353]: Executing op: UnregisterSharedComponentProvider(Component={F39B24B0-CDD2-4240-A0A2-2B1B6D5A0BBD},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:353]: Executing op: ComponentUnregister(ComponentId={F39B24B0-CDD2-4240-A0A2-2B1B6D5A0BBD},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:354]: Executing op: UnregisterSharedComponentProvider(Component={5C9EE207-FE9D-4AA0-8EA8-099928A0D72C},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:354]: Executing op: ComponentUnregister(ComponentId={5C9EE207-FE9D-4AA0-8EA8-099928A0D72C},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:354]: Executing op: UnregisterSharedComponentProvider(Component={AEC4F882-96A8-4BF7-9A67-BF5C0452744F},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:354]: Executing op: ComponentUnregister(ComponentId={AEC4F882-96A8-4BF7-9A67-BF5C0452744F},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:355]: Executing op: UnregisterSharedComponentProvider(Component={EE343324-C924-4F01-AD97-9EBA07AFF882},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:355]: Executing op: ComponentUnregister(ComponentId={EE343324-C924-4F01-AD97-9EBA07AFF882},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:356]: Executing op: UnregisterSharedComponentProvider(Component={FBB9FD6F-D781-4E5B-8016-13C37DF4D113},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:356]: Executing op: ComponentUnregister(ComponentId={FBB9FD6F-D781-4E5B-8016-13C37DF4D113},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:357]: Executing op: UnregisterSharedComponentProvider(Component={D5E1C6CA-3776-4660-AE4F-C7E1CF2C3F2E},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:357]: Executing op: ComponentUnregister(ComponentId={D5E1C6CA-3776-4660-AE4F-C7E1CF2C3F2E},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:357]: Executing op: UnregisterSharedComponentProvider(Component={221E7D61-A630-4796-9578-4655B6748BC2},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:357]: Executing op: ComponentUnregister(ComponentId={221E7D61-A630-4796-9578-4655B6748BC2},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:358]: Executing op: UnregisterSharedComponentProvider(Component={EA65DD4A-C223-45E7-A361-7516A90195CE},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:358]: Executing op: ComponentUnregister(ComponentId={EA65DD4A-C223-45E7-A361-7516A90195CE},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:359]: Executing op: UnregisterSharedComponentProvider(Component={8EF1D3BC-00CE-4770-A351-43994EBD2639},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:359]: Executing op: ComponentUnregister(ComponentId={8EF1D3BC-00CE-4770-A351-43994EBD2639},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:359]: Executing op: UnregisterSharedComponentProvider(Component={FAD2F9C8-13A0-4572-975E-550FA6E7DC3F},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:359]: Executing op: ComponentUnregister(ComponentId={FAD2F9C8-13A0-4572-975E-550FA6E7DC3F},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:360]: Executing op: UnregisterSharedComponentProvider(Component={DC8EDB3E-D715-4788-89AD-5EACAA13B5AE},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:360]: Executing op: ComponentUnregister(ComponentId={DC8EDB3E-D715-4788-89AD-5EACAA13B5AE},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:361]: Executing op: UnregisterSharedComponentProvider(Component={D4F97B26-4154-41C7-B15C-05359B80BEAF},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:361]: Executing op: ComponentUnregister(ComponentId={D4F97B26-4154-41C7-B15C-05359B80BEAF},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:362]: Executing op: UnregisterSharedComponentProvider(Component={D4FDA50D-1EB0-4AA3-B016-7CA0C7601983},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:362]: Executing op: ComponentUnregister(ComponentId={D4FDA50D-1EB0-4AA3-B016-7CA0C7601983},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:362]: Executing op: UnregisterSharedComponentProvider(Component={ADECE077-A75A-4666-819F-AEBB42F82CDC},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:363]: Executing op: ComponentUnregister(ComponentId={ADECE077-A75A-4666-819F-AEBB42F82CDC},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:363]: Executing op: UnregisterSharedComponentProvider(Component={A6BCDEF5-FC1A-4B0A-AEAD-444071FFF479},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:364]: Executing op: ComponentUnregister(ComponentId={A6BCDEF5-FC1A-4B0A-AEAD-444071FFF479},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:364]: Executing op: UnregisterSharedComponentProvider(Component={58848A8F-83B7-487F-A2FC-7BD6BC4F7F0B},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:365]: Executing op: ComponentUnregister(ComponentId={58848A8F-83B7-487F-A2FC-7BD6BC4F7F0B},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:365]: Executing op: UnregisterSharedComponentProvider(Component={6A179B8A-DA1C-4155-8674-0739095EF017},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:366]: Executing op: ComponentUnregister(ComponentId={6A179B8A-DA1C-4155-8674-0739095EF017},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:366]: Executing op: UnregisterSharedComponentProvider(Component={758E50D4-CA8B-41DC-8C04-02A5A43FAD77},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:366]: Executing op: ComponentUnregister(ComponentId={758E50D4-CA8B-41DC-8C04-02A5A43FAD77},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:367]: Executing op: UnregisterSharedComponentProvider(Component={47C056BB-1E7C-4A45-8221-65CA51B3F863},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:367]: Executing op: ComponentUnregister(ComponentId={47C056BB-1E7C-4A45-8221-65CA51B3F863},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:368]: Executing op: UnregisterSharedComponentProvider(Component={404B4121-9B38-4F84-8B9D-B642AF25E1AD},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:368]: Executing op: ComponentUnregister(ComponentId={404B4121-9B38-4F84-8B9D-B642AF25E1AD},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:369]: Executing op: UnregisterSharedComponentProvider(Component={7AD6CBFB-E302-4E47-B7C6-4EEAA50AB660},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:369]: Executing op: ComponentUnregister(ComponentId={7AD6CBFB-E302-4E47-B7C6-4EEAA50AB660},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:370]: Executing op: UnregisterSharedComponentProvider(Component={56855275-11B2-427C-AA67-CE0D3B943769},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:370]: Executing op: ComponentUnregister(ComponentId={56855275-11B2-427C-AA67-CE0D3B943769},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:370]: Executing op: UnregisterSharedComponentProvider(Component={24EC2547-E7F5-412B-A8CF-061C8BB9FC61},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:370]: Executing op: ComponentUnregister(ComponentId={24EC2547-E7F5-412B-A8CF-061C8BB9FC61},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:371]: Executing op: UnregisterSharedComponentProvider(Component={C41DBB6D-1C80-4645-872D-4CB514BEE266},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:371]: Executing op: ComponentUnregister(ComponentId={C41DBB6D-1C80-4645-872D-4CB514BEE266},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:372]: Executing op: UnregisterSharedComponentProvider(Component={9C4489C5-2D76-46E3-8648-2A927F9A3935},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:372]: Executing op: ComponentUnregister(ComponentId={9C4489C5-2D76-46E3-8648-2A927F9A3935},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:372]: Executing op: UnregisterSharedComponentProvider(Component={CC900A24-6AF9-4E79-8A53-158B22B2E635},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:373]: Executing op: ComponentUnregister(ComponentId={CC900A24-6AF9-4E79-8A53-158B22B2E635},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:373]: Executing op: UnregisterSharedComponentProvider(Component={D0C311B9-32F1-4B5D-9227-462EF7C5A332},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:373]: Executing op: ComponentUnregister(ComponentId={D0C311B9-32F1-4B5D-9227-462EF7C5A332},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:374]: Executing op: UnregisterSharedComponentProvider(Component={1925DFF1-64BE-4C02-AC94-5629E1951815},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:374]: Executing op: ComponentUnregister(ComponentId={1925DFF1-64BE-4C02-AC94-5629E1951815},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:375]: Executing op: UnregisterSharedComponentProvider(Component={07A84D49-C37F-4A8A-AB15-BCA186138E32},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:375]: Executing op: ComponentUnregister(ComponentId={07A84D49-C37F-4A8A-AB15-BCA186138E32},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:375]: Executing op: UnregisterSharedComponentProvider(Component={6EE05E3A-45C5-4734-8622-A5C81D412B8E},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:375]: Executing op: ComponentUnregister(ComponentId={6EE05E3A-45C5-4734-8622-A5C81D412B8E},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:376]: Executing op: UnregisterSharedComponentProvider(Component={B35C3D57-B073-4EFA-917F-CF9A028699EC},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:376]: Executing op: ComponentUnregister(ComponentId={B35C3D57-B073-4EFA-917F-CF9A028699EC},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:377]: Executing op: UnregisterSharedComponentProvider(Component={3A0E79AD-2ADB-49B9-991D-036880DD7726},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:377]: Executing op: ComponentUnregister(ComponentId={3A0E79AD-2ADB-49B9-991D-036880DD7726},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:378]: Executing op: UnregisterSharedComponentProvider(Component={60FD7993-E630-4E39-AD1E-3D2F2F482374},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:378]: Executing op: ComponentUnregister(ComponentId={60FD7993-E630-4E39-AD1E-3D2F2F482374},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:379]: Executing op: UnregisterSharedComponentProvider(Component={3802F4D0-A617-4982-B01A-9CEB288FF232},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:379]: Executing op: ComponentUnregister(ComponentId={3802F4D0-A617-4982-B01A-9CEB288FF232},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:380]: Executing op: UnregisterSharedComponentProvider(Component={8D032536-1910-4094-9CF2-32CD9BFBF019},ProductCode={1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8})
    MSI (s) (20:4C) [14:11:23:380]: Executing op: ComponentUnregister(ComponentId={8D032536-1910-4094-9CF2-32CD9BFBF019},,BinaryType=0,)
    MSI (s) (20:4C) [14:11:23:380]: Executing op: ActionStart(Name=UnpublishFeatures,Description=Unpublishing Product Features,Template=Feature: [1])
    MSI (s) (20:4C) [14:11:23:387]: Executing op: FeatureUnpublish(Feature=Main,,Absent=2,Component=E[_ZOrO$~@yC}7i=fG_j]*SP+0g%]As-6TyuI5ING0+f$sa0[A0[eK*e$hL$3%'AwKnz@9]a=g+d$Qiecx@jEZ3k}?Won3YJV&K2m,S2aUiDK@FximEBQ[UAMfOWugXHIAr=8}dZT~*RKbtuy&Eb3A@n6dg%OOG)rU$hm~2Z]={h$Xq8wJr2G2+{--%f!?~7^JCLUhTgKlQDt7UgO=d(V6*3MZIk5[*yUYPZz=Oq{9Y=MBG6d58]y=)3C=(ztw'!NaT8X.Jto6j8~=k%zI`Jym0aCN7Nmr?~.9q9P&5^V.QaX6bNm6O!~?bU=Y[B*Q.Rq}Mu`'X?^=_k=Cem7zioal*Z^?Z*-@_hg`8^.g4OuX5ND&@XA?pDPxmj{*d&{GC+Ja^t~8da{C6Bh}c*QBRkMG^@29alo%^,,MONB32(?Rm{r?Qh5'j0I,.HlIMa8{5EWAJNUM93Z4t`AAoPONDV1A1G%BtDL&*GwM`mCUI@G9l]2M'C?KnIPobr.s0Ky8nh`!,wbuQG.Pb%hPBdY=03q=cDUf(IX7(7ZK*Xk=_$)}V[-',5_2LhjT]o6AQ3[dTo4TC5-P0+lJDr6@V71s2gpK?445$*+DjQL@=dB@1x7Ck)oF4O%@UJz?G.K}[(&,94fp$_KYb6t=?+JQi@JucUx`w_b@5^HANQ9iY3Z_&uBN&a6,E&d?J@RLIz@vF0=Ha2GrN'0AaHS333DiCM!i2!6]n6^?}tZftZQoG4jPACU}.6i8crmyjuUcD+)
    MSI (s) (20:4C) [14:11:23:387]: Note: 1: 1402 2: UNKNOWN\Installer\Features\71DCBBF1304249742B8A3ADADDB3A08F 3: 2
    MSI (s) (20:4C) [14:11:23:388]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1])
    MSI (s) (20:4C) [14:11:23:388]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)
    MSI (s) (20:4C) [14:11:23:388]: Executing op: ServiceControl(,Name=Sophos AutoUpdate Service,Action=2,,)
    MSI (s) (20:4C) [14:11:23:389]: Executing op: ActionStart(Name=DeleteServices,Description=Deleting services,Template=Service: [1])
    MSI (s) (20:4C) [14:11:23:390]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)
    MSI (s) (20:4C) [14:11:23:390]: Executing op: ServiceControl(,Name=Sophos AutoUpdate Service,Action=8,,)
    MSI (s) (20:4C) [14:11:23:392]: Executing op: ActionStart(Name=RemoveRegistryValues,Description=Removing system registry values,Template=Key: [1], Name: [2])
    MSI (s) (20:4C) [14:11:23:392]: Executing op: ProgressTotal(Total=102,Type=1,ByteEquivalent=13200)
    MSI (s) (20:4C) [14:11:23:392]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:392]: Executing op: RegRemoveValue(,Value=Reports the status and time of the last update.,)
    MSI (s) (20:4C) [14:11:23:393]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus\CLSID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:393]: Executing op: RegRemoveValue(,Value={07723A69-B7C8-4113-88F9-F18FB917A82F},)
    MSI (s) (20:4C) [14:11:23:394]: Executing op: RegOpenKey(,Key=CLSID\{07723A69-B7C8-4113-88F9-F18FB917A82F}\VersionIndependentProgID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:394]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.AutoUpdateStatus,)
    MSI (s) (20:4C) [14:11:23:394]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus\CurVer,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:394]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.AutoUpdateStatus.1,)
    MSI (s) (20:4C) [14:11:23:405]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus.1,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:405]: Executing op: RegRemoveValue(,Value=Reports the status and time of the last update.,)
    MSI (s) (20:4C) [14:11:23:406]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus.1\CLSID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:406]: Executing op: RegRemoveValue(,Value={07723A69-B7C8-4113-88F9-F18FB917A82F},)
    MSI (s) (20:4C) [14:11:23:407]: Executing op: RegOpenKey(,Key=CLSID\{07723A69-B7C8-4113-88F9-F18FB917A82F}\ProgID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:407]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.AutoUpdateStatus.1,)
    MSI (s) (20:4C) [14:11:23:407]: Executing op: RegOpenKey(,Key=CLSID\{07723A69-B7C8-4113-88F9-F18FB917A82F}\LocalServer32,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:408]: Executing op: RegRemoveValue(,Value="[#ALsvc]",)
    MSI (s) (20:4C) [14:11:23:408]: Executing op: RegOpenKey(,Key=CLSID\{07723A69-B7C8-4113-88F9-F18FB917A82F},,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:408]: Executing op: RegRemoveValue(Name=AppID,Value={CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},)
    MSI (s) (20:4C) [14:11:23:409]: Executing op: RegOpenKey(,Key=CLSID\{07723A69-B7C8-4113-88F9-F18FB917A82F}\TypeLib,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:409]: Executing op: RegRemoveValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},)
    MSI (s) (20:4C) [14:11:23:410]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ClientUpdate,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:410]: Executing op: RegRemoveValue(,Value=Provides interfaces for performing an update, and for installing/caching packages,)
    MSI (s) (20:4C) [14:11:23:410]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ClientUpdate\CLSID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:410]: Executing op: RegRemoveValue(,Value={7CBCADE4-7AA7-43AE-BD20-D88223B6353E},)
    MSI (s) (20:4C) [14:11:23:411]: Executing op: RegOpenKey(,Key=CLSID\{7CBCADE4-7AA7-43AE-BD20-D88223B6353E}\VersionIndependentProgID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:411]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.ClientUpdate,)
    MSI (s) (20:4C) [14:11:23:412]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ClientUpdate\CurVer,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:412]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.ClientUpdate.1,)
    MSI (s) (20:4C) [14:11:23:412]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ClientUpdate.1,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:413]: Executing op: RegRemoveValue(,Value=Provides interfaces for performing an update, and for installing/caching packages,)
    MSI (s) (20:4C) [14:11:23:413]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ClientUpdate.1\CLSID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:413]: Executing op: RegRemoveValue(,Value={7CBCADE4-7AA7-43AE-BD20-D88223B6353E},)
    MSI (s) (20:4C) [14:11:23:414]: Executing op: RegOpenKey(,Key=CLSID\{7CBCADE4-7AA7-43AE-BD20-D88223B6353E}\ProgID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:414]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.ClientUpdate.1,)
    MSI (s) (20:4C) [14:11:23:415]: Executing op: RegOpenKey(,Key=CLSID\{7CBCADE4-7AA7-43AE-BD20-D88223B6353E}\LocalServer32,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:415]: Executing op: RegRemoveValue(,Value="[#ALsvc]",)
    MSI (s) (20:4C) [14:11:23:415]: Executing op: RegOpenKey(,Key=CLSID\{7CBCADE4-7AA7-43AE-BD20-D88223B6353E},,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:415]: Executing op: RegRemoveValue(Name=AppID,Value={CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},)
    MSI (s) (20:4C) [14:11:23:416]: Executing op: RegOpenKey(,Key=CLSID\{7CBCADE4-7AA7-43AE-BD20-D88223B6353E}\TypeLib,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:416]: Executing op: RegRemoveValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},)
    MSI (s) (20:4C) [14:11:23:417]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ALUpdateNotification,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:417]: Executing op: RegRemoveValue(,Value=ALUpdateNotification CoClass,)
    MSI (s) (20:4C) [14:11:23:417]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ALUpdateNotification\CLSID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:417]: Executing op: RegRemoveValue(,Value={ACB50159-5EFF-47D5-B93F-5433C1BD2F3A},)
    MSI (s) (20:4C) [14:11:23:418]: Executing op: RegOpenKey(,Key=CLSID\{ACB50159-5EFF-47D5-B93F-5433C1BD2F3A}\VersionIndependentProgID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:418]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.ALUpdateNotification,)
    MSI (s) (20:4C) [14:11:23:419]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ALUpdateNotification\CurVer,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:419]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.ALUpdateNotification.1,)
    MSI (s) (20:4C) [14:11:23:420]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ALUpdateNotification.1,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:420]: Executing op: RegRemoveValue(,Value=ALUpdateNotification CoClass,)
    MSI (s) (20:4C) [14:11:23:420]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ALUpdateNotification.1\CLSID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:420]: Executing op: RegRemoveValue(,Value={ACB50159-5EFF-47D5-B93F-5433C1BD2F3A},)
    MSI (s) (20:4C) [14:11:23:421]: Executing op: RegOpenKey(,Key=CLSID\{ACB50159-5EFF-47D5-B93F-5433C1BD2F3A}\ProgID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:421]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.ALUpdateNotification.1,)
    MSI (s) (20:4C) [14:11:23:422]: Executing op: RegOpenKey(,Key=CLSID\{ACB50159-5EFF-47D5-B93F-5433C1BD2F3A}\LocalServer32,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:422]: Executing op: RegRemoveValue(,Value="[#ALsvc]",)
    MSI (s) (20:4C) [14:11:23:422]: Executing op: RegOpenKey(,Key=CLSID\{ACB50159-5EFF-47D5-B93F-5433C1BD2F3A},,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:422]: Executing op: RegRemoveValue(Name=AppID,Value={CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},)
    MSI (s) (20:4C) [14:11:23:423]: Executing op: RegOpenKey(,Key=CLSID\{ACB50159-5EFF-47D5-B93F-5433C1BD2F3A}\TypeLib,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:423]: Executing op: RegRemoveValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},)
    MSI (s) (20:4C) [14:11:23:424]: Executing op: RegOpenKey(,Key=ActiveLinkClient.MonitorControl,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:424]: Executing op: RegRemoveValue(,Value=Activates and deactivates the system tray icon.,)
    MSI (s) (20:4C) [14:11:23:425]: Executing op: RegOpenKey(,Key=ActiveLinkClient.MonitorControl\CLSID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:425]: Executing op: RegRemoveValue(,Value={BF515489-25C1-472D-8F02-378E6CC06B3C},)
    MSI (s) (20:4C) [14:11:23:426]: Executing op: RegOpenKey(,Key=CLSID\{BF515489-25C1-472D-8F02-378E6CC06B3C}\VersionIndependentProgID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:426]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.MonitorControl,)
    MSI (s) (20:4C) [14:11:23:427]: Executing op: RegOpenKey(,Key=ActiveLinkClient.MonitorControl\CurVer,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:427]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.MonitorControl.1,)
    MSI (s) (20:4C) [14:11:23:428]: Executing op: RegOpenKey(,Key=ActiveLinkClient.MonitorControl.1,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:428]: Executing op: RegRemoveValue(,Value=Activates and deactivates the system tray icon.,)
    MSI (s) (20:4C) [14:11:23:428]: Executing op: RegOpenKey(,Key=ActiveLinkClient.MonitorControl.1\CLSID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:428]: Executing op: RegRemoveValue(,Value={BF515489-25C1-472D-8F02-378E6CC06B3C},)
    MSI (s) (20:4C) [14:11:23:429]: Executing op: RegOpenKey(,Key=CLSID\{BF515489-25C1-472D-8F02-378E6CC06B3C}\ProgID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:429]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.MonitorControl.1,)
    MSI (s) (20:4C) [14:11:23:430]: Executing op: RegOpenKey(,Key=CLSID\{BF515489-25C1-472D-8F02-378E6CC06B3C}\LocalServer32,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:430]: Executing op: RegRemoveValue(,Value="[#ALsvc]",)
    MSI (s) (20:4C) [14:11:23:431]: Executing op: RegOpenKey(,Key=CLSID\{BF515489-25C1-472D-8F02-378E6CC06B3C},,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:431]: Executing op: RegRemoveValue(Name=AppID,Value={CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},)
    MSI (s) (20:4C) [14:11:23:431]: Executing op: RegOpenKey(,Key=CLSID\{BF515489-25C1-472D-8F02-378E6CC06B3C}\TypeLib,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:431]: Executing op: RegRemoveValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},)
    MSI (s) (20:4C) [14:11:23:432]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus2,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:432]: Executing op: RegRemoveValue(,Value=Reports the status and time of the last update.,)
    MSI (s) (20:4C) [14:11:23:433]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus2\CLSID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:433]: Executing op: RegRemoveValue(,Value={DDF239DC-0DCC-45BD-906E-2B283534234E},)
    MSI (s) (20:4C) [14:11:23:433]: Executing op: RegOpenKey(,Key=CLSID\{DDF239DC-0DCC-45BD-906E-2B283534234E}\VersionIndependentProgID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:433]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.AutoUpdateStatus2,)
    MSI (s) (20:4C) [14:11:23:434]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus2\CurVer,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:434]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.AutoUpdateStatus2.1,)
    MSI (s) (20:4C) [14:11:23:435]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus2.1,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:435]: Executing op: RegRemoveValue(,Value=Reports the status and time of the last update.,)
    MSI (s) (20:4C) [14:11:23:435]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus2.1\CLSID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:436]: Executing op: RegRemoveValue(,Value={DDF239DC-0DCC-45BD-906E-2B283534234E},)
    MSI (s) (20:4C) [14:11:23:436]: Executing op: RegOpenKey(,Key=CLSID\{DDF239DC-0DCC-45BD-906E-2B283534234E}\ProgID,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:436]: Executing op: RegRemoveValue(,Value=ActiveLinkClient.AutoUpdateStatus2.1,)
    MSI (s) (20:4C) [14:11:23:437]: Executing op: RegOpenKey(,Key=CLSID\{DDF239DC-0DCC-45BD-906E-2B283534234E}\LocalServer32,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:437]: Executing op: RegRemoveValue(,Value="[#ALsvc]",)
    MSI (s) (20:4C) [14:11:23:438]: Executing op: RegOpenKey(,Key=CLSID\{DDF239DC-0DCC-45BD-906E-2B283534234E},,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:438]: Executing op: RegRemoveValue(Name=AppID,Value={CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},)
    MSI (s) (20:4C) [14:11:23:438]: Executing op: RegOpenKey(,Key=CLSID\{DDF239DC-0DCC-45BD-906E-2B283534234E}\TypeLib,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:438]: Executing op: RegRemoveValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},)
    MSI (s) (20:4C) [14:11:23:439]: Executing op: RegOpenKey(,Key=AppID\{CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:439]: Executing op: RegRemoveValue(Name=LocalService,Value=Sophos AutoUpdate Service,)
    MSI (s) (20:4C) [14:11:23:440]: Executing op: RegRemoveValue(Name=ServiceParameters,Value=-Service,)
    MSI (s) (20:4C) [14:11:23:440]: Executing op: RegOpenKey(,Key=Interface\{1E4DEB88-3386-4E80-A7D1-9997C39A570D},,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:440]: Executing op: RegRemoveValue(,Value=_IALUpdateNotificationEvents,)
    MSI (s) (20:4C) [14:11:23:441]: Executing op: RegOpenKey(,Key=Interface\{1E4DEB88-3386-4E80-A7D1-9997C39A570D}\TypeLib,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:441]: Executing op: RegRemoveValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},)
    MSI (s) (20:4C) [14:11:23:442]: Executing op: RegRemoveValue(Name=Version,Value=1.1,)
    MSI (s) (20:4C) [14:11:23:442]: Executing op: RegOpenKey(,Key=Interface\{1E4DEB88-3386-4E80-A7D1-9997C39A570D}\ProxyStubClsid32,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:442]: Executing op: RegRemoveValue(,Value={00020420-0000-0000-C000-000000000046},)
    MSI (s) (20:4C) [14:11:23:443]: Executing op: RegOpenKey(,Key=Interface\{4629634A-1AF8-4E02-B5A2-0273FE770C74},,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:443]: Executing op: RegRemoveValue(,Value=ICheckUpdate,)
    MSI (s) (20:4C) [14:11:23:444]: Executing op: RegOpenKey(,Key=Interface\{4629634A-1AF8-4E02-B5A2-0273FE770C74}\TypeLib,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:444]: Executing op: RegRemoveValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},)
    MSI (s) (20:4C) [14:11:23:444]: Executing op: RegRemoveValue(Name=Version,Value=1.1,)
    MSI (s) (20:4C) [14:11:23:445]: Executing op: RegOpenKey(,Key=Interface\{4629634A-1AF8-4E02-B5A2-0273FE770C74}\ProxyStubClsid32,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:445]: Executing op: RegRemoveValue(,Value={00020424-0000-0000-C000-000000000046},)
    MSI (s) (20:4C) [14:11:23:446]: Executing op: RegOpenKey(,Key=Interface\{86488B03-B5B7-413D-A3C2-AD22B892ED9A},,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:446]: Executing op: RegRemoveValue(,Value=IMonitorControl,)
    MSI (s) (20:4C) [14:11:23:446]: Executing op: RegOpenKey(,Key=Interface\{86488B03-B5B7-413D-A3C2-AD22B892ED9A}\TypeLib,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:447]: Executing op: RegRemoveValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},)
    MSI (s) (20:4C) [14:11:23:447]: Executing op: RegRemoveValue(Name=Version,Value=1.1,)
    MSI (s) (20:4C) [14:11:23:448]: Executing op: RegOpenKey(,Key=Interface\{86488B03-B5B7-413D-A3C2-AD22B892ED9A}\ProxyStubClsid32,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:448]: Executing op: RegRemoveValue(,Value={00020424-0000-0000-C000-000000000046},)
    MSI (s) (20:4C) [14:11:23:448]: Executing op: RegOpenKey(,Key=Interface\{BE7DA681-81E5-4C33-B2C6-AFEFF67EE394},,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:448]: Executing op: RegRemoveValue(,Value=IALUpdateNotification,)
    MSI (s) (20:4C) [14:11:23:449]: Executing op: RegOpenKey(,Key=Interface\{BE7DA681-81E5-4C33-B2C6-AFEFF67EE394}\TypeLib,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:449]: Executing op: RegRemoveValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},)
    MSI (s) (20:4C) [14:11:23:450]: Executing op: RegRemoveValue(Name=Version,Value=1.1,)
    MSI (s) (20:4C) [14:11:23:450]: Executing op: RegOpenKey(,Key=Interface\{BE7DA681-81E5-4C33-B2C6-AFEFF67EE394}\ProxyStubClsid32,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:450]: Executing op: RegRemoveValue(,Value={00020424-0000-0000-C000-000000000046},)
    MSI (s) (20:4C) [14:11:23:451]: Executing op: RegOpenKey(,Key=Interface\{CFC0864D-2BAC-403F-8396-2B4C654EF349},,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:451]: Executing op: RegRemoveValue(,Value=IAutoUpdateStatus,)
    MSI (s) (20:4C) [14:11:23:452]: Executing op: RegOpenKey(,Key=Interface\{CFC0864D-2BAC-403F-8396-2B4C654EF349}\TypeLib,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:452]: Executing op: RegRemoveValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},)
    MSI (s) (20:4C) [14:11:23:452]: Executing op: RegRemoveValue(Name=Version,Value=1.1,)
    MSI (s) (20:4C) [14:11:23:453]: Executing op: RegOpenKey(,Key=Interface\{CFC0864D-2BAC-403F-8396-2B4C654EF349}\ProxyStubClsid32,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:453]: Executing op: RegRemoveValue(,Value={00020424-0000-0000-C000-000000000046},)
    MSI (s) (20:4C) [14:11:23:453]: Executing op: RegOpenKey(,Key=Interface\{D2847657-A135-4C7A-BB39-72E5C04B98EE},,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:454]: Executing op: RegRemoveValue(,Value=IAutoUpdateStatus2,)
    MSI (s) (20:4C) [14:11:23:454]: Executing op: RegOpenKey(,Key=Interface\{D2847657-A135-4C7A-BB39-72E5C04B98EE}\TypeLib,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:454]: Executing op: RegRemoveValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},)
    MSI (s) (20:4C) [14:11:23:455]: Executing op: RegRemoveValue(Name=Version,Value=1.1,)
    MSI (s) (20:4C) [14:11:23:455]: Executing op: RegOpenKey(,Key=Interface\{D2847657-A135-4C7A-BB39-72E5C04B98EE}\ProxyStubClsid32,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:455]: Executing op: RegRemoveValue(,Value={00020424-0000-0000-C000-000000000046},)
    MSI (s) (20:4C) [14:11:23:456]: Executing op: RegOpenKey(,Key=Interface\{EECA3174-B9E3-43BE-98B3-A97732F41972},,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:456]: Executing op: RegRemoveValue(,Value=IClientUpdate,)
    MSI (s) (20:4C) [14:11:23:456]: Executing op: RegOpenKey(,Key=Interface\{EECA3174-B9E3-43BE-98B3-A97732F41972}\TypeLib,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:457]: Executing op: RegRemoveValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},)
    MSI (s) (20:4C) [14:11:23:457]: Executing op: RegRemoveValue(Name=Version,Value=1.1,)
    MSI (s) (20:4C) [14:11:23:458]: Executing op: RegOpenKey(,Key=Interface\{EECA3174-B9E3-43BE-98B3-A97732F41972}\ProxyStubClsid32,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:458]: Executing op: RegRemoveValue(,Value={00020424-0000-0000-C000-000000000046},)
    MSI (s) (20:4C) [14:11:23:458]: Executing op: RegOpenKey(,Key=TypeLib\{CE94B62D-25F3-4430-AA85-A22C2888EE65}\1.1,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:458]: Executing op: RegRemoveValue(,Value=ActiveLinkClient 1.1 Type Library,)
    MSI (s) (20:4C) [14:11:23:459]: Executing op: RegOpenKey(,Key=TypeLib\{CE94B62D-25F3-4430-AA85-A22C2888EE65}\1.1\0\win32,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:459]: Executing op: RegRemoveValue(,Value=[#ALsvc],)
    MSI (s) (20:4C) [14:11:23:460]: Executing op: RegOpenKey(,Key=TypeLib\{CE94B62D-25F3-4430-AA85-A22C2888EE65}\1.1\FLAGS,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:460]: Executing op: RegRemoveValue(,Value=0,)
    MSI (s) (20:4C) [14:11:23:461]: Executing op: RegOpenKey(,Key=AppID\ALSVC.EXE,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:461]: Executing op: RegRemoveValue(Name=AppID,Value={CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},)
    MSI (s) (20:4C) [14:11:23:461]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\AutoUpdate,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:461]: Executing op: RegRemoveValue(Name=Installation Path,Value=[INSTALLDIR],)
    MSI (s) (20:4C) [14:11:23:462]: Executing op: RegRemoveValue(Name=Data Path,Value=[AutoUpdateDataFolder],)
    MSI (s) (20:4C) [14:11:23:462]: Executing op: RegRemoveValue(Name=ProductVersion,Value=[ProductVersion],)
    MSI (s) (20:4C) [14:11:23:463]: Executing op: RegRemoveValue(Name=MetricsEnabled,Value=#1,)
    MSI (s) (20:4C) [14:11:23:463]: Executing op: RegRemoveValue(Name=CloudUpdating,Value=#1,)
    MSI (s) (20:4C) [14:11:23:463]: Executing op: RegRemoveValue(Name=IsManaged,Value=#1,)
    MSI (s) (20:4C) [14:11:23:464]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\AutoUpdate\Service,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:464]: Executing op: RegRemoveKey()
    MSI (s) (20:4C) [14:11:23:466]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\AutoUpdate\Service\PolicyFeatures,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:466]: Executing op: RegRemoveKey()
    MSI (s) (20:4C) [14:11:23:467]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Sophos\AutoUpdate\Service\PolicyFeatures 3: 2
    MSI (s) (20:4C) [14:11:23:467]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\Remote Management System\ManagementAgent\Adapters\ALC,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:467]: Executing op: RegRemoveValue(Name=DLLPath,Value=[INSTALLDIR]AUAdapter.dll,)
    MSI (s) (20:4C) [14:11:23:467]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\Telemetry\Plugins\AUPlugin,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:467]: Executing op: RegRemoveValue(Name=Path,Value=[#TELEMAUTelem.exe],)
    MSI (s) (20:4C) [14:11:23:468]: Executing op: RegRemoveValue(Name=Cmd,Value=AUTelem.exe,)
    MSI (s) (20:4C) [14:11:23:469]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\Telemetry,,BinaryType=0,,)
    MSI (s) (20:4C) [14:11:23:469]: Executing op: RegRemoveValue(Name=InstallPath,Value=[TelemetryFolder],)
    MSI (s) (20:4C) [14:11:23:469]: Executing op: RegRemoveValue(Name=LastTelemetryTime,Value=#0,)
    MSI (s) (20:4C) [14:11:23:469]: Executing op: RegRemoveValue(Name=LastErrorCode,Value=#0,)
    MSI (s) (20:4C) [14:11:23:470]: Executing op: RegRemoveValue(Name=LastStatusCode,Value=#0,)
    MSI (s) (20:4C) [14:11:23:470]: Executing op: ActionStart(Name=RemoveFiles,Description=Removing files,Template=File: [1], Directory: [9])
    MSI (s) (20:4C) [14:11:23:471]: Executing op: ProgressTotal(Total=20,Type=1,ByteEquivalent=175000)
    MSI (s) (20:4C) [14:11:23:471]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\)
    MSI (s) (20:4C) [14:11:23:471]: Executing op: FileRemove(,FileName=rootca.crl,,ComponentId={1A5FBAAA-8A81-4FB0-AAC7-87FADDD97277})
    MSI (s) (20:4C) [14:11:23:477]: Verifying accessibility of file: rootca.crl
    MSI (s) (20:4C) [14:11:23:482]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:482]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:483]: Executing op: FileRemove(,FileName=rootca.crt,,ComponentId={0559090D-440E-4FA8-9549-16179DD07404})
    MSI (s) (20:4C) [14:11:23:485]: Verifying accessibility of file: rootca.crt
    MSI (s) (20:4C) [14:11:23:486]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:486]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:487]: Executing op: FileRemove(,FileName=rootca384.crl,,ComponentId={F39B24B0-CDD2-4240-A0A2-2B1B6D5A0BBD})
    MSI (s) (20:4C) [14:11:23:489]: Verifying accessibility of file: rootca384.crl
    MSI (s) (20:4C) [14:11:23:491]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:491]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:491]: Executing op: FileRemove(,FileName=rootca384.crt,,ComponentId={5C9EE207-FE9D-4AA0-8EA8-099928A0D72C})
    MSI (s) (20:4C) [14:11:23:493]: Verifying accessibility of file: rootca384.crt
    MSI (s) (20:4C) [14:11:23:495]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:496]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\AutoUpdate\Config\)
    MSI (s) (20:4C) [14:11:23:496]: Executing op: FileRemove(,FileName=iconn.cfg,,ComponentId={FAD2F9C8-13A0-4572-975E-550FA6E7DC3F})
    MSI (s) (20:4C) [14:11:23:498]: Verifying accessibility of file: iconn.cfg
    MSI (s) (20:4C) [14:11:23:499]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:500]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:500]: Executing op: FileRemove(,FileName=ilog.cfg,,ComponentId={DC8EDB3E-D715-4788-89AD-5EACAA13B5AE})
    MSI (s) (20:4C) [14:11:23:502]: Verifying accessibility of file: ilog.cfg
    MSI (s) (20:4C) [14:11:23:504]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:504]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:504]: Executing op: FileRemove(,FileName=isched.cfg,,ComponentId={D4F97B26-4154-41C7-B15C-05359B80BEAF})
    MSI (s) (20:4C) [14:11:23:506]: Verifying accessibility of file: isched.cfg
    MSI (s) (20:4C) [14:11:23:507]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:508]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:508]: Executing op: FileRemove(,FileName=iupd.cfg,,ComponentId={D4FDA50D-1EB0-4AA3-B016-7CA0C7601983})
    MSI (s) (20:4C) [14:11:23:510]: Verifying accessibility of file: iupd.cfg
    MSI (s) (20:4C) [14:11:23:511]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:512]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:512]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\AutoUpdate\)
    MSI (s) (20:4C) [14:11:23:512]: Executing op: FileRemove(,FileName=ALsvc.exe,,ComponentId={ADECE077-A75A-4666-819F-AEBB42F82CDC})
    MSI (s) (20:4C) [14:11:23:513]: Executing op: FileRemove(,FileName=AUAdapter.dll,,ComponentId={A6BCDEF5-FC1A-4B0A-AEAD-444071FFF479})
    MSI (s) (20:4C) [14:11:23:513]: Executing op: FileRemove(,FileName=SophosUpdate.exe,,ComponentId={58848A8F-83B7-487F-A2FC-7BD6BC4F7F0B})
    MSI (s) (20:4C) [14:11:23:513]: Executing op: FileRemove(,FileName=su-repair.exe,,ComponentId={6A179B8A-DA1C-4155-8674-0739095EF017})
    MSI (s) (20:4C) [14:11:23:514]: Executing op: FileRemove(,FileName=su-setup32.exe,,ComponentId={758E50D4-CA8B-41DC-8C04-02A5A43FAD77})
    MSI (s) (20:4C) [14:11:23:514]: Executing op: FileRemove(,FileName=su-setup64.exe,,ComponentId={47C056BB-1E7C-4A45-8221-65CA51B3F863})
    MSI (s) (20:4C) [14:11:23:514]: Executing op: FileRemove(,FileName=license_agreements.txt,,ComponentId={404B4121-9B38-4F84-8B9D-B642AF25E1AD})
    MSI (s) (20:4C) [14:11:23:515]: Executing op: FileRemove(,FileName=integrity.dat,,ComponentId={7AD6CBFB-E302-4E47-B7C6-4EEAA50AB660})
    MSI (s) (20:4C) [14:11:23:515]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\)
    MSI (s) (20:4C) [14:11:23:515]: Executing op: FileRemove(,FileName=AUTelem.exe,,ComponentId={3A0E79AD-2ADB-49B9-991D-036880DD7726})
    MSI (s) (20:4C) [14:11:23:515]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:516]: Executing op: FileRemove(,FileName=GatherTelem.exe,,ComponentId={60FD7993-E630-4E39-AD1E-3D2F2F482374})
    MSI (s) (20:4C) [14:11:23:516]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:516]: Executing op: FileRemove(,FileName=SubmitTelem.exe,,ComponentId={3802F4D0-A617-4982-B01A-9CEB288FF232})
    MSI (s) (20:4C) [14:11:23:516]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:517]: Executing op: FileRemove(,FileName=telem.man,,ComponentId={8D032536-1910-4094-9CF2-32CD9BFBF019})
    MSI (s) (20:4C) [14:11:23:517]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:517]: Executing op: ProgressTotal(Total=2,Type=1,ByteEquivalent=175000)
    MSI (s) (20:4C) [14:11:23:517]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\,Foreign=1)
    MSI (s) (20:4C) [14:11:23:519]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Certificates\AutoUpdate\,Foreign=1)
    MSI (s) (20:4C) [14:11:23:520]: Executing op: ActionStart(Name=RemoveFolders,Description=Removing folders,Template=Folder: [1])
    MSI (s) (20:4C) [14:11:23:520]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Certificates\AutoUpdate\,Foreign=0)
    MSI (s) (20:4C) [14:11:23:521]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\,Foreign=0)
    MSI (s) (20:4C) [14:11:23:521]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\AutoUpdate\Cache\,Foreign=0)
    MSI (s) (20:4C) [14:11:23:522]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\AutoUpdate\data\,Foreign=0)
    MSI (s) (20:4C) [14:11:23:522]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\AutoUpdate\Events\,Foreign=0)
    MSI (s) (20:4C) [14:11:23:523]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:523]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\AutoUpdate\Events\Staging\,Foreign=0)
    MSI (s) (20:4C) [14:11:23:523]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:524]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:524]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\AutoUpdate\Events\Queue\,Foreign=0)
    MSI (s) (20:4C) [14:11:23:525]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:525]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:525]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\AutoUpdate\Events\Processed\,Foreign=0)
    MSI (s) (20:4C) [14:11:23:526]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:526]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:527]: Executing op: FolderRemove(Folder=C:\Program Files (x86)\Sophos\AutoUpdate\,Foreign=0)
    MSI (s) (20:4C) [14:11:23:527]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:527]: Executing op: FolderRemove(Folder=C:\Program Files (x86)\Sophos\AutoUpdate\,Foreign=0)
    MSI (s) (20:4C) [14:11:23:528]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:528]: Executing op: FolderRemove(Folder=C:\Program Files (x86)\Sophos\AutoUpdate\,Foreign=0)
    MSI (s) (20:4C) [14:11:23:529]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:529]: Executing op: ActionStart(Name=PublishProduct,Description=Publishing product information,)
    MSI (s) (20:4C) [14:11:23:529]: Executing op: CleanupConfigData()
    MSI (s) (20:4C) [14:11:23:529]: Executing op: RegisterPatchOrder(Continue=0,SequenceType=0,Remove=1)
    MSI (s) (20:4C) [14:11:23:529]: Note: 1: 1402 2: UNKNOWN\Installer\Products\71DCBBF1304249742B8A3ADADDB3A08F\Patches 3: 2
    MSI (s) (20:4C) [14:11:23:529]: Executing op: RegisterPatchOrder(Continue=0,SequenceType=1,Remove=1)
    MSI (s) (20:4C) [14:11:23:530]: Executing op: CleanupConfigData(RemovingProduct=1)
    MSI (s) (20:4C) [14:11:23:530]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\71DCBBF1304249742B8A3ADADDB3A08F\Patches 3: 2
    MSI (s) (20:4C) [14:11:23:530]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=8708400)
    MSI (s) (20:4C) [14:11:23:558]: Note: 1: 2265 2: 3: -2147287035
    MSI (s) (20:4C) [14:11:23:559]: User policy value 'DisableRollback' is 0
    MSI (s) (20:4C) [14:11:23:559]: Machine policy value 'DisableRollback' is 0
    MSI (s) (20:4C) [14:11:23:572]: Note: 1: 2265 2: 3: -2147287035
    MSI (s) (20:4C) [14:11:23:577]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:596]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:598]: Note: 1: 2318 2:
    MSI (s) (20:4C) [14:11:23:599]: No System Restore sequence number for this installation.
    MSI (s) (20:4C) [14:11:23:599]: Unlocking Server
    MSI (s) (20:4C) [14:11:23:611]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
    Action ended 14:11:23: InstallFinalize. Return value 1.
    Action ended 14:11:23: INSTALL. Return value 1.
    Property(S): UpgradeCode = {3B8886D0-98A2-4992-A0AC-893AEDBB494B}
    Property(S): CertificatesAutoUpdate = C:\ProgramData\Sophos\Certificates\AutoUpdate\
    Property(S): CertificatesManifest = C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\
    Property(S): CertificatesCache = C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\
    Property(S): CacheFolder = C:\ProgramData\Sophos\AutoUpdate\Cache\
    Property(S): DataFolder = C:\ProgramData\Sophos\AutoUpdate\data\
    Property(S): EventsFolder = C:\ProgramData\Sophos\AutoUpdate\Events\
    Property(S): EventsStagingFolder = C:\ProgramData\Sophos\AutoUpdate\Events\Staging\
    Property(S): EventsQueueFolder = C:\ProgramData\Sophos\AutoUpdate\Events\Queue\
    Property(S): EventsProcessedFolder = C:\ProgramData\Sophos\AutoUpdate\Events\Processed\
    Property(S): ConfigFolder = C:\ProgramData\Sophos\AutoUpdate\Config\
    Property(S): INSTALLDIR = C:\Program Files (x86)\Sophos\AutoUpdate\
    Property(S): ProductVersion = 6.7.352.0
    Property(S): TelemetryFolder = C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\
    Property(S): AutoUpdateDataFolder = C:\ProgramData\Sophos\AutoUpdate\
    Property(S): LogsFolder = C:\ProgramData\Sophos\AutoUpdate\Logs\
    Property(S): SAUAppDataFolder = C:\ProgramData\Sophos\AutoUpdate\
    Property(S): SophosAppDataFolder = C:\ProgramData\Sophos\
    Property(S): Certificates = C:\ProgramData\Sophos\Certificates\
    Property(S): CommonAppDataFolder = C:\ProgramData\
    Property(S): TARGETDIR = C:\
    Property(S): AutoUpdateProgramFilesFolder = C:\Program Files (x86)\Sophos\AutoUpdate\
    Property(S): SophosProgramFilesFolder = C:\Program Files (x86)\Sophos\
    Property(S): ProgramFilesFolder = C:\Program Files (x86)\
    Property(S): VersionNT = 603
    Property(S): ALLUSERS = 1
    Property(S): ARPCOMMENTS = Keeps Sophos Anti-Virus and other Sophos components up to date
    Property(S): ARPNOMODIFY = 1
    Property(S): ARPNOREPAIR = 1
    Property(S): MSIRESTARTMANAGERCONTROL = Disable
    Property(S): REBOOT = ReallySuppress
    Property(S): Manufacturer = Sophos Limited
    Property(S): ProductCode = {1FBBCD17-2403-4794-B2A8-A3ADDD3B0AF8}
    Property(S): ProductLanguage = 1033
    Property(S): ProductName = Sophos AutoUpdate XG
    Property(S): SecureCustomProperties = FOUND_AUADAPTER;WIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTED
    Property(S): MsiLogFileLocation = C:\ProgramData\Sophos\CloudInstaller\Logs\Sophos_Sophos AutoUpdate 20210824_084122.log
    Property(S): PackageCode = {B0F55E8F-8FC7-4100-9222-7152B085E33A}
    Property(S): ProductState = 5
    Property(S): SOPHOS_TP_TOKEN = 1
    Property(S): REMOVE = ALL
    Property(S): CURRENTDIRECTORY = C:\Program Files (x86)\Sophos\CloudInstaller
    Property(S): CLIENTUILEVEL = 3
    Property(S): MSICLIENTUSESEXTERNALUI = 1
    Property(S): CLIENTPROCESSID = 7060
    Property(S): PRODUCTLANGUAGE = 1033
    Property(S): VersionDatabase = 500
    Property(S): VersionMsi = 5.00
    Property(S): VersionNT64 = 603
    Property(S): WindowsBuild = 9600
    Property(S): ServicePackLevel = 0
    Property(S): ServicePackLevelMinor = 0
    Property(S): MsiNTProductType = 3
    Property(S): WindowsFolder = C:\Windows\
    Property(S): WindowsVolume = C:\
    Property(S): System64Folder = C:\Windows\system32\
    Property(S): SystemFolder = C:\Windows\SysWOW64\
    Property(S): RemoteAdminTS = 1
    Property(S): TempFolder = C:\Users\ADMINI~1.RAI\AppData\Local\Temp\
    Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
    Property(S): ProgramFiles64Folder = C:\Program Files\
    Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
    Property(S): AppDataFolder = C:\Users\Administrator.RAINWEAR\AppData\Roaming\
    Property(S): FavoritesFolder = C:\Users\Administrator.RAINWEAR\Favorites\
    Property(S): NetHoodFolder = C:\Users\Administrator.RAINWEAR\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
    Property(S): PersonalFolder = C:\Users\Administrator.RAINWEAR\Documents\
    Property(S): PrintHoodFolder = C:\Users\Administrator.RAINWEAR\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
    Property(S): RecentFolder = C:\Users\Administrator.RAINWEAR\AppData\Roaming\Microsoft\Windows\Recent\
    Property(S): SendToFolder = C:\Users\Administrator.RAINWEAR\AppData\Roaming\Microsoft\Windows\SendTo\
    Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
    Property(S): LocalAppDataFolder = C:\Users\Administrator.RAINWEAR\AppData\Local\
    Property(S): MyPicturesFolder = C:\Users\Administrator.RAINWEAR\Pictures\
    Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
    Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
    Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
    Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
    Property(S): DesktopFolder = C:\Users\Public\Desktop\
    Property(S): FontsFolder = C:\Windows\Fonts\
    Property(S): GPTSupport = 1
    Property(S): OLEAdvtSupport = 1
    Property(S): ShellAdvtSupport = 1
    Property(S): MsiAMD64 = 6
    Property(S): Msix64 = 6
    Property(S): Intel = 6
    Property(S): PhysicalMemory = 8191
    Property(S): VirtualMemory = 5946
    Property(S): AdminUser = 1
    Property(S): MsiTrueAdminUser = 1
    Property(S): LogonUser = administrator
    Property(S): UserSID = S-1-5-21-3730003622-3069995827-1852200957-500
    Property(S): UserLanguageID = 2057
    Property(S): ComputerName = RAINWEAR-WSUS-S
    Property(S): SystemLanguageID = 1033
    Property(S): ScreenX = 1024
    Property(S): ScreenY = 768
    Property(S): CaptionHeight = 23
    Property(S): BorderTop = 1
    Property(S): BorderSide = 1
    Property(S): TextHeight = 16
    Property(S): TextInternalLeading = 3
    Property(S): ColorBits = 32
    Property(S): TTCSupport = 1
    Property(S): Time = 14:11:23
    Property(S): Date = 8/24/2021
    Property(S): MsiNetAssemblySupport = 4.6.1586.0
    Property(S): MsiWin32AssemblySupport = 6.3.14393.4169
    Property(S): RedirectedDllSupport = 2
    Property(S): MsiRunningElevated = 1
    Property(S): Privileged = 1
    Property(S): USERNAME = Windows User
    Property(S): Installed = 00:00:00
    Property(S): DATABASE = C:\Windows\Installer\1b920c.msi
    Property(S): OriginalDatabase = C:\Windows\Installer\1b920c.msi
    Property(S): UILevel = 2
    Property(S): Preselected = 1
    Property(S): ACTION = INSTALL
    Property(S): ROOTDRIVE = C:\
    Property(S): CostingComplete = 1
    Property(S): OutOfDiskSpace = 0
    Property(S): OutOfNoRbDiskSpace = 0
    Property(S): PrimaryVolumeSpaceAvailable = 0
    Property(S): PrimaryVolumeSpaceRequired = 0
    Property(S): PrimaryVolumeSpaceRemaining = 0
    Property(S): INSTALLLEVEL = 1
    MSI (s) (20:4C) [14:11:23:636]: Note: 1: 1724
    MSI (s) (20:4C) [14:11:23:636]: Note: 1: 2205 2: 3: Error
    MSI (s) (20:4C) [14:11:23:636]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1724
    MSI (s) (20:4C) [14:11:23:636]: Note: 1: 2205 2: 3: Error
    MSI (s) (20:4C) [14:11:23:636]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709
    MSI (s) (20:4C) [14:11:23:636]: Product: Sophos AutoUpdate XG -- Removal completed successfully.

    MSI (s) (20:4C) [14:11:23:637]: Windows Installer removed the product. Product Name: Sophos AutoUpdate XG. Product Version: 6.7.352.0. Product Language: 1033. Manufacturer: Sophos Limited. Removal success or error status: 0.

    MSI (s) (20:4C) [14:11:23:639]: Deferring clean up of packages/files, if any exist
    MSI (s) (20:4C) [14:11:23:639]: MainEngineThread is returning 0
    MSI (s) (20:58) [14:11:23:639]: No System Restore sequence number for this installation.
    === Logging stopped: 24/08/2021 14:11:23 ===
    MSI (s) (20:58) [14:11:23:651]: User policy value 'DisableRollback' is 0
    MSI (s) (20:58) [14:11:23:651]: Machine policy value 'DisableRollback' is 0
    MSI (s) (20:58) [14:11:23:651]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (20:58) [14:11:23:651]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (20:58) [14:11:23:659]: Note: 1: 2265 2: 3: -2147287035
    MSI (s) (20:58) [14:11:23:659]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (20:58) [14:11:23:661]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (s) (20:58) [14:11:23:661]: Post-install cleanup: removing installer file 'C:\Windows\Installer\1b920c.msi'
    MSI (c) (94:A4) [14:11:23:663]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (94:A4) [14:11:23:664]: MainEngineThread is returning 0
    === Verbose logging stopped: 24/08/2021 14:11:23 ===

  • Hi Mayu,

    Based on these logs. we can't see more details to it which caused the issue, so I would like you to please re-create the issue and collect SDU logs. You may follow this KB article on how to download SDU utility and collect the SDU logs.
    But before you proceed with installation you may run Sophos ZAP on the system first and see if the issue got resolved.

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • Hi GlennSen,

    I tried to run SophosZap using CMD and below error popups.

  • What OS is it?  Also is it Arm, 64/32 bit?

  • Windows Server 2016- 64 Bits