Hi Support,
I have update to sophos 10.8.9.292
on some windows 10 pc, sav and ntp cannot be updated.
what is the cause of failed updates?
This thread was automatically locked due to age.
Hi Support,
I have update to sophos 10.8.9.292
on some windows 10 pc, sav and ntp cannot be updated.
what is the cause of failed updates?
Hi christian,
Bellow the log from Sophos AutoUpdate 5.16.37 install log 20200901.txt
=== Verbose logging started: 9/1/2020 12:23:22 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (18:34) [12:23:22:161]: Cloaking enabled.
MSI (c) (18:34) [12:23:22:161]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (18:34) [12:23:22:161]: End dialog not enabled
MSI (c) (18:34) [12:23:22:161]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
MSI (c) (18:34) [12:23:22:161]: Package we're running from ==> C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: Uninstall Flags override found.
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: Uninstall VersionNT override found.
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: Uninstall ServicePackLevel override found.
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: looking for appcompat database entry with ProductCode '{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54}'.
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (18:34) [12:23:22:165]: MSCOREE not loaded loading copy from system32
MSI (c) (18:34) [12:23:22:167]: APPCOMPAT: looking for appcompat database entry with ProductCode '{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54}'.
MSI (c) (18:34) [12:23:22:167]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (18:34) [12:23:22:167]: Transforms are not secure.
MSI (c) (18:34) [12:23:22:169]: Note: 1: 2205 2: 3: Control
MSI (c) (18:34) [12:23:22:169]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\WINDOWS\TEMP\Sophos AutoUpdate 5.16.37 install log 20200901 122322.txt'.
MSI (c) (18:34) [12:23:22:169]: No Command Line.
MSI (c) (18:34) [12:23:22:169]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{6564AB80-4D87-4CD3-B65F-2994DFB4C1D0}'.
MSI (c) (18:34) [12:23:22:169]: Product Code passed to Engine.Initialize: '(none)'
MSI (c) (18:34) [12:23:22:169]: Product Code from property table before transforms: '{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54}'
MSI (c) (18:34) [12:23:22:169]: Product Code from property table after transforms: '{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54}'
MSI (c) (18:34) [12:23:22:169]: Product not registered: beginning first-time install
MSI (c) (18:34) [12:23:22:169]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
MSI (c) (18:34) [12:23:22:169]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (c) (18:34) [12:23:22:169]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (c) (18:34) [12:23:22:169]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (c) (18:34) [12:23:22:169]: User policy value 'SearchOrder' is 'nmu'
MSI (c) (18:34) [12:23:22:169]: Adding new sources is allowed.
MSI (c) (18:34) [12:23:22:169]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (c) (18:34) [12:23:22:169]: Package name extracted from package path: 'Sophos AutoUpdate.msi'
MSI (c) (18:34) [12:23:22:169]: Package to be registered: 'Sophos AutoUpdate.msi'
MSI (c) (18:34) [12:23:22:170]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (c) (18:34) [12:23:22:170]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
MSI (c) (18:34) [12:23:22:170]: TRANSFORMS property is now:
MSI (c) (18:34) [12:23:22:170]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Favorites
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Documents
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Local
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Pictures
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Desktop
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
MSI (c) (18:34) [12:23:22:170]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (c) (18:34) [12:23:22:172]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation
MSI (c) (18:34) [12:23:22:172]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (c) (18:34) [12:23:22:172]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (c) (18:34) [12:23:22:172]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (18:34) [12:23:22:174]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (18:34) [12:23:22:174]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'user'.
MSI (c) (18:34) [12:23:22:174]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (18:34) [12:23:22:174]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi'.
MSI (c) (18:34) [12:23:22:174]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi'.
MSI (c) (18:34) [12:23:22:174]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (c) (18:34) [12:23:22:174]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (c) (18:34) [12:23:22:174]: EEUI - Disabling MsiEmbeddedUI in quiet mode
=== Logging started: 9/1/2020 12:23:22 ===
MSI (c) (18:34) [12:23:22:174]: Machine policy value 'DisableRollback' is 0
MSI (c) (18:34) [12:23:22:174]: User policy value 'DisableRollback' is 0
MSI (c) (18:34) [12:23:22:174]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (c) (18:34) [12:23:22:176]: Note: 1: 2265 2: 3: -2147287035
MSI (c) (18:34) [12:23:22:176]: Checking in-progress install: install for different product.
MSI (c) (18:34) [12:23:22:176]: Checking in-progress install: install for an uninstall.
MSI (c) (18:34) [12:23:22:176]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
MSI (c) (18:34) [12:23:22:178]: Creating MSIHANDLE (6) of type 790537 for thread 7988
MSI (c) (18:34) [12:23:22:178]: MsiOpenPackageEx is returning 0
MSI (c) (18:34) [12:23:22:180]: Closing MSIHANDLE (6) of type 790537 for thread 7988
=== Verbose logging stopped: 9/1/2020 12:23:22 ===
Hello fadli nurdin,
this log is from the (attempted) AutoUpdate install and neither from SAV (Sophos Anti-Virus Install...) nor ntp (Sophos Network Threat Protection Install ...). Anyway, the -2147287035 (or 0x8003005) suggests some issue. Is this the complete log - normally it's much bigger?
As said, the other components' logs would be needed.
Christian.
=== Verbose logging started: 9/1/2020 12:23:22 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (18:34) [12:23:22:161]: Cloaking enabled.
MSI (c) (18:34) [12:23:22:161]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (18:34) [12:23:22:161]: End dialog not enabled
MSI (c) (18:34) [12:23:22:161]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
MSI (c) (18:34) [12:23:22:161]: Package we're running from ==> C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: Uninstall Flags override found.
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: Uninstall VersionNT override found.
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: Uninstall ServicePackLevel override found.
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: looking for appcompat database entry with ProductCode '{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54}'.
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (18:34) [12:23:22:165]: MSCOREE not loaded loading copy from system32
MSI (c) (18:34) [12:23:22:167]: APPCOMPAT: looking for appcompat database entry with ProductCode '{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54}'.
MSI (c) (18:34) [12:23:22:167]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (18:34) [12:23:22:167]: Transforms are not secure.
MSI (c) (18:34) [12:23:22:169]: Note: 1: 2205 2: 3: Control
MSI (c) (18:34) [12:23:22:169]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\WINDOWS\TEMP\Sophos AutoUpdate 5.16.37 install log 20200901 122322.txt'.
MSI (c) (18:34) [12:23:22:169]: No Command Line.
MSI (c) (18:34) [12:23:22:169]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{6564AB80-4D87-4CD3-B65F-2994DFB4C1D0}'.
MSI (c) (18:34) [12:23:22:169]: Product Code passed to Engine.Initialize: '(none)'
MSI (c) (18:34) [12:23:22:169]: Product Code from property table before transforms: '{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54}'
MSI (c) (18:34) [12:23:22:169]: Product Code from property table after transforms: '{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54}'
MSI (c) (18:34) [12:23:22:169]: Product not registered: beginning first-time install
MSI (c) (18:34) [12:23:22:169]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
MSI (c) (18:34) [12:23:22:169]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (c) (18:34) [12:23:22:169]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (c) (18:34) [12:23:22:169]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (c) (18:34) [12:23:22:169]: User policy value 'SearchOrder' is 'nmu'
MSI (c) (18:34) [12:23:22:169]: Adding new sources is allowed.
MSI (c) (18:34) [12:23:22:169]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (c) (18:34) [12:23:22:169]: Package name extracted from package path: 'Sophos AutoUpdate.msi'
MSI (c) (18:34) [12:23:22:169]: Package to be registered: 'Sophos AutoUpdate.msi'
MSI (c) (18:34) [12:23:22:170]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (c) (18:34) [12:23:22:170]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
MSI (c) (18:34) [12:23:22:170]: TRANSFORMS property is now:
MSI (c) (18:34) [12:23:22:170]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Favorites
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Documents
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Local
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Pictures
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Desktop
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
MSI (c) (18:34) [12:23:22:170]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (c) (18:34) [12:23:22:172]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation
MSI (c) (18:34) [12:23:22:172]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (c) (18:34) [12:23:22:172]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (c) (18:34) [12:23:22:172]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (18:34) [12:23:22:174]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (18:34) [12:23:22:174]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'user'.
MSI (c) (18:34) [12:23:22:174]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (18:34) [12:23:22:174]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi'.
MSI (c) (18:34) [12:23:22:174]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi'.
MSI (c) (18:34) [12:23:22:174]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (c) (18:34) [12:23:22:174]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (c) (18:34) [12:23:22:174]: EEUI - Disabling MsiEmbeddedUI in quiet mode
=== Logging started: 9/1/2020 12:23:22 ===
MSI (c) (18:34) [12:23:22:174]: Machine policy value 'DisableRollback' is 0
MSI (c) (18:34) [12:23:22:174]: User policy value 'DisableRollback' is 0
MSI (c) (18:34) [12:23:22:174]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (c) (18:34) [12:23:22:176]: Note: 1: 2265 2: 3: -2147287035
MSI (c) (18:34) [12:23:22:176]: Checking in-progress install: install for different product.
MSI (c) (18:34) [12:23:22:176]: Checking in-progress install: install for an uninstall.
MSI (c) (18:34) [12:23:22:176]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
MSI (c) (18:34) [12:23:22:178]: Creating MSIHANDLE (6) of type 790537 for thread 7988
MSI (c) (18:34) [12:23:22:178]: MsiOpenPackageEx is returning 0
MSI (c) (18:34) [12:23:22:180]: Closing MSIHANDLE (6) of type 790537 for thread 7988
=== Verbose logging stopped: 9/1/2020 12:23:22 ===
=== Verbose logging started: 9/1/2020 12:23:22 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (18:E0) [12:23:22:192]: Resetting cached policy values
MSI (c) (18:E0) [12:23:22:192]: Machine policy value 'Debug' is 0
MSI (c) (18:E0) [12:23:22:192]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
******* Action:
******* CommandLine: **********
MSI (c) (18:E0) [12:23:22:192]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (18:E0) [12:23:25:193]: Failed to grab execution mutex. System error 258.
MSI (c) (18:E0) [12:23:25:195]: Cloaking enabled.
MSI (c) (18:E0) [12:23:25:195]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (18:E0) [12:23:25:195]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (18:E0) [12:23:25:197]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (18:E0) [12:23:25:197]: MainEngineThread is returning 1618
=== Verbose logging stopped: 9/1/2020 12:23:25 ===
=== Verbose logging started: 9/1/2020 12:23:30 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (18:88) [12:23:30:205]: Resetting cached policy values
MSI (c) (18:88) [12:23:30:205]: Machine policy value 'Debug' is 0
MSI (c) (18:88) [12:23:30:205]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
******* Action:
******* CommandLine: **********
MSI (c) (18:88) [12:23:30:205]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (18:88) [12:23:33:206]: Failed to grab execution mutex. System error 258.
MSI (c) (18:88) [12:23:33:207]: Cloaking enabled.
MSI (c) (18:88) [12:23:33:207]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (18:88) [12:23:33:207]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (18:88) [12:23:33:209]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (18:88) [12:23:33:209]: MainEngineThread is returning 1618
=== Verbose logging stopped: 9/1/2020 12:23:33 ===
=== Verbose logging started: 9/1/2020 12:23:38 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (18:E0) [12:23:38:219]: Resetting cached policy values
MSI (c) (18:E0) [12:23:38:219]: Machine policy value 'Debug' is 0
MSI (c) (18:E0) [12:23:38:219]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
******* Action:
******* CommandLine: **********
MSI (c) (18:E0) [12:23:38:219]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (18:E0) [12:23:41:219]: Failed to grab execution mutex. System error 258.
MSI (c) (18:E0) [12:23:41:227]: Cloaking enabled.
MSI (c) (18:E0) [12:23:41:227]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (18:E0) [12:23:41:227]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (18:E0) [12:23:41:229]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (18:E0) [12:23:41:229]: MainEngineThread is returning 1618
=== Verbose logging stopped: 9/1/2020 12:23:41 ===
=== Verbose logging started: 9/1/2020 12:23:46 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (18:6C) [12:23:46:237]: Resetting cached policy values
MSI (c) (18:6C) [12:23:46:237]: Machine policy value 'Debug' is 0
MSI (c) (18:6C) [12:23:46:237]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
******* Action:
******* CommandLine: **********
MSI (c) (18:6C) [12:23:46:237]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (18:6C) [12:23:49:237]: Failed to grab execution mutex. System error 258.
MSI (c) (18:6C) [12:23:49:237]: Cloaking enabled.
MSI (c) (18:6C) [12:23:49:237]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (18:6C) [12:23:49:239]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (18:6C) [12:23:49:239]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (18:6C) [12:23:49:239]: MainEngineThread is returning 1618
=== Verbose logging stopped: 9/1/2020 12:23:49 ===
=== Verbose logging started: 9/1/2020 12:23:54 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (18:7C) [12:23:54:245]: Resetting cached policy values
MSI (c) (18:7C) [12:23:54:245]: Machine policy value 'Debug' is 0
MSI (c) (18:7C) [12:23:54:245]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
******* Action:
******* CommandLine: **********
MSI (c) (18:7C) [12:23:54:245]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (18:7C) [12:23:57:246]: Failed to grab execution mutex. System error 258.
MSI (c) (18:7C) [12:23:57:248]: Cloaking enabled.
MSI (c) (18:7C) [12:23:57:248]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (18:7C) [12:23:57:248]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (18:7C) [12:23:57:250]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (18:7C) [12:23:57:250]: MainEngineThread is returning 1618
=== Verbose logging stopped: 9/1/2020 12:23:57 ===
01-09-2020 12:23:22 Successfully requested Sophos Endpoint Defense disable tamper protection of SAU. 01-09-2020 12:23:22 In MsiLib::GetPackageProductInfo(). 01-09-2020 12:23:22 In MsiLib::GetPackageProperty(). 01-09-2020 12:23:22 Leaving MsiLib::GetPackageProperty() with ERROR_SUCCESS. 01-09-2020 12:23:22 In MsiLib::GetPackageProperty(). 01-09-2020 12:23:22 Leaving MsiLib::GetPackageProperty() with ERROR_SUCCESS. 01-09-2020 12:23:22 In MsiLib::GetPackageProperty(). 01-09-2020 12:23:22 Leaving MsiLib::GetPackageProperty() with ERROR_SUCCESS. 01-09-2020 12:23:22 Leaving MsiLib::GetPackageProductInfo(). 01-09-2020 12:23:22 In MsiLib::IsProductInstalled(). 01-09-2020 12:23:22 Leaving MsiLib::IsProductInstalled() with true. 01-09-2020 12:23:22 In FixIniFiles(). 01-09-2020 12:23:22 Processing: C:\ProgramData\Sophos\AutoUpdate\Config\iconn.cfg 01-09-2020 12:23:22 Processing: C:\ProgramData\Sophos\AutoUpdate\Config\idata.cfg 01-09-2020 12:23:22 Processing: C:\ProgramData\Sophos\AutoUpdate\Config\ilog.cfg 01-09-2020 12:23:22 Processing: C:\ProgramData\Sophos\AutoUpdate\Config\imon.cfg 01-09-2020 12:23:22 Processing: C:\ProgramData\Sophos\AutoUpdate\Config\isched.cfg 01-09-2020 12:23:22 Processing: C:\ProgramData\Sophos\AutoUpdate\Config\iupd.cfg 01-09-2020 12:23:22 Pre-existing version: 5.15.166; Installing version: 5.16.37. 01-09-2020 12:23:22 In KB2918614Workaround(). 01-09-2020 12:23:22 Leaving KB2918614Workaround(). 01-09-2020 12:23:22 Installation type: Minor upgrade. 01-09-2020 12:23:22 MSI installation attempt: 1 01-09-2020 12:23:25 Installation of Sophos AutoUpdate failed with return code : 1618. 01-09-2020 12:23:30 MSI installation attempt: 2 01-09-2020 12:23:33 Installation of Sophos AutoUpdate failed with return code : 1618. 01-09-2020 12:23:38 MSI installation attempt: 3 01-09-2020 12:23:41 Installation of Sophos AutoUpdate failed with return code : 1618. 01-09-2020 12:23:46 MSI installation attempt: 4 01-09-2020 12:23:49 Installation of Sophos AutoUpdate failed with return code : 1618. 01-09-2020 12:23:54 MSI installation attempt: 5 01-09-2020 12:23:57 Installation of Sophos AutoUpdate failed with return code : 1618. 01-09-2020 12:24:02 Failed to successfully install MSI within 5 attempts 01-09-2020 12:24:02 Successfully registered for tamper protection with Sophos Endpoint Defense. 01-09-2020 12:24:02 Error: Install of MSI failed with error 1618
=== Verbose logging started: 9/1/2020 12:23:22 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (18:34) [12:23:22:161]: Cloaking enabled.
MSI (c) (18:34) [12:23:22:161]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (18:34) [12:23:22:161]: End dialog not enabled
MSI (c) (18:34) [12:23:22:161]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
MSI (c) (18:34) [12:23:22:161]: Package we're running from ==> C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: Uninstall Flags override found.
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: Uninstall VersionNT override found.
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: Uninstall ServicePackLevel override found.
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: looking for appcompat database entry with ProductCode '{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54}'.
MSI (c) (18:34) [12:23:22:163]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (18:34) [12:23:22:165]: MSCOREE not loaded loading copy from system32
MSI (c) (18:34) [12:23:22:167]: APPCOMPAT: looking for appcompat database entry with ProductCode '{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54}'.
MSI (c) (18:34) [12:23:22:167]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (18:34) [12:23:22:167]: Transforms are not secure.
MSI (c) (18:34) [12:23:22:169]: Note: 1: 2205 2: 3: Control
MSI (c) (18:34) [12:23:22:169]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\WINDOWS\TEMP\Sophos AutoUpdate 5.16.37 install log 20200901 122322.txt'.
MSI (c) (18:34) [12:23:22:169]: No Command Line.
MSI (c) (18:34) [12:23:22:169]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{6564AB80-4D87-4CD3-B65F-2994DFB4C1D0}'.
MSI (c) (18:34) [12:23:22:169]: Product Code passed to Engine.Initialize: '(none)'
MSI (c) (18:34) [12:23:22:169]: Product Code from property table before transforms: '{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54}'
MSI (c) (18:34) [12:23:22:169]: Product Code from property table after transforms: '{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54}'
MSI (c) (18:34) [12:23:22:169]: Product not registered: beginning first-time install
MSI (c) (18:34) [12:23:22:169]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
MSI (c) (18:34) [12:23:22:169]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (c) (18:34) [12:23:22:169]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (c) (18:34) [12:23:22:169]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (c) (18:34) [12:23:22:169]: User policy value 'SearchOrder' is 'nmu'
MSI (c) (18:34) [12:23:22:169]: Adding new sources is allowed.
MSI (c) (18:34) [12:23:22:169]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (c) (18:34) [12:23:22:169]: Package name extracted from package path: 'Sophos AutoUpdate.msi'
MSI (c) (18:34) [12:23:22:169]: Package to be registered: 'Sophos AutoUpdate.msi'
MSI (c) (18:34) [12:23:22:170]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (c) (18:34) [12:23:22:170]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
MSI (c) (18:34) [12:23:22:170]: TRANSFORMS property is now:
MSI (c) (18:34) [12:23:22:170]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Favorites
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Documents
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Local
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Pictures
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Desktop
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (c) (18:34) [12:23:22:170]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
MSI (c) (18:34) [12:23:22:170]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (c) (18:34) [12:23:22:172]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation
MSI (c) (18:34) [12:23:22:172]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (c) (18:34) [12:23:22:172]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (c) (18:34) [12:23:22:172]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (18:34) [12:23:22:174]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (18:34) [12:23:22:174]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'user'.
MSI (c) (18:34) [12:23:22:174]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (18:34) [12:23:22:174]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi'.
MSI (c) (18:34) [12:23:22:174]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi'.
MSI (c) (18:34) [12:23:22:174]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (c) (18:34) [12:23:22:174]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (c) (18:34) [12:23:22:174]: EEUI - Disabling MsiEmbeddedUI in quiet mode
=== Logging started: 9/1/2020 12:23:22 ===
MSI (c) (18:34) [12:23:22:174]: Machine policy value 'DisableRollback' is 0
MSI (c) (18:34) [12:23:22:174]: User policy value 'DisableRollback' is 0
MSI (c) (18:34) [12:23:22:174]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (c) (18:34) [12:23:22:176]: Note: 1: 2265 2: 3: -2147287035
MSI (c) (18:34) [12:23:22:176]: Checking in-progress install: install for different product.
MSI (c) (18:34) [12:23:22:176]: Checking in-progress install: install for an uninstall.
MSI (c) (18:34) [12:23:22:176]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
MSI (c) (18:34) [12:23:22:178]: Creating MSIHANDLE (6) of type 790537 for thread 7988
MSI (c) (18:34) [12:23:22:178]: MsiOpenPackageEx is returning 0
MSI (c) (18:34) [12:23:22:180]: Closing MSIHANDLE (6) of type 790537 for thread 7988
=== Verbose logging stopped: 9/1/2020 12:23:22 ===
=== Verbose logging started: 9/1/2020 12:23:22 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (18:E0) [12:23:22:192]: Resetting cached policy values
MSI (c) (18:E0) [12:23:22:192]: Machine policy value 'Debug' is 0
MSI (c) (18:E0) [12:23:22:192]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
******* Action:
******* CommandLine: **********
MSI (c) (18:E0) [12:23:22:192]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (18:E0) [12:23:25:193]: Failed to grab execution mutex. System error 258.
MSI (c) (18:E0) [12:23:25:195]: Cloaking enabled.
MSI (c) (18:E0) [12:23:25:195]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (18:E0) [12:23:25:195]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (18:E0) [12:23:25:197]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (18:E0) [12:23:25:197]: MainEngineThread is returning 1618
=== Verbose logging stopped: 9/1/2020 12:23:25 ===
=== Verbose logging started: 9/1/2020 12:23:30 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (18:88) [12:23:30:205]: Resetting cached policy values
MSI (c) (18:88) [12:23:30:205]: Machine policy value 'Debug' is 0
MSI (c) (18:88) [12:23:30:205]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
******* Action:
******* CommandLine: **********
MSI (c) (18:88) [12:23:30:205]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (18:88) [12:23:33:206]: Failed to grab execution mutex. System error 258.
MSI (c) (18:88) [12:23:33:207]: Cloaking enabled.
MSI (c) (18:88) [12:23:33:207]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (18:88) [12:23:33:207]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (18:88) [12:23:33:209]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (18:88) [12:23:33:209]: MainEngineThread is returning 1618
=== Verbose logging stopped: 9/1/2020 12:23:33 ===
=== Verbose logging started: 9/1/2020 12:23:38 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (18:E0) [12:23:38:219]: Resetting cached policy values
MSI (c) (18:E0) [12:23:38:219]: Machine policy value 'Debug' is 0
MSI (c) (18:E0) [12:23:38:219]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
******* Action:
******* CommandLine: **********
MSI (c) (18:E0) [12:23:38:219]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (18:E0) [12:23:41:219]: Failed to grab execution mutex. System error 258.
MSI (c) (18:E0) [12:23:41:227]: Cloaking enabled.
MSI (c) (18:E0) [12:23:41:227]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (18:E0) [12:23:41:227]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (18:E0) [12:23:41:229]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (18:E0) [12:23:41:229]: MainEngineThread is returning 1618
=== Verbose logging stopped: 9/1/2020 12:23:41 ===
=== Verbose logging started: 9/1/2020 12:23:46 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (18:6C) [12:23:46:237]: Resetting cached policy values
MSI (c) (18:6C) [12:23:46:237]: Machine policy value 'Debug' is 0
MSI (c) (18:6C) [12:23:46:237]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
******* Action:
******* CommandLine: **********
MSI (c) (18:6C) [12:23:46:237]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (18:6C) [12:23:49:237]: Failed to grab execution mutex. System error 258.
MSI (c) (18:6C) [12:23:49:237]: Cloaking enabled.
MSI (c) (18:6C) [12:23:49:237]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (18:6C) [12:23:49:239]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (18:6C) [12:23:49:239]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (18:6C) [12:23:49:239]: MainEngineThread is returning 1618
=== Verbose logging stopped: 9/1/2020 12:23:49 ===
=== Verbose logging started: 9/1/2020 12:23:54 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (18:7C) [12:23:54:245]: Resetting cached policy values
MSI (c) (18:7C) [12:23:54:245]: Machine policy value 'Debug' is 0
MSI (c) (18:7C) [12:23:54:245]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\sau\Sophos AutoUpdate.msi
******* Action:
******* CommandLine: **********
MSI (c) (18:7C) [12:23:54:245]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (18:7C) [12:23:57:246]: Failed to grab execution mutex. System error 258.
MSI (c) (18:7C) [12:23:57:248]: Cloaking enabled.
MSI (c) (18:7C) [12:23:57:248]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (18:7C) [12:23:57:248]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (18:7C) [12:23:57:250]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (18:7C) [12:23:57:250]: MainEngineThread is returning 1618
=== Verbose logging stopped: 9/1/2020 12:23:57 ===
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m a j o r v e r s i o n n u m b e r : 1 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : U s i n g S o p h o s u p d a t i n g m o d e s ( M S I : N , V D L : 2 , I D E : 2 )
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 G e t P r o p e r t y ( ) - U n a b l e t o g e t p r o d u c t - t y p e
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : p r o d u c t T y p e : 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 P R O C E S S O R _ A R C H I T E C T U R E e n v i r o n m e n t v a r i a b l e i s : A M D 6 4
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : L o g g i n g s t a r t e d : i n s t a l l i n g / u p g r a d i n g S o p h o s A n t i - V i r u s
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : I n s t a l l F r o m P a t h i s : C : \ P r o g r a m D a t a \ S o p h o s \ A u t o U p d a t e \ c a c h e \ s a v x p \
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : I n s t a l l T o P a t h i s :
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m a j o r v e r s i o n n u m b e r : 1 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m i n o r v e r s i o n n u m b e r : 8
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : r e g i s t r y I n s t a l l T o [ o v e r r i d i n g I n s t a l l T o P a t h ] i s : C : \ P r o g r a m F i l e s ( x 8 6 ) \ S o p h o s \ S o p h o s A n t i - V i r u s \
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 C h e c k i n g f o r p r o b l e m v e r s i o n s o f S A V I - I n s t a l l p a t h : C : \ P r o g r a m F i l e s ( x 8 6 ) \ S o p h o s \ S o p h o s A n t i - V i r u s \
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 V e e x . d l l v e r s i o n ' 3 . 7 7 . 1 . 2 4 6 1 '
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I N F O : C h e c k i n g t h e v a l i d i t y o f t h e V D L m a n i f e s t f i l e .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I N F O : T h e m a n i f e s t f i l e h a s b e e n s u c c e s s f u l l y v a l i d a t e d .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I N F O : C h e c k i n g t h e v a l i d i t y o f t h e A p p F e e d m a n i f e s t f i l e .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I N F O : T h e m a n i f e s t f i l e h a s b e e n s u c c e s s f u l l y v a l i d a t e d .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 P R O C E S S O R _ A R C H I T E C T U R E e n v i r o n m e n t v a r i a b l e i s : A M D 6 4
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 s a v o n a c c e s s . s y s c h a n g e d - m u s t u p d a t e o n a c c e s s d r i v e r s
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ M a j o r U p d a t e = 1
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ D a t a O n l y U p d a t e = 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ O n A c c e s s D r i v e r U p d a t e = 1
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ B o o t D r i v e r U p d a t e = 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ C l a s s F i l t e r U p d a t e = 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ K M S D r i v e r U p d a t e = 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : M a n a g e d i n s t a l l ( f r o m S A U )
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : M S X M L 6 i s i n s t a l l e d
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 C h e c k f o r U I c h a n g e s
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 U I T y p e i n r e g i s t r y : f u l l
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 P r o d u c t T y p e i n r e g i s t r y : 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 C h e c k i n g t h e i n t e g r i t y o f t h e e x t a n t S A V i n s t a l l a t i o n ( n o U I i s 0 )
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 T h e i s a c o m p l e t e S A V i n s t a l l a t i o n . S k i p p i n g r e c o v e r y .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : P e r f o r m i n g m a j o r u p d a t e o f S o p h o s A n t i - V i r u s u s i n g m s i .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : U p d a t e i s s i g n a l l e d .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n K B 2 9 1 8 6 1 4 W o r k a r o u n d ( ) .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 L e a v i n g K B 2 9 1 8 6 1 4 W o r k a r o u n d ( ) .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 P r o d u c t c o d e o f S A V c u r r e n t l y i n s t a l l e d : { 0 1 4 2 3 8 6 5 - 5 5 1 B - 4 C 5 9 - B 4 4 A - C C 6 0 4 B C 2 1 A F 3 }
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 P r o d u c t c o d e o f S A V t o b e i n s t a l l e d : { 3 3 8 6 C 5 5 2 - 1 3 D 3 - 4 B 6 5 - 9 1 2 E - 8 8 5 6 E 0 3 E 8 E 8 B }
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 P r o d u c t C o d e c h a n g e d e t e c t e d
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S A V S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S A V A d m i n S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S o p h o s D e v i c e C o n t r o l S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S o p h o s B o o t D r i v e r t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ s e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ f i l t e r t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ c a l l o u t t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ u p d a t e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ u p d a t e _ 6 4 t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S o p h o s W e b C o n t r o l S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S A V O n A c c e s s t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S A V t o C o m p o n e n t L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : c o m p o n e n t S D C i s n o t r e g i s t e r e d - s k i p p i n g .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : c o m p o n e n t S C S i s n o t r e g i s t e r e d - s k i p p i n g .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S W I t o C o m p o n e n t L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S W C t o C o m p o n e n t L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : D e t e c t e d a n o l d e r v e r s i o n o f S A V , v e r s i o n 1 0 . 8 . D o i n g a m a j o r u p d a t e .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t U p d a t e B e g i n
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S A V S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S A V A d m i n S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S o p h o s D e v i c e C o n t r o l S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S o p h o s B o o t D r i v e r t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ s e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ f i l t e r t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ c a l l o u t t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : s w i _ u p d a t e w a s f o u n d t o n o t b e i n s t a l l e d - s k i p p i n g .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : s w i _ u p d a t e _ 6 4 w a s f o u n d t o n o t b e i n s t a l l e d - s k i p p i n g .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S o p h o s W e b C o n t r o l S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A l l s e r v i c e s r e p o r t e d t h e y a c c e p t s t o p c o n t r o l s .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S t o p S A V S e r v i c e
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 F o r c e S t o p S e r v i c e : S t o p p i n g S A V S e r v i c e
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 8 F o r c e S t o p S e r v i c e : C h e c k i n g i f s e r v i c e i s s t i l l r u n n i n g
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 8 W a i t F o r S A V S e r v i c e : W a l k i n g s y s t e m p r o c e s s e s . . .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 8 W a i t F o r S A V S e r v i c e : F o u n d p r o c e s s n a m e d S A V S e r v i c e . e x e , w a i t i n g . . .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 1 W a i t F o r S A V S e r v i c e : F i n i s h e d w a l k i n g s y s t e m p r o c e s s e s .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 1 I n f o : S t o p S A V A d m i n S e r v i c e
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 1 F o r c e S t o p S e r v i c e : S t o p p i n g S A V A d m i n S e r v i c e
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 1 F o r c e S t o p S e r v i c e : C h e c k i n g i f s e r v i c e i s s t i l l r u n n i n g
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 1 U n r e g i s t e r i n g f r o m S e c u r i t y C e n t e r
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : u n l o a d i n g S A V O n A c c e s s d r i v e r
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 U n l o a d F i l t e r D r i v e r : D r i v e r n o t l o a d e d , c o u n t = 1
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : C o n v e r t b o o t t a s k s
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : C o p y F i l e s T o T e m p
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 E R R O R : M o v e F o l d e r - f a i l e d t o m o v e s a v l o g s d i r e c t o r y , h r = 0 x 5
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : R e v e r t i n g t o c o p y i n g l o g s i n s t e a d o f m o v i n g t h e m
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : B a c k u p t h r e a t l i f e t i m e d a t a
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : u s e A M P P L i s s e t - s k i p p i n g b a c k u p o f W S C C l i e n t
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 U n r e g i s t e r A p p I n i t D L L : i n s t a l l D i r : C : \ P r o g r a m F i l e s ( x 8 6 ) \ S o p h o s \ S o p h o s A n t i - V i r u s \ \ , m o d u l e : s o p h o s _ d e t o u r e d . d l l , i s 6 4 b i t : N
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 U n r e g i s t e r A p p I n i t D L L : c o u l d n o t g e t s h o r t p a t h t o D L L . I t w i l l n o t b e u n r e g i s t e r e d .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : R e a d i n g o v e r r i d e s f r o m r e g i s t r y
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : G e t t i n g r e g i s t e r e d U I p l u g i n s f r o m r e g i s t r y
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : L o a d i n g t h e B y p a s s L o o p b a c k P o r t v a l u e f o r m r e g s i t r y
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : U n i n s t a l l S A V
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 U n a b l e t o d e l e t e r e g i s t r y k e y : S O F T W A R E \ S o p h o s \ T e l e m e t r y \ P l u g i n s !
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : R u n n i n g U n i n s t a l l o f p r e v i o u s v e r s i o n u s i n g c o m m a n d l i n e : m s i e x e c . e x e / x { 0 1 4 2 3 8 6 5 - 5 5 1 B - 4 C 5 9 - B 4 4 A - C C 6 0 4 B C 2 1 A F 3 } R E B O O T = R e a l l y S u p p r e s s / q n U N I N S T A L L D R I V E R S = 1 U N I N S T A L L C L A S S F I L T E R = 0 U N I N S T A L L B O O T D R I V E R S = 1 U N I N S T A L L K M S D R I V E R S = 1 C H E C K F O R S C F = 0 I N S T A L L I N G V E R S I O N = " 1 0 . 8 . 9 . 2 9 2 " / L v p " C : \ W I N D O W S \ T E M P \ S o p h o s A n t i - V i r u s U n i n s t a l l L o g _ 2 0 0 9 0 1 _ 0 5 1 8 0 4 . t x t "
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : F i n i s h e d w a i t i n g f o r U n i n s t a l l a t i o n o f p r e v i o u s v e r s i o n . S t a t u s r e t u r n e d w a s 0 l .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 W A R N I N G : S A V u n i n s t a l l f a i l e d w i t h e r r o r 1 6 1 8
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m a j o r v e r s i o n n u m b e r : 1 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m i n o r v e r s i o n n u m b e r : 8
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 E R R O R : U n i n s t a l l o f S A V , v e r s i o n = 1 0 . 8 . 4 , s u c c e e d e d b u t I s S A V I n s t a l l e d i s t r u e ( 1 0 . 8 . 4 ) .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : A d d e d S A V t o C o m p o n e n t L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : A d d e d S W I t o C o m p o n e n t L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : A d d e d S W C t o C o m p o n e n t L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : S e t U p d a t e F a i l e d
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m a j o r v e r s i o n n u m b e r : 1 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : U s i n g S o p h o s u p d a t i n g m o d e s ( M S I : N , V D L : 2 , I D E : 2 )
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 G e t P r o p e r t y ( ) - U n a b l e t o g e t p r o d u c t - t y p e
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : p r o d u c t T y p e : 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 P R O C E S S O R _ A R C H I T E C T U R E e n v i r o n m e n t v a r i a b l e i s : A M D 6 4
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : L o g g i n g s t a r t e d : i n s t a l l i n g / u p g r a d i n g S o p h o s A n t i - V i r u s
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : I n s t a l l F r o m P a t h i s : C : \ P r o g r a m D a t a \ S o p h o s \ A u t o U p d a t e \ c a c h e \ s a v x p \
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : I n s t a l l T o P a t h i s :
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m a j o r v e r s i o n n u m b e r : 1 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m i n o r v e r s i o n n u m b e r : 8
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I n f o : r e g i s t r y I n s t a l l T o [ o v e r r i d i n g I n s t a l l T o P a t h ] i s : C : \ P r o g r a m F i l e s ( x 8 6 ) \ S o p h o s \ S o p h o s A n t i - V i r u s \
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 C h e c k i n g f o r p r o b l e m v e r s i o n s o f S A V I - I n s t a l l p a t h : C : \ P r o g r a m F i l e s ( x 8 6 ) \ S o p h o s \ S o p h o s A n t i - V i r u s \
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 V e e x . d l l v e r s i o n ' 3 . 7 7 . 1 . 2 4 6 1 '
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 6 I N F O : C h e c k i n g t h e v a l i d i t y o f t h e V D L m a n i f e s t f i l e .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I N F O : T h e m a n i f e s t f i l e h a s b e e n s u c c e s s f u l l y v a l i d a t e d .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I N F O : C h e c k i n g t h e v a l i d i t y o f t h e A p p F e e d m a n i f e s t f i l e .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I N F O : T h e m a n i f e s t f i l e h a s b e e n s u c c e s s f u l l y v a l i d a t e d .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 P R O C E S S O R _ A R C H I T E C T U R E e n v i r o n m e n t v a r i a b l e i s : A M D 6 4
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 s a v o n a c c e s s . s y s c h a n g e d - m u s t u p d a t e o n a c c e s s d r i v e r s
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ M a j o r U p d a t e = 1
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ D a t a O n l y U p d a t e = 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ O n A c c e s s D r i v e r U p d a t e = 1
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ B o o t D r i v e r U p d a t e = 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ C l a s s F i l t e r U p d a t e = 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t u p P l u g i n : u p d a t e P r o p s . m _ K M S D r i v e r U p d a t e = 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : M a n a g e d i n s t a l l ( f r o m S A U )
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : M S X M L 6 i s i n s t a l l e d
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 C h e c k f o r U I c h a n g e s
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 U I T y p e i n r e g i s t r y : f u l l
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 P r o d u c t T y p e i n r e g i s t r y : 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 C h e c k i n g t h e i n t e g r i t y o f t h e e x t a n t S A V i n s t a l l a t i o n ( n o U I i s 0 )
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 T h e i s a c o m p l e t e S A V i n s t a l l a t i o n . S k i p p i n g r e c o v e r y .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : P e r f o r m i n g m a j o r u p d a t e o f S o p h o s A n t i - V i r u s u s i n g m s i .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : U p d a t e i s s i g n a l l e d .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n K B 2 9 1 8 6 1 4 W o r k a r o u n d ( ) .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 L e a v i n g K B 2 9 1 8 6 1 4 W o r k a r o u n d ( ) .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 P r o d u c t c o d e o f S A V c u r r e n t l y i n s t a l l e d : { 0 1 4 2 3 8 6 5 - 5 5 1 B - 4 C 5 9 - B 4 4 A - C C 6 0 4 B C 2 1 A F 3 }
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 P r o d u c t c o d e o f S A V t o b e i n s t a l l e d : { 3 3 8 6 C 5 5 2 - 1 3 D 3 - 4 B 6 5 - 9 1 2 E - 8 8 5 6 E 0 3 E 8 E 8 B }
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 P r o d u c t C o d e c h a n g e d e t e c t e d
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S A V S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S A V A d m i n S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S o p h o s D e v i c e C o n t r o l S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S o p h o s B o o t D r i v e r t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ s e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ f i l t e r t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ c a l l o u t t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ u p d a t e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ u p d a t e _ 6 4 t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S o p h o s W e b C o n t r o l S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S A V O n A c c e s s t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S A V t o C o m p o n e n t L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : c o m p o n e n t S D C i s n o t r e g i s t e r e d - s k i p p i n g .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : c o m p o n e n t S C S i s n o t r e g i s t e r e d - s k i p p i n g .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S W I t o C o m p o n e n t L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S W C t o C o m p o n e n t L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : D e t e c t e d a n o l d e r v e r s i o n o f S A V , v e r s i o n 1 0 . 8 . D o i n g a m a j o r u p d a t e .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S e t U p d a t e B e g i n
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S A V S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S A V A d m i n S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S o p h o s D e v i c e C o n t r o l S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S o p h o s B o o t D r i v e r t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ s e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ f i l t e r t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d s w i _ c a l l o u t t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : s w i _ u p d a t e w a s f o u n d t o n o t b e i n s t a l l e d - s k i p p i n g .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : s w i _ u p d a t e _ 6 4 w a s f o u n d t o n o t b e i n s t a l l e d - s k i p p i n g .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A d d e d S o p h o s W e b C o n t r o l S e r v i c e t o S e r v i c e s L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : A l l s e r v i c e s r e p o r t e d t h e y a c c e p t s t o p c o n t r o l s .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 I n f o : S t o p S A V S e r v i c e
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 7 F o r c e S t o p S e r v i c e : S t o p p i n g S A V S e r v i c e
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 8 F o r c e S t o p S e r v i c e : C h e c k i n g i f s e r v i c e i s s t i l l r u n n i n g
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 8 W a i t F o r S A V S e r v i c e : W a l k i n g s y s t e m p r o c e s s e s . . .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 7 : 5 8 W a i t F o r S A V S e r v i c e : F o u n d p r o c e s s n a m e d S A V S e r v i c e . e x e , w a i t i n g . . .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 1 W a i t F o r S A V S e r v i c e : F i n i s h e d w a l k i n g s y s t e m p r o c e s s e s .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 1 I n f o : S t o p S A V A d m i n S e r v i c e
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 1 F o r c e S t o p S e r v i c e : S t o p p i n g S A V A d m i n S e r v i c e
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 1 F o r c e S t o p S e r v i c e : C h e c k i n g i f s e r v i c e i s s t i l l r u n n i n g
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 1 U n r e g i s t e r i n g f r o m S e c u r i t y C e n t e r
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : u n l o a d i n g S A V O n A c c e s s d r i v e r
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 U n l o a d F i l t e r D r i v e r : D r i v e r n o t l o a d e d , c o u n t = 1
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : C o n v e r t b o o t t a s k s
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : C o p y F i l e s T o T e m p
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 E R R O R : M o v e F o l d e r - f a i l e d t o m o v e s a v l o g s d i r e c t o r y , h r = 0 x 5
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : R e v e r t i n g t o c o p y i n g l o g s i n s t e a d o f m o v i n g t h e m
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : B a c k u p t h r e a t l i f e t i m e d a t a
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : u s e A M P P L i s s e t - s k i p p i n g b a c k u p o f W S C C l i e n t
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 U n r e g i s t e r A p p I n i t D L L : i n s t a l l D i r : C : \ P r o g r a m F i l e s ( x 8 6 ) \ S o p h o s \ S o p h o s A n t i - V i r u s \ \ , m o d u l e : s o p h o s _ d e t o u r e d . d l l , i s 6 4 b i t : N
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 U n r e g i s t e r A p p I n i t D L L : c o u l d n o t g e t s h o r t p a t h t o D L L . I t w i l l n o t b e u n r e g i s t e r e d .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : R e a d i n g o v e r r i d e s f r o m r e g i s t r y
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : G e t t i n g r e g i s t e r e d U I p l u g i n s f r o m r e g i s t r y
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : L o a d i n g t h e B y p a s s L o o p b a c k P o r t v a l u e f o r m r e g s i t r y
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : U n i n s t a l l S A V
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 U n a b l e t o d e l e t e r e g i s t r y k e y : S O F T W A R E \ S o p h o s \ T e l e m e t r y \ P l u g i n s !
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 4 I n f o : R u n n i n g U n i n s t a l l o f p r e v i o u s v e r s i o n u s i n g c o m m a n d l i n e : m s i e x e c . e x e / x { 0 1 4 2 3 8 6 5 - 5 5 1 B - 4 C 5 9 - B 4 4 A - C C 6 0 4 B C 2 1 A F 3 } R E B O O T = R e a l l y S u p p r e s s / q n U N I N S T A L L D R I V E R S = 1 U N I N S T A L L C L A S S F I L T E R = 0 U N I N S T A L L B O O T D R I V E R S = 1 U N I N S T A L L K M S D R I V E R S = 1 C H E C K F O R S C F = 0 I N S T A L L I N G V E R S I O N = " 1 0 . 8 . 9 . 2 9 2 " / L v p " C : \ W I N D O W S \ T E M P \ S o p h o s A n t i - V i r u s U n i n s t a l l L o g _ 2 0 0 9 0 1 _ 0 5 1 8 0 4 . t x t "
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : F i n i s h e d w a i t i n g f o r U n i n s t a l l a t i o n o f p r e v i o u s v e r s i o n . S t a t u s r e t u r n e d w a s 0 l .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 W A R N I N G : S A V u n i n s t a l l f a i l e d w i t h e r r o r 1 6 1 8
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m a j o r v e r s i o n n u m b e r : 1 0
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : D e t e c t e d v e r s i o n o f S A V h a s m i n o r v e r s i o n n u m b e r : 8
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 E R R O R : U n i n s t a l l o f S A V , v e r s i o n = 1 0 . 8 . 4 , s u c c e e d e d b u t I s S A V I n s t a l l e d i s t r u e ( 1 0 . 8 . 4 ) .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : A d d e d S A V t o C o m p o n e n t L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : A d d e d S W I t o C o m p o n e n t L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : A d d e d S W C t o C o m p o n e n t L i s t .
2 0 2 0 - 0 9 - 0 1 1 2 : 1 8 : 0 7 I n f o : S e t U p d a t e F a i l e d
=== Verbose logging started: 9/1/2020 12:18:04 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\WINDOWS\SysWOW64\msiexec.exe ===
MSI (c) (24:04) [12:18:04:729]: Resetting cached policy values
MSI (c) (24:04) [12:18:04:729]: Machine policy value 'Debug' is 0
MSI (c) (24:04) [12:18:04:729]: ******* RunEngine:
******* Product: {01423865-551B-4C59-B44A-CC604BC21AF3}
******* Action:
******* CommandLine: **********
MSI (c) (24:04) [12:18:04:730]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (24:04) [12:18:07:731]: Failed to grab execution mutex. System error 258.
MSI (c) (24:04) [12:18:07:750]: Cloaking enabled.
MSI (c) (24:04) [12:18:07:750]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (24:04) [12:18:07:752]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (24:04) [12:18:07:754]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (24:04) [12:18:07:754]: MainEngineThread is returning 1618
=== Verbose logging stopped: 9/1/2020 12:18:07 ===
Hi Christian,
this is latest log file, i hope you can check from it.
Thank you
Hello fadli nurdin,
thanks, this helps. Already thought as much: SAV uninstall failed with error 1618 - another install/uninstall is in progress. Could be almost anything. There's more than one msiexec.exe process and they are stuck. One would try to determine what hangs (and perhaps why) but normally killing these processes does no harm and permits the Sophos Update to succeed..
If the issue recurs you have to find out what fails to (un-)install.
Christian