Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 3 subscribers
  • Views 13915 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can't get sophos to load onto a pc keeps coming up with errors. The following is from the log file.

EddieBudas

7/03/2016,9:54:37 AM,Information,------------------ Beginning installation of Sophos Anti-Virus and AutoUpdate ------------------,
7/03/2016,9:54:37 AM,Information,Setup version 3.3.0.79,
7/03/2016,9:54:37 AM,Information,Command line: c:\users\skeets\appdata\local\temp\sophos_bootstrap\setup.exe -server dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com -token ***************** -edxtimestamp 20160307T015412Z,
7/03/2016,9:54:37 AM,Information,Process security set successfully,
7/03/2016,9:54:37 AM,Information,Setup program was run from C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap,
7/03/2016,9:54:37 AM,Information,Checking system TMP paths.,
7/03/2016,9:54:37 AM,Information,Checking TMP...,
7/03/2016,9:54:37 AM,Information,Temp path for System found: 'C:\Windows\TEMP'.,
7/03/2016,9:54:37 AM,Information,Tamper protection not installed,
7/03/2016,9:54:37 AM,Information,Checking if Sophos Anti-Virus or Sophos AutoUpdate are installed...,
7/03/2016,9:54:37 AM,Information,Starting wizard to collect information from user...,
7/03/2016,9:54:39 AM,Information,Checking for internet connectivity...,
7/03/2016,9:54:42 AM,Success,Successfully connected to the URL http://dci.sophosupd.com/.,
7/03/2016,9:54:42 AM,Information,Checking for internet connectivity...,
7/03/2016,9:54:47 AM,Success,Successfully connected to the URL dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com/.../ep.,
7/03/2016,9:55:00 AM,Information,Starting the install sequence.,
7/03/2016,9:55:00 AM,Information,Checking for local third-party software...,
7/03/2016,9:55:00 AM,Information,Done.,
7/03/2016,9:55:00 AM,Information,Searching for third-party security software.,
7/03/2016,9:55:01 AM,Information,Return Code 10 from third-party security software removal tool.,
7/03/2016,9:55:01 AM,Information,No third-party security software found.,
7/03/2016,9:55:01 AM,Information,Installing MSI...,
7/03/2016,9:55:01 AM,Information,Copying ESCDP.dat...,
7/03/2016,9:55:01 AM,Information,SAV not present, skipping install.,
7/03/2016,9:55:01 AM,Information,Registering SAV with AutoUpdate...,
7/03/2016,9:55:01 AM,Information,Installing MCS...,
7/03/2016,9:55:01 AM,Information,Started installing C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi ...,
7/03/2016,9:55:03 AM,ERROR,There was an unexpected problem with the installation of Sophos Endpoint Security and Control. Details: Sophos Management Communications System installation failed with error 0x643,
7/03/2016,9:55:09 AM,Information,Sending EBS feedback to Sophos...,
7/03/2016,9:55:09 AM,Information,Sending data back to Sophos...,
7/03/2016,9:55:12 AM,Success,Successfully connected to the URL d1.sophosupd.com/.../x.xml.,
7/03/2016,9:55:12 AM,Information,------------------ Found errors during installation: 134 ------------------,
7/03/2016,9:55:12 AM,Information,------------------ Installation program finishing with code 134 ------------------,

Can someone please help

regards

Eddie



This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    Are you able to provide the MSI log for the failing MCS component?  I believe it should be:

    %temp%\sophos mcs install log.txt

    as you're running the installer as your account, so it's your temp directory rather that system temp, i.e. \windows\temp\.

    The return code (0x643 hex) is 1603 (decimal) which a very generic MSI error - "fatal error during installation".

    Typically, once the MSI log files is found, I'd search the log for all occurrences of the text:

    return value 3

    There maybe more than one, but hopefully, if you search the 10-15 lines above each occurrence, you might find a specific custom action that has failed that hopefully provides a more specific reason.  

    Regards,

    Jak

  • 0 in reply to jak

    Hi Jak

    This is out of my league however I have the log as follows:

    cheers

    === Verbose logging started: 7/03/2016  16:30:26  Build type: SHIP UNICODE 5.00.7601.00  Calling process: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\setup.exe ===
    MSI (c) (A8:38) [16:30:26:492]: Resetting cached policy values
    MSI (c) (A8:38) [16:30:26:492]: Machine policy value 'Debug' is 0
    MSI (c) (A8:38) [16:30:26:492]: ******* RunEngine:
               ******* Product: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi
               ******* Action:
               ******* CommandLine: **********
    MSI (c) (A8:38) [16:30:26:492]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (A8:38) [16:30:26:492]: Grabbed execution mutex.
    MSI (c) (A8:38) [16:30:26:694]: Cloaking enabled.
    MSI (c) (A8:38) [16:30:26:694]: Attempting to enable all disabled privileges before calling Install on Server
    MSI (c) (A8:38) [16:30:26:694]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (48:D4) [16:30:26:710]: Running installation inside multi-package transaction C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi
    MSI (s) (48:D4) [16:30:26:710]: Grabbed execution mutex.
    MSI (s) (48:18) [16:30:26:741]: Resetting cached policy values
    MSI (s) (48:18) [16:30:26:741]: Machine policy value 'Debug' is 0
    MSI (s) (48:18) [16:30:26:741]: ******* RunEngine:
               ******* Product: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi
               ******* Action:
               ******* CommandLine: **********
    MSI (s) (48:18) [16:30:26:741]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: User non-assigned for product: 180CE9A49F14DFC4783C4A2DC506DB5C
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: User non-assigned for product: 180CE9A49F14DFC4783C4A2DC506DB5C
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: User non-assigned for product: 1C36CB1B56D3DD84480C60AAD26ECF6D
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: User non-assigned for product: 1C36CB1B56D3DD84480C60AAD26ECF6D
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 000021599B0090400000000000F01FEC
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 000021599B0090400000000000F01FEC
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 00006109C80000000000000000F01FEC
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 00006109C80000000000000000F01FEC
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 00006109C80090400000000000F01FEC
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 00006109C80090400000000000F01FEC
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 00006109F80000000100000000F01FEC
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 00006109F80000000100000000F01FEC
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 008899398061F304A91524A0772DC352
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 008899398061F304A91524A0772DC352
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 01D4F6DBE92E3E944879D154A45FEE8F
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 01D4F6DBE92E3E944879D154A45FEE8F
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 043FB559973C5734AAF23FCB2B4A89BA
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 043FB559973C5734AAF23FCB2B4A89BA
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 05D94ECADC916A441B29649F5882B362
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 05D94ECADC916A441B29649F5882B362
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 1007C6B46D7C017319E3B52CF3EC196E
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 1007C6B46D7C017319E3B52CF3EC196E
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 15E5F6B1E5753964CB2A573475D070D6
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 15E5F6B1E5753964CB2A573475D070D6
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 18555481990E8AB4CBB63FB4F26006C0
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 18555481990E8AB4CBB63FB4F26006C0
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 188D52D43817F264598C99C01A49E4B0
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 188D52D43817F264598C99C01A49E4B0
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 1926E8D15D0BCE53481466615F760A7F
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 1926E8D15D0BCE53481466615F760A7F
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 1af2a8da7e60d0b429d7e6453b3d0182
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 1af2a8da7e60d0b429d7e6453b3d0182
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 1D5E3C0FEDA1E123187686FED06E995A
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 1D5E3C0FEDA1E123187686FED06E995A
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 1F7F1DFF9CA14CB49A8060686D53BAFA
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 1F7F1DFF9CA14CB49A8060686D53BAFA
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 1F88D051FA0487643AD9CB2E33F2435E
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 1F88D051FA0487643AD9CB2E33F2435E
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 3323515BEEA94DC4D9C2F4AA8C07BD2E
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 3323515BEEA94DC4D9C2F4AA8C07BD2E
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 35588CBA077879B44BE3A50946A7B536
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 35588CBA077879B44BE3A50946A7B536
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 375E4A382C2EBF64D96AA6B2BB5F5A88
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 375E4A382C2EBF64D96AA6B2BB5F5A88
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 384482F5D8EEE744EBEBB21FB3804CFB
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 384482F5D8EEE744EBEBB21FB3804CFB
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 3CB65822398FFBC4592F1E6FC32D1BBA
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 3CB65822398FFBC4592F1E6FC32D1BBA
    MSI (s) (48:18) [16:30:26:741]: Setting cached product context: machine assigned for product: 3CE12785E4D897B4CB1501452EDDDC01
    MSI (s) (48:18) [16:30:26:741]: Using cached product context: machine assigned for product: 3CE12785E4D897B4CB1501452EDDDC01
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 40DB144D845EE8F4794AB16631B5AA8A
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 40DB144D845EE8F4794AB16631B5AA8A
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 48D76F9207A3E65408A62503B12070B0
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 48D76F9207A3E65408A62503B12070B0
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 4D296F39D4C0DEE4B9EF56C7D19595EF
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 4D296F39D4C0DEE4B9EF56C7D19595EF
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 52FD6C4C95E0EE642BB4FD78948DFFA3
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 52FD6C4C95E0EE642BB4FD78948DFFA3
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 566152064B486D1448FBD605EC86DD80
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 566152064B486D1448FBD605EC86DD80
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 575EBE29E6C031740B5943BB29E7A56C
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 575EBE29E6C031740B5943BB29E7A56C
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 5B6E18EFB2567E043B2B17176C2F79AD
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 5B6E18EFB2567E043B2B17176C2F79AD
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 5E69CFBE9044E624887B56A0BD43E287
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 5E69CFBE9044E624887B56A0BD43E287
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 6414876250E69FF3395387C6C7F05BEB
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 6414876250E69FF3395387C6C7F05BEB
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 673538CFB3FFAAC4380E12843BBFC789
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 673538CFB3FFAAC4380E12843BBFC789
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 6761FBEE78FA6624398DC0413AC42471
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 6761FBEE78FA6624398DC0413AC42471
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 67BCB71E42995DB46B6D053D04B7E447
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 67BCB71E42995DB46B6D053D04B7E447
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 68AB67CA3301FFFF7706E0F060571500
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 68AB67CA3301FFFF7706E0F060571500
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 6C1C2E92A67D3D1489F0E643A69A6A8A
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 6C1C2E92A67D3D1489F0E643A69A6A8A
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 7040BB568CC47CD459E2E3FEFD5006A2
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 7040BB568CC47CD459E2E3FEFD5006A2
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 708E79243365A664A80CA54CD8134017
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 708E79243365A664A80CA54CD8134017
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 71460E5BCA4A52243BE6E7439C61617E
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 71460E5BCA4A52243BE6E7439C61617E
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 76C3ED2784BFE054B8AEE41B3B5B53D5
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 76C3ED2784BFE054B8AEE41B3B5B53D5
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 79DD22F7D652D194090947F3DA7CB9EB
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 79DD22F7D652D194090947F3DA7CB9EB
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 814AB0FE73FAE1745949AE5E19F36418
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 814AB0FE73FAE1745949AE5E19F36418
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 821B6C5004B15944C99B90B063B8AFA0
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 821B6C5004B15944C99B90B063B8AFA0
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 830FB9FB30EFD924B962F20ADF570625
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 830FB9FB30EFD924B962F20ADF570625
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 833DA5B8CBA7BCE4C9C286F748EADD1B
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 833DA5B8CBA7BCE4C9C286F748EADD1B
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 84639D8AF7F9D70419C5264064443CAD
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 84639D8AF7F9D70419C5264064443CAD
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 8BFDDD6597F70844985D521E5FA22BF8
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 8BFDDD6597F70844985D521E5FA22BF8
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 8C8AECAC83D315F459D3E1F63C43F6FE
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 8C8AECAC83D315F459D3E1F63C43F6FE
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 8EFB030F674880C45A3532D38EA0B21E
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 8EFB030F674880C45A3532D38EA0B21E
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 8F89BEBF4E463AF41AE5A4F924FF69E2
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 8F89BEBF4E463AF41AE5A4F924FF69E2
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 93B0BF4E199C7EE459DDA1A187753DD3
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 93B0BF4E199C7EE459DDA1A187753DD3
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 93BAD29AC2E44034A96BCB446EB8552E
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 93BAD29AC2E44034A96BCB446EB8552E
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 985E2342652631540BFBFE8A3E525D0F
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 985E2342652631540BFBFE8A3E525D0F
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: 99E80CA9B0328e74791254777B1F42AE
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: 99E80CA9B0328e74791254777B1F42AE
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: A089CE062ADB6BC44A720BA745894BAC
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: A089CE062ADB6BC44A720BA745894BAC
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: A97236C163FB258499421B79D856586A
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: A97236C163FB258499421B79D856586A
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: B2DAE8C7459A37F4AACF3CCE064DA9AD
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: B2DAE8C7459A37F4AACF3CCE064DA9AD
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: B7E5D71BDDAF4BE45B73BCE73B33D379
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: B7E5D71BDDAF4BE45B73BCE73B33D379
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: BE03F1969009A5748B9A1EFB9395F85D
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: BE03F1969009A5748B9A1EFB9395F85D
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: BE28D9C4100995E4F846B0EE5E4F3AA0
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: BE28D9C4100995E4F846B0EE5E4F3AA0
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: C025571B2A687A53689168CD7369889B
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: C025571B2A687A53689168CD7369889B
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: C0CC120F3C128304AAA4E6C3CB66C98E
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: C0CC120F3C128304AAA4E6C3CB66C98E
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: c1c4f01781cc94c4c8fb1542c0981a2a
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: c1c4f01781cc94c4c8fb1542c0981a2a
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: C951361A674B10541B36F37708A98C33
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: C951361A674B10541B36F37708A98C33
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: CFD2C1F142D260E3CB8B271543DA9F98
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: CFD2C1F142D260E3CB8B271543DA9F98
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: D20352A90C039D93DBF6126ECE614057
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: D20352A90C039D93DBF6126ECE614057
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: D43EEBEB2A48DDE4B8AE69CC45732136
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: D43EEBEB2A48DDE4B8AE69CC45732136
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: D73F0BFC7E2273F4F8EA3B915AA85C9B
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: D73F0BFC7E2273F4F8EA3B915AA85C9B
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: D935B019752F8C64C98BC659FE9FFC22
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: D935B019752F8C64C98BC659FE9FFC22
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: DA1C168692894ED468747458CEAE24A1
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: DA1C168692894ED468747458CEAE24A1
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: DBF576EC3C571F546BFAD85280165D63
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: DBF576EC3C571F546BFAD85280165D63
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: DC8A59DBF9D1DA5389A1E3975220E6BB
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: DC8A59DBF9D1DA5389A1E3975220E6BB
    MSI (s) (48:18) [16:30:26:757]: Setting cached product context: machine assigned for product: DE48D40557EA58F46AB8BBD3C43B1E96
    MSI (s) (48:18) [16:30:26:757]: Using cached product context: machine assigned for product: DE48D40557EA58F46AB8BBD3C43B1E96
    MSI (s) (48:18) [16:30:26:772]: Setting cached product context: machine assigned for product: E1810453A043A7E44B90136643272B7F
    MSI (s) (48:18) [16:30:26:772]: Using cached product context: machine assigned for product: E1810453A043A7E44B90136643272B7F
    MSI (s) (48:18) [16:30:26:772]: Setting cached product context: machine assigned for product: E5AE57E7AF9DBD546964EE5A5CFB164D
    MSI (s) (48:18) [16:30:26:772]: Using cached product context: machine assigned for product: E5AE57E7AF9DBD546964EE5A5CFB164D
    MSI (s) (48:18) [16:30:26:772]: Setting cached product context: machine assigned for product: EE97D8821D2AFA2459790BDACC328ADE
    MSI (s) (48:18) [16:30:26:772]: Using cached product context: machine assigned for product: EE97D8821D2AFA2459790BDACC328ADE
    MSI (s) (48:18) [16:30:26:772]: Setting cached product context: machine assigned for product: EFEE0228DC83E77358593193D847A0EC
    MSI (s) (48:18) [16:30:26:772]: Using cached product context: machine assigned for product: EFEE0228DC83E77358593193D847A0EC
    MSI (s) (48:18) [16:30:26:772]: Setting cached product context: machine assigned for product: F33B08125223E324BB1C7789FC3DDCF1
    MSI (s) (48:18) [16:30:26:772]: Using cached product context: machine assigned for product: F33B08125223E324BB1C7789FC3DDCF1
    MSI (s) (48:18) [16:30:26:772]: Setting cached product context: machine assigned for product: FB4A7DB746AEEFB49A3DF3CDB9E6CF32
    MSI (s) (48:18) [16:30:26:772]: Using cached product context: machine assigned for product: FB4A7DB746AEEFB49A3DF3CDB9E6CF32
    MSI (s) (48:18) [16:30:26:772]: Setting cached product context: machine assigned for product: FCCE9AF7ED2A1AD4FB3F1862D0DB6AF8
    MSI (s) (48:18) [16:30:26:772]: Using cached product context: machine assigned for product: FCCE9AF7ED2A1AD4FB3F1862D0DB6AF8
    MSI (s) (48:18) [16:30:26:772]: Setting cached product context: machine assigned for product: FFC5F60053DEFA14B9A25FB2F045B54F
    MSI (s) (48:18) [16:30:26:772]: Using cached product context: machine assigned for product: FFC5F60053DEFA14B9A25FB2F045B54F
    MSI (s) (48:18) [16:30:26:772]: SRSetRestorePoint skipped for this transaction.
    MSI (s) (48:18) [16:30:26:772]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
    MSI (s) (48:18) [16:30:26:772]: File will have security applied from OpCode.
    MSI (s) (48:18) [16:30:26:772]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi' against software restriction policy
    MSI (s) (48:18) [16:30:26:772]: SOFTWARE RESTRICTION POLICY: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi has a digital signature
    MSI (s) (48:18) [16:30:26:835]: SOFTWARE RESTRICTION POLICY: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi is permitted to run at the 'unrestricted' authorization level.
    MSI (s) (48:18) [16:30:26:835]: End dialog not enabled
    MSI (s) (48:18) [16:30:26:835]: Original package ==> C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi
    MSI (s) (48:18) [16:30:26:835]: Package we're running from ==> C:\Windows\Installer\17369d1.msi
    MSI (s) (48:18) [16:30:26:835]: APPCOMPAT: Compatibility mode property overrides found.
    MSI (s) (48:18) [16:30:26:835]: APPCOMPAT: looking for appcompat database entry with ProductCode '{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}'.
    MSI (s) (48:18) [16:30:26:835]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (48:18) [16:30:26:850]: MSCOREE not loaded loading copy from system32
    MSI (s) (48:18) [16:30:26:850]: Machine policy value 'TransformsSecure' is 0
    MSI (s) (48:18) [16:30:26:850]: User policy value 'TransformsAtSource' is 0
    MSI (s) (48:18) [16:30:26:850]: Machine policy value 'DisablePatch' is 0
    MSI (s) (48:18) [16:30:26:850]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (48:18) [16:30:26:850]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (48:18) [16:30:26:850]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (48:18) [16:30:26:850]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active
    MSI (s) (48:18) [16:30:26:850]: APPCOMPAT: looking for appcompat database entry with ProductCode '{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}'.
    MSI (s) (48:18) [16:30:26:850]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (48:18) [16:30:26:850]: Transforms are not secure.
    MSI (s) (48:18) [16:30:26:850]: Note: 1: 2205 2:  3: Control
    MSI (s) (48:18) [16:30:26:850]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\skeets\AppData\Local\Temp\Sophos MCS Install Log.txt'.
    MSI (s) (48:18) [16:30:26:850]: Command Line: REBOOT=REALLYSUPPRESS TOKEN=a929e2e535aa6e02d392e9b3b1ccbf57a7bfc422c4f5ac0d905a6277c3f006f0 SERVER=dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com PROXIES= PROXYCREDENTIALS= CURRENTDIRECTORY=C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap CLIENTUILEVEL=3 CLIENTPROCESSID=936
    MSI (s) (48:18) [16:30:26:850]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{3B5370F7-1522-4057-BAFD-F144139D5D1E}'.
    MSI (s) (48:18) [16:30:26:850]: Product Code passed to Engine.Initialize:           ''
    MSI (s) (48:18) [16:30:26:850]: Product Code from property table before transforms: '{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}'
    MSI (s) (48:18) [16:30:26:850]: Product Code from property table after transforms:  '{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}'
    MSI (s) (48:18) [16:30:26:850]: Product not registered: beginning first-time install
    MSI (s) (48:18) [16:30:26:850]: Product {1FFD3F20-5D24-4C9A-B9F6-A207A53CF179} is not managed.
    MSI (s) (48:18) [16:30:26:850]: MSI_LUA: Credential prompt not required, user is an admin
    MSI (s) (48:18) [16:30:26:850]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
    MSI (s) (48:18) [16:30:26:850]: Entering CMsiConfigurationManager::SetLastUsedSource.
    MSI (s) (48:18) [16:30:26:850]: User policy value 'SearchOrder' is 'nmu'
    MSI (s) (48:18) [16:30:26:850]: Adding new sources is allowed.
    MSI (s) (48:18) [16:30:26:850]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
    MSI (s) (48:18) [16:30:26:850]: Package name extracted from package path: 'Sophos Management Communications System.msi'
    MSI (s) (48:18) [16:30:26:850]: Package to be registered: 'Sophos Management Communications System.msi'
    MSI (s) (48:18) [16:30:26:850]: Note: 1: 2262 2: AdminProperties 3: -2147287038
    MSI (s) (48:18) [16:30:26:850]: Machine policy value 'DisableMsi' is 0
    MSI (s) (48:18) [16:30:26:850]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (48:18) [16:30:26:850]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (48:18) [16:30:26:850]: Product installation will be elevated because user is admin and product is being installed per-machine.
    MSI (s) (48:18) [16:30:26:850]: Running product '{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}' with elevated privileges: Product is assigned.
    MSI (s) (48:18) [16:30:26:850]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'REALLYSUPPRESS'.
    MSI (s) (48:18) [16:30:26:850]: PROPERTY CHANGE: Adding TOKEN property. Its value is 'a929e2e535aa6e02d392e9b3b1ccbf57a7bfc422c4f5ac0d905a6277c3f006f0'.
    MSI (s) (48:18) [16:30:26:850]: PROPERTY CHANGE: Adding SERVER property. Its value is 'dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com'.
    MSI (s) (48:18) [16:30:26:850]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap'.
    MSI (s) (48:18) [16:30:26:850]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
    MSI (s) (48:18) [16:30:26:850]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '936'.
    MSI (s) (48:18) [16:30:26:850]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
    MSI (s) (48:18) [16:30:26:866]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. Its value is '5b0486234feafa4d863712c1c7929e1d'.
    MSI (s) (48:18) [16:30:26:866]: RESTART MANAGER: Session opened.
    MSI (s) (48:18) [16:30:26:866]: TRANSFORMS property is now:
    MSI (s) (48:18) [16:30:26:866]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '300'.
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\AppData\Roaming
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\Favorites
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\AppData\Roaming\Microsoft\Windows\Network Shortcuts
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\Documents
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\AppData\Roaming\Microsoft\Windows\Recent
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\AppData\Roaming\Microsoft\Windows\SendTo
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\AppData\Roaming\Microsoft\Windows\Templates
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\ProgramData
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\AppData\Local
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\Pictures
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
    MSI (s) (48:18) [16:30:26:866]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
    MSI (s) (48:18) [16:30:26:882]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
    MSI (s) (48:18) [16:30:26:882]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (48:18) [16:30:26:882]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (48:18) [16:30:26:882]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
    MSI (s) (48:18) [16:30:26:882]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\AppData\Roaming\Microsoft\Windows\Start Menu
    MSI (s) (48:18) [16:30:26:882]: SHELL32::SHGetFolderPath returned: C:\Users\skeets\Desktop
    MSI (s) (48:18) [16:30:26:882]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
    MSI (s) (48:18) [16:30:26:882]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
    MSI (s) (48:18) [16:30:26:882]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
    MSI (s) (48:18) [16:30:26:882]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
    MSI (s) (48:18) [16:30:26:882]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
    MSI (s) (48:18) [16:30:26:882]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
    MSI (s) (48:18) [16:30:26:882]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (48:18) [16:30:26:882]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'skeets'.
    MSI (s) (48:18) [16:30:26:882]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (48:18) [16:30:26:882]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\17369d1.msi'.
    MSI (s) (48:18) [16:30:26:882]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi'.
    MSI (s) (48:18) [16:30:26:882]: Machine policy value 'MsiDisableEmbeddedUI' is 0
    MSI (s) (48:18) [16:30:26:882]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
    MSI (s) (48:18) [16:30:26:882]: Note: 1: 2205 2:  3: PatchPackage
    MSI (s) (48:18) [16:30:26:882]: Machine policy value 'DisableRollback' is 0
    MSI (s) (48:18) [16:30:26:882]: User policy value 'DisableRollback' is 0
    MSI (s) (48:18) [16:30:26:882]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
    === Logging started: 7/03/2016  16:30:26 ===
    MSI (s) (48:18) [16:30:26:882]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
    MSI (s) (48:18) [16:30:26:882]: Doing action: INSTALL
    MSI (s) (48:18) [16:30:26:882]: Note: 1: 2205 2:  3: ActionText
    Action start 16:30:26: INSTALL.
    MSI (s) (48:18) [16:30:26:882]: Running ExecuteSequence
    MSI (s) (48:18) [16:30:26:882]: Doing action: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF
    MSI (s) (48:18) [16:30:26:882]: Note: 1: 2205 2:  3: ActionText
    MSI (s) (48:18) [16:30:26:882]: PROPERTY CHANGE: Adding SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\Windows\SysWOW64\'.
    Action start 16:30:26: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF.
    MSI (s) (48:18) [16:30:26:882]: Doing action: FindRelatedProducts
    MSI (s) (48:18) [16:30:26:882]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:26: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF. Return value 1.
    Action start 16:30:26: FindRelatedProducts.
    MSI (s) (48:18) [16:30:26:882]: Doing action: AppSearch
    MSI (s) (48:18) [16:30:26:882]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:26: FindRelatedProducts. Return value 1.
    Action start 16:30:26: AppSearch.
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 1322 2:  
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 1322 2:  
    MSI (s) (48:18) [16:30:26:897]: Doing action: LaunchConditions
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:26: AppSearch. Return value 1.
    Action start 16:30:26: LaunchConditions.
    MSI (s) (48:18) [16:30:26:897]: Doing action: ValidateProductID
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:26: LaunchConditions. Return value 1.
    Action start 16:30:26: ValidateProductID.
    MSI (s) (48:18) [16:30:26:897]: Doing action: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:26: ValidateProductID. Return value 1.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\Windows\'.
    Action start 16:30:26: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4.
    MSI (s) (48:18) [16:30:26:897]: Doing action: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:26: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4. Return value 1.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\Windows\'.
    Action start 16:30:26: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF.
    MSI (s) (48:18) [16:30:26:897]: Doing action: CostInitialize
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:26: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF. Return value 1.
    MSI (s) (48:18) [16:30:26:897]: Machine policy value 'MaxPatchCacheSize' is 10
    MSI (s) (48:18) [16:30:26:897]: Baseline: Sorting baselines for {1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}.
    MSI (s) (48:18) [16:30:26:897]: Baseline: New baseline 2.0.0 from transaction.
    MSI (s) (48:18) [16:30:26:897]: Baseline: Sorted order Native: Order 0.
    MSI (s) (48:18) [16:30:26:897]: Baseline Data Table:
    MSI (s) (48:18) [16:30:26:897]: ProductCode: {1FFD3F20-5D24-4C9A-B9F6-A207A53CF179} Version: 2.0.0 Attributes: 0 PatchId: Native BaselineId: -2147483648 Order: 0
    MSI (s) (48:18) [16:30:26:897]: Baseline File Table:
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'I:\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Patch
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: PatchPackage
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: MsiPatchHeaders
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: __MsiPatchFileList
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: PatchPackage
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2228 2:  3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`  
    MSI (s) (48:18) [16:30:26:897]: Delta compression fallback method for this product transaction is 'MSI 2.0 legacy obsolescence'
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Patch
    Action start 16:30:26: CostInitialize.
    MSI (s) (48:18) [16:30:26:897]: Doing action: FileCost
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:26: CostInitialize. Return value 1.
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Class
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Extension
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: TypeLib
    Action start 16:30:26: FileCost.
    MSI (s) (48:18) [16:30:26:897]: Doing action: CostFinalize
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:26: FileCost. Return value 1.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Patch
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Condition
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'I:\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 property. Its value is 'I:\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding Sophos property. Its value is 'C:\Program Files (x86)\Sophos\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding ManagementCommunicationSystem property. Its value is 'C:\Program Files (x86)\Sophos\Management Communications System\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\Windows\winsxs\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\Windows\winsxs\Policies\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\Windows\winsxs\Manifests\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF property. Its value is 'C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\Windows\winsxs\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\Windows\winsxs\Policies\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\Windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 property. Its value is 'C:\Windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding SophosFolder property. Its value is 'C:\ProgramData\Sophos\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding Certificates property. Its value is 'C:\ProgramData\Sophos\Certificates\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding ManagementCommunicationsCertificatesFolder property. Its value is 'C:\ProgramData\Sophos\Certificates\Management Communications System\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding RemoteManagementSystemFolder property. Its value is 'C:\ProgramData\Sophos\Remote Management System\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding ThreeFolder property. Its value is 'C:\ProgramData\Sophos\Remote Management System\3\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding AgentFolder property. Its value is 'C:\ProgramData\Sophos\Remote Management System\3\Agent\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding AdapterStorageFolder property. Its value is 'C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding ManagementCommunicationsSystemFolder property. Its value is 'C:\ProgramData\Sophos\Management Communications System\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding EndpointFolder property. Its value is 'C:\ProgramData\Sophos\Management Communications System\Endpoint\'.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding ConfigurationFolder property. Its value is 'C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\'.
    MSI (s) (48:18) [16:30:26:897]: Target path resolution complete. Dumping Directory table...
    MSI (s) (48:18) [16:30:26:897]: Note: target paths subject to change (via custom actions or browsing)
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: TARGETDIR    , Object: I:\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: WindowsFolder    , Object: C:\Windows\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0    , Object: I:\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: ProgramFilesFolder    , Object: C:\Program Files (x86)\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: Sophos    , Object: C:\Program Files (x86)\Sophos\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: ManagementCommunicationSystem    , Object: C:\Program Files (x86)\Sophos\Management Communications System\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: INSTALLDIR    , Object: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Windows\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Windows\winsxs\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Windows\winsxs\Policies\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Windows\winsxs\Manifests\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Windows\SysWOW64\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4    , Object: C:\Windows\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4    , Object: C:\Windows\winsxs\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4    , Object: C:\Windows\winsxs\Policies\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4    , Object: C:\Windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4    , Object: C:\Windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: CommonAppDataFolder    , Object: C:\ProgramData\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: SophosFolder    , Object: C:\ProgramData\Sophos\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: Certificates    , Object: C:\ProgramData\Sophos\Certificates\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: ManagementCommunicationsCertificatesFolder    , Object: C:\ProgramData\Sophos\Certificates\Management Communications System\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: RemoteManagementSystemFolder    , Object: C:\ProgramData\Sophos\Remote Management System\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: ThreeFolder    , Object: C:\ProgramData\Sophos\Remote Management System\3\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: AgentFolder    , Object: C:\ProgramData\Sophos\Remote Management System\3\Agent\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: AdapterStorageFolder    , Object: C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: ManagementCommunicationsSystemFolder    , Object: C:\ProgramData\Sophos\Management Communications System\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: EndpointFolder    , Object: C:\ProgramData\Sophos\Management Communications System\Endpoint\
    MSI (s) (48:18) [16:30:26:897]: Dir (target): Key: ConfigurationFolder    , Object: C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
    MSI (s) (48:18) [16:30:26:897]: skipping installation of assembly component: {4C3A7A77-BFE9-309A-B576-33618A5B1A67} since the assembly already exists
    MSI (s) (48:18) [16:30:26:897]: skipping installation of assembly component: {B4606FC1-ADD6-3F4C-B9A7-BEA4CE07951E} since the assembly already exists
    Action start 16:30:26: CostFinalize.
    MSI (s) (48:18) [16:30:26:897]: Skipping action: IsUninstallAllowed (condition is false)
    MSI (s) (48:18) [16:30:26:897]: Doing action: InstallValidate
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:26: CostFinalize. Return value 1.
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Deleting MsiRestartManagerSessionKey property. Its current value is '5b0486234feafa4d863712c1c7929e1d'.
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Dialog
    MSI (s) (48:18) [16:30:26:897]: Feature: ProductFeature; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_Folder; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: RMS_Adapter_Storage_Folder; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_LicenceAgreements; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_McsClientApi; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_Mcslog4cplus; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_McsClient; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_McsAgent; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_McsAdapter; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_ScfDatFile; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_SofDatFile; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_McsEvents; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_EventLog; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_RegistrationFile; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_ConfigurationFile; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Certificate_Folder; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_Certificate1; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: MCS_Endpoint_Certificate2; Installed: Absent;   Request: Local;   Action: Local;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: uplevel.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4; Installed: Absent;   Request: Local;   Action: Null;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: downlevel_manifest.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4; Installed: Absent;   Request: Local;   Action: Null;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: uplevel.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF; Installed: Absent;   Request: Local;   Action: Null;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: nosxs.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF; Installed: Absent;   Request: Local;   Action: Null;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: downlevel_payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF; Installed: Absent;   Request: Local;   Action: Null;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: downlevel_manifest.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF; Installed: Absent;   Request: Local;   Action: Null;   Client State: Unknown
    MSI (s) (48:18) [16:30:26:897]: Component: __uplevel.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC465; Installed: Null;   Request: Local;   Action: Null;   Client State: Null
    MSI (s) (48:18) [16:30:26:897]: Component: __uplevel.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF65; Installed: Null;   Request: Local;   Action: Null;   Client State: Null
    MSI (s) (48:18) [16:30:26:897]: Component: __MCS_Endpoint_RegistrationFile65; Installed: Null;   Request: Local;   Action: Local;   Client State: Null
    MSI (s) (48:18) [16:30:26:897]: Component: __MCS_Endpoint_McsAgent65; Installed: Null;   Request: Local;   Action: Local;   Client State: Null
    MSI (s) (48:18) [16:30:26:897]: Component: __MCS_Endpoint_McsAdapter65; Installed: Null;   Request: Local;   Action: Local;   Client State: Null
    MSI (s) (48:18) [16:30:26:897]: Component: __MCS_Endpoint_EventLog65; Installed: Null;   Request: Local;   Action: Local;   Client State: Null
    MSI (s) (48:18) [16:30:26:897]: Component: __downlevel_manifest.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC465; Installed: Null;   Request: Local;   Action: Null;   Client State: Null
    MSI (s) (48:18) [16:30:26:897]: Component: __nosxs.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF65; Installed: Null;   Request: Local;   Action: Null;   Client State: Null
    MSI (s) (48:18) [16:30:26:897]: Component: __downlevel_payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF65; Installed: Null;   Request: Local;   Action: Null;   Client State: Null
    MSI (s) (48:18) [16:30:26:897]: Component: __downlevel_manifest.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF65; Installed: Null;   Request: Local;   Action: Null;   Client State: Null
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: BindImage
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: ProgId
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: PublishComponent
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: SelfReg
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Extension
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Font
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Shortcut
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Class
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: TypeLib
    Action start 16:30:26: InstallValidate.
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: _RemoveFilePath
    MSI (s) (48:18) [16:30:26:897]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: BindImage
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: ProgId
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: PublishComponent
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: SelfReg
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Extension
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Font
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Shortcut
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: Class
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: TypeLib
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2727 2:  
    MSI (s) (48:18) [16:30:26:897]: Note: 1: 2205 2:  3: FilesInUse
    MSI (s) (48:18) [16:30:26:913]: Note: 1: 2727 2:  
    MSI (s) (48:18) [16:30:26:913]: Doing action: SetARPINSTALLLOCATION
    MSI (s) (48:18) [16:30:26:913]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:26: InstallValidate. Return value 1.
    MSI (s) (48:18) [16:30:26:913]: PROPERTY CHANGE: Adding ARPINSTALLLOCATION property. Its value is 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\'.
    Action start 16:30:26: SetARPINSTALLLOCATION.
    MSI (s) (48:18) [16:30:26:913]: Doing action: InstallInitialize
    MSI (s) (48:18) [16:30:26:913]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:26: SetARPINSTALLLOCATION. Return value 1.
    MSI (s) (48:18) [16:30:26:913]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (48:18) [16:30:26:913]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (48:18) [16:30:26:913]: BeginTransaction: Locking Server
    MSI (s) (48:18) [16:30:26:913]: SRSetRestorePoint skipped for this transaction.
    MSI (s) (48:18) [16:30:26:913]: Server not locked: locking for product {1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}
    Action start 16:30:26: InstallInitialize.
    MSI (s) (48:18) [16:30:26:928]: Skipping action: ScheduleSetPermissions.Rollback (condition is false)
    MSI (s) (48:18) [16:30:26:928]: Skipping action: SetTokenPath (condition is false)
    MSI (s) (48:18) [16:30:26:928]: Skipping action: ReadToken (condition is false)
    MSI (s) (48:18) [16:30:26:928]: Doing action: ValidateToken
    MSI (s) (48:18) [16:30:26:928]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:26: InstallInitialize. Return value 1.
    MSI (s) (48:18) [16:30:26:928]: Creating MSIHANDLE (1) of type 790542 for thread 1560
    MSI (s) (48:20) [16:30:26:928]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6A6D.tmp, Entrypoint: ValidateSecurityToken
    MSI (s) (48:C4) [16:30:26:928]: Generating random cookie.
    MSI (s) (48:C4) [16:30:26:928]: Created Custom Action Server with PID 812 (0x32C).
    MSI (s) (48:48) [16:30:26:991]: Running as a service.
    MSI (s) (48:48) [16:30:26:991]: Hello, I'm your 32bit Impersonated custom action server.
    MSI (s) (48!0C) [16:30:27:006]: Creating MSIHANDLE (2) of type 790541 for thread 1804
    MSI (s) (48!0C) [16:30:27:006]: Creating MSIHANDLE (3) of type 790531 for thread 1804
    Action start 16:30:26: ValidateToken.
    MSI (s) (48!0C) [16:30:27:006]: Closing MSIHANDLE (3) of type 790531 for thread 1804
    MSI (s) (48!0C) [16:30:27:006]: Creating MSIHANDLE (4) of type 790531 for thread 1804
    ValidateSecurityToken:  Initialized.
    MSI (s) (48!0C) [16:30:27:006]: Closing MSIHANDLE (4) of type 790531 for thread 1804
    MSI (s) (48!0C) [16:30:27:006]: Closing MSIHANDLE (2) of type 790541 for thread 1804
    MSI (s) (48:20) [16:30:27:006]: Closing MSIHANDLE (1) of type 790542 for thread 1560
    ValidateSecurityToken:  Token : a929e2e535aa6e02d392e9b3b1ccbf57a7bfc422c4f5ac0d905a6277c3f006f0
    MSI (s) (48:18) [16:30:27:006]: Skipping action: SxsInstallCA (condition is false)
    MSI (s) (48:18) [16:30:27:006]: Doing action: AllocateRegistrySpace
    MSI (s) (48:18) [16:30:27:006]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: ValidateToken. Return value 1.
    Action start 16:30:27: AllocateRegistrySpace.
    MSI (s) (48:18) [16:30:27:006]: Doing action: ProcessComponents
    MSI (s) (48:18) [16:30:27:006]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: AllocateRegistrySpace. Return value 1.
    MSI (s) (48:18) [16:30:27:006]: Note: 1: 2205 2:  3: MsiPatchCertificate
    MSI (s) (48:18) [16:30:27:006]: LUA patching is disabled: missing MsiPatchCertificate table
    MSI (s) (48:18) [16:30:27:006]: Resolving source.
    MSI (s) (48:18) [16:30:27:006]: Resolving source to launched-from source.
    MSI (s) (48:18) [16:30:27:006]: Setting launched-from source as last-used.
    MSI (s) (48:18) [16:30:27:006]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\'.
    MSI (s) (48:18) [16:30:27:006]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\'.
    MSI (s) (48:18) [16:30:27:006]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}'.
    MSI (s) (48:18) [16:30:27:006]: SOURCEDIR ==> C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\
    MSI (s) (48:18) [16:30:27:006]: SOURCEDIR product ==> {1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}
    MSI (s) (48:18) [16:30:27:006]: SECREPAIR: CryptAcquireContext succeeded
    MSI (s) (48:18) [16:30:27:006]: Determining source type
    MSI (s) (48:18) [16:30:27:006]: Source type from package 'Sophos Management Communications System.msi': 0
    MSI (s) (48:18) [16:30:27:006]: SECREPAIR: Hash Database: C:\Windows\Installer\SourceHash{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}
    MSI (s) (48:18) [16:30:27:006]: Note: 1: 2262 2: SourceHash 3: -2147287038
    MSI (s) (48:18) [16:30:27:006]: SECREPAIR: New Hash Database creation complete.
    MSI (s) (48:18) [16:30:27:022]: SECREPAIR: Hash Value for the file:Sophos Management Communications System.msi is: tpADhgJQhc2cRZfopfest9VXeII3yGtxeMuH4B7LHMA=
    MSI (s) (48:18) [16:30:27:022]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\NOTICE.txt is: 71enz3+GhFRMcx9XfEI8GL32uaAjvGwwNMlOtYh+Fqw=
    MSI (s) (48:18) [16:30:27:022]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\McsClientApi.dll is: dnzBoTpCSt27GP32JHBcrky4Tm3JzX0DGPbPA5VvBXQ=
    MSI (s) (48:18) [16:30:27:022]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\log4cplus.dll is: Rndu8cm9oZUUIlg2o6tMTVTDVUaWcO79m0E803ap0IA=
    MSI (s) (48:18) [16:30:27:022]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\McsClient.exe is: aqw+k9u9v3GKHb3K0Udv2biEm1P2VsQWvRTYyb4K5SQ=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\McsAgent.exe is: /gEDBO1sIsRSB99n8ZLwf14Gau9Mg2qLwGCAaAlO6GA=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\McsAdapter.dll is: rE8LcEGU/WnJpOZmywDPQcxzoaBuwcbzYKXG34BdK3w=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\scf.dat is: xu71p3mhpXTkZyTzTTZBYy80HL2cX0BkkndNKmciOzg=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\sof.dat is: JABpGyQA0YKyUJsrzQ3IGA5mSYliu57II8FY2ztnSjA=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\McsEvents.dll is: tixyVLVtTu92j83Oqujb+Mx7Ef0i0b/bWLlucq210Cw=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Config\Config.xml is: qpCRv4RCBkk2qi9Iia4rsliFKxTSQFECIn1ehDlOC4A=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Certificates\Management Communications System\sophosca1.crt is: ZT4aWZAjseuIq5YTcjjZeFKaBwuCjdMwmAC9Ex2P+vw=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Certificates\Management Communications System\sophosca2.crt is: kubMvoDzHbaD5MMxtZnvyR5ZM2WviJVQSpNgwIcGDUA=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Certificates\Management Communications System\sophosca1.crl is: dQMLqkcAdTzTKf86ACvBQ7AQqOemLlz08+4HbuntzOg=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Certificates\Management Communications System\sophosca2.crl is: 3ixZwSoXdGELbAlSreEiAo+JLcFLxrVopEsiIIlzINw=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulpCRTx86\9.0.30729.6161.policy is: KKquu7BoK7J7aSjZUYNcg/LT3oe2CqK5TzNOZjTSwAA=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulpCRTx86\9.0.30729.6161.cat is: HOybKq3szYII5IV9K3sYWt5NzerQPcDxDTorbLs/wxg=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\dlpCRTx86\9.0.30729.6161.policy is: KKquu7BoK7J7aSjZUYNcg/LT3oe2CqK5TzNOZjTSwAA=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\dlpCRTx86\9.0.30729.6161.cat is: HOybKq3szYII5IV9K3sYWt5NzerQPcDxDTorbLs/wxg=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\msvcr90.dll is: jn/hofNVDEef/Yane8nRBobUf4cnAlu4kdj08CWTVMA=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\system32\msvcr90.dll is: jn/hofNVDEef/Yane8nRBobUf4cnAlu4kdj08CWTVMA=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\system32\msvcp90.dll is: BpGM+ZrSbNbPEGiBwNW9shLcC6xFSYBcn1kG49A9FSA=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\system32\msvcm90.dll is: enTaOJ+9EKcQwpTC6RTcbxjgXwKPB5WKL6U6xE8OS5A=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.manifest is: DIOMQmL5nydJWnwqG/Tsj0gtHJvCSTw8Gbk2DxoGuOw=
    MSI (s) (48:18) [16:30:27:038]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.cat is: 0CBq2NVC0hLWUTo7U7hHEd1gmhD7XorwXjYNnuiH/1Q=
    MSI (s) (48:18) [16:30:27:053]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\msvcp90.dll is: BpGM+ZrSbNbPEGiBwNW9shLcC6xFSYBcn1kG49A9FSA=
    MSI (s) (48:18) [16:30:27:053]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\msvcm90.dll is: enTaOJ+9EKcQwpTC6RTcbxjgXwKPB5WKL6U6xE8OS5A=
    MSI (s) (48:18) [16:30:27:053]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\dlCRTx86\msvcr90.dll is: jn/hofNVDEef/Yane8nRBobUf4cnAlu4kdj08CWTVMA=
    MSI (s) (48:18) [16:30:27:053]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\dlCRTx86\msvcp90.dll is: BpGM+ZrSbNbPEGiBwNW9shLcC6xFSYBcn1kG49A9FSA=
    MSI (s) (48:18) [16:30:27:053]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\dlCRTx86\msvcm90.dll is: enTaOJ+9EKcQwpTC6RTcbxjgXwKPB5WKL6U6xE8OS5A=
    MSI (s) (48:18) [16:30:27:053]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.manifest is: DIOMQmL5nydJWnwqG/Tsj0gtHJvCSTw8Gbk2DxoGuOw=
    MSI (s) (48:18) [16:30:27:053]: SECREPAIR: Hash Value for the file:Sophos\Management Communications System\Endpoint\Windows\winsxs\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43.cat is: 0CBq2NVC0hLWUTo7U7hHEd1gmhD7XorwXjYNnuiH/1Q=
    Action start 16:30:27: ProcessComponents.
    MSI (s) (48:18) [16:30:27:053]: Source path resolution complete. Dumping Directory table...
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: TARGETDIR    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\    , LongSubPath:     , ShortSubPath:
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: WindowsFolder    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\    , LongSubPath:     , ShortSubPath:
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\    , LongSubPath:     , ShortSubPath:
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: ProgramFilesFolder    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\    , LongSubPath:     , ShortSubPath:
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: Sophos    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\    , LongSubPath: Sophos\    , ShortSubPath:
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: ManagementCommunicationSystem    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\    , LongSubPath: Sophos\Management Communications System\    , ShortSubPath: Sophos\cxvnxvua\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: INSTALLDIR    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\    , LongSubPath: Sophos\Management Communications System\Endpoint\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\wve13-6h\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\Policies\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\Policies\bzvbofuw\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\Manifests\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\Manifests\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\cyt7vecb\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\dlCRTx86\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\dlCRTx86\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\dlCRTx86\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\ulCRTx86\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\ulCRTx86\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\system32\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\system32\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\system32\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\Policies\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\dlpCRTx86\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\Policies\dlpCRTx86\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\Policies\jhqz8wka\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Windows\winsxs\ulpCRTx86\    , LongSubPath: Sophos\Management Communications System\Endpoint\Windows\winsxs\ulpCRTx86\    , ShortSubPath: Sophos\cxvnxvua\Endpoint\Windows\winsxs\uokrlnxb\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: CommonAppDataFolder    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\    , LongSubPath:     , ShortSubPath:
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: SophosFolder    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\    , LongSubPath: Sophos\    , ShortSubPath:
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: Certificates    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\    , LongSubPath: Sophos\Certificates\    , ShortSubPath: Sophos\kxkdnwxp\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: ManagementCommunicationsCertificatesFolder    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\Management Communications System\    , LongSubPath: Sophos\Certificates\Management Communications System\    , ShortSubPath: Sophos\kxkdnwxp\dicqakrm\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: RemoteManagementSystemFolder    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Remote Management System\    , LongSubPath: Sophos\Remote Management System\    , ShortSubPath: Sophos\hae2uuyn\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: ThreeFolder    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Remote Management System\3\    , LongSubPath: Sophos\Remote Management System\3\    , ShortSubPath: Sophos\hae2uuyn\3\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: AgentFolder    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Remote Management System\3\Agent\    , LongSubPath: Sophos\Remote Management System\3\Agent\    , ShortSubPath: Sophos\hae2uuyn\3\Agent\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: AdapterStorageFolder    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Remote Management System\3\Agent\AdapterStorage\    , LongSubPath: Sophos\Remote Management System\3\Agent\AdapterStorage\    , ShortSubPath: Sophos\hae2uuyn\3\Agent\14x9gslg\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: ManagementCommunicationsSystemFolder    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\    , LongSubPath: Sophos\Management Communications System\    , ShortSubPath: Sophos\rklb9z6t\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: EndpointFolder    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\    , LongSubPath: Sophos\Management Communications System\Endpoint\    , ShortSubPath: Sophos\rklb9z6t\Endpoint\
    MSI (s) (48:18) [16:30:27:053]: Dir (source): Key: ConfigurationFolder    , Object: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Config\    , LongSubPath: Sophos\Management Communications System\Endpoint\Config\    , ShortSubPath: Sophos\rklb9z6t\Endpoint\Config\
    MSI (s) (48:18) [16:30:27:053]: Note: 1: 2205 2:  3: ActionText
    MSI (s) (48:18) [16:30:27:053]: Note: 1: 2205 2:  3: ActionText
    MSI (s) (48:18) [16:30:27:053]: Note: 1: 2205 2:  3: ActionText
    MSI (s) (48:18) [16:30:27:069]: Doing action: MsiUnpublishAssemblies
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: ProcessComponents. Return value 1.
    Action start 16:30:27: MsiUnpublishAssemblies.
    MSI (s) (48:18) [16:30:27:069]: Doing action: UnpublishFeatures
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: MsiUnpublishAssemblies. Return value 1.
    Action start 16:30:27: UnpublishFeatures.
    MSI (s) (48:18) [16:30:27:069]: Doing action: StopServices
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: UnpublishFeatures. Return value 1.
    Action start 16:30:27: StopServices.
    MSI (s) (48:18) [16:30:27:069]: Doing action: DeleteServices
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: StopServices. Return value 1.
    Action start 16:30:27: DeleteServices.
    MSI (s) (48:18) [16:30:27:069]: Doing action: RemoveRegistryValues
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: DeleteServices. Return value 1.
    Action start 16:30:27: RemoveRegistryValues.
    MSI (s) (48:18) [16:30:27:069]: Doing action: RemoveIniValues
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: RemoveRegistryValues. Return value 1.
    Action start 16:30:27: RemoveIniValues.
    MSI (s) (48:18) [16:30:27:069]: Doing action: RemoveFiles
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: RemoveIniValues. Return value 1.
    Action start 16:30:27: RemoveFiles.
    MSI (s) (48:18) [16:30:27:069]: Skipping action: DeleteAdapterStorage_SetProps (condition is false)
    MSI (s) (48:18) [16:30:27:069]: Skipping action: DeleteAdapterStorage (condition is false)
    MSI (s) (48:18) [16:30:27:069]: Doing action: RemoveFolders
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: RemoveFiles. Return value 1.
    Action start 16:30:27: RemoveFolders.
    MSI (s) (48:18) [16:30:27:069]: Doing action: CreateFolders
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: RemoveFolders. Return value 1.
    Action start 16:30:27: CreateFolders.
    MSI (s) (48:18) [16:30:27:069]: Doing action: InstallFiles
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: CreateFolders. Return value 1.
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'LicenceAgreements' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'McsClientApi' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'Mcslog4cplus' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'Mcsclient' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'McsAgent' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'McsAdapter' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'ScfDatFile' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'SofDatFile' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'McsEvents' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'ConfigurationFile' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'sophosca1.crt' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'sophosca2.crt' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'sophosca1.crl' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'sophosca2.crl' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'ul_policy.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'ul_catalog.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'policy.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'catalog.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'ul_msvcr90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'nosxs_msvcr90.dll.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'nosxs_msvcp90.dll.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'nosxs_msvcm90.dll.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'ul_manifest.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'ul_catalog.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'ul_msvcp90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'ul_msvcm90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'msvcr90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'msvcp90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'msvcm90.dll.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'manifest.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
    MSI (s) (48:18) [16:30:27:069]: The file represented by File table key 'catalog.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF' has no eligible binary patches
    Action start 16:30:27: InstallFiles.
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: Patch
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2228 2:  3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence`
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: MsiPatchHeaders
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2228 2:  3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ?
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: PatchPackage
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: MsiPatchHeaders
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: PatchPackage
    MSI (s) (48:18) [16:30:27:069]: Doing action: SetRestoreConfig
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: InstallFiles. Return value 1.
    MSI (s) (48:18) [16:30:27:069]: PROPERTY CHANGE: Adding RestoreConfig property. Its value is 'C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml'.
    Action start 16:30:27: SetRestoreConfig.
    MSI (s) (48:18) [16:30:27:069]: Doing action: RestoreConfig
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: SetRestoreConfig. Return value 1.
    Action start 16:30:27: RestoreConfig.
    MSI (s) (48:18) [16:30:27:069]: Doing action: SetUpdateConfig
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: RestoreConfig. Return value 1.
    MSI (s) (48:18) [16:30:27:069]: PROPERTY CHANGE: Adding UpdateConfig property. Its value is 'C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com,,'.
    Action start 16:30:27: SetUpdateConfig.
    MSI (s) (48:18) [16:30:27:069]: Doing action: UpdateConfig
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: SetUpdateConfig. Return value 1.
    Action start 16:30:27: UpdateConfig.
    MSI (s) (48:18) [16:30:27:069]: Doing action: WriteRegistryValues
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: UpdateConfig. Return value 1.
    Action start 16:30:27: WriteRegistryValues.
    MSI (s) (48:18) [16:30:27:069]: Doing action: WriteIniValues
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: WriteRegistryValues. Return value 1.
    Action start 16:30:27: WriteIniValues.
    MSI (s) (48:18) [16:30:27:069]: Doing action: InstallServices
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: WriteIniValues. Return value 1.
    Action start 16:30:27: InstallServices.
    MSI (s) (48:18) [16:30:27:069]: Doing action: SchedServiceConfig
    MSI (s) (48:18) [16:30:27:069]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: InstallServices. Return value 1.
    MSI (s) (48:18) [16:30:27:069]: Creating MSIHANDLE (5) of type 790542 for thread 1560
    MSI (s) (48:80) [16:30:27:069]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6AFB.tmp, Entrypoint: SchedServiceConfig
    MSI (s) (48!F4) [16:30:27:100]: Creating MSIHANDLE (6) of type 790541 for thread 4084
    MSI (s) (48!F4) [16:30:27:100]: Creating MSIHANDLE (7) of type 790540 for thread 4084
    MSI (s) (48!F4) [16:30:27:100]: Creating MSIHANDLE (8) of type 790531 for thread 4084
    MSI (s) (48!F4) [16:30:27:100]: Creating MSIHANDLE (9) of type 790531 for thread 4084
    MSI (s) (48!F4) [16:30:27:100]: Closing MSIHANDLE (9) of type 790531 for thread 4084
    MSI (s) (48!F4) [16:30:27:100]: Closing MSIHANDLE (8) of type 790531 for thread 4084
    MSI (s) (48!F4) [16:30:27:100]: Creating MSIHANDLE (10) of type 790531 for thread 4084
    MSI (s) (48!F4) [16:30:27:100]: Creating MSIHANDLE (11) of type 790531 for thread 4084
    MSI (s) (48!F4) [16:30:27:100]: Closing MSIHANDLE (11) of type 790531 for thread 4084
    MSI (s) (48!F4) [16:30:27:100]: Closing MSIHANDLE (10) of type 790531 for thread 4084
    MSI (s) (48!F4) [16:30:27:100]: PROPERTY CHANGE: Adding RollbackServiceConfig property. Its value is 'SchedServiceConfig'.
    MSI (s) (48!F4) [16:30:27:100]: Creating MSIHANDLE (12) of type 790531 for thread 4084
    Action start 16:30:27: SchedServiceConfig.
    MSI (s) (48!F4) [16:30:27:100]: Closing MSIHANDLE (12) of type 790531 for thread 4084
    MSI (s) (48!F4) [16:30:27:100]: Doing action: RollbackServiceConfig
    MSI (s) (48!F4) [16:30:27:100]: Note: 1: 2205 2:  3: ActionText
    Action start 16:30:27: RollbackServiceConfig.
    MSI (s) (48!F4) [16:30:27:100]: PROPERTY CHANGE: Adding ExecServiceConfig property. Its value is 'SchedServiceConfig€Sophos MCS Agent€0€restart€restart€restart€1€60€€€Sophos MCS Client€0€restart€restart€restart€1€60€€'.
    MSI (s) (48!F4) [16:30:27:100]: Creating MSIHANDLE (13) of type 790531 for thread 4084
    Action ended 16:30:27: RollbackServiceConfig. Return value 1.
    MSI (s) (48!F4) [16:30:27:100]: Closing MSIHANDLE (13) of type 790531 for thread 4084
    MSI (s) (48!F4) [16:30:27:100]: Doing action: ExecServiceConfig
    MSI (s) (48!F4) [16:30:27:100]: Note: 1: 2205 2:  3: ActionText
    Action start 16:30:27: ExecServiceConfig.
    MSI (s) (48!F4) [16:30:27:100]: Closing MSIHANDLE (6) of type 790541 for thread 4084
    MSI (s) (48!F4) [16:30:27:100]: Closing MSIHANDLE (7) of type 790540 for thread 4084
    MSI (s) (48:80) [16:30:27:100]: Closing MSIHANDLE (5) of type 790542 for thread 1560
    Action ended 16:30:27: ExecServiceConfig. Return value 1.
    MSI (s) (48:18) [16:30:27:100]: Doing action: StartServices
    MSI (s) (48:18) [16:30:27:100]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: SchedServiceConfig. Return value 1.
    Action start 16:30:27: StartServices.
    MSI (s) (48:18) [16:30:27:100]: Doing action: RegisterUser
    MSI (s) (48:18) [16:30:27:100]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: StartServices. Return value 1.
    Action start 16:30:27: RegisterUser.
    MSI (s) (48:18) [16:30:27:100]: Doing action: RegisterProduct
    MSI (s) (48:18) [16:30:27:100]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: RegisterUser. Return value 1.
    Action start 16:30:27: RegisterProduct.
    MSI (s) (48:18) [16:30:27:100]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
    MSI (s) (48:18) [16:30:27:100]: Doing action: MsiPublishAssemblies
    MSI (s) (48:18) [16:30:27:100]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: RegisterProduct. Return value 1.
    Action start 16:30:27: MsiPublishAssemblies.
    MSI (s) (48:18) [16:30:27:116]: Doing action: PublishFeatures
    MSI (s) (48:18) [16:30:27:116]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: MsiPublishAssemblies. Return value 1.
    Action start 16:30:27: PublishFeatures.
    MSI (s) (48:18) [16:30:27:116]: Doing action: PublishProduct
    MSI (s) (48:18) [16:30:27:116]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: PublishFeatures. Return value 1.
    Action start 16:30:27: PublishProduct.
    MSI (s) (48:18) [16:30:27:116]: Doing action: InstallExecute
    MSI (s) (48:18) [16:30:27:116]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: PublishProduct. Return value 1.
    MSI (s) (48:18) [16:30:27:116]: Running Script: C:\Windows\Installer\MSI6AEB.tmp
    MSI (s) (48:18) [16:30:27:116]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'.
    MSI (s) (48:18) [16:30:27:116]: Machine policy value 'DisableRollback' is 0
    MSI (s) (48:18) [16:30:27:116]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (48:18) [16:30:27:116]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1214743502,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
    Action start 16:30:27: InstallExecute.
    MSI (s) (48:18) [16:30:27:116]: Executing op: ProductInfo(ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},ProductName=Sophos Management Communications System,PackageName=Sophos Management Communications System.msi,Language=1033,Version=33554432,Assignment=1,ObsoleteArg=0,ProductIcon=Sophos_MCS_Icon,,PackageCode={3B5370F7-1522-4057-BAFD-F144139D5D1E},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
    MSI (s) (48:18) [16:30:27:116]: Executing op: DialogInfo(Type=0,Argument=1033)
    MSI (s) (48:18) [16:30:27:116]: Executing op: DialogInfo(Type=1,Argument=Sophos Management Communications System)
    MSI (s) (48:18) [16:30:27:131]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
    MSI (s) (48:18) [16:30:27:131]: Executing op: SetBaseline(Baseline=0,)
    MSI (s) (48:18) [16:30:27:131]: Executing op: SetBaseline(Baseline=1,)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ProgressTotal(Total=23,Type=1,ByteEquivalent=24000)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={77BF22C2-1C83-4AAF-81BE-5D1ACAC0DA5C},KeyPath=C:\ProgramData\Sophos\Management Communications System\Endpoint\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={8C4712AB-C080-4C8F-9EFE-91E4DA71C1B0},KeyPath=C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={7C62E8CD-A070-40F8-8A2D-69538D008931},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\NOTICE.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\NOTICE.txt' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={EEA9A02F-9A1C-4C63-83BB-CA026D0A8365},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClientApi.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClientApi.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={8A73E0EB-4580-4EC3-BC94-8893A743D682},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\log4cplus.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\log4cplus.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={D66C9DF2-7DD5-4A95-B2CE-94C485C38E5C},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClient.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={8F637D75-4651-4EF6-91F6-BD9AB5912889},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAgent.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAgent.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={D1D179EA-7354-46C1-A560-1A30F654B1CF},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={D556A206-6111-41F1-92BD-CB0AE00D6213},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\scf.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\scf.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={CEFA8768-F729-40B0-B200-0FD59832D7F9},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\sof.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\sof.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={516B534B-FD68-4D0F-B1D0-BBA72B3D3686},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={B9AE2D52-29D9-461D-9521-0FC49E06353C},KeyPath=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={28803574-A8B2-4605-867C-B169F8CCBB7C},KeyPath=01:\Software\Sophos\Management Communications System\Registration\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={349D255F-61CD-4F4C-93F9-E25794CA5453},KeyPath=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={349D255F-61CD-4F4C-93F9-E25794CA5453},KeyPath=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={6122DB9B-B642-441B-98C8-347AFF15C46A},KeyPath=C:\ProgramData\Sophos\Certificates\Management Communications System\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={FF4C7B96-DAD8-4D78-873C-0BDBAEDB284D},KeyPath=C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={E328F4A6-7B8C-43E8-8617-412B21315D23},KeyPath=C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={B4606FC1-ADD6-3F4C-B9A7-BEA4CE07951E},KeyPath=>\policy.9.0.Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32-policy",State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={53426A52-E29B-397A-9556-8CEC984F99BC},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:131]: Executing op: ComponentRegister(ComponentId={4C3A7A77-BFE9-309A-B576-33618A5B1A67},KeyPath=>msvcr90.dll\Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32",State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:147]: Executing op: ComponentRegister(ComponentId={C76B5F65-5D5F-3843-9A16-F9EE6C874D8F},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:147]: Executing op: ComponentRegister(ComponentId={DB029D72-9CB0-30DC-88B5-B10620D9DD1A},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:147]: Executing op: ComponentRegister(ComponentId={578BDEEE-701D-31A0-900B-6536599C12B3},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
    MSI (s) (48:18) [16:30:27:147]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1])
    MSI (s) (48:18) [16:30:27:147]: Executing op: ProgressTotal(Total=2,Type=1,ByteEquivalent=1300000)
    MSI (s) (48:18) [16:30:27:147]: Executing op: ServiceControl(,Name=Sophos MCS Client,Action=2,Wait=1,)
    MSI (s) (48:18) [16:30:27:147]: Executing op: ServiceControl(,Name=Sophos MCS Agent,Action=2,Wait=1,)
    MSI (s) (48:18) [16:30:27:147]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])
    MSI (s) (48:18) [16:30:27:147]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Management Communications System\Endpoint\,Foreign=0,,)
    MSI (s) (48:18) [16:30:27:147]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\,Foreign=0,,)
    MSI (s) (48:18) [16:30:27:147]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\,Foreign=0,,)
    MSI (s) (48:18) [16:30:27:147]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Certificates\Management Communications System\,Foreign=0,,)
    MSI (s) (48:18) [16:30:27:147]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1],  Directory: [9],  Size: [6])
    MSI (s) (48:18) [16:30:27:147]: Executing op: ProgressTotal(Total=2152357,Type=0,ByteEquivalent=1)
    MSI (s) (48:18) [16:30:27:147]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\)
    MSI (s) (48:18) [16:30:27:147]: Executing op: SetSourceFolder(Folder=1\Sophos\rklb9z6t\Endpoint\Config\|Sophos\Management Communications System\Endpoint\Config\)
    MSI (s) (48:18) [16:30:27:147]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,,BytesPerTick=65536,CopierType=0,,,,,,IsFirstPhysicalMedia=1)
    MSI (s) (48:18) [16:30:27:147]: Executing op: FileCopy(SourceName=Config.xml,SourceCabKey=ConfigurationFile,DestName=Config.xml,Attributes=512,FileSize=123,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=2003253429,HashPart2=-1872430899,HashPart3=-665276381,HashPart4=851854976,,)
    MSI (s) (48:18) [16:30:27:147]: File: C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:147]: Source for file 'Config.xml' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\Config\'.
    MSI (s) (48:18) [16:30:27:162]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\)
    MSI (s) (48:18) [16:30:27:162]: Executing op: SetSourceFolder(Folder=1\Sophos\cxvnxvua\Endpoint\|Sophos\Management Communications System\Endpoint\)
    MSI (s) (48:18) [16:30:27:162]: Executing op: FileCopy(SourceName=NOTICE.txt,SourceCabKey=LicenceAgreements,DestName=NOTICE.txt,Attributes=512,FileSize=25690,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1047785942,HashPart2=-1888213989,HashPart3=1554608402,HashPart4=1941224886,,)
    MSI (s) (48:18) [16:30:27:162]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\NOTICE.txt;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:162]: Source for file 'NOTICE.txt' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
    MSI (s) (48:18) [16:30:27:162]: Executing op: FileCopy(SourceName=cgjwddxm.dll|McsAdapter.dll,SourceCabKey=McsAdapter,DestName=McsAdapter.dll,Attributes=512,FileSize=212776,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.0.0.145,Language=2057,InstallMode=58982400,,,,,,,)
    MSI (s) (48:18) [16:30:27:162]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAdapter.dll;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:162]: Source for file 'McsAdapter.dll' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
    MSI (s) (48:18) [16:30:27:162]: Executing op: FileCopy(SourceName=McsAgent.exe,SourceCabKey=McsAgent,DestName=McsAgent.exe,Attributes=512,FileSize=330536,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.0.0.145,Language=2057,InstallMode=58982400,,,,,,,)
    MSI (s) (48:18) [16:30:27:162]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAgent.exe;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:162]: Source for file 'McsAgent.exe' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
    MSI (s) (48:18) [16:30:27:162]: Executing op: FileCopy(SourceName=k4kj-bhc.exe|McsClient.exe,SourceCabKey=Mcsclient,DestName=McsClient.exe,Attributes=512,FileSize=909608,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.0.0.145,Language=2057,InstallMode=58982400,,,,,,,)
    MSI (s) (48:18) [16:30:27:162]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClient.exe;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:162]: Source for file 'McsClient.exe' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
    MSI (s) (48:18) [16:30:27:162]: Executing op: FileCopy(SourceName=uvi1bgwr.dll|McsClientApi.dll,SourceCabKey=McsClientApi,DestName=McsClientApi.dll,Attributes=512,FileSize=321320,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.0.0.145,Language=2057,InstallMode=58982400,,,,,,,)
    MSI (s) (48:18) [16:30:27:162]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClientApi.dll;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:162]: Source for file 'McsClientApi.dll' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
    MSI (s) (48:18) [16:30:27:162]: Executing op: FileCopy(SourceName=gozwyxzw.dll|McsEvents.dll,SourceCabKey=McsEvents,DestName=McsEvents.dll,Attributes=512,FileSize=36648,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.0.0.145,Language=2057,InstallMode=58982400,,,,,,,)
    MSI (s) (48:18) [16:30:27:162]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:162]: Source for file 'McsEvents.dll' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
    MSI (s) (48:18) [16:30:27:162]: Executing op: FileCopy(SourceName=rzn1jlru.dll|log4cplus.dll,SourceCabKey=Mcslog4cplus,DestName=log4cplus.dll,Attributes=512,FileSize=306472,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.0.4.11,Language=2057,InstallMode=58982400,,,,,,,)
    MSI (s) (48:18) [16:30:27:162]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\log4cplus.dll;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:162]: Source for file 'log4cplus.dll' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
    MSI (s) (48:18) [16:30:27:178]: Executing op: FileCopy(SourceName=scf.dat,SourceCabKey=ScfDatFile,DestName=scf.dat,Attributes=512,FileSize=2931,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1889327467,HashPart2=-687138333,HashPart3=-131907316,HashPart4=1646382487,,)
    MSI (s) (48:18) [16:30:27:178]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\scf.dat;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:178]: Source for file 'scf.dat' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
    MSI (s) (48:18) [16:30:27:178]: Executing op: FileCopy(SourceName=sof.dat,SourceCabKey=SofDatFile,DestName=sof.dat,Attributes=512,FileSize=2995,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-547768320,HashPart2=-2121814892,HashPart3=342981253,HashPart4=587107744,,)
    MSI (s) (48:18) [16:30:27:178]: File: C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\sof.dat;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:178]: Source for file 'sof.dat' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Management Communications System\Endpoint\'.
    MSI (s) (48:18) [16:30:27:178]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Certificates\Management Communications System\)
    MSI (s) (48:18) [16:30:27:178]: Executing op: SetSourceFolder(Folder=1\Sophos\kxkdnwxp\dicqakrm\|Sophos\Certificates\Management Communications System\)
    MSI (s) (48:18) [16:30:27:178]: Executing op: FileCopy(SourceName=nlwxodeh.crl|sophosca1.crl,SourceCabKey=sophosca1.crl,DestName=sophosca1.crl,Attributes=512,FileSize=499,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1421245463,HashPart2=-457585657,HashPart3=1370276833,HashPart4=-312827615,,)
    MSI (s) (48:18) [16:30:27:178]: File: C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crl;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:178]: Source for file 'sophosca1.crl' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\Management Communications System\'.
    MSI (s) (48:18) [16:30:27:178]: Executing op: FileCopy(SourceName=yzia3nfy.crt|sophosca1.crt,SourceCabKey=sophosca1.crt,DestName=sophosca1.crt,Attributes=512,FileSize=1142,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-118683498,HashPart2=-1038483916,HashPart3=13382847,HashPart4=-1511238407,,)
    MSI (s) (48:18) [16:30:27:178]: File: C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crt;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:178]: Source for file 'sophosca1.crt' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\Management Communications System\'.
    MSI (s) (48:18) [16:30:27:178]: Executing op: FileCopy(SourceName=bq-jz8iz.crl|sophosca2.crl,SourceCabKey=sophosca2.crl,DestName=sophosca2.crl,Attributes=512,FileSize=475,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-540208571,HashPart2=-1606669929,HashPart3=871542603,HashPart4=-1241471107,,)
    MSI (s) (48:18) [16:30:27:178]: File: C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crl;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:178]: Source for file 'sophosca2.crl' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\Management Communications System\'.
    MSI (s) (48:18) [16:30:27:178]: Executing op: FileCopy(SourceName=ymsdc0ag.crt|sophosca2.crt,SourceCabKey=sophosca2.crt,DestName=sophosca2.crt,Attributes=512,FileSize=1142,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=899484485,HashPart2=1068736713,HashPart3=-85403264,HashPart4=170302114,,)
    MSI (s) (48:18) [16:30:27:178]: File: C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crt;    To be installed;    Won't patch;    No existing file
    MSI (s) (48:18) [16:30:27:178]: Source for file 'sophosca2.crt' is uncompressed, at 'C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos\Certificates\Management Communications System\'.
    MSI (s) (48:18) [16:30:27:178]: Executing op: CacheSizeFlush(,)
    MSI (s) (48:18) [16:30:27:178]: Executing op: ActionStart(Name=RestoreConfig,,)
    MSI (s) (48:18) [16:30:27:178]: Executing op: CustomActionSchedule(Action=RestoreConfig,ActionType=3329,Source=BinaryData,Target=RestoreConfigFile,CustomActionData=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml)
    MSI (s) (48:18) [16:30:27:178]: Executing op: ActionStart(Name=UpdateConfig,,)
    MSI (s) (48:18) [16:30:27:178]: Executing op: CustomActionSchedule(Action=UpdateConfig,ActionType=3073,Source=BinaryData,Target=UpdateConfigFile,CustomActionData=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com,,)
    MSI (s) (48:18) [16:30:27:178]: Creating MSIHANDLE (14) of type 790536 for thread 1560
    MSI (s) (48:FC) [16:30:27:178]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6B6A.tmp, Entrypoint: UpdateConfigFile
    MSI (s) (48:C4) [16:30:27:178]: Generating random cookie.
    MSI (s) (48:C4) [16:30:27:178]: Created Custom Action Server with PID 1532 (0x5FC).
    MSI (s) (48:48) [16:30:27:225]: Running as a service.
    MSI (s) (48:48) [16:30:27:225]: Hello, I'm your 32bit Elevated Non-remapped custom action server.
    MSI (s) (48!F4) [16:30:27:240]: Creating MSIHANDLE (15) of type 790531 for thread 2292
    MSI (s) (48!F4) [16:30:27:240]: Closing MSIHANDLE (15) of type 790531 for thread 2292
    MSI (s) (48!F4) [16:30:27:240]: Creating MSIHANDLE (16) of type 790531 for thread 2292
    UpdateConfigFile:  Initialized.
    MSI (s) (48!F4) [16:30:27:240]: Closing MSIHANDLE (16) of type 790531 for thread 2292
    MSI (s) (48!F4) [16:30:27:240]: Creating MSIHANDLE (17) of type 790531 for thread 2292
    UpdateConfigFile:  Retrieving Custom Action Data.
    MSI (s) (48!F4) [16:30:27:240]: Closing MSIHANDLE (17) of type 790531 for thread 2292
    MSI (s) (48!F4) [16:30:27:240]: Creating MSIHANDLE (18) of type 790531 for thread 2292
    UpdateConfigFile:  CustomActionData : C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com,,

    MSI (s) (48!F4) [16:30:27:240]: Closing MSIHANDLE (18) of type 790531 for thread 2292
    MSI (s) (48!F4) [16:30:27:240]: Creating MSIHANDLE (19) of type 790531 for thread 2292
    UpdateConfigFile:  Data :
    MSI (s) (48!F4) [16:30:27:240]: Closing MSIHANDLE (19) of type 790531 for thread 2292
    MSI (s) (48!F4) [16:30:27:256]: Creating MSIHANDLE (20) of type 790531 for thread 2292
    UpdateConfigFile:  Calling function WriteContentsInConfigFile().
    MSI (s) (48!F4) [16:30:27:256]: Closing MSIHANDLE (20) of type 790531 for thread 2292
    MSI (s) (48:FC) [16:30:27:256]: Closing MSIHANDLE (14) of type 790536 for thread 1560
    MSI (s) (48:18) [16:30:27:256]: Executing op: ActionStart(Name=WriteRegistryValues,Description=Writing system registry values,Template=Key: [1], Name: [2], Value: [3])
    UpdateConfigFile:  Creating a string to write between servers tag.
    MSI (s) (48:18) [16:30:27:256]: Executing op: ProgressTotal(Total=11,Type=1,ByteEquivalent=13200)
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegOpenKey(Root=-2147483647,Key=Software\Sophos\Management Communications System\Registration,,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegAddValue(,Value=Create registration file,)
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Remote Management System,,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Remote Management System\ManagementAgent\Adapters,,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Remote Management System\ManagementAgent\Adapters\MCS,,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegAddValue(Name=DllPath,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAdapter.dll,)
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegOpenKey(Root=-2147483646,Key=System\CurrentControlSet\Services\Eventlog\Application\Sophos Management Communications System,,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegAddValue(Name=EventMessageFile,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,)
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegAddValue(Name=ParameterMessageFile,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,)
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegAddValue(Name=CategoryMessageFile,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,)
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegAddValue(Name=CategoryCount,Value=#2,)
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegAddValue(Name=TypesSupported,Value=#7,)
    MSI (s) (48:18) [16:30:27:256]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:256]: Executing op: ActionStart(Name=WriteIniValues,Description=Writing INI files values,Template=File: [1],  Section: [2],  Key: [3], Value: [4])
    MSI (s) (48:18) [16:30:27:256]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200)
    MSI (s) (48:18) [16:30:27:256]: Executing op: IniFilePath(File=registration.txt,Folder=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\)
    MSI (s) (48:18) [16:30:27:256]: Executing op: IniWriteRemoveValue(Section=McsClient,Key=Token,Value=a929e2e535aa6e02d392e9b3b1ccbf57a7bfc422c4f5ac0d905a6277c3f006f0,Mode=0)
    MSI (s) (48:18) [16:30:27:256]: Executing op: ActionStart(Name=InstallServices,Description=Installing new services,Template=Service: [2])
    MSI (s) (48:18) [16:30:27:256]: Executing op: ProgressTotal(Total=2,Type=1,ByteEquivalent=1300000)
    MSI (s) (48:18) [16:30:27:256]: Executing op: ServiceInstall(Name=Sophos MCS Client,DisplayName=Sophos MCS Client,ImagePath="C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClient.exe",ServiceType=16,StartType=2,ErrorControl=32769,,Dependencies=[~],,StartName=NT AUTHORITY\NetworkService,Password=**********,Description=Management Communications Client.,,)
    MSI (s) (48:18) [16:30:27:272]: Executing op: ServiceInstall(Name=Sophos MCS Agent,DisplayName=Sophos MCS Agent,ImagePath="C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAgent.exe",ServiceType=16,StartType=2,ErrorControl=32769,,Dependencies=[~],,,Password=**********,Description=Management Communications Agent.,,)
    MSI (s) (48:18) [16:30:27:287]: Executing op: ActionStart(Name=RollbackServiceConfig,,)
    MSI (s) (48:18) [16:30:27:287]: Executing op: CustomActionSchedule(Action=RollbackServiceConfig,ActionType=3329,Source=BinaryData,Target=RollbackServiceConfig,CustomActionData=SchedServiceConfig)
    MSI (s) (48:18) [16:30:27:287]: Executing op: ActionStart(Name=ExecServiceConfig,,)
    MSI (s) (48:18) [16:30:27:287]: Executing op: CustomActionSchedule(Action=ExecServiceConfig,ActionType=3073,Source=BinaryData,Target=ExecServiceConfig,CustomActionData=SchedServiceConfig€Sophos MCS Agent€0€restart€restart€restart€1€60€€€Sophos MCS Client€0€restart€restart€restart€1€60€€)
    MSI (s) (48:18) [16:30:27:287]: Creating MSIHANDLE (21) of type 790536 for thread 1560
    MSI (s) (48:2C) [16:30:27:287]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6BD9.tmp, Entrypoint: ExecServiceConfig
    MSI (s) (48!E0) [16:30:27:303]: Creating MSIHANDLE (22) of type 790531 for thread 1504
    MSI (s) (48!E0) [16:30:27:303]: Closing MSIHANDLE (22) of type 790531 for thread 1504
    MSI (s) (48!E0) [16:30:27:318]: Creating MSIHANDLE (23) of type 790531 for thread 1504
    MSI (s) (48!E0) [16:30:27:318]: Closing MSIHANDLE (23) of type 790531 for thread 1504
    MSI (s) (48:2C) [16:30:27:318]: Closing MSIHANDLE (21) of type 790536 for thread 1560
    MSI (s) (48:18) [16:30:27:318]: Executing op: ActionStart(Name=RegisterProduct,Description=Registering product,Template=[1])
    MSI (s) (48:18) [16:30:27:318]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,,BytesPerTick=0,CopierType=0,,,,,,IsFirstPhysicalMedia=1)
    MSI (s) (48:18) [16:30:27:318]: Executing op: DatabaseCopy(DatabasePath=C:\Windows\Installer\17369d1.msi,ProductCode={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},,,)
    MSI (s) (48:18) [16:30:27:318]: Note: 1: 1402 2: UNKNOWN\Products\02F3DFF142D5A9C49B6F2A705AC31F97\InstallProperties 3: 2
    MSI (s) (48:18) [16:30:27:318]: File will have security applied from OpCode.
    MSI (s) (48:18) [16:30:27:318]: Executing op: ProductRegister(UpgradeCode={7A6045EF-603A-4648-B227-2221E4A931BB},VersionString=2.0.0,HelpLink=www.sophos.com/.../,,InstallLocation=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\,InstallSource=C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\,Publisher=Sophos Limited,URLInfoAbout=www.sophos.com/,,,NoModify=1,NoRepair=1,,Comments=Management Communications System,Contact=Sophos Technical Support,,,,EstimatedSize=2104,,,,)
    MSI (s) (48:18) [16:30:27:350]: Executing op: ProductCPDisplayInfoRegister()
    MSI (s) (48:18) [16:30:27:350]: Executing op: ActionStart(Name=MsiPublishAssemblies,Description=Publishing assembly information,Template=Application Context:[1], Assembly Name:[2])
    MSI (s) (48:18) [16:30:27:350]: Executing op: AssemblyPublish(Feature=ProductFeature,Component={B4606FC1-ADD6-3F4C-B9A7-BEA4CE07951E}[~]2,AssemblyType=2,,AssemblyName=policy.9.0.Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32-policy",)
    MSI (s) (48:18) [16:30:27:350]: Executing op: AssemblyPublish(Feature=ProductFeature,Component={4C3A7A77-BFE9-309A-B576-33618A5B1A67}[~]2,AssemblyType=2,,AssemblyName=Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32",)
    MSI (s) (48:18) [16:30:27:350]: Executing op: ActionStart(Name=PublishFeatures,Description=Publishing Product Features,Template=Feature: [1])
    MSI (s) (48:18) [16:30:27:350]: Executing op: FeaturePublish(Feature=ProductFeature,,Absent=2,Component=DFEQNm7@!@1*AP+@!cpEeT7*UE~X[@8N@Or8EjmaiC+}Os!ys8GpcmBqu8w37r~du5TrV@00?u!.E4^HHgGRTUTeBA@PNKWmBC'RQwovm[pV{?XXH3h]fXhEd[6*VZ11HA_LHgYwS$*T+=!MlM1{g=yE-O3JPxhkRJ2XmyGQ49N.xO&2MT7)3CLTk6~@l8kaTPmpIGAy),@2B@5=j@dCAv^M4T.SfTYbd5zLU=^%-$h=ElE7{3M$1zhwR=F(L{I}^Y*P$yEv4H6EQAE'{8D*wSkByO`6G&Y_t94fU?OmsfBJ,lP'{LJNu@!0&Jo!kvl@{Wi!r]t2o9-~`u1P%,G.ooc{b46?E8Bj_y]]~Oo,{7WiBZd@P64~7%ugXB]eKRPR@Gkn]3=+L8G6!a.Iv&w*ia}&*6m_PmuNJs'Vlx,Io(5qd3tYs0%p){^+)za.D-Qhy3`?!Q55l(Wb)
    MSI (s) (48:18) [16:30:27:350]: Executing op: ActionStart(Name=PublishProduct,Description=Publishing product information,)
    MSI (s) (48:18) [16:30:27:350]: Executing op: IconCreate(Icon=Sophos_MCS_Icon,Data=BinaryData)
    MSI (s) (48:18) [16:30:27:350]: Executing op: CleanupConfigData()
    MSI (s) (48:18) [16:30:27:350]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches 3: 2
    MSI (s) (48:18) [16:30:27:350]: Executing op: RegisterPatchOrder(Continue=0,SequenceType=1,Remove=0)
    MSI (s) (48:18) [16:30:27:350]: Note: 1: 1402 2: UNKNOWN\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches 3: 2
    MSI (s) (48:18) [16:30:27:350]: Executing op: ProductPublish(PackageKey={3B5370F7-1522-4057-BAFD-F144139D5D1E})
    MSI (s) (48:18) [16:30:27:350]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:350]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:350]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:350]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:350]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:350]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:350]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:350]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:350]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:350]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:350]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:365]: Executing op: UpgradeCodePublish(UpgradeCode={7A6045EF-603A-4648-B227-2221E4A931BB})
    MSI (s) (48:18) [16:30:27:365]: Executing op: SourceListPublish(,,,,NumberOfDisks=1)
    MSI (s) (48:18) [16:30:27:365]: Note: 1: 1402 2: UNKNOWN\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList 3: 2
    MSI (s) (48:18) [16:30:27:365]: Executing op: ProductPublishClient(,,)
    MSI (s) (48:18) [16:30:27:365]: Executing op: SourceListRegisterLastUsed(SourceProduct={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},LastUsedSource=C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\)
    MSI (s) (48:18) [16:30:27:365]: Entering CMsiConfigurationManager::SetLastUsedSource.
    MSI (s) (48:18) [16:30:27:365]: Setting cached product context: machine assigned for product: 02F3DFF142D5A9C49B6F2A705AC31F97
    MSI (s) (48:18) [16:30:27:365]: Specifed source is already in a list.
    MSI (s) (48:18) [16:30:27:365]: User policy value 'SearchOrder' is 'nmu'
    MSI (s) (48:18) [16:30:27:365]: Adding new sources is allowed.
    MSI (s) (48:18) [16:30:27:365]: Set LastUsedSource to: C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\.
    MSI (s) (48:18) [16:30:27:365]: Set LastUsedType to: n.
    MSI (s) (48:18) [16:30:27:365]: Set LastUsedIndex to: 1.
    MSI (s) (48:18) [16:30:27:365]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=9545413)
    MSI (s) (48:18) [16:30:27:365]: Doing action: RemoveExistingProducts
    MSI (s) (48:18) [16:30:27:365]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: InstallExecute. Return value 1.
    Action start 16:30:27: RemoveExistingProducts.
    MSI (s) (48:18) [16:30:27:365]: Doing action: ScheduleSetPermissions.Deferred
    MSI (s) (48:18) [16:30:27:365]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: RemoveExistingProducts. Return value 1.
    MSI (s) (48:18) [16:30:27:365]: Creating MSIHANDLE (24) of type 790542 for thread 1560
    MSI (s) (48:14) [16:30:27:365]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6C28.tmp, Entrypoint: SchedulePermissionsDeferred
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (25) of type 790541 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (26) of type 790531 for thread 5508
    Action start 16:30:27: ScheduleSetPermissions.Deferred.
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (26) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (27) of type 790540 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (28) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (29) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (29) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (30) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (30) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (31) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (31) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (32) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (32) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (33) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (33) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (34) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (34) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (35) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (35) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (36) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (36) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (37) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (37) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (38) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (38) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (39) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (39) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (40) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (40) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (41) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (41) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (42) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (42) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (43) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (43) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (44) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (44) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (45) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (45) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (46) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (46) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (47) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (47) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (48) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (48) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (49) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (49) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (50) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (50) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (51) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (51) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (52) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (52) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (53) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (53) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (54) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (54) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (55) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (55) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (56) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (56) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (57) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (57) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (58) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (58) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (59) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (59) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (60) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (60) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (61) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (61) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (28) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (27) of type 790540 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (62) of type 790531 for thread 5508
    SchedulePermissionsDeferred:  Initialized.
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (62) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (63) of type 790531 for thread 5508
    SchedulePermissionsDeferred:  PopulateComponentAttributeMap: Loaded components table in a table view object.
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (63) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (64) of type 790540 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (65) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (66) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (66) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (67) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (67) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (68) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (68) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (69) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (69) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (70) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (70) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (71) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (71) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (72) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (72) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (73) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (73) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (74) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (74) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (75) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (75) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (76) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (76) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (77) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (77) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (65) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (64) of type 790540 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (78) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (78) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (79) of type 790540 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (80) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (81) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (82) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (82) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (83) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (83) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (81) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (80) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (79) of type 790540 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (84) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (84) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (85) of type 790540 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (86) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (87) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (88) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (88) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (89) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (89) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (87) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (86) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (85) of type 790540 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (90) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Closing MSIHANDLE (90) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (91) of type 790540 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (92) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (93) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:396]: Creating MSIHANDLE (94) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (94) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Creating MSIHANDLE (95) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (95) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (93) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (92) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (91) of type 790540 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Creating MSIHANDLE (96) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (96) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Creating MSIHANDLE (97) of type 790540 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Creating MSIHANDLE (98) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Creating MSIHANDLE (99) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Creating MSIHANDLE (100) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (100) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Creating MSIHANDLE (101) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (101) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (99) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (98) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (97) of type 790540 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Creating MSIHANDLE (102) of type 790531 for thread 5508
    SchedulePermissionsDeferred:  Component attributes have been loaded successfully.
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (102) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Creating MSIHANDLE (103) of type 790531 for thread 5508
    SchedulePermissionsDeferred:  Action data construction has been completed.
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (103) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: PROPERTY CHANGE: Adding SetPermissions.Deferred property. Its value is '2{12}2{13}8{objectid}11{objecttable}6{action}8{identity}12{identitytype}11{inheritance}10{genericall}11{genericread}12{genericwrite}14{genericexecute}6{modify}10{objectpath}5{win64}14{EndpointFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}14{EndpointFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}14{EndpointFolder}6{Folder}5{Allow}15{Network Service}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}20{AdapterStorageFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}70{C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\}2{no}20{AdapterStorageFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}70{C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\}2{no}42{ManagementCommunication
    MSI (s) (48!84) [16:30:27:412]: Doing action: SetPermissions.Deferred
    MSI (s) (48!84) [16:30:27:412]: Note: 1: 2205 2:  3: ActionText
    SchedulePermissionsDeferred:  Action data serialization has been completed.
    MSI (s) (48!84) [16:30:27:412]: Note: 1: 2205 2:  3: MsiPatchCertificate
    MSI (s) (48!84) [16:30:27:412]: LUA patching is disabled: missing MsiPatchCertificate table
    MSI (s) (48!84) [16:30:27:412]: Note: 1: 2205 2:  3: ActionText
    MSI (s) (48!84) [16:30:27:412]: Note: 1: 2205 2:  3: ActionText
    MSI (s) (48!84) [16:30:27:412]: Note: 1: 2205 2:  3: ActionText
    Action start 16:30:27: SetPermissions.Deferred.
    MSI (s) (48!84) [16:30:27:412]: Creating MSIHANDLE (104) of type 790531 for thread 5508
    Action ended 16:30:27: SetPermissions.Deferred. Return value 1.
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (104) of type 790531 for thread 5508
    MSI (s) (48!84) [16:30:27:412]: Closing MSIHANDLE (25) of type 790541 for thread 5508
    MSI (s) (48:14) [16:30:27:412]: Closing MSIHANDLE (24) of type 790542 for thread 1560
    SchedulePermissionsDeferred:  Custom action SetPermissions.Deferred has been scheduled.
    MSI (s) (48:18) [16:30:27:412]: Doing action: DeleteBackupConfigFile
    MSI (s) (48:18) [16:30:27:412]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: ScheduleSetPermissions.Deferred. Return value 1.
    Action start 16:30:27: DeleteBackupConfigFile.
    MSI (s) (48:18) [16:30:27:412]: Doing action: SetStartMCSAgentService
    MSI (s) (48:18) [16:30:27:412]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: DeleteBackupConfigFile. Return value 1.
    MSI (s) (48:18) [16:30:27:412]: PROPERTY CHANGE: Adding StartMCSAgentService property. Its value is 'Sophos MCS Agent'.
    Action start 16:30:27: SetStartMCSAgentService.
    MSI (s) (48:18) [16:30:27:412]: Doing action: StartMCSAgentService
    MSI (s) (48:18) [16:30:27:412]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: SetStartMCSAgentService. Return value 1.
    Action start 16:30:27: StartMCSAgentService.
    MSI (s) (48:18) [16:30:27:412]: Doing action: SetStartMCSClientService
    MSI (s) (48:18) [16:30:27:412]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: StartMCSAgentService. Return value 1.
    MSI (s) (48:18) [16:30:27:412]: PROPERTY CHANGE: Adding StartMCSClientService property. Its value is 'Sophos MCS Client'.
    Action start 16:30:27: SetStartMCSClientService.
    MSI (s) (48:18) [16:30:27:412]: Doing action: StartMCSClientService
    MSI (s) (48:18) [16:30:27:412]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: SetStartMCSClientService. Return value 1.
    Action start 16:30:27: StartMCSClientService.
    MSI (s) (48:18) [16:30:27:412]: Skipping action: WixFailWhenDeferred (condition is false)
    MSI (s) (48:18) [16:30:27:412]: Doing action: InstallFinalize
    MSI (s) (48:18) [16:30:27:412]: Note: 1: 2205 2:  3: ActionText
    Action ended 16:30:27: StartMCSClientService. Return value 1.
    MSI (s) (48:18) [16:30:27:412]: Running Script: C:\Windows\Installer\MSI6C57.tmp
    MSI (s) (48:18) [16:30:27:412]: User policy value 'DisableRollback' is 0
    MSI (s) (48:18) [16:30:27:412]: Machine policy value 'DisableRollback' is 0
    MSI (s) (48:18) [16:30:27:412]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1214743502,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
    Action start 16:30:27: InstallFinalize.
    MSI (s) (48:18) [16:30:27:412]: Executing op: ProductInfo(ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},ProductName=Sophos Management Communications System,PackageName=Sophos Management Communications System.msi,Language=1033,Version=33554432,Assignment=1,ObsoleteArg=0,ProductIcon=Sophos_MCS_Icon,,PackageCode={3B5370F7-1522-4057-BAFD-F144139D5D1E},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
    MSI (s) (48:18) [16:30:27:412]: Executing op: DialogInfo(Type=0,Argument=1033)
    MSI (s) (48:18) [16:30:27:412]: Executing op: DialogInfo(Type=1,Argument=Sophos Management Communications System)
    MSI (s) (48:18) [16:30:27:412]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
    MSI (s) (48:18) [16:30:27:412]: Executing op: SetBaseline(Baseline=0,)
    MSI (s) (48:18) [16:30:27:412]: Executing op: SetBaseline(Baseline=1,)
    MSI (s) (48:18) [16:30:27:412]: Executing op: ActionStart(Name=SetPermissions.Deferred,,)
    MSI (s) (48:18) [16:30:27:412]: Executing op: CustomActionSchedule(Action=SetPermissions.Deferred,ActionType=1025,Source=BinaryData,Target=SetPermissions,CustomActionData=2{12}2{13}8{objectid}11{objecttable}6{action}8{identity}12{identitytype}11{inheritance}10{genericall}11{genericread}12{genericwrite}14{genericexecute}6{modify}10{objectpath}5{win64}14{EndpointFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}14{EndpointFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}14{EndpointFolder}6{Folder}5{Allow}15{Network Service}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}20{AdapterStorageFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}70{C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\}2{no}20{AdapterStorageFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}70{C:\ProgramData\Sophos\Remote Manage
    MSI (s) (48:18) [16:30:27:412]: Creating MSIHANDLE (105) of type 790536 for thread 1560
    MSI (s) (48:F8) [16:30:27:412]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6C59.tmp, Entrypoint: SetPermissions
    MSI (s) (48!B4) [16:30:27:443]: Creating MSIHANDLE (106) of type 790531 for thread 1972
    MSI (s) (48!B4) [16:30:27:443]: Closing MSIHANDLE (106) of type 790531 for thread 1972
    MSI (s) (48!B4) [16:30:27:443]: Creating MSIHANDLE (107) of type 790531 for thread 1972
    MSI (s) (48!B4) [16:30:27:443]: Closing MSIHANDLE (107) of type 790531 for thread 1972
    MSI (s) (48!B4) [16:30:27:443]: Creating MSIHANDLE (108) of type 790531 for thread 1972
    SetPermissions:  Initialized.
    MSI (s) (48!B4) [16:30:27:443]: Closing MSIHANDLE (108) of type 790531 for thread 1972
    MSI (s) (48!B4) [16:30:27:443]: Creating MSIHANDLE (109) of type 790531 for thread 1972
    SetPermissions:  ParseObjectPermissions has been entered.
    MSI (s) (48!B4) [16:30:27:443]: Closing MSIHANDLE (109) of type 790531 for thread 1972
    MSI (s) (48!B4) [16:30:27:443]: Creating MSIHANDLE (110) of type 790531 for thread 1972
    SetPermissions:  ApplyObjectPermissions has been entered.
    MSI (s) (48!B4) [16:30:27:443]: Closing MSIHANDLE (110) of type 790531 for thread 1972
    MSI (s) (48!B4) [16:30:27:443]: Creating MSIHANDLE (111) of type 790531 for thread 1972
    SetPermissions:  ApplyObjectPermissions has been entered.
    MSI (s) (48!B4) [16:30:27:443]: Closing MSIHANDLE (111) of type 790531 for thread 1972
    MSI (s) (48!B4) [16:30:27:443]: Creating MSIHANDLE (112) of type 790531 for thread 1972
    SetPermissions:  ApplyObjectPermissions has been entered.
    MSI (s) (48!B4) [16:30:27:443]: Closing MSIHANDLE (112) of type 790531 for thread 1972
    MSI (s) (48!B4) [16:30:27:443]: Creating MSIHANDLE (113) of type 790531 for thread 1972
    SetPermissions:  ApplyObjectPermissions has been entered.
    MSI (s) (48!B4) [16:30:27:443]: Closing MSIHANDLE (113) of type 790531 for thread 1972
    MSI (s) (48:F8) [16:30:27:443]: Closing MSIHANDLE (105) of type 790536 for thread 1560
    MSI (s) (48:18) [16:30:27:443]: Executing op: ActionStart(Name=DeleteBackupConfigFile,,)
    SetPermissions:  ApplyObjectPermissions has been entered.
    MSI (s) (48:18) [16:30:27:443]: Executing op: CustomActionSchedule(Action=DeleteBackupConfigFile,ActionType=3585,Source=BinaryData,Target=DeleteBackupConfigFile,)
    MSI (s) (48:18) [16:30:27:443]: Executing op: ActionStart(Name=StartMCSAgentService,,)
    MSI (s) (48:18) [16:30:27:443]: Executing op: CustomActionSchedule(Action=StartMCSAgentService,ActionType=3585,Source=BinaryData,Target=MsiStartService,CustomActionData=Sophos MCS Agent)
    MSI (s) (48:18) [16:30:27:443]: Executing op: ActionStart(Name=StartMCSClientService,,)
    MSI (s) (48:18) [16:30:27:443]: Executing op: CustomActionSchedule(Action=StartMCSClientService,ActionType=3585,Source=BinaryData,Target=MsiStartService,CustomActionData=Sophos MCS Client)
    MSI (s) (48:18) [16:30:27:443]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
    MSI (s) (48:18) [16:30:27:443]: User policy value 'DisableRollback' is 0
    MSI (s) (48:18) [16:30:27:443]: Machine policy value 'DisableRollback' is 0
    MSI (s) (48:18) [16:30:27:459]: Creating MSIHANDLE (114) of type 790536 for thread 1560
    MSI (s) (48:64) [16:30:27:459]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6C89.tmp, Entrypoint: DeleteBackupConfigFile
    MSI (s) (48!8C) [16:30:27:474]: Creating MSIHANDLE (115) of type 790531 for thread 5260
    MSI (s) (48!8C) [16:30:27:474]: Closing MSIHANDLE (115) of type 790531 for thread 5260
    MSI (s) (48!8C) [16:30:27:474]: Creating MSIHANDLE (116) of type 790531 for thread 5260
    DeleteBackupConfigFile:  Initialized.
    MSI (s) (48!8C) [16:30:27:474]: Closing MSIHANDLE (116) of type 790531 for thread 5260
    MSI (s) (48:64) [16:30:27:474]: Closing MSIHANDLE (114) of type 790536 for thread 1560
    DeleteBackupConfigFile:  DeleteFile failed with errorcode : 2
    MSI (s) (48:18) [16:30:27:474]: Creating MSIHANDLE (117) of type 790536 for thread 1560
    MSI (s) (48:B4) [16:30:27:474]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6C9A.tmp, Entrypoint: MsiStartService
    MSI (s) (48!BC) [16:30:27:490]: Creating MSIHANDLE (118) of type 790531 for thread 1212
    MSI (s) (48!BC) [16:30:27:490]: Closing MSIHANDLE (118) of type 790531 for thread 1212
    MSI (s) (48!BC) [16:30:27:490]: Creating MSIHANDLE (119) of type 790531 for thread 1212
    StartService:  Initialized.
    MSI (s) (48!BC) [16:30:27:490]: Closing MSIHANDLE (119) of type 790531 for thread 1212
    MSI (s) (48!BC) [16:30:27:490]: Creating MSIHANDLE (120) of type 790531 for thread 1212
    StartService:  Retrieving Custom Action Data.
    MSI (s) (48!BC) [16:30:27:506]: Closing MSIHANDLE (120) of type 790531 for thread 1212
    StartService:  StartServiceW failed with errorcode : 1053
    MSI (s) (48:B4) [16:30:27:506]: Closing MSIHANDLE (117) of type 790536 for thread 1560
    CustomAction StartMCSAgentService returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
    MSI (s) (48:18) [16:30:27:506]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1214743502,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
    MSI (s) (48:18) [16:30:27:506]: Executing op: DialogInfo(Type=0,Argument=1033)
    MSI (s) (48:18) [16:30:27:506]: Executing op: DialogInfo(Type=1,Argument=Sophos Management Communications System)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
    MSI (s) (48:18) [16:30:27:506]: Executing op: ActionStart(Name=StartMCSClientService,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: ProductInfo(ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},ProductName=Sophos Management Communications System,PackageName=Sophos Management Communications System.msi,Language=1033,Version=33554432,Assignment=1,ObsoleteArg=0,ProductIcon=Sophos_MCS_Icon,,PackageCode={3B5370F7-1522-4057-BAFD-F144139D5D1E},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
    MSI (s) (48:18) [16:30:27:506]: Executing op: ActionStart(Name=StartMCSAgentService,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: ActionStart(Name=DeleteBackupConfigFile,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: ActionStart(Name=SetPermissions.Deferred,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
    MSI (s) (48:18) [16:30:27:506]: Error in rollback skipped.    Return: 5
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:506]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1214743502,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
    MSI (s) (48:18) [16:30:27:506]: Executing op: DialogInfo(Type=0,Argument=1033)
    MSI (s) (48:18) [16:30:27:506]: Executing op: DialogInfo(Type=1,Argument=Sophos Management Communications System)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
    MSI (s) (48:18) [16:30:27:506]: Executing op: ActionStart(Name=PublishProduct,Description=Publishing product information,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList\Net,SecurityDescriptor=BinaryData,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: ProductInfo(ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},ProductName=Sophos Management Communications System,PackageName=Sophos Management Communications System.msi,Language=1033,Version=33554432,Assignment=1,ObsoleteArg=0,ProductIcon=Sophos_MCS_Icon,,PackageCode={3B5370F7-1522-4057-BAFD-F144139D5D1E},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList,SecurityDescriptor=BinaryData,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=LastUsedSource,Value=#%n;1;C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97,SecurityDescriptor=BinaryData,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=Clients,Value=[~]:,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList\Media,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=1,Value=;,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList\Media 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList\Media,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList\Net,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=1,Value=#%C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList\Net 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=PackageName,Value=Sophos Management Communications System.msi,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97\SourceList 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\UpgradeCodes\FE5406A7A30684642B7222124E9A13BB,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=02F3DFF142D5A9C49B6F2A705AC31F97,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\UpgradeCodes\FE5406A7A30684642B7222124E9A13BB 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=DeploymentFlags,Value=#3,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=AuthorizedLUAApp,Value=#0,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=InstanceType,Value=#0,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=ProductIcon,Value=C:\Windows\Installer\{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}\Sophos_MCS_Icon,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=AdvertiseFlags,Value=#388,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=Assignment,Value=#1,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=Version,Value=#33554432,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=Language,Value=#1033,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=PackageCode,Value=7F0735B322517504ABDF1F4431D9D5E1,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=ProductName,Value=Sophos Management Communications System,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=AllPatches,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches,,BinaryType=-1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Patches 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: FileRemove(,FileName=C:\Windows\Installer\{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}\Sophos_MCS_Icon,Elevate=1,)
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:506]: Executing op: ActionStart(Name=PublishFeatures,Description=Publishing Product Features,Template=Feature: [1])
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Features,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=ProductFeature,Value=DFEQNm7@!@1*AP+@!cpEeT7*UE~X[@8N@Or8EjmaiC+}Os!ys8GpcmBqu8w37r~du5TrV@00?u!.E4^HHgGRTUTeBA@PNKWmBC'RQwovm[pV{?XXH3h]fXhEd[6*VZ11HA_LHgYwS$*T+=!MlM1{g=yE-O3JPxhkRJ2XmyGQ49N.xO&2MT7)3CLTk6~@l8kaTPmpIGAy),@2B@5=j@dCAv^M4T.SfTYbd5zLU=^%-$h=ElE7{3M$1zhwR=F(L{I}^Y*P$yEv4H6EQAE'{8D*wSkByO`6G&Y_t94fU?OmsfBJ,lP'{LJNu@!0&Jo!kvl@{Wi!r]t2o9-~`u1P%,G.ooc{b46?E8Bj_y]]~Oo,{7WiBZd@P64~7%ugXB]eKRPR@Gkn]3=+L8G6!a.Iv&w*ia}&*6m_PmuNJs'Vlx,Io(5qd3tYs0%p){^+)za.D-Qhy3`?!Q55l(Wb,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Features 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Features\02F3DFF142D5A9C49B6F2A705AC31F97,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=ProductFeature,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:506]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\Installer\Features\02F3DFF142D5A9C49B6F2A705AC31F97 3: 2
    MSI (s) (48:18) [16:30:27:506]: Executing op: ActionStart(Name=MsiPublishAssemblies,Description=Publishing assembly information,Template=Application Context:[1], Assembly Name:[2])
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Win32Assemblies\Global,SecurityDescriptor=BinaryData,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32",Value=OKv?-79e]@(y]N%v$D4O>KRPR@Gkn]3=+L8G6!a.I[~],)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegAddValue(Name=Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32",Value=[~]19cK5hJeGALJ~V*``4IkMainComponents>KRPR@Gkn]3=+L8G6!a.I[~],)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Classes\Installer\Win32Assemblies\Global,SecurityDescriptor=BinaryData,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=policy.9.0.Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32-policy",Value=OKv?-79e]@(y]N%v$D4O>ooc{b46?E8Bj_y]]~Oo,[~],)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegAddValue(Name=policy.9.0.Microsoft.VC90.CRT,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32-policy",Value=[~]19cK5hJeGALJ~V*``4IkMainComponents>ooc{b46?E8Bj_y]]~Oo,[~],)
    MSI (s) (48:18) [16:30:27:506]: Executing op: ActionStart(Name=RegisterProduct,Description=Registering product,Template=[1])
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Uninstall\{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},SecurityDescriptor=BinaryData,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegRemoveValue(Name=DisplayName,Value=Sophos Management Communications System,)
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:506]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Uninstall,SecurityDescriptor=BinaryData,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\InstallProperties,SecurityDescriptor=BinaryData,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=DisplayName,Value=Sophos Management Communications System,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\Usage,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\FE5406A7A30684642B7222124E9A13BB,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=02F3DFF142D5A9C49B6F2A705AC31F97,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:521]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\FE5406A7A30684642B7222124E9A13BB 3: 2
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Uninstall\{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Language,Value=#1033,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Version,Value=#33554432,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=WindowsInstaller,Value=#1,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=VersionMinor,Value=#0,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=VersionMajor,Value=#2,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=URLUpdateInfo,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=URLInfoAbout,Value=http://www.sophos.com/,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=UninstallString,Value=#%MsiExec.exe /X{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=EstimatedSize,Value=#+2104,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Size,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Readme,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Publisher,Value=Sophos Limited,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=NoRepair,Value=#1,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=NoModify,Value=#1,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=ModifyPath,Value=#%MsiExec.exe /X{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=InstallSource,Value=C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=InstallLocation,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=InstallDate,Value=20160307,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=HelpTelephone,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=HelpLink,Value=#%www.sophos.com/.../,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=DisplayVersion,Value=2.0.0,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Contact,Value=Sophos Technical Support,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Comments,Value=Management Communications System,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=AuthorizedCDFPrefix,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:521]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179} 3: 2
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Uninstall,SecurityDescriptor=BinaryData,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\InstallProperties,SecurityDescriptor=BinaryData,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Language,Value=#1033,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Version,Value=#33554432,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=WindowsInstaller,Value=#1,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=VersionMinor,Value=#0,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=VersionMajor,Value=#2,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=URLUpdateInfo,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=URLInfoAbout,Value=http://www.sophos.com/,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=UninstallString,Value=#%MsiExec.exe /X{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=EstimatedSize,Value=#+2104,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Size,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Readme,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Publisher,Value=Sophos Limited,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=NoRepair,Value=#1,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=NoModify,Value=#1,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=ModifyPath,Value=#%MsiExec.exe /X{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=InstallSource,Value=C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=InstallLocation,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=InstallDate,Value=20160307,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=HelpTelephone,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=HelpLink,Value=#%www.sophos.com/.../,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=DisplayVersion,Value=2.0.0,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Contact,Value=Sophos Technical Support,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=Comments,Value=Management Communications System,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=AuthorizedCDFPrefix,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\InstallProperties,,BinaryType=1,,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveValue(Name=LocalPackage,Value=C:\Windows\Installer\17369d9.msi,)
    MSI (s) (48:18) [16:30:27:521]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:521]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F3DFF142D5A9C49B6F2A705AC31F97\InstallProperties 3: 2
    MSI (s) (48:18) [16:30:27:521]: Executing op: FileRemove(,FileName=C:\Windows\Installer\17369d9.msi,Elevate=1,)
    MSI (s) (48:18) [16:30:27:537]: Executing op: FileRemove(,FileName=C:\Windows\Installer\17369d9.msi,,)
    MSI (s) (48:18) [16:30:27:537]: Executing op: ActionStart(Name=ExecServiceConfig,,)
    MSI (s) (48:18) [16:30:27:537]: Executing op: ActionStart(Name=RollbackServiceConfig,,)
    MSI (s) (48:18) [16:30:27:537]: Executing op: CustomActionRollback(Action=RollbackServiceConfig,ActionType=3329,Source=BinaryData,Target=RollbackServiceConfig,CustomActionData=SchedServiceConfig)
    MSI (s) (48:18) [16:30:27:537]: Creating MSIHANDLE (121) of type 790536 for thread 1560
    MSI (s) (48:6C) [16:30:27:537]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6CDA.tmp, Entrypoint: RollbackServiceConfig
    MSI (s) (48!80) [16:30:27:552]: Creating MSIHANDLE (122) of type 790531 for thread 1152
    MSI (s) (48!80) [16:30:27:552]: Closing MSIHANDLE (122) of type 790531 for thread 1152
    MSI (s) (48!80) [16:30:27:552]: Creating MSIHANDLE (123) of type 790531 for thread 1152
    MSI (s) (48!80) [16:30:27:568]: Closing MSIHANDLE (123) of type 790531 for thread 1152
    MSI (s) (48:6C) [16:30:27:568]: Closing MSIHANDLE (121) of type 790536 for thread 1560
    MSI (s) (48:18) [16:30:27:568]: Executing op: ActionStart(Name=InstallServices,Description=Installing new services,Template=Service: [2])
    MSI (s) (48:18) [16:30:27:568]: Executing op: ServiceControl(,Name=Sophos MCS Agent,Action=8,,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: ServiceControl(,Name=Sophos MCS Client,Action=8,,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: ActionStart(Name=WriteIniValues,Description=Writing INI files values,Template=File: [1],  Section: [2],  Key: [3], Value: [4])
    MSI (s) (48:18) [16:30:27:568]: Executing op: IniFilePath(File=registration.txt,Folder=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\)
    MSI (s) (48:18) [16:30:27:568]: Executing op: IniWriteRemoveValue(Section=McsClient,Key=Token,Value=a929e2e535aa6e02d392e9b3b1ccbf57a7bfc422c4f5ac0d905a6277c3f006f0,Mode=2)
    MSI (s) (48:18) [16:30:27:568]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:568]: Executing op: ActionStart(Name=WriteRegistryValues,Description=Writing system registry values,Template=Key: [1], Name: [2], Value: [3])
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegOpenKey(Root=-2147483646,Key=System\CurrentControlSet\Services\Eventlog\Application\Sophos Management Communications System,,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegRemoveValue(Name=TypesSupported,Value=#7,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegRemoveValue(Name=CategoryCount,Value=#2,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegRemoveValue(Name=CategoryMessageFile,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegRemoveValue(Name=ParameterMessageFile,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegRemoveValue(Name=EventMessageFile,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:568]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\System\CurrentControlSet\Services\Eventlog\Application\Sophos Management Communications System 3: 2
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Remote Management System\ManagementAgent\Adapters\MCS,,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegCreateKey()
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegRemoveValue(Name=DllPath,Value=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAdapter.dll,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:568]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Sophos\Remote Management System\ManagementAgent\Adapters\MCS 3: 2
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Remote Management System\ManagementAgent\Adapters,,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:568]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Sophos\Remote Management System\ManagementAgent\Adapters 3: 2
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\Remote Management System,,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegRemoveKey()
    MSI (s) (48:18) [16:30:27:568]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Sophos\Remote Management System 3: 2
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegOpenKey(Root=-2147483647,Key=Software\Sophos\Management Communications System\Registration,SecurityDescriptor=BinaryData,BinaryType=0,,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegRemoveValue(,Value=Create registration file,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: RegAddValue(,Value=Create registration file,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: ActionStart(Name=UpdateConfig,,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: ActionStart(Name=RestoreConfig,,)
    MSI (s) (48:18) [16:30:27:568]: Executing op: CustomActionRollback(Action=RestoreConfig,ActionType=3329,Source=BinaryData,Target=RestoreConfigFile,CustomActionData=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml)
    MSI (s) (48:18) [16:30:27:568]: Creating MSIHANDLE (124) of type 790536 for thread 1560
    MSI (s) (48:24) [16:30:27:568]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6CFA.tmp, Entrypoint: RestoreConfigFile
    MSI (s) (48!70) [16:30:27:584]: Creating MSIHANDLE (125) of type 790531 for thread 3696
    MSI (s) (48!70) [16:30:27:584]: Closing MSIHANDLE (125) of type 790531 for thread 3696
    MSI (s) (48!70) [16:30:27:584]: Creating MSIHANDLE (126) of type 790531 for thread 3696
    RestoreConfigFile:  Initialized.
    MSI (s) (48!70) [16:30:27:584]: Closing MSIHANDLE (126) of type 790531 for thread 3696
    MSI (s) (48!70) [16:30:27:584]: Creating MSIHANDLE (127) of type 790531 for thread 3696
    RestoreConfigFile:  Retrieving Custom Action Data.
    MSI (s) (48!70) [16:30:27:584]: Closing MSIHANDLE (127) of type 790531 for thread 3696
    MSI (s) (48!70) [16:30:27:584]: Creating MSIHANDLE (128) of type 790531 for thread 3696
    RestoreConfigFile:  CustomActionData : C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml

    MSI (s) (48!70) [16:30:27:584]: Closing MSIHANDLE (128) of type 790531 for thread 3696
    MSI (s) (48!70) [16:30:27:584]: Creating MSIHANDLE (129) of type 790531 for thread 3696
    RestoreConfigFile:  Calling function RevertConfigFile().
    MSI (s) (48!70) [16:30:27:584]: Closing MSIHANDLE (129) of type 790531 for thread 3696
    RestoreConfigFile:  CopyFileW failed with errorcode : 2
    MSI (s) (48:24) [16:30:27:584]: Closing MSIHANDLE (124) of type 790536 for thread 1560
    CustomAction RestoreConfig returned actual error code 1603 but will be translated to success due to continue marking
    MSI (s) (48:18) [16:30:27:584]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1],  Directory: [9],  Size: [6])
    MSI (s) (48:18) [16:30:27:584]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Certificates\Management Communications System\)
    MSI (s) (48:18) [16:30:27:584]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crt,,)
    MSI (s) (48:18) [16:30:27:584]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca2.crl,,)
    MSI (s) (48:18) [16:30:27:599]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crt,,)
    MSI (s) (48:18) [16:30:27:599]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Certificates\Management Communications System\sophosca1.crl,,)
    MSI (s) (48:18) [16:30:27:599]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\)
    MSI (s) (48:18) [16:30:27:599]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\sof.dat,,)
    MSI (s) (48:18) [16:30:27:599]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\scf.dat,,)
    MSI (s) (48:18) [16:30:27:599]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\log4cplus.dll,,)
    MSI (s) (48:18) [16:30:27:599]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsEvents.dll,,)
    MSI (s) (48:18) [16:30:27:599]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClientApi.dll,,)
    MSI (s) (48:18) [16:30:27:599]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsClient.exe,,)
    MSI (s) (48:18) [16:30:27:599]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAgent.exe,,)
    MSI (s) (48:18) [16:30:27:599]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\McsAdapter.dll,,)
    MSI (s) (48:18) [16:30:27:599]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\NOTICE.txt,,)
    MSI (s) (48:18) [16:30:27:599]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\)
    MSI (s) (48:18) [16:30:27:599]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,,)
    MSI (s) (48:18) [16:30:27:599]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:599]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])
    MSI (s) (48:18) [16:30:27:599]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Certificates\Management Communications System\,Foreign=0)
    MSI (s) (48:18) [16:30:27:599]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:599]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:599]: Executing op: FolderRemove(Folder=C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\,Foreign=0)
    MSI (s) (48:18) [16:30:27:599]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:599]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:599]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:599]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\,Foreign=0)
    MSI (s) (48:18) [16:30:27:599]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:599]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:599]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:599]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:615]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Management Communications System\Endpoint\,Foreign=0)
    MSI (s) (48:18) [16:30:27:615]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:615]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:615]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1])
    MSI (s) (48:18) [16:30:27:615]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={578BDEEE-701D-31A0-900B-6536599C12B3},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={DB029D72-9CB0-30DC-88B5-B10620D9DD1A},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={C76B5F65-5D5F-3843-9A16-F9EE6C874D8F},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={4C3A7A77-BFE9-309A-B576-33618A5B1A67},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,PreviouslyPinned=1)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={53426A52-E29B-397A-9556-8CEC984F99BC},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={B4606FC1-ADD6-3F4C-B9A7-BEA4CE07951E},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,PreviouslyPinned=1)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={E328F4A6-7B8C-43E8-8617-412B21315D23},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={FF4C7B96-DAD8-4D78-873C-0BDBAEDB284D},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={6122DB9B-B642-441B-98C8-347AFF15C46A},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={349D255F-61CD-4F4C-93F9-E25794CA5453},ProductKey={00000000-0000-0000-0000-000000000000},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={349D255F-61CD-4F4C-93F9-E25794CA5453},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={28803574-A8B2-4605-867C-B169F8CCBB7C},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={B9AE2D52-29D9-461D-9521-0FC49E06353C},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={516B534B-FD68-4D0F-B1D0-BBA72B3D3686},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={CEFA8768-F729-40B0-B200-0FD59832D7F9},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={D556A206-6111-41F1-92BD-CB0AE00D6213},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={D1D179EA-7354-46C1-A560-1A30F654B1CF},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={8F637D75-4651-4EF6-91F6-BD9AB5912889},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={D66C9DF2-7DD5-4A95-B2CE-94C485C38E5C},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={8A73E0EB-4580-4EC3-BC94-8893A743D682},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={EEA9A02F-9A1C-4C63-83BB-CA026D0A8365},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={7C62E8CD-A070-40F8-8A2D-69538D008931},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={8C4712AB-C080-4C8F-9EFE-91E4DA71C1B0},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: ComponentUnregister(ComponentId={77BF22C2-1C83-4AAF-81BE-5D1ACAC0DA5C},ProductKey={1FFD3F20-5D24-4C9A-B9F6-A207A53CF179},BinaryType=0,)
    MSI (s) (48:18) [16:30:27:615]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
    MSI (s) (48:18) [16:30:27:615]: Error in rollback skipped.    Return: 5
    MSI (s) (48:18) [16:30:27:615]: Note: 1: 2318 2:  
    MSI (s) (48:18) [16:30:27:615]: No System Restore sequence number for this installation.
    MSI (s) (48:18) [16:30:27:615]: Unlocking Server
    MSI (s) (48:18) [16:30:27:615]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
    Action ended 16:30:27: InstallFinalize. Return value 3.
    Action ended 16:30:27: INSTALL. Return value 3.
    Property(S): UpgradeCode = {7A6045EF-603A-4648-B227-2221E4A931BB}
    Property(S): EndpointFolder = C:\ProgramData\Sophos\Management Communications System\Endpoint\
    Property(S): AdapterStorageFolder = C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\
    Property(S): INSTALLDIR = C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\
    Property(S): ConfigurationFolder = C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\
    Property(S): ManagementCommunicationsCertificatesFolder = C:\ProgramData\Sophos\Certificates\Management Communications System\
    Property(S): ARPINSTALLLOCATION = C:\Program Files (x86)\Sophos\Management Communications System\Endpoint\
    Property(S): RestoreConfig = C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml
    Property(S): UpdateConfig = C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\Config.xml,dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com,,
    Property(S): StartMCSAgentService = Sophos MCS Agent
    Property(S): StartMCSClientService = Sophos MCS Client
    Property(S): SetPermissions.Deferred = 2{12}2{13}8{objectid}11{objecttable}6{action}8{identity}12{identitytype}11{inheritance}10{genericall}11{genericread}12{genericwrite}14{genericexecute}6{modify}10{objectpath}5{win64}14{EndpointFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}14{EndpointFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}14{EndpointFolder}6{Folder}5{Allow}15{Network Service}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}64{C:\ProgramData\Sophos\Management Communications System\Endpoint\}2{no}20{AdapterStorageFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}70{C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\}2{no}20{AdapterStorageFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}70{C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\}2{no}42{ManagementCommunicationsCertificatesFolder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}68{C:\ProgramData\Sophos\Certificates\Management Communications System\}2{no}42{ManagementCommunicationsCertificatesFolder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}68{C:\ProgramData\Sophos\Certificates\Management Communications System\}2{no}42{ManagementCommunicationsCertificatesFolder}6{Folder}5{Allow}15{Network Service}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}68{C:\ProgramData\Sophos\Certificates\Management Communications System\}2{no}12{McsAgent_Reg}8{Registry}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}48{MACHINE\Software\Sophos\Remote Management System}2{no}12{McsAgent_Reg}8{Registry}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}48{MACHINE\Software\Sophos\Remote Management System}2{no}20{McsAgentAdapters_Reg}8{Registry}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}73{MACHINE\Software\Sophos\Remote Management System\ManagementAgent\Adapters}2{no}20{McsAgentAdapters_Reg}8{Registry}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}73{MACHINE\Software\Sophos\Remote Management System\ManagementAgent\Adapters}2{no}
    Property(S): ExecServiceConfig = SchedServiceConfig€Sophos MCS Agent€0€restart€restart€restart€1€60€€€Sophos MCS Client€0€restart€restart€restart€1€60€€
    Property(S): RollbackServiceConfig = SchedServiceConfig
    Property(S): Certificates = C:\ProgramData\Sophos\Certificates\
    Property(S): SophosFolder = C:\ProgramData\Sophos\
    Property(S): ManagementCommunicationsSystemFolder = C:\ProgramData\Sophos\Management Communications System\
    Property(S): AgentFolder = C:\ProgramData\Sophos\Remote Management System\3\Agent\
    Property(S): ThreeFolder = C:\ProgramData\Sophos\Remote Management System\3\
    Property(S): RemoteManagementSystemFolder = C:\ProgramData\Sophos\Remote Management System\
    Property(S): CommonAppDataFolder = C:\ProgramData\
    Property(S): Sophos = C:\Program Files (x86)\Sophos\
    Property(S): TARGETDIR = I:\
    Property(S): ManagementCommunicationSystem = C:\Program Files (x86)\Sophos\Management Communications System\
    Property(S): ProgramFilesFolder = C:\Program Files (x86)\
    Property(S): SourceDir = C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\
    Property(S): VersionNT = 601
    Property(S): ALLUSERS = 1
    Property(S): ARPPRODUCTICON = Sophos_MCS_Icon
    Property(S): ARPCOMMENTS = Management Communications System
    Property(S): ARPCONTACT = Sophos Technical Support
    Property(S): ARPHELPLINK = http://www.sophos.com/support/
    Property(S): ARPNOMODIFY = 1
    Property(S): ARPNOREPAIR = 1
    Property(S): ARPURLINFOABOUT = http://www.sophos.com/
    Property(S): BuildReference = 99226
    Property(S): ProductFullVersion = 2.0.0.145
    Property(S): RegisterWithAutoUpdate = {8580B6E7-AD8F-4c42-8085-ABD5765C98C5};mcsep
    Property(S): Manufacturer = Sophos Limited
    Property(S): ProductCode = {1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}
    Property(S): ProductLanguage = 1033
    Property(S): ProductName = Sophos Management Communications System
    Property(S): ProductVersion = 2.0.0
    Property(S): SecureCustomProperties = FOUND_NEW_PRODUCT;FOUND_OLD_PRODUCT
    Property(S): INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 = I:\
    Property(S): WinSxsDirectory.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = C:\Windows\winsxs\
    Property(S): payload_ul.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = C:\Windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_f480bfaef65491a5\
    Property(S): WinSxsPolicies.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = C:\Windows\winsxs\Policies\
    Property(S): policydir.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = C:\Windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\
    Property(S): WindowsFolder.30729.6161.policy_9_0_Microsoft_VC90_CRT_x86.QFE.ED5CDF42_FC23_3F0F_80FC_C138299ADCC4 = C:\Windows\
    Property(S): WindowsFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\Windows\
    Property(S): SystemFolder.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\Windows\SysWOW64\
    Property(S): WinSxsDirectory.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\Windows\winsxs\
    Property(S): payload_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\
    Property(S): payload.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\
    Property(S): WinSxsManifests.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\Windows\winsxs\Manifests\
    Property(S): WinSxsPolicies.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\Windows\winsxs\Policies\
    Property(S): policydir.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
    Property(S): policydir_ul.30729.6161.Microsoft_VC90_CRT_x86.QFE.C8AE193F_7C6D_330A_93C7_EBBC23C30DBF = C:\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\
    Property(S): MsiLogFileLocation = C:\Users\skeets\AppData\Local\Temp\Sophos MCS Install Log.txt
    Property(S): PackageCode = {3B5370F7-1522-4057-BAFD-F144139D5D1E}
    Property(S): ProductState = -1
    Property(S): PackagecodeChanging = 1
    Property(S): REBOOT = REALLYSUPPRESS
    Property(S): TOKEN = a929e2e535aa6e02d392e9b3b1ccbf57a7bfc422c4f5ac0d905a6277c3f006f0
    Property(S): SERVER = dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com
    Property(S): CURRENTDIRECTORY = C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap
    Property(S): CLIENTUILEVEL = 3
    Property(S): CLIENTPROCESSID = 936
    Property(S): VersionDatabase = 300
    Property(S): VersionMsi = 5.00
    Property(S): VersionNT64 = 601
    Property(S): WindowsBuild = 7601
    Property(S): ServicePackLevel = 1
    Property(S): ServicePackLevelMinor = 0
    Property(S): MsiNTProductType = 1
    Property(S): WindowsFolder = C:\Windows\
    Property(S): WindowsVolume = C:\
    Property(S): System64Folder = C:\Windows\system32\
    Property(S): SystemFolder = C:\Windows\SysWOW64\
    Property(S): RemoteAdminTS = 1
    Property(S): TempFolder = C:\Users\skeets\AppData\Local\Temp\
    Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
    Property(S): ProgramFiles64Folder = C:\Program Files\
    Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
    Property(S): AppDataFolder = C:\Users\skeets\AppData\Roaming\
    Property(S): FavoritesFolder = C:\Users\skeets\Favorites\
    Property(S): NetHoodFolder = C:\Users\skeets\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
    Property(S): PersonalFolder = C:\Users\skeets\Documents\
    Property(S): PrintHoodFolder = C:\Users\skeets\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
    Property(S): RecentFolder = C:\Users\skeets\AppData\Roaming\Microsoft\Windows\Recent\
    Property(S): SendToFolder = C:\Users\skeets\AppData\Roaming\Microsoft\Windows\SendTo\
    Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
    Property(S): LocalAppDataFolder = C:\Users\skeets\AppData\Local\
    Property(S): MyPicturesFolder = C:\Users\skeets\Pictures\
    Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
    Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
    Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
    Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
    Property(S): DesktopFolder = C:\Users\Public\Desktop\
    Property(S): FontsFolder = C:\Windows\Fonts\
    Property(S): GPTSupport = 1
    Property(S): OLEAdvtSupport = 1
    Property(S): ShellAdvtSupport = 1
    Property(S): MsiAMD64 = 6
    Property(S): Msix64 = 6
    Property(S): Intel = 6
    Property(S): PhysicalMemory = 16253
    Property(S): VirtualMemory = 45380
    Property(S): AdminUser = 1
    Property(S): MsiTrueAdminUser = 1
    Property(S): LogonUser = skeets
    Property(S): UserSID = S-1-5-21-1518849926-864330799-965112142-1000
    Property(S): UserLanguageID = 3081
    Property(S): ComputerName = SKEETS-PC
    Property(S): SystemLanguageID = 3081
    Property(S): ScreenX = 1024
    Property(S): ScreenY = 768
    Property(S): CaptionHeight = 22
    Property(S): BorderTop = 1
    Property(S): BorderSide = 1
    Property(S): TextHeight = 16
    Property(S): TextInternalLeading = 3
    Property(S): ColorBits = 32
    Property(S): TTCSupport = 1
    Property(S): Time = 16:30:27
    Property(S): Date = 7/03/2016
    Property(S): MsiNetAssemblySupport = 4.0.30319.34209
    Property(S): MsiWin32AssemblySupport = 6.1.7601.17514
    Property(S): RedirectedDllSupport = 2
    Property(S): MsiRunningElevated = 1
    Property(S): Privileged = 1
    Property(S): USERNAME = skeets
    Property(S): DATABASE = C:\Windows\Installer\17369d1.msi
    Property(S): OriginalDatabase = C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\Sophos Management Communications System.msi
    Property(S): UILevel = 2
    Property(S): ACTION = INSTALL
    Property(S): ROOTDRIVE = I:\
    Property(S): CostingComplete = 1
    Property(S): OutOfDiskSpace = 0
    Property(S): OutOfNoRbDiskSpace = 0
    Property(S): PrimaryVolumeSpaceAvailable = 0
    Property(S): PrimaryVolumeSpaceRequired = 0
    Property(S): PrimaryVolumeSpaceRemaining = 0
    Property(S): INSTALLLEVEL = 1
    Property(S): SOURCEDIR = C:\Users\skeets\AppData\Local\Temp\sophos_bootstrap\mcsep\
    Property(S): SourcedirProduct = {1FFD3F20-5D24-4C9A-B9F6-A207A53CF179}
    Property(S): ProductToBeRegistered = 1
    MSI (s) (48:18) [16:30:27:630]: Note: 1: 1708
    MSI (s) (48:18) [16:30:27:630]: Product: Sophos Management Communications System -- Installation failed.

    MSI (s) (48:18) [16:30:27:630]: Windows Installer installed the product. Product Name: Sophos Management Communications System. Product Version: 2.0.0. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1603.

    MSI (s) (48:18) [16:30:27:630]: Deferring clean up of packages/files, if any exist
    MSI (s) (48:18) [16:30:27:630]: MainEngineThread is returning 1603
    MSI (s) (48:D4) [16:30:27:630]: RESTART MANAGER: Session closed.
    MSI (s) (48:D4) [16:30:27:630]: No System Restore sequence number for this installation.
    === Logging stopped: 7/03/2016  16:30:27 ===
    MSI (s) (48:D4) [16:30:27:630]: User policy value 'DisableRollback' is 0
    MSI (s) (48:D4) [16:30:27:630]: Machine policy value 'DisableRollback' is 0
    MSI (s) (48:D4) [16:30:27:630]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (48:D4) [16:30:27:630]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (48:D4) [16:30:27:630]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (48:D4) [16:30:27:630]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (s) (48:D4) [16:30:27:630]: Restoring environment variables
    MSI (s) (48:D4) [16:30:27:630]: Destroying RemoteAPI object.
    MSI (s) (48:C4) [16:30:27:630]: Custom Action Manager thread ending.
    MSI (c) (A8:38) [16:30:27:630]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (c) (A8:38) [16:30:27:630]: MainEngineThread is returning 1603
    === Verbose logging stopped: 7/03/2016  16:30:27 ===

  • 0 in reply to EddieBudas

    Hi,

    I suspect this is the problem:

    StartService:  StartServiceW failed with errorcode : 1053

    MSI (s) (48:B4) [16:30:27:506]: Closing MSIHANDLE (117) of type 790536 for thread 1560


    CustomAction StartMCSAgentService returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)

    So, for whatever reason, during the installation of MCS, the "Sophos MCS Agent" service failed to start.

    I'd be curious to know, did it create a log file that may have a message of use?

    Maybe it failed to early to even log. If it did, do you see anything under:

    • Windows 2000/XP/2003: C:\Documents and Settings\All Users\Application Data\Sophos\Management Communications System\Endpoint\Logs\ 
    • Windows Vista and above: C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\

    For the MCSAgent log?

    Otherwise, I would suggest running Process Monitor (technet.microsoft.com/.../processmonitor.aspx) during the installation.  

    Once the install fails, I would stop capturing and add a filter for the MCSAgent process.  Are there any Access Denied messages for example, what modules did it load, what was the exit code, etc.?  
    Ideally you would have a PML (Process Monitor Log file) from a computer (same OS) where it has worked to compare against.

    Regards,

    Jak 

Reply
  • 0 in reply to EddieBudas

    Hi,

    I suspect this is the problem:

    StartService:  StartServiceW failed with errorcode : 1053

    MSI (s) (48:B4) [16:30:27:506]: Closing MSIHANDLE (117) of type 790536 for thread 1560


    CustomAction StartMCSAgentService returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)

    So, for whatever reason, during the installation of MCS, the "Sophos MCS Agent" service failed to start.

    I'd be curious to know, did it create a log file that may have a message of use?

    Maybe it failed to early to even log. If it did, do you see anything under:

    • Windows 2000/XP/2003: C:\Documents and Settings\All Users\Application Data\Sophos\Management Communications System\Endpoint\Logs\ 
    • Windows Vista and above: C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\

    For the MCSAgent log?

    Otherwise, I would suggest running Process Monitor (technet.microsoft.com/.../processmonitor.aspx) during the installation.  

    Once the install fails, I would stop capturing and add a filter for the MCSAgent process.  Are there any Access Denied messages for example, what modules did it load, what was the exit code, etc.?  
    Ideally you would have a PML (Process Monitor Log file) from a computer (same OS) where it has worked to compare against.

    Regards,

    Jak 

Children
  • 0 in reply to jak

    Hi Jak,

    Sorry for the delay in getting back to you as I have been crook.

    I tried again today and the logs that I can find are the following:

    Sophos MCS Install log

    Sophos Extract Log

    Sophos endpoint bootstrap log.

    As fore the rest there are no other log types to be found.

    Sort of out of my league here, have been using Sophos products for almost 20yrs and this is the first time I can't get it installed on here.

    Weird thing is that it was installed on this particular pc but stopped working. I thought that something may have corrupted the program so I uninstalled it and tried to reload and that is when the issues started. Running windows 7 pro.

    cheers

    Eddie

  • 0 in reply to EddieBudas

    Hi,

    The only thing worth checking given the logs you've found (if they are later versions) is that the error message is the same.  i.e. you see in the MSI log the error:

    StartService:  StartServiceW failed with errorcode : 1053

    Before you run the install could you check the following points as it's interesting you say it has been installed on this computer before:

    1. Run:
    services.msc

    to launch the service control manager MMC snap-in. Hopefully the services:

    • Sophos MCS Agent
    • Sophos MCS Client

    Do not already exist?  Could it be the services are already present before the install starts which is affecting the install?

    If they do, maybe forcing a removal of them might be required.  I would always suggest try the MSIs first to do so I would suggest following:
    https://www.sophos.com/support/knowledgebase/122126.aspx

    I.e. create a batch file with the commands mentioned, e.g. uninstall.bat, the right click on it and Run as Administrator.

    If that still fails to remove the services, then you could run (in an administrative command prompt) the commands:
    sc delete "Sophos MCS Agent"

    sc delete "Sophos MCS Client"

    This will remove the 2 services using the command line interface to the Service Control Manager.  Not an ideal approach but at some point you may have to go down this route if this is the problem.


    2. The directory:
    C:\Programdata\sophos\

    already exists which is causing an issue.  If so, are you able to remove that before installing.  If you find it's stubborn to remove, I would suggest reboot first, failing which try a rename of the directory.

    Hopefully this helps.

    Regards,

    Jak

  • 0 in reply to jak

    Hi Jak,

    Well I have tried everything that you have suggested except the file part as I don't know how to do that and I can't get it to install.

    Still the same problem and now am really frustrated and have no idea what to do next

    Maybe I need a tech from sophos to show me by logging in and doing it.

    Starting to get really grumpy.

    cheers

    Eddie

Unfiltered HTML