This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

having issues pushing sophos to two computers

Hello 

been trying everything to get it pushed without vain

so i thouhg maybe some of you got into this issues before and may have a solution

here is the sophos log 

------------------------------------------

2016-07-01 18:48:30 Info: Logging started: installing/upgrading Sophos Anti-Virus
2016-07-01 18:48:30 Info: InstallFromPath is: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
2016-07-01 18:48:30 Info: InstallToPath is:
2016-07-01 18:48:30 Info: SAV is not installed. Installing to {InstallToPath}
2016-07-01 18:48:30 INFO: Checking the validity of the VDL manifest file.
2016-07-01 18:48:31 INFO: The manifest file has been successfully validated.
2016-07-01 18:48:31 INFO: Checking the validity of the AppFeed manifest file.
2016-07-01 18:48:31 INFO: The manifest file has been successfully validated.
2016-07-01 18:48:31 Info: Managed install (from SAU)
2016-07-01 18:48:31 Info: Performing major update of Sophos Anti-Virus using msi.
2016-07-01 18:48:31 Info: Update is signalled.
2016-07-01 18:48:31 UpdateVersionInfo(), SAU can't supply version info - using msi version
2016-07-01 18:48:31 Info: PutSetupOptionsToRegistry
2016-07-01 18:48:31 Info: Install MSXML
2016-07-01 18:48:31 Info: Check boot driver and kms driver
2016-07-01 18:48:31 Info: no existing installation of Sophos Anti-Virus was found
2016-07-01 18:48:31 Info: Restart required for Data Control (clean managed full install)
2016-07-01 18:48:31 Info: Transform file returned:
2016-07-01 18:48:31 Unable to QI IProductConfig
2016-07-01 18:48:31 Info: SAV Setup plugin: running MsiInstallProduct (C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi, INSTALLDIR="" REBOOT=ReallySuppress UITYPE=full CISCO_SUPPORTED=1 PRODUCTTYPE=0 UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1)
=== Verbose logging started: 7/1/2016 18:48:31 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (54:10) [18:48:31:036]: Resetting cached policy values
MSI (c) (54:10) [18:48:31:036]: Machine policy value 'Debug' is 0
MSI (c) (54:10) [18:48:31:036]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
******* Action:
******* CommandLine: **********
MSI (c) (54:10) [18:48:31:037]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (54:10) [18:48:31:037]: Grabbed execution mutex.
MSI (c) (54:10) [18:48:31:037]: Cloaking enabled.
MSI (c) (54:10) [18:48:31:037]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (54:10) [18:48:31:037]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (84:48) [18:48:31:039]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
MSI (s) (84:48) [18:48:31:039]: Grabbed execution mutex.
MSI (s) (84:14) [18:48:31:039]: Resetting cached policy values
MSI (s) (84:14) [18:48:31:039]: Machine policy value 'Debug' is 0
MSI (s) (84:14) [18:48:31:039]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
******* Action:
******* CommandLine: **********
MSI (s) (84:14) [18:48:31:040]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (84:14) [18:48:31:049]: SRSetRestorePoint skipped for this transaction.
MSI (s) (84:14) [18:48:31:050]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (s) (84:14) [18:48:31:050]: File will have security applied from OpCode.
MSI (s) (84:14) [18:48:31:055]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi' against software restriction policy
MSI (s) (84:14) [18:48:31:055]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi has a digital signature
MSI (s) (84:14) [18:48:31:055]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi is permitted to run because the user token authorizes execution (system or service token).
MSI (s) (84:14) [18:48:31:055]: End dialog not enabled
MSI (s) (84:14) [18:48:31:055]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
MSI (s) (84:14) [18:48:31:055]: Package we're running from ==> C:\Windows\Installer\34b0e.msi
MSI (s) (84:14) [18:48:31:059]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (84:14) [18:48:31:060]: APPCOMPAT: looking for appcompat database entry with ProductCode '{09863DA9-7A9B-4430-9561-E04D178D7017}'.
MSI (s) (84:14) [18:48:31:060]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (84:14) [18:48:31:061]: MSCOREE not loaded loading copy from system32
MSI (s) (84:14) [18:48:31:062]: Machine policy value 'TransformsSecure' is 0
MSI (s) (84:14) [18:48:31:062]: User policy value 'TransformsAtSource' is 0
MSI (s) (84:14) [18:48:31:063]: Machine policy value 'DisablePatch' is 0
MSI (s) (84:14) [18:48:31:063]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (84:14) [18:48:31:063]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (84:14) [18:48:31:063]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (84:14) [18:48:31:063]: APPCOMPAT: looking for appcompat database entry with ProductCode '{09863DA9-7A9B-4430-9561-E04D178D7017}'.
MSI (s) (84:14) [18:48:31:063]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (84:14) [18:48:31:063]: Transforms are not secure.
MSI (s) (84:14) [18:48:31:063]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos Anti-Virus Major Install Log_160702_014831.txt'.
MSI (s) (84:14) [18:48:31:063]: Command Line: INSTALLDIR= REBOOT=ReallySuppress UITYPE=full CISCO_SUPPORTED=1 PRODUCTTYPE=0 UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1 CURRENTDIRECTORY=C:\Windows\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=2900
MSI (s) (84:14) [18:48:31:063]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{29CA599D-B97B-45F6-B3F1-6866A25C90B0}'.
MSI (s) (84:14) [18:48:31:063]: Product Code passed to Engine.Initialize: ''
MSI (s) (84:14) [18:48:31:063]: Product Code from property table before transforms: '{09863DA9-7A9B-4430-9561-E04D178D7017}'
MSI (s) (84:14) [18:48:31:063]: Product Code from property table after transforms: '{09863DA9-7A9B-4430-9561-E04D178D7017}'
MSI (s) (84:14) [18:48:31:063]: Product not registered: beginning first-time install
MSI (s) (84:14) [18:48:31:063]: Product {09863DA9-7A9B-4430-9561-E04D178D7017} is not managed.
MSI (s) (84:14) [18:48:31:063]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (84:14) [18:48:31:063]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (84:14) [18:48:31:063]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (84:14) [18:48:31:063]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (84:14) [18:48:31:063]: Adding new sources is allowed.
MSI (s) (84:14) [18:48:31:063]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (84:14) [18:48:31:063]: Package name extracted from package path: 'Sophos Anti-Virus.msi'
MSI (s) (84:14) [18:48:31:064]: Package to be registered: 'Sophos Anti-Virus.msi'
MSI (s) (84:14) [18:48:31:064]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (84:14) [18:48:31:064]: Machine policy value 'DisableMsi' is 0
MSI (s) (84:14) [18:48:31:064]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (84:14) [18:48:31:064]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (84:14) [18:48:31:064]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (84:14) [18:48:31:064]: Running product '{09863DA9-7A9B-4430-9561-E04D178D7017}' with elevated privileges: Product is assigned.
MSI (s) (84:14) [18:48:31:064]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (84:14) [18:48:31:064]: PROPERTY CHANGE: Adding CISCO_SUPPORTED property. Its value is '1'.
MSI (s) (84:14) [18:48:31:064]: PROPERTY CHANGE: Modifying UPDATECLASSFILTER property. Its current value is '0'. Its new value: '1'.
MSI (s) (84:14) [18:48:31:064]: PROPERTY CHANGE: Adding UPDATEKMSDRIVERS property. Its value is '1'.
MSI (s) (84:14) [18:48:31:064]: PROPERTY CHANGE: Adding RECOVERYMODE property. Its value is '0'.
MSI (s) (84:14) [18:48:31:064]: PROPERTY CHANGE: Modifying DATACONTROL property. Its current value is '0'. Its new value: '1'.
MSI (s) (84:14) [18:48:31:064]: PROPERTY CHANGE: Modifying DEVICECONTROL property. Its current value is '0'. Its new value: '1'.
MSI (s) (84:14) [18:48:31:064]: PROPERTY CHANGE: Adding WEBCONTROL property. Its value is '1'.
MSI (s) (84:14) [18:48:31:064]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Windows\system32'.
MSI (s) (84:14) [18:48:31:064]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (84:14) [18:48:31:064]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
MSI (s) (84:14) [18:48:31:064]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '2900'.
MSI (s) (84:14) [18:48:31:064]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (84:14) [18:48:31:064]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
MSI (s) (84:14) [18:48:31:064]: TRANSFORMS property is now:
MSI (s) (84:14) [18:48:31:064]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (s) (84:14) [18:48:31:065]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming
MSI (s) (84:14) [18:48:31:065]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites
MSI (s) (84:14) [18:48:31:066]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (84:14) [18:48:31:066]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents
MSI (s) (84:14) [18:48:31:066]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (84:14) [18:48:31:067]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (84:14) [18:48:31:067]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (84:14) [18:48:31:067]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (84:14) [18:48:31:067]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (84:14) [18:48:31:068]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local
MSI (s) (84:14) [18:48:31:068]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures
MSI (s) (84:14) [18:48:31:069]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (84:14) [18:48:31:069]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (84:14) [18:48:31:069]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (84:14) [18:48:31:070]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (84:14) [18:48:31:070]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (84:14) [18:48:31:071]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (84:14) [18:48:31:071]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (84:14) [18:48:31:071]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (84:14) [18:48:31:072]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (84:14) [18:48:31:072]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop
MSI (s) (84:14) [18:48:31:072]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (84:14) [18:48:31:072]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (s) (84:14) [18:48:31:073]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (84:14) [18:48:31:074]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (84:14) [18:48:31:074]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (84:14) [18:48:31:074]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (84:14) [18:48:31:075]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (84:14) [18:48:31:075]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'john'.
MSI (s) (84:14) [18:48:31:075]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (84:14) [18:48:31:075]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Microsoft'.
MSI (s) (84:14) [18:48:31:075]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\34b0e.msi'.
MSI (s) (84:14) [18:48:31:075]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi'.
MSI (s) (84:14) [18:48:31:075]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (84:14) [18:48:31:075]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (s) (84:14) [18:48:31:075]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (84:14) [18:48:31:075]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (84:14) [18:48:31:075]: Machine policy value 'DisableRollback' is 0
MSI (s) (84:14) [18:48:31:075]: User policy value 'DisableRollback' is 0
MSI (s) (84:14) [18:48:31:075]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
=== Logging started: 7/1/2016 18:48:31 ===
MSI (s) (84:14) [18:48:31:075]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (84:14) [18:48:31:075]: Doing action: INSTALL
Action start 18:48:31: INSTALL.
MSI (s) (84:14) [18:48:31:076]: Running ExecuteSequence
MSI (s) (84:14) [18:48:31:076]: Doing action: AppSearch
Action start 18:48:31: AppSearch.
MSI (s) (84:14) [18:48:31:076]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (s) (84:14) [18:48:31:077]: Doing action: LaunchConditions
Action ended 18:48:31: AppSearch. Return value 1.
Action start 18:48:31: LaunchConditions.
MSI (s) (84:14) [18:48:31:077]: Skipping action: CheckUserIsSophosAdmin (condition is false)
MSI (s) (84:14) [18:48:31:077]: Skipping action: TP_CheckRemoveAllowed (condition is false)
MSI (s) (84:14) [18:48:31:077]: Doing action: FindRelatedProducts
Action ended 18:48:31: LaunchConditions. Return value 1.
MSI (s) (84:14) [18:48:31:077]: Note: 1: 2205 2: 3: Upgrade
MSI (s) (84:14) [18:48:31:077]: Note: 1: 2228 2: 3: Upgrade 4: SELECT `UpgradeCode`,`VersionMin`,`VersionMax`,`Language`,`Attributes`,`ActionProperty` FROM `Upgrade`
Action start 18:48:31: FindRelatedProducts.
MSI (s) (84:14) [18:48:31:077]: Skipping action: CCPSearch (condition is false)
MSI (s) (84:14) [18:48:31:077]: Skipping action: RMCCPSearch (condition is false)
MSI (s) (84:14) [18:48:31:077]: Doing action: ValidateProductID
Action ended 18:48:31: FindRelatedProducts. Return value 0.
Action start 18:48:31: ValidateProductID.
MSI (s) (84:14) [18:48:31:077]: Doing action: setUserProfileNT
Action ended 18:48:31: ValidateProductID. Return value 1.
MSI (s) (84:14) [18:48:31:077]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Users\Default'.
Action start 18:48:31: setUserProfileNT.
MSI (s) (84:14) [18:48:31:078]: Skipping action: SetAllUsersProfileNT (condition is false)
MSI (s) (84:14) [18:48:31:078]: Doing action: setAllUsersProfile2K
Action ended 18:48:31: setUserProfileNT. Return value 1.
MSI (s) (84:14) [18:48:31:078]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\ProgramData'.
Action start 18:48:31: setAllUsersProfile2K.
MSI (s) (84:14) [18:48:31:078]: Doing action: CostInitialize
Action ended 18:48:31: setAllUsersProfile2K. Return value 1.
MSI (s) (84:14) [18:48:31:078]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (s) (84:14) [18:48:31:078]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (s) (84:14) [18:48:31:079]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (84:14) [18:48:31:079]: Note: 1: 2205 2: 3: Patch
MSI (s) (84:14) [18:48:31:079]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (84:14) [18:48:31:079]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (84:14) [18:48:31:079]: Note: 1: 2205 2: 3: __MsiPatchFileList
MSI (s) (84:14) [18:48:31:079]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (84:14) [18:48:31:079]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
MSI (s) (84:14) [18:48:31:079]: Note: 1: 2205 2: 3: Patch
Action start 18:48:31: CostInitialize.
MSI (s) (84:14) [18:48:31:079]: Doing action: FileCost
Action ended 18:48:31: CostInitialize. Return value 1.
MSI (s) (84:14) [18:48:31:079]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (84:14) [18:48:31:081]: Note: 1: 2205 2: 3: Class
MSI (s) (84:14) [18:48:31:081]: Note: 1: 2205 2: 3: Extension
MSI (s) (84:14) [18:48:31:081]: Note: 1: 2205 2: 3: TypeLib
Action start 18:48:31: FileCost.
MSI (s) (84:14) [18:48:31:081]: Doing action: SetMFC71
Action ended 18:48:31: FileCost. Return value 1.
Action start 18:48:31: SetMFC71.
MSI (s) (84:14) [18:48:31:081]: Doing action: IsolateComponents
Action ended 18:48:31: SetMFC71. Return value 1.
Action start 18:48:31: IsolateComponents.
MSI (s) (84:14) [18:48:31:081]: Doing action: CostFinalize
Action ended 18:48:31: IsolateComponents. Return value 0.
MSI (s) (84:14) [18:48:31:082]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (84:14) [18:48:31:082]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (84:14) [18:48:31:082]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (84:14) [18:48:31:082]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (84:14) [18:48:31:082]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (84:14) [18:48:31:082]: Note: 1: 2205 2: 3: Patch
MSI (s) (84:14) [18:48:31:082]: Note: 1: 2205 2: 3: Condition
MSI (s) (84:14) [18:48:31:082]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
MSI (s) (84:14) [18:48:31:082]: PROPERTY CHANGE: Adding newfolder1 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\'.
MSI (s) (84:14) [18:48:31:082]: PROPERTY CHANGE: Adding newfolder2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\'.
MSI (s) (84:14) [18:48:31:082]: PROPERTY CHANGE: Adding NEW_DIRECTORY2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\'.
MSI (s) (84:14) [18:48:31:082]: PROPERTY CHANGE: Adding ProgramFiles64Folder property. Its value is 'C:\'.
MSI (s) (84:14) [18:48:31:082]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'C:\'.
MSI (s) (84:14) [18:48:31:082]: PROPERTY CHANGE: Adding GlobalAssemblyCache property. Its value is 'C:\'.
MSI (s) (84:14) [18:48:31:082]: PROPERTY CHANGE: Adding CommonFiles64Folder property. Its value is 'C:\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Users\Default'. Its new value: 'C:\Users\Default\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Modifying ALLUSERSPROFILE property. Its current value is 'C:\ProgramData'. Its new value: 'C:\ProgramData\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding System64Folder property. Its value is 'C:\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding SOPHOS property. Its value is 'C:\Program Files\Sophos\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding SOPHOS_ANTI_VIRUS property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding INSTALLDIR_X64 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding INSTALLDIR_WIN32 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding INSTALLDIR_IA64 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding Microsoft.VC90.CRT property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding Microsoft.VC90.ATL property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding NEW_DIRECTORY1 property. Its value is 'C:\ProgramData\Sophos\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding SOPHOS_TAMPER_PROTECTION property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding LOGS3 property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\logs\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding SOPHOS_DEVICE_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding LOGS2 property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\logs\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding SOPHOS_DATA_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding LOGS1 property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\logs\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding RESOURCES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding RES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding NEW_DIRECTORY3 property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding CACHE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding TEMP property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding LOGS property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\logs\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding INFECTED property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding CONFIG property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding CISCO_SYSTEMS property. Its value is 'C:\Program Files\Common Files\Cisco Systems\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding CISCOTRUSTAGENT property. Its value is 'C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding PLUGINS property. Its value is 'C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\'.
MSI (s) (84:14) [18:48:31:083]: PROPERTY CHANGE: Adding INSTALL property. Its value is 'C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\'.
MSI (s) (84:14) [18:48:31:083]: Target path resolution complete. Dumping Directory table...
MSI (s) (84:14) [18:48:31:083]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: TARGETDIR , Object: C:\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: ProgramMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: newfolder1 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: newfolder2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: StartMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: WindowsVolume , Object: C:\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: WindowsFolder , Object: C:\Windows\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: TemplateFolder , Object: C:\ProgramData\Microsoft\Windows\Templates\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: TempFolder , Object: C:\Windows\TEMP\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: System16Folder , Object: C:\Windows\system\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: StartupFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: SendToFolder , Object: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: ProgramFiles64Folder , Object: C:\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: PrimaryVolumePath , Object: C:\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: LocalAppDataFolder , Object: C:\Windows\system32\config\systemprofile\AppData\Local\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: GlobalAssemblyCache , Object: C:\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: FontsFolder , Object: C:\Windows\Fonts\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: FavoritesFolder , Object: C:\Windows\system32\config\systemprofile\Favorites\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: DesktopFolder , Object: C:\Users\Public\Desktop\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: CommonFiles64Folder , Object: C:\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: AdminToolsFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: USERPROFILE , Object: C:\Users\Default\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: ALLUSERSPROFILE , Object: C:\ProgramData\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: System64Folder , Object: C:\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: SystemFolder , Object: C:\Windows\system32\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: SOPHOS , Object: C:\Program Files\Sophos\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: SOPHOS_ANTI_VIRUS , Object: C:\Program Files\Sophos\Sophos Anti-Virus\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files\Sophos\Sophos Anti-Virus\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: INSTALLDIR_X64 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: INSTALLDIR_WIN32 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: INSTALLDIR_IA64 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: Microsoft.VC90.CRT , Object: C:\Program Files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: Microsoft.VC90.ATL , Object: C:\Program Files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: LOGS3 , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\logs\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\Sophos Device Control\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: LOGS2 , Object: C:\ProgramData\Sophos\Sophos Device Control\logs\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\Sophos Data Control\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: LOGS1 , Object: C:\ProgramData\Sophos\Sophos Data Control\logs\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: RESOURCES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: RES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: CACHE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: TEMP , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: LOGS , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\logs\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: INFECTED , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: CONFIG , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: CommonFilesFolder , Object: C:\Program Files\Common Files\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: CISCO_SYSTEMS , Object: C:\Program Files\Common Files\Cisco Systems\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: CISCOTRUSTAGENT , Object: C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: PLUGINS , Object: C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\
MSI (s) (84:14) [18:48:31:083]: Dir (target): Key: INSTALL , Object: C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\
MSI (s) (84:14) [18:48:31:083]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (84:14) [18:48:31:083]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
Action start 18:48:31: CostFinalize.
MSI (s) (84:14) [18:48:31:117]: Doing action: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 18:48:31: CostFinalize. Return value 1.
MSI (s) (84:14) [18:48:31:117]: PROPERTY CHANGE: Modifying SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its current value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'. Its new value: 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
Action start 18:48:31: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (84:14) [18:48:31:118]: Doing action: ResolveSource
Action ended 18:48:31: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (84:14) [18:48:31:118]: Resolving source.
MSI (s) (84:14) [18:48:31:118]: Resolving source to launched-from source.
MSI (s) (84:14) [18:48:31:118]: Setting launched-from source as last-used.
MSI (s) (84:14) [18:48:31:118]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\'.
MSI (s) (84:14) [18:48:31:118]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\'.
MSI (s) (84:14) [18:48:31:118]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{09863DA9-7A9B-4430-9561-E04D178D7017}'.
MSI (s) (84:14) [18:48:31:118]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
MSI (s) (84:14) [18:48:31:118]: SOURCEDIR product ==> {09863DA9-7A9B-4430-9561-E04D178D7017}
MSI (s) (84:14) [18:48:31:130]: SECREPAIR: CryptAcquireContext: Could not create the default key container
MSI (s) (84:14) [18:48:31:130]: Determining source type
MSI (s) (84:14) [18:48:31:130]: Source type from package 'Sophos Anti-Virus.msi': 0
MSI (s) (84:14) [18:48:31:130]: SECREPAIR: Hash Database: C:\Windows\Installer\SourceHash{09863DA9-7A9B-4430-9561-E04D178D7017}
MSI (s) (84:14) [18:48:31:130]: SECREPAIR: SourceHash database file already exists. Deleting it.
MSI (s) (84:14) [18:48:31:139]: Note: 1: 2262 2: SourceHash 3: -2147287038
MSI (s) (84:14) [18:48:31:157]: SECREPAIR: New Hash Database creation complete.
MSI (s) (84:14) [18:48:31:157]: SECREPAIR: Crypt Provider not initialized. Error:0
MSI (s) (84:14) [18:48:31:162]: SECREPAIR: Crypt Provider not initialized. Error:0
MSI (s) (84:14) [18:48:31:162]: SECREPAIR: Crypt Provider not initialized. Error:0
MSI (s) (84:14) [18:48:31:162]: SECREPAIR: Crypt Provider not initialized. Error:0
MSI (s) (84:14) [18:48:31:162]: SECREPAIR: Crypt Provider not initialized. Error:0
MSI (s) (84:14) [18:48:31:162]: SECREPAIR: Crypt Provider not initialized. Error:0
MSI (s) (84:14) [18:48:31:162]: SECREPAIR: Crypt Provider not initialized. Error:0
MSI (s) (84:14) [18:48:31:162]: SECREPAIR: Crypt Provider not initialized. Error:0
MSI (s) (84:14) [18:48:31:162]: SECREPAIR: Crypt Provider not initialized. Error:997
MSI (s) (84:14) [18:48:31:162]: SECUREREPAIR: Failed to CreateContentHash of the file: program files\Sophos\Sophos Anti-Virus\sav32cli.exe: for computing its hash. Error: 997
MSI (s) (84:14) [18:48:31:163]: SECREPAIR: Failed to create hash for the install source files
MSI (s) (84:14) [18:48:31:163]: SECUREREPAIR: SecureRepair Failed. Error code: 3e570F98008
Action start 18:48:31: ResolveSource.
MSI (s) (84:14) [18:48:31:164]:
Action ended 18:48:31: ResolveSource. Return value 3.
Action ended 18:48:31: INSTALL. Return value 3.
Property(S): DiskPrompt = [1]
Property(S): INSTALL = C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\
Property(S): CISCO_SUPPORTED = 1
Property(S): CONFIG = C:\ProgramData\Sophos\Sophos Anti-Virus\Config\
Property(S): INFECTED = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\
Property(S): LOGS = C:\ProgramData\Sophos\Sophos Anti-Virus\logs\
Property(S): TEMP = C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\
Property(S): CACHE = C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\
Property(S): LOGS1 = C:\ProgramData\Sophos\Sophos Data Control\logs\
Property(S): LOGS2 = C:\ProgramData\Sophos\Sophos Device Control\logs\
Property(S): LOGS3 = C:\ProgramData\Sophos\Sophos Tamper Protection\logs\
Property(S): INSTALLDIR = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): Microsoft.VC90.ATL = C:\Program Files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\
Property(S): Microsoft.VC90.CRT = C:\Program Files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\
Property(S): INSTALLDIR_IA64 = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): INSTALLDIR_WIN32 = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): INSTALLDIR_X64 = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): BootDriverStartup = 0
Property(S): DeleteBDLs = 0
Property(S): DeleteIDEs = 0
Property(S): ALLUSERS = 1
Property(S): SystemFolder = C:\Windows\system32\
Property(S): System64Folder = C:\
Property(S): RemoveSAVI = INSTALLDIR
Property(S): RollbackOtherFiles = 0
Property(S): RollbackSavi = 0
Property(S): SetAdminGroupDescription = SophosAdministrators may run Sophos Anti-Virus with complete access
Property(S): ALLUSERSPROFILE = C:\ProgramData\
Property(S): UPDATEDRIVERS = 1
Property(S): TARGETDIR = C:\
Property(S): SetOnAccessGroupDescription = Contains accounts used by Sophos Anti-Virus when it performs threat scanning and cleanup functions
Property(S): SetPowerGroupDescription = SophosPowerUsers may run Sophos Anti-Virus with the access that SophosUsers have, plus greater access to cleanup
Property(S): UpdateSAVI = 0
Property(S): SetUserGroupDescription = SophosUsers may run Sophos Anti-Virus with limited access to scanning configuration and cleanup
Property(S): USERPROFILE = C:\Users\Default\
Property(S): EventType = BEGIN_SYSTEM_CHANGE
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): CommonFiles64Folder = C:\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FavoritesFolder = C:\Windows\system32\config\systemprofile\Favorites\
Property(S): FontsFolder = C:\Windows\Fonts\
Property(S): GlobalAssemblyCache = C:\
Property(S): LocalAppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Local\
Property(S): PrimaryVolumePath = C:\
Property(S): ProgramFiles64Folder = C:\
Property(S): SendToFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): System16Folder = C:\Windows\system\
Property(S): TempFolder = C:\Windows\TEMP\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): WindowsFolder = C:\Windows\
Property(S): WindowsVolume = C:\
Property(S): PLUGINS = C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\
Property(S): CISCOTRUSTAGENT = C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\
Property(S): CISCO_SYSTEMS = C:\Program Files\Common Files\Cisco Systems\
Property(S): CommonFilesFolder = C:\Program Files\Common Files\
Property(S): RESOURCES = C:\ProgramData\Sophos\Sophos Anti-Virus\
Property(S): NEW_DIRECTORY3 = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
Property(S): RES = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
Property(S): NEW_DIRECTORY1 = C:\ProgramData\Sophos\
Property(S): SOPHOS_DATA_CONTROL = C:\ProgramData\Sophos\Sophos Data Control\
Property(S): SOPHOS_DEVICE_CONTROL = C:\ProgramData\Sophos\Sophos Device Control\
Property(S): SOPHOS_TAMPER_PROTECTION = C:\ProgramData\Sophos\Sophos Tamper Protection\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): SOPHOS_ANTI_VIRUS = C:\Program Files\Sophos\Sophos Anti-Virus\
Property(S): SOPHOS = C:\Program Files\Sophos\
Property(S): ProgramFilesFolder = C:\Program Files\
Property(S): NEW_DIRECTORY2 = C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): newfolder2 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\
Property(S): newfolder1 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
Property(S): VersionNT = 601
Property(S): AdminUser = 1
Property(S): Manufacturer = Sophos Limited
Property(S): ProductCode = {09863DA9-7A9B-4430-9561-E04D178D7017}
Property(S): ProductLanguage = 1033
Property(S): ProductName = Sophos Anti-Virus
Property(S): ProductVersion = 10.6.3.537
Property(S): UpgradeCode = {597B239E-3032-491A-A322-817737925E8A}
Property(S): _IsMaintenance = Change
Property(S): _IsSetupTypeMin = Typical
Property(S): AFTERREBOOT = 0
Property(S): AgreeToLicense = No
Property(S): ApplicationUsers = AllUsers
Property(S): APPLYCLASSICCONFIG = 0
Property(S): ARPCOMMENTS = Protects your computer and network from threats
Property(S): ARPCONTACT = Sophos Technical Support
Property(S): ARPHELPLINK = http://www.sophos.com/support
Property(S): ARPHELPTELEPHONE =
Property(S): ARPNOMODIFY = 1
Property(S): ARPNOREPAIR = 1
Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe
Property(S): ARPURLINFOABOUT = http://www.sophos.com
Property(S): ARPURLUPDATEINFO = www.sophos.com/.../updates
Property(S): BOOTDRIVERSIGNED = 0
Property(S): CHECKFORCOMPETITORS = 1
Property(S): CHECKFORSCF = 1
Property(S): CLASSFILTERPRESENT = 0
Property(S): CopyBDLs = 0
Property(S): CopyIDEs = 0
Property(S): DATACONTROL = 1
Property(S): DefaultUIFont = Tahoma8
Property(S): DEVICECONTROL = 1
Property(S): DialogCaption = Sophos Installer
Property(S): DISABLEONACCESS = 0
Property(S): Display_IsBitmapDlg = 1
Property(S): DisplayNameCustom = Custom
Property(S): DisplayNameMinimal = Minimal
Property(S): DisplayNameTypical = Typical
Property(S): DRIVERVERSION = 0
Property(S): FIRST_INSTALL_DATE = 0
Property(S): IDEONLY = 0
Property(S): InstallChoice = AR
Property(S): INSTALLLEVEL = 100
Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1]
Property(S): IS_PROGMSG_XML_COSTING = Costing XML files...
Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s...
Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes...
Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s...
Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes...
Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s...
Property(S): IS_SQLSERVER_AUTHENTICATION = 0
Property(S): IS_SQLSERVER_USERNAME = sa
Property(S): ISReleaseFlags = SAV
Property(S): ISVROOT_PORT_NO = 0
Property(S): MAJORUPGRADE = 0
Property(S): MANAGED = 1
Property(S): MSIRESTARTMANAGERCONTROL = Disable
Property(S): NEEDREBOOT = 0
Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@
Property(S): PRODUCTTYPE = 0
Property(S): PROCESSOR_NX_ENABLED = 0
Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s
Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools...
Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s
Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories...
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions...
Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories...
Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool
Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools...
Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d
Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s
Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions...
Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools...
Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes...
Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions...
Property(S): ProgressType0 = install
Property(S): ProgressType1 = Installing
Property(S): ProgressType2 = installed
Property(S): ProgressType3 = installs
Property(S): RebootYesNo = Yes
Property(S): Registration = No
Property(S): ReinstallModeText = omus
Property(S): SAVIONLY = 0
Property(S): SCRIPTDIR = [SOURCEDIR]
Property(S): SequenceNumber = 0
Property(S): SetupType = Typical
Property(S): UITYPE = full
Property(S): UNINSTALLBOOTDRIVERS = 1
Property(S): UNINSTALLCLASSFILTER = 1
Property(S): UNINSTALLDRIVERS = 1
Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus.
Property(S): UNINSTALLKMSDRIVERS = 1
Property(S): UPDATEBOOTDRIVERS = 1
Property(S): UPDATECLASSFILTER = 1
Property(S): VIRUSDATAUPDATE = 0
Property(S): SecureCustomProperties = EXCLUDEDPROCESSES;INSTALLINGVERSION;MAJORUPGRADE;WEBCONTROL
Property(S): WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\
Property(S): SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\
Property(S): SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\
Property(S): REBOOTREQUIREDFILE.11DACB83_28A7_4FA6_AF5B_C006E340C101 = SwiRebootRequired.txt
Property(S): MsiLogFileLocation = C:\Windows\TEMP\Sophos Anti-Virus Major Install Log_160702_014831.txt
Property(S): PackageCode = {29CA599D-B97B-45F6-B3F1-6866A25C90B0}
Property(S): ProductState = -1
Property(S): PackagecodeChanging = 1
Property(S): REBOOT = ReallySuppress
Property(S): UPDATEKMSDRIVERS = 1
Property(S): RECOVERYMODE = 0
Property(S): WEBCONTROL = 1
Property(S): CURRENTDIRECTORY = C:\Windows\system32
Property(S): CLIENTUILEVEL = 3
Property(S): MSICLIENTUSESEXTERNALUI = 1
Property(S): CLIENTPROCESSID = 2900
Property(S): VersionDatabase = 200
Property(S): VersionMsi = 5.00
Property(S): WindowsBuild = 7601
Property(S): ServicePackLevel = 1
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 1
Property(S): RemoteAdminTS = 1
Property(S): AppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\
Property(S): NetHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Windows\system32\config\systemprofile\Documents\
Property(S): PrintHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): MyPicturesFolder = C:\Windows\system32\config\systemprofile\Pictures\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): Intel = 6
Property(S): PhysicalMemory = 3558
Property(S): VirtualMemory = 6230
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = SYSTEM
Property(S): UserSID = S-1-5-18
Property(S): UserLanguageID = 1033
Property(S): ComputerName = RP-07
Property(S): SystemLanguageID = 1033
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 22
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 18:48:31
Property(S): Date = 7/1/2016
Property(S): MsiNetAssemblySupport = 4.6.1055.0
Property(S): MsiWin32AssemblySupport = 6.1.7601.17514
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): USERNAME = john
Property(S): COMPANYNAME = Microsoft
Property(S): DATABASE = C:\Windows\Installer\34b0e.msi
Property(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
Property(S): UILevel = 2
Property(S): ACTION = INSTALL
Property(S): ROOTDRIVE = C:\
Property(S): CostingComplete = 0
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
Property(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
Property(S): SourcedirProduct = {09863DA9-7A9B-4430-9561-E04D178D7017}
MSI (s) (84:14) [18:48:31:177]: Windows Installer installed the product. Product Name: Sophos Anti-Virus. Product Version: 10.6.3.537. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1603.

MSI (s) (84:14) [18:48:31:221]: Deferring clean up of packages/files, if any exist
MSI (s) (84:14) [18:48:31:221]: MainEngineThread is returning 1603
MSI (s) (84:48) [18:48:31:222]: No System Restore sequence number for this installation.
=== Logging stopped: 7/1/2016 18:48:31 ===
MSI (s) (84:48) [18:48:31:222]: User policy value 'DisableRollback' is 0
MSI (s) (84:48) [18:48:31:222]: Machine policy value 'DisableRollback' is 0
MSI (s) (84:48) [18:48:31:222]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (84:48) [18:48:31:222]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (84:48) [18:48:31:222]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (84:48) [18:48:31:222]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (84:48) [18:48:31:223]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (84:48) [18:48:31:223]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (84:48) [18:48:31:223]: Restoring environment variables
MSI (c) (54:10) [18:48:31:223]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (54:10) [18:48:31:224]: MainEngineThread is returning 1603
=== Verbose logging stopped: 7/1/2016 18:48:31 ===

2016-07-01 18:48:31 ERROR: Installation failed

-------------------------

thank you



This thread was automatically locked due to age.
Parents Reply Children
  • yes all computers are up to date , and its only happening to one computer out of 500 , i tried everything possible still wont install only component it would install is the auto update and then it fails for the rest of the components. 

    unfortunately your suggestions  didn't work either  

  • after analyzing the logs and using processmon i found the issue was the crypto keys , renaming the folder c:\programdata\microsoft\crypto\rsa\s-1-5-18  fixed the issue

    now i have another issue  i'm looking into it which is that specific computer keep reporting as differs from policy 

  • Hi,

    For differs from policy, you want to enable loglevel 2 on just the Sophos Agent service. community.sophos.com/.../30496

    You can then inspect the Agent log and it will break down the policy vs. config to show you which option or options are different.

    Regards,

    Jak

  • i figured out what the issue is it has nothing do with the policy , sophos auto update was able to install all products except network threat protection , trying to install it manually give me the weird msi error , ill have to trace it down then figure out what is causing the issue.

    thanks for your reply.