Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 4 subscribers
  • Views 11490 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Anti-Virus will not install

Matthew Henry

Hi,

 

I'm having real trouble installing Sophos on a number of machines. AutoUpdate, Network Threat Protection, Remote Management and System Protection install file but the AntiVirus fails with the following

 

Windows Installer installed the product. Product Name: Sophos Anti-Virus. Product Version: 10.6.3.537. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1603.

 

 

Sophos was previously installed. I've tried everything including scripts to remove all traces but i've come to a standstill.

 

Any help would be appreciated.

 

Thanks



This thread was automatically locked due to age.
Parents
  • 0

    Hello Matthew Henry,

    1603 is the general error code. The specific reason should be in the Sophos Anti-Virus Major Install Log... or Sophos Anti-Virus Major CustomActions Log... in \Windows\Temp\. Could you post the relevant parts (or the complete logs if you can't spot the error) here? What was the previous version and which Windows version?

    Christian

  • 0 in reply to QC

    Hi, thanks for replying

     

    Says previous version has not been fully removed. Please reboot - complete log below.

     

    Thanks for your help.

     

    2016-11-08 14:30:08 Info: Logging started: installing/upgrading Sophos Anti-Virus
    2016-11-08 14:30:08 Info: InstallFromPath is: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
    2016-11-08 14:30:08 Info: InstallToPath is:
    2016-11-08 14:30:08 Call to MsiGetProductInfo failed for product {F6C47233-40F6-4076-89A9-68B43C2AF5C5} with error code: 1608
    2016-11-08 14:30:08 Call to MsiGetProductInfo failed for product {26A24AE4-039D-4CA4-87B4-2F83218065F0} with error code: 1608
    2016-11-08 14:30:08 Call to MsiGetProductInfo failed for product {26A24AE4-039D-4CA4-87B4-2F86418065F0} with error code: 1608
    2016-11-08 14:30:08 Call to MsiGetProductInfo failed for product {CB559CC6-969F-4A53-BE12-E76312FE5671} with error code: 1608
    2016-11-08 14:30:08 Info: SAV is not installed. Installing to {InstallToPath}
    2016-11-08 14:30:08 INFO: Checking the validity of the VDL manifest file.
    2016-11-08 14:30:09 INFO: The manifest file has been successfully validated.
    2016-11-08 14:30:09 INFO: Checking the validity of the AppFeed manifest file.
    2016-11-08 14:30:09 INFO: The manifest file has been successfully validated.
    2016-11-08 14:30:09 Info: Managed install (from SAU)
    2016-11-08 14:30:09 Info: Performing major update of Sophos Anti-Virus using msi.
    2016-11-08 14:30:09 Info: Update is signalled.
    2016-11-08 14:30:09 Call to MsiGetProductInfo failed for product {F6C47233-40F6-4076-89A9-68B43C2AF5C5} with error code: 1608
    2016-11-08 14:30:09 Call to MsiGetProductInfo failed for product {26A24AE4-039D-4CA4-87B4-2F83218065F0} with error code: 1608
    2016-11-08 14:30:09 Call to MsiGetProductInfo failed for product {26A24AE4-039D-4CA4-87B4-2F86418065F0} with error code: 1608
    2016-11-08 14:30:09 Call to MsiGetProductInfo failed for product {CB559CC6-969F-4A53-BE12-E76312FE5671} with error code: 1608
    2016-11-08 14:30:09 UpdateVersionInfo(), SAU can't supply version info - using msi version
    2016-11-08 14:30:09 Info: PutSetupOptionsToRegistry
    2016-11-08 14:30:09 Info: Install MSXML
    2016-11-08 14:30:09 Info: Check boot driver and kms driver
    2016-11-08 14:30:09 Info: no existing installation of Sophos Anti-Virus was found
    2016-11-08 14:30:09 Info: Restart required for Data Control (clean managed full install)
    2016-11-08 14:30:09 Info: Transform file returned:
    2016-11-08 14:30:09 Unable to QI IProductConfig
    2016-11-08 14:30:09 Info: SAV Setup plugin: running MsiInstallProduct (C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi, INSTALLDIR="" REBOOT=ReallySuppress UITYPE=full CISCO_SUPPORTED=1 PRODUCTTYPE=0  UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1)
    === Verbose logging started: 08/11/2016  14:30:09  Build type: SHIP UNICODE 5.00.10011.00  Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
    MSI (c) (78:84) [14:30:09:875]: Resetting cached policy values
    MSI (c) (78:84) [14:30:09:875]: Machine policy value 'Debug' is 0
    MSI (c) (78:84) [14:30:09:875]: ******* RunEngine:
               ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
               ******* Action:
               ******* CommandLine: **********
    MSI (c) (78:84) [14:30:09:876]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (78:84) [14:30:09:876]: Grabbed execution mutex.
    MSI (c) (78:84) [14:30:09:878]: Cloaking enabled.
    MSI (c) (78:84) [14:30:09:878]: Attempting to enable all disabled privileges before calling Install on Server
    MSI (c) (78:84) [14:30:09:880]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (1C:D8) [14:30:09:885]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
    MSI (s) (1C:D8) [14:30:09:885]: Grabbed execution mutex.
    MSI (s) (1C:9C) [14:30:09:887]: Resetting cached policy values
    MSI (s) (1C:9C) [14:30:09:887]: Machine policy value 'Debug' is 0
    MSI (s) (1C:9C) [14:30:09:887]: ******* RunEngine:
               ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
               ******* Action:
               ******* CommandLine: **********
    MSI (s) (1C:9C) [14:30:09:888]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (1C:9C) [14:30:09:927]: Note: 1: 2203 2: C:\windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (1C:9C) [14:30:09:934]: SRSetRestorePoint skipped for this transaction.
    MSI (s) (1C:9C) [14:30:09:936]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
    MSI (s) (1C:9C) [14:30:09:937]: File will have security applied from OpCode.
    MSI (s) (1C:9C) [14:30:09:945]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi' against software restriction policy
    MSI (s) (1C:9C) [14:30:09:945]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi has a digital signature
    MSI (s) (1C:9C) [14:30:09:945]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi is permitted to run because the user token authorizes execution (system or service token).
    MSI (s) (1C:9C) [14:30:09:945]: MSCOREE not loaded loading copy from system32
    MSI (s) (1C:9C) [14:30:09:948]: End dialog not enabled
    MSI (s) (1C:9C) [14:30:09:948]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
    MSI (s) (1C:9C) [14:30:09:948]: Package we're running from ==> C:\windows\Installer\24061b74.msi
    MSI (s) (1C:9C) [14:30:09:954]: APPCOMPAT: Compatibility mode property overrides found.
    MSI (s) (1C:9C) [14:30:09:954]: APPCOMPAT: looking for appcompat database entry with ProductCode '{09863DA9-7A9B-4430-9561-E04D178D7017}'.
    MSI (s) (1C:9C) [14:30:09:954]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (1C:9C) [14:30:09:959]: Machine policy value 'TransformsSecure' is 0
    MSI (s) (1C:9C) [14:30:09:959]: User policy value 'TransformsAtSource' is 0
    MSI (s) (1C:9C) [14:30:09:959]: Machine policy value 'DisablePatch' is 0
    MSI (s) (1C:9C) [14:30:09:960]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (1C:9C) [14:30:09:960]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (1C:9C) [14:30:09:960]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (1C:9C) [14:30:09:960]: APPCOMPAT: looking for appcompat database entry with ProductCode '{09863DA9-7A9B-4430-9561-E04D178D7017}'.
    MSI (s) (1C:9C) [14:30:09:960]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (1C:9C) [14:30:09:960]: Transforms are not secure.
    MSI (s) (1C:9C) [14:30:09:961]: Note: 1: 2205 2:  3: Control
    MSI (s) (1C:9C) [14:30:09:961]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\windows\TEMP\Sophos Anti-Virus Major Install Log_161108_023009.txt'.
    MSI (s) (1C:9C) [14:30:09:961]: Command Line: INSTALLDIR= REBOOT=ReallySuppress UITYPE=full CISCO_SUPPORTED=1 PRODUCTTYPE=0 UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1 CURRENTDIRECTORY=C:\windows\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=13688
    MSI (s) (1C:9C) [14:30:09:961]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{29CA599D-B97B-45F6-B3F1-6866A25C90B0}'.
    MSI (s) (1C:9C) [14:30:09:961]: Product Code passed to Engine.Initialize:           ''
    MSI (s) (1C:9C) [14:30:09:961]: Product Code from property table before transforms: '{09863DA9-7A9B-4430-9561-E04D178D7017}'
    MSI (s) (1C:9C) [14:30:09:961]: Product Code from property table after transforms:  '{09863DA9-7A9B-4430-9561-E04D178D7017}'
    MSI (s) (1C:9C) [14:30:09:961]: Product not registered: beginning first-time install
    MSI (s) (1C:9C) [14:30:09:961]: Product {09863DA9-7A9B-4430-9561-E04D178D7017} is not managed.
    MSI (s) (1C:9C) [14:30:09:961]: MSI_LUA: Credential prompt not required, user is an admin
    MSI (s) (1C:9C) [14:30:09:961]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
    MSI (s) (1C:9C) [14:30:09:961]: Entering CMsiConfigurationManager::SetLastUsedSource.
    MSI (s) (1C:9C) [14:30:09:961]: User policy value 'SearchOrder' is 'nmu'
    MSI (s) (1C:9C) [14:30:09:961]: Adding new sources is allowed.
    MSI (s) (1C:9C) [14:30:09:961]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
    MSI (s) (1C:9C) [14:30:09:961]: Package name extracted from package path: 'Sophos Anti-Virus.msi'
    MSI (s) (1C:9C) [14:30:09:961]: Package to be registered: 'Sophos Anti-Virus.msi'
    MSI (s) (1C:9C) [14:30:09:963]: Note: 1: 2262 2: AdminProperties 3: -2147287038
    MSI (s) (1C:9C) [14:30:09:963]: Machine policy value 'DisableMsi' is 0
    MSI (s) (1C:9C) [14:30:09:963]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (1C:9C) [14:30:09:963]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (1C:9C) [14:30:09:963]: Product installation will be elevated because user is admin and product is being installed per-machine.
    MSI (s) (1C:9C) [14:30:09:963]: Running product '{09863DA9-7A9B-4430-9561-E04D178D7017}' with elevated privileges: Product is assigned.
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Adding CISCO_SUPPORTED property. Its value is '1'.
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Modifying UPDATECLASSFILTER property. Its current value is '0'. Its new value: '1'.
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Adding UPDATEKMSDRIVERS property. Its value is '1'.
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Adding RECOVERYMODE property. Its value is '0'.
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Modifying DATACONTROL property. Its current value is '0'. Its new value: '1'.
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Modifying DEVICECONTROL property. Its current value is '0'. Its new value: '1'.
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Adding WEBCONTROL property. Its value is '1'.
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\windows\system32'.
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '13688'.
    MSI (s) (1C:9C) [14:30:09:963]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
    MSI (s) (1C:9C) [14:30:09:963]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
    MSI (s) (1C:9C) [14:30:09:963]: TRANSFORMS property is now:
    MSI (s) (1C:9C) [14:30:09:963]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
    MSI (s) (1C:9C) [14:30:09:963]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\AppData\Roaming
    MSI (s) (1C:9C) [14:30:09:963]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\Favorites
    MSI (s) (1C:9C) [14:30:09:963]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts
    MSI (s) (1C:9C) [14:30:09:963]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\Documents
    MSI (s) (1C:9C) [14:30:09:963]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
    MSI (s) (1C:9C) [14:30:09:963]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent
    MSI (s) (1C:9C) [14:30:09:963]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo
    MSI (s) (1C:9C) [14:30:09:963]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates
    MSI (s) (1C:9C) [14:30:09:963]: SHELL32::SHGetFolderPath returned: C:\ProgramData
    MSI (s) (1C:9C) [14:30:09:963]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\AppData\Local
    MSI (s) (1C:9C) [14:30:09:964]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\Pictures
    MSI (s) (1C:9C) [14:30:09:964]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (1C:9C) [14:30:09:964]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (1C:9C) [14:30:09:964]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
    MSI (s) (1C:9C) [14:30:09:964]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
    MSI (s) (1C:9C) [14:30:09:964]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
    MSI (s) (1C:9C) [14:30:09:964]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (1C:9C) [14:30:09:964]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (1C:9C) [14:30:09:964]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
    MSI (s) (1C:9C) [14:30:09:964]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
    MSI (s) (1C:9C) [14:30:09:964]: SHELL32::SHGetFolderPath returned: C:\windows\system32\config\systemprofile\Desktop
    MSI (s) (1C:9C) [14:30:09:964]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
    MSI (s) (1C:9C) [14:30:09:964]: SHELL32::SHGetFolderPath returned: C:\windows\Fonts
    MSI (s) (1C:9C) [14:30:09:965]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
    MSI (s) (1C:9C) [14:30:09:970]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
    MSI (s) (1C:9C) [14:30:09:970]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
    MSI (s) (1C:9C) [14:30:09:970]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
    MSI (s) (1C:9C) [14:30:09:970]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (1C:9C) [14:30:09:970]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'IT'.
    MSI (s) (1C:9C) [14:30:09:970]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (1C:9C) [14:30:09:970]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Swanshurst'.
    MSI (s) (1C:9C) [14:30:09:970]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\windows\Installer\24061b74.msi'.
    MSI (s) (1C:9C) [14:30:09:970]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi'.
    MSI (s) (1C:9C) [14:30:09:970]: Machine policy value 'MsiDisableEmbeddedUI' is 0
    MSI (s) (1C:9C) [14:30:09:970]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
    MSI (s) (1C:9C) [14:30:09:970]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
    MSI (s) (1C:9C) [14:30:09:970]: Note: 1: 2205 2:  3: PatchPackage
    MSI (s) (1C:9C) [14:30:09:970]: Machine policy value 'DisableRollback' is 0
    MSI (s) (1C:9C) [14:30:09:970]: User policy value 'DisableRollback' is 0
    MSI (s) (1C:9C) [14:30:09:970]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
    === Logging started: 08/11/2016  14:30:09 ===
    MSI (s) (1C:9C) [14:30:09:971]: Note: 1: 2203 2: C:\windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (1C:9C) [14:30:09:971]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
    MSI (s) (1C:9C) [14:30:09:971]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
    MSI (s) (1C:9C) [14:30:09:971]: Doing action: INSTALL
    Action start 14:30:09: INSTALL.
    MSI (s) (1C:9C) [14:30:09:972]: Running ExecuteSequence
    MSI (s) (1C:9C) [14:30:09:972]: Doing action: AppSearch
    Action start 14:30:09: AppSearch.
    MSI (s) (1C:9C) [14:30:09:973]: Note: 1: 2262 2: Signature 3: -2147287038
    MSI (s) (1C:9C) [14:30:09:973]: Doing action: LaunchConditions
    Action ended 14:30:09: AppSearch. Return value 1.
    Action start 14:30:09: LaunchConditions.
    MSI (s) (1C:9C) [14:30:09:974]: Skipping action: CheckUserIsSophosAdmin (condition is false)
    MSI (s) (1C:9C) [14:30:09:974]: Skipping action: TP_CheckRemoveAllowed (condition is false)
    MSI (s) (1C:9C) [14:30:09:974]: Doing action: FindRelatedProducts
    Action ended 14:30:09: LaunchConditions. Return value 1.
    MSI (s) (1C:9C) [14:30:09:974]: Note: 1: 2205 2:  3: Upgrade
    MSI (s) (1C:9C) [14:30:09:974]: Note: 1: 2228 2:  3: Upgrade 4: SELECT `UpgradeCode`,`VersionMin`,`VersionMax`,`Language`,`Attributes`,`ActionProperty` FROM `Upgrade`
    Action start 14:30:09: FindRelatedProducts.
    MSI (s) (1C:9C) [14:30:09:974]: Skipping action: CCPSearch (condition is false)
    MSI (s) (1C:9C) [14:30:09:974]: Skipping action: RMCCPSearch (condition is false)
    MSI (s) (1C:9C) [14:30:09:974]: Doing action: ValidateProductID
    Action ended 14:30:09: FindRelatedProducts. Return value 0.
    Action start 14:30:09: ValidateProductID.
    MSI (s) (1C:9C) [14:30:09:975]: Doing action: setUserProfileNT
    Action ended 14:30:09: ValidateProductID. Return value 1.
    MSI (s) (1C:9C) [14:30:09:975]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Users\Default'.
    Action start 14:30:09: setUserProfileNT.
    MSI (s) (1C:9C) [14:30:09:975]: Skipping action: SetAllUsersProfileNT (condition is false)
    MSI (s) (1C:9C) [14:30:09:975]: Doing action: setAllUsersProfile2K
    Action ended 14:30:09: setUserProfileNT. Return value 1.
    MSI (s) (1C:9C) [14:30:09:976]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\ProgramData'.
    Action start 14:30:09: setAllUsersProfile2K.
    MSI (s) (1C:9C) [14:30:09:976]: Doing action: CostInitialize
    Action ended 14:30:09: setAllUsersProfile2K. Return value 1.
    MSI (s) (1C:9C) [14:30:09:977]: Machine policy value 'MaxPatchCacheSize' is 10
    MSI (s) (1C:9C) [14:30:09:978]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
    MSI (s) (1C:9C) [14:30:09:978]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
    MSI (s) (1C:9C) [14:30:09:978]: Note: 1: 2205 2:  3: Patch
    MSI (s) (1C:9C) [14:30:09:978]: Note: 1: 2205 2:  3: PatchPackage
    MSI (s) (1C:9C) [14:30:09:978]: Note: 1: 2205 2:  3: MsiPatchHeaders
    MSI (s) (1C:9C) [14:30:09:979]: Note: 1: 2205 2:  3: __MsiPatchFileList
    MSI (s) (1C:9C) [14:30:09:979]: Note: 1: 2205 2:  3: PatchPackage
    MSI (s) (1C:9C) [14:30:09:979]: Note: 1: 2228 2:  3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId` 
    MSI (s) (1C:9C) [14:30:09:979]: Note: 1: 2205 2:  3: Patch
    Action start 14:30:09: CostInitialize.
    MSI (s) (1C:9C) [14:30:09:979]: Doing action: FileCost
    Action ended 14:30:09: CostInitialize. Return value 1.
    MSI (s) (1C:9C) [14:30:09:979]: Note: 1: 2205 2:  3: MsiAssembly
    MSI (s) (1C:9C) [14:30:09:982]: Note: 1: 2205 2:  3: Class
    MSI (s) (1C:9C) [14:30:09:982]: Note: 1: 2205 2:  3: Extension
    MSI (s) (1C:9C) [14:30:09:982]: Note: 1: 2205 2:  3: TypeLib
    Action start 14:30:09: FileCost.
    MSI (s) (1C:9C) [14:30:09:982]: Doing action: SetMFC71
    Action ended 14:30:09: FileCost. Return value 1.
    Action start 14:30:09: SetMFC71.
    MSI (s) (1C:9C) [14:30:09:983]: Doing action: IsolateComponents
    Action ended 14:30:09: SetMFC71. Return value 1.
    Action start 14:30:09: IsolateComponents.
    MSI (s) (1C:9C) [14:30:09:983]: Doing action: CostFinalize
    Action ended 14:30:09: IsolateComponents. Return value 0.
    MSI (s) (1C:9C) [14:30:09:984]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
    MSI (s) (1C:9C) [14:30:09:984]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
    MSI (s) (1C:9C) [14:30:09:984]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
    MSI (s) (1C:9C) [14:30:09:984]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
    MSI (s) (1C:9C) [14:30:09:984]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
    MSI (s) (1C:9C) [14:30:09:984]: Note: 1: 2205 2:  3: Patch
    MSI (s) (1C:9C) [14:30:09:984]: Note: 1: 2205 2:  3: Condition
    MSI (s) (1C:9C) [14:30:09:984]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
    MSI (s) (1C:9C) [14:30:09:985]: PROPERTY CHANGE: Adding newfolder1 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\'.
    MSI (s) (1C:9C) [14:30:09:985]: PROPERTY CHANGE: Adding newfolder2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\'.
    MSI (s) (1C:9C) [14:30:09:985]: PROPERTY CHANGE: Adding NEW_DIRECTORY2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\'.
    MSI (s) (1C:9C) [14:30:09:985]: PROPERTY CHANGE: Adding System16Folder property. Its value is 'C:\'.
    MSI (s) (1C:9C) [14:30:09:985]: WIN64DUALFOLDERS: 'C:\windows\SysWOW64\' will substitute 20 characters in 'C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1).
    MSI (s) (1C:9C) [14:30:09:985]: PROPERTY CHANGE: Modifying SendToFolder property. Its current value is 'C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\'. Its new value: 'C:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\'.
    MSI (s) (1C:9C) [14:30:09:985]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0).
    MSI (s) (1C:9C) [14:30:09:985]: PROPERTY CHANGE: Modifying ProgramFiles64Folder property. Its current value is 'C:\Program Files\'. Its new value: 'C:\Program Files (x86)\'.
    MSI (s) (1C:9C) [14:30:09:985]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'C:\'.
    MSI (s) (1C:9C) [14:30:09:985]: WIN64DUALFOLDERS: 'C:\windows\SysWOW64\' will substitute 20 characters in 'C:\windows\system32\config\systemprofile\AppData\Local\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1).
    MSI (s) (1C:9C) [14:30:09:985]: PROPERTY CHANGE: Modifying LocalAppDataFolder property. Its current value is 'C:\windows\system32\config\systemprofile\AppData\Local\'. Its new value: 'C:\windows\SysWOW64\config\systemprofile\AppData\Local\'.
    MSI (s) (1C:9C) [14:30:09:985]: PROPERTY CHANGE: Adding GlobalAssemblyCache property. Its value is 'C:\'.
    MSI (s) (1C:9C) [14:30:09:985]: WIN64DUALFOLDERS: 'C:\windows\SysWOW64\' will substitute 20 characters in 'C:\windows\system32\config\systemprofile\Favorites\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1).
    MSI (s) (1C:9C) [14:30:09:985]: PROPERTY CHANGE: Modifying FavoritesFolder property. Its current value is 'C:\windows\system32\config\systemprofile\Favorites\'. Its new value: 'C:\windows\SysWOW64\config\systemprofile\Favorites\'.
    MSI (s) (1C:9C) [14:30:09:985]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\Common Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0).
    MSI (s) (1C:9C) [14:30:09:985]: PROPERTY CHANGE: Modifying CommonFiles64Folder property. Its current value is 'C:\Program Files\Common Files\'. Its new value: 'C:\Program Files (x86)\Common Files\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Users\Default'. Its new value: 'C:\Users\Default\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Modifying ALLUSERSPROFILE property. Its current value is 'C:\ProgramData'. Its new value: 'C:\ProgramData\'.
    MSI (s) (1C:9C) [14:30:09:986]: WIN64DUALFOLDERS: 'C:\windows\SysWOW64\' will substitute 20 characters in 'C:\windows\system32\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1).
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Modifying System64Folder property. Its current value is 'C:\windows\system32\'. Its new value: 'C:\windows\SysWOW64\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding SOPHOS property. Its value is 'C:\Program Files (x86)\Sophos\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding SOPHOS_ANTI_VIRUS property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding INSTALLDIR_X64 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding INSTALLDIR_WIN32 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding INSTALLDIR_IA64 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding Microsoft.VC90.CRT property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding Microsoft.VC90.ATL property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding NEW_DIRECTORY1 property. Its value is 'C:\ProgramData\Sophos\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding SOPHOS_TAMPER_PROTECTION property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding LOGS3 property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\logs\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding SOPHOS_DEVICE_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding LOGS2 property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\logs\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding SOPHOS_DATA_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding LOGS1 property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\logs\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding RESOURCES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding RES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding NEW_DIRECTORY3 property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding CACHE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding TEMP property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding LOGS property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\logs\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding INFECTED property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding CONFIG property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding CISCO_SYSTEMS property. Its value is 'C:\Program Files (x86)\Common Files\Cisco Systems\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding CISCOTRUSTAGENT property. Its value is 'C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding PLUGINS property. Its value is 'C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\'.
    MSI (s) (1C:9C) [14:30:09:986]: PROPERTY CHANGE: Adding INSTALL property. Its value is 'C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\'.
    MSI (s) (1C:9C) [14:30:09:986]: Target path resolution complete. Dumping Directory table...
    MSI (s) (1C:9C) [14:30:09:986]: Note: target paths subject to change (via custom actions or browsing)
    MSI (s) (1C:9C) [14:30:09:986]: Dir (target): Key: TARGETDIR , Object: C:\
    MSI (s) (1C:9C) [14:30:09:986]: Dir (target): Key: ProgramMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
    MSI (s) (1C:9C) [14:30:09:986]: Dir (target): Key: newfolder1 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
    MSI (s) (1C:9C) [14:30:09:986]: Dir (target): Key: newfolder2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\
    MSI (s) (1C:9C) [14:30:09:986]: Dir (target): Key: StartMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\
    MSI (s) (1C:9C) [14:30:09:986]: Dir (target): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\
    MSI (s) (1C:9C) [14:30:09:986]: Dir (target): Key: WindowsVolume , Object: C:\
    MSI (s) (1C:9C) [14:30:09:986]: Dir (target): Key: WindowsFolder , Object: C:\windows\
    MSI (s) (1C:9C) [14:30:09:986]: Dir (target): Key: TemplateFolder , Object: C:\ProgramData\Microsoft\Windows\Templates\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: TempFolder , Object: C:\windows\TEMP\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: System16Folder , Object: C:\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: StartupFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: SendToFolder , Object: C:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: ProgramFiles64Folder , Object: C:\Program Files (x86)\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: PrimaryVolumePath , Object: C:\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: LocalAppDataFolder , Object: C:\windows\SysWOW64\config\systemprofile\AppData\Local\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: GlobalAssemblyCache , Object: C:\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: FontsFolder , Object: C:\windows\Fonts\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: FavoritesFolder , Object: C:\windows\SysWOW64\config\systemprofile\Favorites\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: DesktopFolder , Object: C:\Users\Public\Desktop\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: CommonFiles64Folder , Object: C:\Program Files (x86)\Common Files\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: AdminToolsFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: USERPROFILE , Object: C:\Users\Default\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: ALLUSERSPROFILE , Object: C:\ProgramData\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: System64Folder , Object: C:\windows\SysWOW64\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: SystemFolder , Object: C:\windows\SysWOW64\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files (x86)\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: SOPHOS , Object: C:\Program Files (x86)\Sophos\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: SOPHOS_ANTI_VIRUS , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: INSTALLDIR_X64 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: INSTALLDIR_WIN32 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: INSTALLDIR_IA64 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: Microsoft.VC90.CRT , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: Microsoft.VC90.ATL , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: LOGS3 , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\logs\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\Sophos Device Control\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: LOGS2 , Object: C:\ProgramData\Sophos\Sophos Device Control\logs\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\Sophos Data Control\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: LOGS1 , Object: C:\ProgramData\Sophos\Sophos Data Control\logs\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: RESOURCES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: RES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: CACHE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: TEMP , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: LOGS , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\logs\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: INFECTED , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: CONFIG , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: CommonFilesFolder , Object: C:\Program Files (x86)\Common Files\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: CISCO_SYSTEMS , Object: C:\Program Files (x86)\Common Files\Cisco Systems\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: CISCOTRUSTAGENT , Object: C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: PLUGINS , Object: C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\
    MSI (s) (1C:9C) [14:30:09:987]: Dir (target): Key: INSTALL , Object: C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\
    MSI (s) (1C:9C) [14:30:09:987]: Note: 1: 2205 2:  3: MsiAssembly
    MSI (s) (1C:9C) [14:30:09:987]: Note: 1: 2228 2:  3: MsiAssembly 4:  SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`,  `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE  `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
    Action start 14:30:09: CostFinalize.
    MSI (s) (1C:9C) [14:30:09:992]: Doing action: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101
    Action ended 14:30:09: CostFinalize. Return value 1.
    MSI (s) (1C:9C) [14:30:09:992]: PROPERTY CHANGE: Modifying SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\'.
    Action start 14:30:09: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101.
    MSI (s) (1C:9C) [14:30:09:993]: Doing action: ResolveSource
    Action ended 14:30:09: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
    MSI (s) (1C:9C) [14:30:09:993]: Resolving source.
    MSI (s) (1C:9C) [14:30:09:993]: Resolving source to launched-from source.
    MSI (s) (1C:9C) [14:30:09:993]: Setting launched-from source as last-used.
    MSI (s) (1C:9C) [14:30:09:993]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\'.
    MSI (s) (1C:9C) [14:30:09:993]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\'.
    MSI (s) (1C:9C) [14:30:09:993]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{09863DA9-7A9B-4430-9561-E04D178D7017}'.
    MSI (s) (1C:9C) [14:30:09:993]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
    MSI (s) (1C:9C) [14:30:09:993]: SOURCEDIR product ==> {09863DA9-7A9B-4430-9561-E04D178D7017}
    MSI (s) (1C:9C) [14:30:09:994]: SECREPAIR: CryptAcquireContext succeeded
    MSI (s) (1C:9C) [14:30:09:994]: Determining source type
    MSI (s) (1C:9C) [14:30:09:995]: Source type from package 'Sophos Anti-Virus.msi': 0
    MSI (s) (1C:9C) [14:30:09:995]: SECREPAIR: Hash Database: C:\windows\Installer\SourceHash{09863DA9-7A9B-4430-9561-E04D178D7017}
    MSI (s) (1C:9C) [14:30:09:995]: SECREPAIR: SourceHash database file already exists. Deleting it.
    MSI (s) (1C:9C) [14:30:09:997]: Note: 1: 2262 2: SourceHash 3: -2147287038
    MSI (s) (1C:9C) [14:30:10:007]: SECREPAIR: New Hash Database creation complete.
    Action start 14:30:09: ResolveSource.
    MSI (s) (1C:9C) [14:30:10:441]: Source path resolution complete. Dumping Directory table...
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: TARGETDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ , LongSubPath:  , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: ProgramMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\ , LongSubPath: Programs\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: newfolder1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\Sophos\ , LongSubPath: Programs\Sophos\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: newfolder2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\Sophos\Sophos Endpoint Security and Control\ , LongSubPath: Programs\Sophos\Sophos Endpoint Security and Control\ , ShortSubPath: Programs\Sophos\SOPHOS~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: StartMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Start Menu\ , LongSubPath: Start Menu\ , ShortSubPath: STARTM~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Start Menu\Sophos\ , LongSubPath: Start Menu\Sophos\ , ShortSubPath: STARTM~1\Sophos\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: WindowsVolume , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinRoot\ , LongSubPath: WinRoot\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: WindowsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: TemplateFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ShellNew\ , LongSubPath: ShellNew\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: TempFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Temp\ , LongSubPath: Temp\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: System16Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System\ , LongSubPath: System\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: StartupFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\StartUp\ , LongSubPath: StartUp\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: SendToFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\SendTo\ , LongSubPath: SendTo\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: ProgramFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Program Files 64\ , LongSubPath: Program Files 64\ , ShortSubPath: Prog64~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: PrimaryVolumePath , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\PrimaryVolumePath\ , LongSubPath: PrimaryVolumePath\ , ShortSubPath: Primar~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: LocalAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\LocalAppData\ , LongSubPath: LocalAppData\ , ShortSubPath: LocalA~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: GlobalAssemblyCache , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\GlobalAssemblyCache\ , LongSubPath: GlobalAssemblyCache\ , ShortSubPath: Global~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: FontsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Fonts\ , LongSubPath: Fonts\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: FavoritesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Favorites\ , LongSubPath: Favorites\ , ShortSubPath: FAVORI~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: DesktopFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Desktop\ , LongSubPath: Desktop\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: CommonFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common64\ , LongSubPath: Common64\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: AdminToolsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\AdminTools\ , LongSubPath: AdminTools\ , ShortSubPath: Admint~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: USERPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\UserProfile\ , LongSubPath: UserProfile\ , ShortSubPath: USERPR~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: ALLUSERSPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\All Users\ , LongSubPath: All Users\ , ShortSubPath: ALLUSE~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: System64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System64\ , LongSubPath: System64\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: SystemFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System32\ , LongSubPath: System32\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: ProgramFilesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\ , LongSubPath: program files\ , ShortSubPath: PROGRA~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: SOPHOS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\ , LongSubPath: program files\Sophos\ , ShortSubPath: PROGRA~1\Sophos\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: SOPHOS_ANTI_VIRUS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: INSTALLDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Control\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: INSTALLDIR_X64 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_X64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_X64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\WSC_X64\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: INSTALLDIR_WIN32 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\jwgiamqy\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: INSTALLDIR_IA64 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_IA64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_IA64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\WSC_IA64\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: Microsoft.VC90.CRT , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\oeg2ttzz\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: Microsoft.VC90.ATL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\l3j1top6\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: CommonAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\ , LongSubPath: CommonAppData\ , ShortSubPath: Common~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\ , LongSubPath: CommonAppData\Sophos\ , ShortSubPath: Common~1\Sophos\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Tamper Protection\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: LOGS3 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Tamper Protection\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\logs\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Device Control\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: LOGS2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Device Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\logs\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Data Control\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: LOGS1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Data Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\logs\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: RESOURCES , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: RES , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: CACHE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Cache\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: TEMP , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Temp\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: LOGS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\logs\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: INFECTED , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: CONFIG , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Config\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Config\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: CommonFilesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common\ , LongSubPath: Common\ , ShortSubPath:
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: CISCO_SYSTEMS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common\Cisco Systems\ , LongSubPath: Common\Cisco Systems\ , ShortSubPath: Common\CISCOS~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: CISCOTRUSTAGENT , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common\Cisco Systems\CiscoTrustAgent\ , LongSubPath: Common\Cisco Systems\CiscoTrustAgent\ , ShortSubPath: Common\CISCOS~1\CISCOT~1\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: PLUGINS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common\Cisco Systems\CiscoTrustAgent\Plugins\ , LongSubPath: Common\Cisco Systems\CiscoTrustAgent\Plugins\ , ShortSubPath: Common\CISCOS~1\CISCOT~1\Plugins\
    MSI (s) (1C:9C) [14:30:10:441]: Dir (source): Key: INSTALL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common\Cisco Systems\CiscoTrustAgent\Plugins\Install\ , LongSubPath: Common\Cisco Systems\CiscoTrustAgent\Plugins\Install\ , ShortSubPath: Common\CISCOS~1\CISCOT~1\Plugins\Install\
    MSI (s) (1C:9C) [14:30:10:442]: Doing action: SetInstallDir
    Action ended 14:30:10: ResolveSource. Return value 1.
    Action start 14:30:10: SetInstallDir.
    MSI (s) (1C:9C) [14:30:10:442]: Skipping action: UninstallDowngradeCheck (condition is false)
    MSI (s) (1C:9C) [14:30:10:442]: Doing action: SetScriptProperty
    Action ended 14:30:10: SetInstallDir. Return value 1.
    MSI (s) (1C:9C) [14:30:10:443]: PROPERTY CHANGE: Adding RunPreLaunchScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.6.3.537"'.
    Action start 14:30:10: SetScriptProperty.
    MSI (s) (1C:9C) [14:30:10:443]: Skipping action: CheckForSophosClientFirewall (condition is false)
    MSI (s) (1C:9C) [14:30:10:443]: Doing action: ISInitAllUsers
    Action ended 14:30:10: SetScriptProperty. Return value 1.
    MSI (s) (1C:9C) [14:30:10:444]: PROPERTY CHANGE: Modifying ALLUSERS property. Its current value is '1'. Its new value: '2'.
    Action start 14:30:10: ISInitAllUsers.
    MSI (s) (1C:9C) [14:30:10:444]: Doing action: SetODBCFolders
    Action ended 14:30:10: ISInitAllUsers. Return value 1.
    MSI (s) (1C:9C) [14:30:10:444]: Note: 1: 2205 2:  3: ODBCDriver
    MSI (s) (1C:9C) [14:30:10:444]: Note: 1: 2228 2:  3: ODBCDriver 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCDriver`, `Component` WHERE `ODBCDriver`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2)
    MSI (s) (1C:9C) [14:30:10:444]: Note: 1: 2205 2:  3: ODBCTranslator
    MSI (s) (1C:9C) [14:30:10:444]: Note: 1: 2228 2:  3: ODBCTranslator 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCTranslator`, `Component` WHERE `ODBCTranslator`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2)
    Action start 14:30:10: SetODBCFolders.
    MSI (s) (1C:9C) [14:30:10:444]: Doing action: MigrateFeatureStates
    Action ended 14:30:10: SetODBCFolders. Return value 0.
    Action start 14:30:10: MigrateFeatureStates.
    MSI (s) (1C:9C) [14:30:10:445]: Doing action: InstallValidate
    Action ended 14:30:10: MigrateFeatureStates. Return value 0.
    MSI (s) (1C:9C) [14:30:10:445]: Note: 1: 2205 2:  3: Dialog
    MSI (s) (1C:9C) [14:30:10:445]: Feature: SAVService; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Feature: MainComponents; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Feature: HomeEdition; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Feature: ConfigFiles; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Feature: Resources; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Feature: EngineFiles; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Feature: ServiceComponents; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SAVPosturePlugin.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: ConfigFilesNoReplace; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: ConfigFilesReplace; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: ConfigFilesReplaceHome; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:445]: Component: AllOtherFiles2; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: AllOtherFiles1; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: AllOtherFiles3; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: AllOtherFiles8; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: AllOtherFiles5; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: AllOtherFiles6; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: AllOtherFiles7; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: ControlSAVAdminService; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: ControlSAVService; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SophosCleanupService.exe; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SophosOfficeAV.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SophosOfficeAVx64.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: sav32cli.exe; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: bpaif.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: AllOtherFiles4; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SAVHelpChs.chm; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SAVHelpCht.chm; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SAVHelpDeu.chm; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SAVHelpEsp.chm; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SAVHelpFra.chm; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SAVHelpIta.chm; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SAVHelpJap.chm; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SCF.dat; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SOF.dat; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SavHelpEng.chm; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SavShellExtia64; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:445]: Component: SavShellExtx64; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: TamperProtectionControlx64; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: Shortcut_de; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:445]: Component: Shortcut_es; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:445]: Component: Shortcut_fr; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:445]: Component: Shortcut_it; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:445]: Component: Shortcut_ja; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:445]: Component: Shortcut_zh_cn; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:445]: Component: Shortcut_zh_tw; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:445]: Component: Shortcuts; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: Categories.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SavNeutralRes.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SavRes.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SavResChs.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SavResCht.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:445]: Component: SavResDeu.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SavResEng.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SavResEsp.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SavResFra.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SavResIt.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SavResJap.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: BackgroundScanClient.exe; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SavAdapter.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: Microsoft.VC90.ATL.manifest; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: atl90.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: Microsoft.VC90.CRT.manifest; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: msvcm90.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: msvcp90.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: msvcr90.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: PsRootCertificate; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: PsCertificateRevocationList; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WSCClientI64; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: WSCClientW32; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: WSCClientX64; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SAVService; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SAVAdminService; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: AllOtherFiles; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: AuthorisedLists.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: AppFeedManager.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: ApplicationManagement.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: DCManagement.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: DataControlManagement.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: DataControlPlugin.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: DetectionFeedback.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: DeviceControlPlugin.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: BHOManagement.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: BackgroundScanning.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: ComponentManager.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: Configuration.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: DesktopMessaging.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SAVUserContext.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: DriveProcessor.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: EEConsumer.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: FSDecomposer.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: FilterProcessors.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: ICAdapter.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: ICManagement.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: ICProcessors.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: Instrumentation.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: LegacyConsumers.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: Localisation.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: Logging.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: Persistance.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SAVControl.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SavPlugin.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SIPSManagement.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SWIManagement.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SavMain.exe; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SavProgress.exe; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SavShellExt.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: ScanEditExports.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: ScanEditFacade.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: ScanManagement.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SavSecurity.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SophtainerAdapter.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SystemInformation.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: TamperProtectionControl.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: TamperProtectionManagement.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: TamperProtectionPlugin.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: ThreatDetection.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: ThreatManagement.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: Translators.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: VEController.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: VirusDetection.dll; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: HomeEditionComponent; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: swc_service_exe.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SWCAdapter_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCPResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCPResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCPResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCPResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCPResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCPResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCPResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCPResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WebControlMessaging_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCMResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCMResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCMResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCMResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCMResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCMResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCMResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WCMResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: WebControlMessaging_dll_reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SwiCallout64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SwiDi.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: Difx_dll_64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SwiComponent32OnlyNotWFP_SwiUpdate32.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: SwiComponent64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SwiCallout_cat.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: Swi_di.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: Difx_dll.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: SwiProxy.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: SwiProxyChild.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __Shortcuts65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __Shortcut_de65; Installed: Null;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: __Shortcuts66; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __Shortcuts67; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __SavMain.exe65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __Shortcut_es65; Installed: Null;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: __Shortcut_fr65; Installed: Null;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: __Shortcut_it65; Installed: Null;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: __Shortcut_ja65; Installed: Null;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: __Shortcut_zh_cn65; Installed: Null;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: __Shortcut_zh_tw65; Installed: Null;   Request: Local;   Action: Null
    MSI (s) (1C:9C) [14:30:10:446]: Component: __SAVService65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C10165; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __SavShellExt.dll65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __SavMain.exe66; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __SavProgress.exe65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __DesktopMessaging.dll65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __SavPlugin.dll65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __DataControlManagement.dll65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Component: __DCManagement.dll65; Installed: Null;   Request: Local;   Action: Local
    MSI (s) (1C:9C) [14:30:10:446]: Note: 1: 2205 2:  3: BindImage
    MSI (s) (1C:9C) [14:30:10:446]: Note: 1: 2205 2:  3: ProgId
    MSI (s) (1C:9C) [14:30:10:446]: Note: 1: 2205 2:  3: PublishComponent
    MSI (s) (1C:9C) [14:30:10:446]: Note: 1: 2205 2:  3: SelfReg
    MSI (s) (1C:9C) [14:30:10:446]: Note: 1: 2205 2:  3: Extension
    MSI (s) (1C:9C) [14:30:10:446]: Note: 1: 2205 2:  3: Font
    MSI (s) (1C:9C) [14:30:10:446]: Note: 1: 2205 2:  3: Class
    MSI (s) (1C:9C) [14:30:10:447]: Note: 1: 2205 2:  3: TypeLib
    Action start 14:30:10: InstallValidate.
    MSI (s) (1C:9C) [14:30:10:447]: Note: 1: 2205 2:  3: _RemoveFilePath
    MSI (s) (1C:9C) [14:30:10:492]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
    MSI (s) (1C:9C) [14:30:10:493]: Note: 1: 2205 2:  3: BindImage
    MSI (s) (1C:9C) [14:30:10:493]: Note: 1: 2205 2:  3: ProgId
    MSI (s) (1C:9C) [14:30:10:493]: Note: 1: 2205 2:  3: PublishComponent
    MSI (s) (1C:9C) [14:30:10:493]: Note: 1: 2205 2:  3: SelfReg
    MSI (s) (1C:9C) [14:30:10:493]: Note: 1: 2205 2:  3: Extension
    MSI (s) (1C:9C) [14:30:10:493]: Note: 1: 2205 2:  3: Font
    MSI (s) (1C:9C) [14:30:10:493]: Note: 1: 2205 2:  3: Class
    MSI (s) (1C:9C) [14:30:10:493]: Note: 1: 2205 2:  3: TypeLib
    MSI (s) (1C:9C) [14:30:10:493]: Note: 1: 2727 2: 
    MSI (s) (1C:9C) [14:30:10:499]: Note: 1: 2727 2: 
    MSI (s) (1C:9C) [14:30:10:500]: Doing action: SetARPINSTALLLOCATION
    Action ended 14:30:10: InstallValidate. Return value 1.
    MSI (s) (1C:9C) [14:30:10:500]: PROPERTY CHANGE: Adding ARPINSTALLLOCATION property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
    Action start 14:30:10: SetARPINSTALLLOCATION.
    MSI (s) (1C:9C) [14:30:10:500]: Doing action: RemoveExistingProducts
    Action ended 14:30:10: SetARPINSTALLLOCATION. Return value 1.
    MSI (s) (1C:9C) [14:30:10:501]: Note: 1: 2205 2:  3: Upgrade
    MSI (s) (1C:9C) [14:30:10:501]: Note: 1: 2228 2:  3: Upgrade 4: SELECT `Attributes`, `ActionProperty`, `Remove` FROM `Upgrade`
    Action start 14:30:10: RemoveExistingProducts.
    MSI (s) (1C:9C) [14:30:10:501]: Doing action: InstallInitialize
    Action ended 14:30:10: RemoveExistingProducts. Return value 0.
    MSI (s) (1C:9C) [14:30:10:502]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (1C:9C) [14:30:10:502]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (1C:9C) [14:30:10:502]: BeginTransaction: Locking Server
    MSI (s) (1C:9C) [14:30:10:503]: Note: 1: 2203 2: C:\windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (1C:9C) [14:30:10:503]: SRSetRestorePoint skipped for this transaction.
    MSI (s) (1C:9C) [14:30:10:503]: Note: 1: 2203 2: C:\windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (1C:9C) [14:30:10:503]: Server not locked: locking for product {09863DA9-7A9B-4430-9561-E04D178D7017}
    Action start 14:30:10: InstallInitialize.
    MSI (s) (1C:9C) [14:30:10:514]: Doing action: SetUpdateFailed
    Action ended 14:30:10: InstallInitialize. Return value 1.
    MSI (s) (1C:9C) [14:30:10:515]: Note: 1: 2205 2:  3: MsiPatchCertificate
    MSI (s) (1C:9C) [14:30:10:515]: LUA patching is disabled: missing MsiPatchCertificate table
    Action start 14:30:10: SetUpdateFailed.
    MSI (s) (1C:9C) [14:30:10:525]: Doing action: SetRestoreMovedFiles
    Action ended 14:30:10: SetUpdateFailed. Return value 1.
    MSI (s) (1C:9C) [14:30:10:525]: PROPERTY CHANGE: Adding RestoreMovedFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
    Action start 14:30:10: SetRestoreMovedFiles.
    MSI (s) (1C:9C) [14:30:10:526]: Doing action: RestoreMovedFiles
    Action ended 14:30:10: SetRestoreMovedFiles. Return value 1.
    Action start 14:30:10: RestoreMovedFiles.
    MSI (s) (1C:9C) [14:30:10:535]: Doing action: CheckRegForNullDACLs
    Action ended 14:30:10: RestoreMovedFiles. Return value 1.
    Action start 14:30:10: CheckRegForNullDACLs.
    MSI (s) (1C:9C) [14:30:10:543]: Doing action: SetErrorScriptProperty
    Action ended 14:30:10: CheckRegForNullDACLs. Return value 1.
    MSI (s) (1C:9C) [14:30:10:544]: PROPERTY CHANGE: Adding RunErrorScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.6.3.537"'.
    Action start 14:30:10: SetErrorScriptProperty.
    MSI (s) (1C:9C) [14:30:10:544]: Doing action: RunErrorScript
    Action ended 14:30:10: SetErrorScriptProperty. Return value 1.
    Action start 14:30:10: RunErrorScript.
    MSI (s) (1C:9C) [14:30:10:552]: Doing action: ExtractClassicConfig
    Action ended 14:30:10: RunErrorScript. Return value 1.
    MSI (s) (1C:B0) [14:30:10:558]: Invoking remote custom action. DLL: C:\windows\Installer\MSIC7AC.tmp, Entrypoint: ExtractClassicConfig
    MSI (s) (1C:BC) [14:30:10:560]: Generating random cookie.
    MSI (s) (1C:BC) [14:30:10:587]: Created Custom Action Server with PID 17672 (0x4508).
    MSI (s) (1C:30) [14:30:10:636]: Running as a service.
    MSI (s) (1C:60) [14:30:10:639]: Hello, I'm your 32bit Elevated Non-remapped custom action server.
    Action start 14:30:10: ExtractClassicConfig.
    MSI (s) (1C:9C) [14:30:10:662]: Doing action: PreInstallChecks
    Action ended 14:30:10: ExtractClassicConfig. Return value 1.
    MSI (s) (1C:58) [14:30:10:669]: Invoking remote custom action. DLL: C:\windows\Installer\MSIC81A.tmp, Entrypoint: PreInstallChecks
    Action start 14:30:10: PreInstallChecks.
    MSI (s) (1C:9C) [14:30:10:698]: Skipping action: SetUpdateBegin (condition is false)
    MSI (s) (1C:9C) [14:30:10:698]: Doing action: SetBootDriverStartupProperty
    Action ended 14:30:10: PreInstallChecks. Return value 1.
    MSI (s) (1C:C4) [14:30:10:713]: Invoking remote custom action. DLL: C:\windows\Installer\MSIC84A.tmp, Entrypoint: SetBootDriverStartupProperty
    Action start 14:30:10: SetBootDriverStartupProperty.
    CustomAction SetBootDriverStartupProperty returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
    MSI (s) (1C:9C) [14:30:10:740]: Note: 1: 2265 2:  3: -2147287035
    MSI (s) (1C:9C) [14:30:10:741]: Machine policy value 'DisableRollback' is 0
    MSI (s) (1C:9C) [14:30:10:741]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    Action ended 14:30:10: SetBootDriverStartupProperty. Return value 3.
    MSI (s) (1C:9C) [14:30:10:742]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (1C:9C) [14:30:10:742]: No System Restore sequence number for this installation.
    MSI (s) (1C:9C) [14:30:10:742]: Unlocking Server
    Action ended 14:30:10: INSTALL. Return value 3.
    Property(S): DiskPrompt = [1]
    Property(S): INSTALL = C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\
    Property(S): CISCO_SUPPORTED = 1
    Property(S): CONFIG = C:\ProgramData\Sophos\Sophos Anti-Virus\Config\
    Property(S): INFECTED = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\
    Property(S): LOGS = C:\ProgramData\Sophos\Sophos Anti-Virus\logs\
    Property(S): TEMP = C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\
    Property(S): CACHE = C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\
    Property(S): LOGS1 = C:\ProgramData\Sophos\Sophos Data Control\logs\
    Property(S): LOGS2 = C:\ProgramData\Sophos\Sophos Device Control\logs\
    Property(S): LOGS3 = C:\ProgramData\Sophos\Sophos Tamper Protection\logs\
    Property(S): INSTALLDIR = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
    Property(S): MsiAMD64 = 21
    Property(S): Microsoft.VC90.ATL = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\
    Property(S): Microsoft.VC90.CRT = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\
    Property(S): INSTALLDIR_IA64 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
    Property(S): INSTALLDIR_WIN32 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
    Property(S): INSTALLDIR_X64 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
    Property(S): VersionNT64 = 603
    Property(S): BootDriverStartup = 0
    Property(S): DeleteBDLs = 0
    Property(S): DeleteIDEs = 0
    Property(S): ALLUSERS = 2
    Property(S): SystemFolder = C:\windows\SysWOW64\
    Property(S): System64Folder = C:\windows\SysWOW64\
    Property(S): RemoveSAVI = INSTALLDIR
    Property(S): RestoreMovedFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
    Property(S): RollbackOtherFiles = 0
    Property(S): RollbackSavi = 0
    Property(S): RunErrorScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.6.3.537"
    Property(S): RunPreLaunchScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.6.3.537"
    Property(S): SetAdminGroupDescription = SophosAdministrators may run Sophos Anti-Virus with complete access
    Property(S): ALLUSERSPROFILE = C:\ProgramData\
    Property(S): UPDATEDRIVERS = 1
    Property(S): TARGETDIR = C:\
    Property(S): SetOnAccessGroupDescription = Contains accounts used by Sophos Anti-Virus when it performs threat scanning and cleanup functions
    Property(S): SetPowerGroupDescription = SophosPowerUsers may run Sophos Anti-Virus with the access that SophosUsers have, plus greater access to cleanup
    Property(S): UpdateSAVI = 0
    Property(S): SetUserGroupDescription = SophosUsers may run Sophos Anti-Virus with limited access to scanning configuration and cleanup
    Property(S): USERPROFILE = C:\Users\Default\
    Property(S): EventType = BEGIN_SYSTEM_CHANGE
    Property(S): ARPINSTALLLOCATION = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
    Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
    Property(S): CommonFiles64Folder = C:\Program Files (x86)\Common Files\
    Property(S): DesktopFolder = C:\Users\Public\Desktop\
    Property(S): FavoritesFolder = C:\windows\SysWOW64\config\systemprofile\Favorites\
    Property(S): FontsFolder = C:\windows\Fonts\
    Property(S): GlobalAssemblyCache = C:\
    Property(S): LocalAppDataFolder = C:\windows\SysWOW64\config\systemprofile\AppData\Local\
    Property(S): PrimaryVolumePath = C:\
    Property(S): ProgramFiles64Folder = C:\Program Files (x86)\
    Property(S): SendToFolder = C:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\
    Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
    Property(S): System16Folder = C:\
    Property(S): TempFolder = C:\windows\TEMP\
    Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
    Property(S): WindowsFolder = C:\windows\
    Property(S): WindowsVolume = C:\
    Property(S): PLUGINS = C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\
    Property(S): CISCOTRUSTAGENT = C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\
    Property(S): CISCO_SYSTEMS = C:\Program Files (x86)\Common Files\Cisco Systems\
    Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
    Property(S): RESOURCES = C:\ProgramData\Sophos\Sophos Anti-Virus\
    Property(S): NEW_DIRECTORY3 = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
    Property(S): RES = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
    Property(S): NEW_DIRECTORY1 = C:\ProgramData\Sophos\
    Property(S): SOPHOS_DATA_CONTROL = C:\ProgramData\Sophos\Sophos Data Control\
    Property(S): SOPHOS_DEVICE_CONTROL = C:\ProgramData\Sophos\Sophos Device Control\
    Property(S): SOPHOS_TAMPER_PROTECTION = C:\ProgramData\Sophos\Sophos Tamper Protection\
    Property(S): CommonAppDataFolder = C:\ProgramData\
    Property(S): SOPHOS_ANTI_VIRUS = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
    Property(S): SOPHOS = C:\Program Files (x86)\Sophos\
    Property(S): ProgramFilesFolder = C:\Program Files (x86)\
    Property(S): NEW_DIRECTORY2 = C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\
    Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
    Property(S): newfolder2 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\
    Property(S): newfolder1 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
    Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
    Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
    Property(S): VersionNT = 603
    Property(S): AdminUser = 1
    Property(S): Manufacturer = Sophos Limited
    Property(S): ProductCode = {09863DA9-7A9B-4430-9561-E04D178D7017}
    Property(S): ProductLanguage = 1033
    Property(S): ProductName = Sophos Anti-Virus
    Property(S): ProductVersion = 10.6.3.537
    Property(S): UpgradeCode = {597B239E-3032-491A-A322-817737925E8A}
    Property(S): _IsMaintenance = Change
    Property(S): _IsSetupTypeMin = Typical
    Property(S): AFTERREBOOT = 0
    Property(S): AgreeToLicense = No
    Property(S): ApplicationUsers = AllUsers
    Property(S): APPLYCLASSICCONFIG = 0
    Property(S): ARPCOMMENTS = Protects your computer and network from threats
    Property(S): ARPCONTACT = Sophos Technical Support
    Property(S): ARPHELPLINK = http://www.sophos.com/support
    Property(S): ARPHELPTELEPHONE = 
    Property(S): ARPNOMODIFY = 1
    Property(S): ARPNOREPAIR = 1
    Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe
    Property(S): ARPURLINFOABOUT = http://www.sophos.com
    Property(S): ARPURLUPDATEINFO = http://www.sophos.com/support/updates
    Property(S): BOOTDRIVERSIGNED = 0
    Property(S): CHECKFORCOMPETITORS = 1
    Property(S): CHECKFORSCF = 1
    Property(S): CLASSFILTERPRESENT = 0
    Property(S): CopyBDLs = 0
    Property(S): CopyIDEs = 0
    Property(S): DATACONTROL = 1
    Property(S): DefaultUIFont = Tahoma8
    Property(S): DEVICECONTROL = 1
    Property(S): DialogCaption = Sophos Installer
    Property(S): DISABLEONACCESS = 0
    Property(S): Display_IsBitmapDlg = 1
    Property(S): DisplayNameCustom = Custom
    Property(S): DisplayNameMinimal = Minimal
    Property(S): DisplayNameTypical = Typical
    Property(S): DRIVERVERSION = 0
    Property(S): FIRST_INSTALL_DATE = 0
    Property(S): IDEONLY = 0
    Property(S): InstallChoice = AR
    Property(S): INSTALLLEVEL = 100
    Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1]
    Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1]
    Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1]
    Property(S): IS_PROGMSG_XML_COSTING = Costing XML files...
    Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s...
    Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes...
    Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s...
    Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes...
    Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s...
    Property(S): IS_SQLSERVER_AUTHENTICATION = 0
    Property(S): IS_SQLSERVER_USERNAME = sa
    Property(S): ISReleaseFlags = SAV
    Property(S): ISVROOT_PORT_NO = 0
    Property(S): MAJORUPGRADE = 0
    Property(S): MANAGED = 1
    Property(S): MSIRESTARTMANAGERCONTROL = Disable
    Property(S): NEEDREBOOT = 0
    Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@
    Property(S): PRODUCTTYPE = 0
    Property(S): PROCESSOR_NX_ENABLED = 0
    Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s
    Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools...
    Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s
    Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories...
    Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension
    Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions...
    Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories...
    Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories...
    Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool
    Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools...
    Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d
    Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s
    Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories...
    Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension
    Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions...
    Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools...
    Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes...
    Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions...
    Property(S): ProgressType0 = install
    Property(S): ProgressType1 = Installing
    Property(S): ProgressType2 = installed
    Property(S): ProgressType3 = installs
    Property(S): RebootYesNo = Yes
    Property(S): Registration = No
    Property(S): ReinstallModeText = omus
    Property(S): SAVIONLY = 0
    Property(S): SCRIPTDIR = [SOURCEDIR]
    Property(S): SequenceNumber = 0
    Property(S): SetupType = Typical
    Property(S): UITYPE = full
    Property(S): UNINSTALLBOOTDRIVERS = 1
    Property(S): UNINSTALLCLASSFILTER = 1
    Property(S): UNINSTALLDRIVERS = 1
    Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus.
    Property(S): UNINSTALLKMSDRIVERS = 1
    Property(S): UPDATEBOOTDRIVERS = 1
    Property(S): UPDATECLASSFILTER = 1
    Property(S): VIRUSDATAUPDATE = 0
    Property(S): SecureCustomProperties = EXCLUDEDPROCESSES;INSTALLINGVERSION;MAJORUPGRADE;WEBCONTROL
    Property(S): WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\
    Property(S): SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
    Property(S): SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
    Property(S): REBOOTREQUIREDFILE.11DACB83_28A7_4FA6_AF5B_C006E340C101 = SwiRebootRequired.txt
    Property(S): MsiLogFileLocation = C:\windows\TEMP\Sophos Anti-Virus Major Install Log_161108_023009.txt
    Property(S): PackageCode = {29CA599D-B97B-45F6-B3F1-6866A25C90B0}
    Property(S): ProductState = -1
    Property(S): PackagecodeChanging = 1
    Property(S): REBOOT = ReallySuppress
    Property(S): UPDATEKMSDRIVERS = 1
    Property(S): RECOVERYMODE = 0
    Property(S): WEBCONTROL = 1
    Property(S): CURRENTDIRECTORY = C:\windows\system32
    Property(S): CLIENTUILEVEL = 3
    Property(S): MSICLIENTUSESEXTERNALUI = 1
    Property(S): CLIENTPROCESSID = 13688
    Property(S): MsiSystemRebootPending = 1
    Property(S): VersionDatabase = 200
    Property(S): VersionMsi = 5.00
    Property(S): WindowsBuild = 9600
    Property(S): ServicePackLevel = 0
    Property(S): ServicePackLevelMinor = 0
    Property(S): MsiNTProductType = 1
    Property(S): RemoteAdminTS = 1
    Property(S): AppDataFolder = C:\windows\system32\config\systemprofile\AppData\Roaming\
    Property(S): NetHoodFolder = C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
    Property(S): PersonalFolder = C:\windows\system32\config\systemprofile\Documents\
    Property(S): PrintHoodFolder = C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
    Property(S): RecentFolder = C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\
    Property(S): MyPicturesFolder = C:\windows\system32\config\systemprofile\Pictures\
    Property(S): GPTSupport = 1
    Property(S): OLEAdvtSupport = 1
    Property(S): ShellAdvtSupport = 1
    Property(S): Msix64 = 21
    Property(S): Intel = 21
    Property(S): PhysicalMemory = 7602
    Property(S): VirtualMemory = 6271
    Property(S): MsiTrueAdminUser = 1
    Property(S): LogonUser = SYSTEM
    Property(S): UserSID = S-1-5-18
    Property(S): UserLanguageID = 2057
    Property(S): ComputerName = ICT-TECH-MH
    Property(S): SystemLanguageID = 2057
    Property(S): ScreenX = 1024
    Property(S): ScreenY = 768
    Property(S): CaptionHeight = 23
    Property(S): BorderTop = 1
    Property(S): BorderSide = 1
    Property(S): TextHeight = 16
    Property(S): TextInternalLeading = 3
    Property(S): ColorBits = 32
    Property(S): TTCSupport = 1
    Property(S): Time = 14:30:10
    Property(S): Date = 08/11/2016
    Property(S): MsiNetAssemblySupport = 4.6.79.0
    Property(S): MsiWin32AssemblySupport = 6.3.10240.17113
    Property(S): RedirectedDllSupport = 2
    Property(S): MsiRunningElevated = 1
    Property(S): Privileged = 1
    Property(S): USERNAME = IT
    Property(S): COMPANYNAME = Swanshurst
    Property(S): DATABASE = C:\windows\Installer\24061b74.msi
    Property(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
    Property(S): UILevel = 2
    Property(S): ACTION = INSTALL
    Property(S): ROOTDRIVE = C:\
    Property(S): CostingComplete = 1
    Property(S): OutOfDiskSpace = 0
    Property(S): OutOfNoRbDiskSpace = 0
    Property(S): PrimaryVolumeSpaceAvailable = 0
    Property(S): PrimaryVolumeSpaceRequired = 0
    Property(S): PrimaryVolumeSpaceRemaining = 0
    Property(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
    Property(S): SourcedirProduct = {09863DA9-7A9B-4430-9561-E04D178D7017}
    MSI (s) (1C:9C) [14:30:10:863]: Note: 1: 1708
    MSI (s) (1C:9C) [14:30:10:864]: Product: Sophos Anti-Virus -- Installation operation failed.

    MSI (s) (1C:9C) [14:30:10:864]: Windows Installer installed the product. Product Name: Sophos Anti-Virus. Product Version: 10.6.3.537. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1603.

    MSI (s) (1C:9C) [14:30:10:879]: Deferring clean up of packages/files, if any exist
    MSI (s) (1C:9C) [14:30:10:879]: MainEngineThread is returning 1603
    MSI (s) (1C:D8) [14:30:10:880]: No System Restore sequence number for this installation.
    === Logging stopped: 08/11/2016  14:30:10 ===
    MSI (s) (1C:D8) [14:30:10:886]: User policy value 'DisableRollback' is 0
    MSI (s) (1C:D8) [14:30:10:886]: Machine policy value 'DisableRollback' is 0
    MSI (s) (1C:D8) [14:30:10:886]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (1C:D8) [14:30:10:886]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (1C:D8) [14:30:10:886]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (1C:D8) [14:30:10:887]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (s) (1C:D8) [14:30:10:887]: Destroying RemoteAPI object.
    MSI (s) (1C:BC) [14:30:10:887]: Custom Action Manager thread ending.
    MSI (c) (78:84) [14:30:10:889]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (c) (78:84) [14:30:10:890]: MainEngineThread is returning 1603
    === Verbose logging stopped: 08/11/2016  14:30:10 ===

    2016-11-08 14:30:10 ERROR: Installation failed

  • 0 in reply to Matthew Henry

    Hello Matthew Henry,

    thanks. The log tells us that the CustomAction SetBootDriverStartupProperty failed - details are in the Sophos Anti-Virus Major CustomActions Log (please post it).
    Where does it say reboot? Are you referring to the line UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus? If so please note that this section of the MSI log is simply a dump of the Property values after completion of the INSTALL action.

    BTW: which scripts to remove all traces did you use?

    Christian

Reply
  • 0 in reply to Matthew Henry

    Hello Matthew Henry,

    thanks. The log tells us that the CustomAction SetBootDriverStartupProperty failed - details are in the Sophos Anti-Virus Major CustomActions Log (please post it).
    Where does it say reboot? Are you referring to the line UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus? If so please note that this section of the MSI log is simply a dump of the Property values after completion of the INSTALL action.

    BTW: which scripts to remove all traces did you use?

    Christian

Children
No Data
Unfiltered HTML