This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Installing AV on a read only domain controller

Hi,

Has anyone had any luck doing this? I know the KB on Sophos advises to create a local account but as far as i'm aware you can't on RODC?

Thanks

Tom

This thread was automatically locked due to age.

0 Haridoss Sreenivasan over 7 years ago

Hi Tom,

Unfortunately both read and write access is required for Sophos Antivirus, as the application not just monitors, but also takes action.

Haridoss S

Haridoss Sreenivasan
Technical Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 7 years ago

Hello Tom,

are you talking about the Endpoint component? And could you give the kb article's number?

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 TomHilton over 7 years ago

Hi,

The article is KB's are 43659 & 48910, We are getting the error 3051 during the install. I have scoured the net to find an option to create local accounts but must articles say it isn't technically possible on a RODC which makes sense since its read only and there is no local database for accounts?

Thanks

Tom
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 7 years ago in reply to TomHilton

Hello Tom,

it should work if you specify a domain account as Download user following Manually creating an AutoUpdate account.

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 TomHilton over 7 years ago in reply to QC

Hi,

The update now downloads the installation files but it gets stuck on Installing Package 1 of 1 - Starting Sophos Anti-Virus for Windows Setup

2017-05-30 12:08:24 PROCESSOR_ARCHITECTURE environment variable is: AMD64
2017-05-30 12:08:24 Info: Logging started: installing/upgrading Sophos Anti-Virus
2017-05-30 12:08:24 Info: InstallFromPath is: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
2017-05-30 12:08:24 Info: InstallToPath is:
2017-05-30 12:08:24 Info: SAV is not installed. Installing to {InstallToPath}
2017-05-30 12:08:24 INFO: Checking the validity of the VDL manifest file.
2017-05-30 12:08:25 INFO: The manifest file has been successfully validated.
2017-05-30 12:08:25 INFO: Checking the validity of the AppFeed manifest file.
2017-05-30 12:08:25 INFO: The manifest file has been successfully validated.
2017-05-30 12:08:25 Info: Managed install (from SAU)
2017-05-30 12:08:25 Check for UI changes
2017-05-30 12:08:25 Unable to QI IProductConfig
2017-05-30 12:08:25 Info: productType: 0
2017-05-30 12:08:25 Info: Performing major update of Sophos Anti-Virus using msi.
2017-05-30 12:08:25 Info: Update is signalled.
2017-05-30 12:08:25 Info: Added SAVService to ServicesList.
2017-05-30 12:08:25 Info: Added SAVAdminService to ServicesList.
2017-05-30 12:08:25 Info: Added Sophos Device Control Service to ServicesList.
2017-05-30 12:08:25 Info: Added SophosBootDriver to ServicesList.
2017-05-30 12:08:25 Info: Added swi_service to ServicesList.
2017-05-30 12:08:25 Info: Added swi_filter to ServicesList.
2017-05-30 12:08:25 Info: Added Sophos Web Control Service to ServicesList.
2017-05-30 12:08:25 Info: Added SAVOnAccess to ServicesList.
2017-05-30 12:08:25 Info: component SAV is not registered - skipping.
2017-05-30 12:08:25 Info: component SDC is not registered - skipping.
2017-05-30 12:08:25 Info: component SCS is not registered - skipping.
2017-05-30 12:08:25 Info: component SWI is not registered - skipping.
2017-05-30 12:08:25 Info: component SWC is not registered - skipping.
2017-05-30 12:08:25 UpdateVersionInfo(), SAU can't supply version info - using msi version
2017-05-30 12:08:25 Info: PutSetupOptionsToRegistry
2017-05-30 12:08:25 Info: Check MSXML
2017-05-30 12:08:25 Info: Check boot driver and kms driver
2017-05-30 12:08:25 Info: no existing installation of Sophos Anti-Virus was found
2017-05-30 12:08:25 Info: Restart required for Data Control (clean managed full install)
2017-05-30 12:08:25 Info: Transform file returned:
2017-05-30 12:08:25 Info: SAV Setup plugin: running MsiInstallProduct (C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi, INSTALLDIR="" REBOOT=ReallySuppress UITYPE=full PRODUCTTYPE=0 UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1)
=== Verbose logging started: 30/05/2017 12:08:25 Build type: SHIP UNICODE 5.00.9600.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (04:D0) [12:08:25:479]: Resetting cached policy values
MSI (c) (04:D0) [12:08:25:479]: Machine policy value 'Debug' is 0
MSI (c) (04:D0) [12:08:25:479]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
******* Action:
******* CommandLine: **********
MSI (c) (04:D0) [12:08:25:479]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (04:D0) [12:08:25:479]: Grabbed execution mutex.
MSI (c) (04:D0) [12:08:25:510]: Cloaking enabled.
MSI (c) (04:D0) [12:08:25:510]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (04:D0) [12:08:25:510]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (28:58) [12:08:25:510]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
MSI (s) (28:58) [12:08:25:510]: Grabbed execution mutex.
MSI (s) (28:F8) [12:08:25:510]: Resetting cached policy values
MSI (s) (28:F8) [12:08:25:510]: Machine policy value 'Debug' is 0
MSI (s) (28:F8) [12:08:25:510]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
******* Action:
******* CommandLine: **********
MSI (s) (28:F8) [12:08:25:510]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (28:F8) [12:08:25:510]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (28:F8) [12:08:25:526]: SRSetRestorePoint skipped for this transaction.
MSI (s) (28:F8) [12:08:25:526]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (s) (28:F8) [12:08:25:526]: File will have security applied from OpCode.
MSI (s) (28:F8) [12:08:25:526]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi' against software restriction policy
MSI (s) (28:F8) [12:08:25:526]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi has a digital signature
MSI (s) (28:F8) [12:08:25:526]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi is permitted to run because the user token authorizes execution (system or service token).
MSI (s) (28:F8) [12:08:25:526]: MSCOREE not loaded loading copy from system32
MSI (s) (28:F8) [12:08:25:526]: End dialog not enabled
MSI (s) (28:F8) [12:08:25:526]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
MSI (s) (28:F8) [12:08:25:526]: Package we're running from ==> C:\Windows\Installer\2fa0a15a.msi
MSI (s) (28:F8) [12:08:25:542]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (28:F8) [12:08:25:542]: APPCOMPAT: looking for appcompat database entry with ProductCode '{65323B2D-83D4-470D-A209-D769DB30BBDB}'.
MSI (s) (28:F8) [12:08:25:542]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'TransformsSecure' is 1
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'DisablePatch' is 0
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (28:F8) [12:08:25:542]: APPCOMPAT: looking for appcompat database entry with ProductCode '{65323B2D-83D4-470D-A209-D769DB30BBDB}'.
MSI (s) (28:F8) [12:08:25:542]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (28:F8) [12:08:25:542]: Transforms are not secure.
MSI (s) (28:F8) [12:08:25:542]: Note: 1: 2205 2: 3: Control
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos Anti-Virus Major Install Log_170530_110825.txt'.
MSI (s) (28:F8) [12:08:25:542]: Command Line: INSTALLDIR= REBOOT=ReallySuppress UITYPE=full PRODUCTTYPE=0 UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1 CURRENTDIRECTORY=C:\Windows\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=5124
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{B11B63E0-A3EB-478A-AF04-AAE0B577AEB2}'.
MSI (s) (28:F8) [12:08:25:542]: Product Code passed to Engine.Initialize: ''
MSI (s) (28:F8) [12:08:25:542]: Product Code from property table before transforms: '{65323B2D-83D4-470D-A209-D769DB30BBDB}'
MSI (s) (28:F8) [12:08:25:542]: Product Code from property table after transforms: '{65323B2D-83D4-470D-A209-D769DB30BBDB}'
MSI (s) (28:F8) [12:08:25:542]: Product not registered: beginning first-time install
MSI (s) (28:F8) [12:08:25:542]: Product {65323B2D-83D4-470D-A209-D769DB30BBDB} is not managed.
MSI (s) (28:F8) [12:08:25:542]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (28:F8) [12:08:25:542]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (28:F8) [12:08:25:542]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (28:F8) [12:08:25:542]: Adding new sources is allowed.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:542]: Package name extracted from package path: 'Sophos Anti-Virus.msi'
MSI (s) (28:F8) [12:08:25:542]: Package to be registered: 'Sophos Anti-Virus.msi'
MSI (s) (28:F8) [12:08:25:542]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'DisableMsi' is 1
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (28:F8) [12:08:25:542]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (28:F8) [12:08:25:542]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (28:F8) [12:08:25:542]: Running product '{65323B2D-83D4-470D-A209-D769DB30BBDB}' with elevated privileges: Product is assigned.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Modifying UPDATECLASSFILTER property. Its current value is '0'. Its new value: '1'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding UPDATEKMSDRIVERS property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding RECOVERYMODE property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Modifying DATACONTROL property. Its current value is '0'. Its new value: '1'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Modifying DEVICECONTROL property. Its current value is '0'. Its new value: '1'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding WEBCONTROL property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Windows\system32'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '5124'.
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (28:F8) [12:08:25:542]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:542]: TRANSFORMS property is now:
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (s) (28:F8) [12:08:25:542]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming
MSI (s) (28:F8) [12:08:25:542]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites
MSI (s) (28:F8) [12:08:25:542]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (28:F8) [12:08:25:542]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents
MSI (s) (28:F8) [12:08:25:542]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (28:F8) [12:08:25:542]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (s) (28:F8) [12:08:25:557]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (28:F8) [12:08:25:557]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (28:F8) [12:08:25:557]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:557]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:557]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (28:F8) [12:08:25:557]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Windows User'.
MSI (s) (28:F8) [12:08:25:557]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (28:F8) [12:08:25:557]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\2fa0a15a.msi'.
MSI (s) (28:F8) [12:08:25:557]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi'.
MSI (s) (28:F8) [12:08:25:557]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (28:F8) [12:08:25:557]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (s) (28:F8) [12:08:25:557]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (28:F8) [12:08:25:557]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (28:F8) [12:08:25:557]: Machine policy value 'DisableRollback' is 0
MSI (s) (28:F8) [12:08:25:557]: User policy value 'DisableRollback' is 0
MSI (s) (28:F8) [12:08:25:557]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
=== Logging started: 30/05/2017 12:08:25 ===
MSI (s) (28:F8) [12:08:25:557]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (28:F8) [12:08:25:557]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (28:F8) [12:08:25:573]: Doing action: INSTALL
Action start 12:08:25: INSTALL.
MSI (s) (28:F8) [12:08:25:573]: Running ExecuteSequence
MSI (s) (28:F8) [12:08:25:573]: Doing action: AppSearch
Action start 12:08:25: AppSearch.
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SWCSERVICEFILEEXISTS.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:25:573]: Doing action: LaunchConditions
Action ended 12:08:25: AppSearch. Return value 1.
Action start 12:08:25: LaunchConditions.
MSI (s) (28:F8) [12:08:25:573]: Skipping action: CheckUserIsSophosAdmin (condition is false)
MSI (s) (28:F8) [12:08:25:573]: Skipping action: TP_CheckRemoveAllowed (condition is false)
MSI (s) (28:F8) [12:08:25:573]: Doing action: FindRelatedProducts
Action ended 12:08:25: LaunchConditions. Return value 1.
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Upgrade
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2228 2: 3: Upgrade 4: SELECT `UpgradeCode`,`VersionMin`,`VersionMax`,`Language`,`Attributes`,`ActionProperty` FROM `Upgrade`
Action start 12:08:25: FindRelatedProducts.
MSI (s) (28:F8) [12:08:25:573]: Skipping action: CCPSearch (condition is false)
MSI (s) (28:F8) [12:08:25:573]: Skipping action: IsSafeToDowngrade (condition is false)
MSI (s) (28:F8) [12:08:25:573]: Skipping action: RMCCPSearch (condition is false)
MSI (s) (28:F8) [12:08:25:573]: Doing action: ValidateProductID
Action ended 12:08:25: FindRelatedProducts. Return value 0.
Action start 12:08:25: ValidateProductID.
MSI (s) (28:F8) [12:08:25:573]: Doing action: setUserProfileNT
Action ended 12:08:25: ValidateProductID. Return value 1.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Users\Default'.
Action start 12:08:25: setUserProfileNT.
MSI (s) (28:F8) [12:08:25:573]: Skipping action: SetAllUsersProfileNT (condition is false)
MSI (s) (28:F8) [12:08:25:573]: Doing action: setAllUsersProfile2K
Action ended 12:08:25: setUserProfileNT. Return value 1.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\ProgramData'.
Action start 12:08:25: setAllUsersProfile2K.
MSI (s) (28:F8) [12:08:25:573]: Doing action: CostInitialize
Action ended 12:08:25: setAllUsersProfile2K. Return value 1.
MSI (s) (28:F8) [12:08:25:573]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: __MsiPatchFileList
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Patch
Action start 12:08:25: CostInitialize.
MSI (s) (28:F8) [12:08:25:573]: Doing action: FileCost
Action ended 12:08:25: CostInitialize. Return value 1.
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Class
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Extension
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: TypeLib
Action start 12:08:25: FileCost.
MSI (s) (28:F8) [12:08:25:573]: Doing action: SetMFC71
Action ended 12:08:25: FileCost. Return value 1.
Action start 12:08:25: SetMFC71.
MSI (s) (28:F8) [12:08:25:573]: Doing action: IsolateComponents
Action ended 12:08:25: SetMFC71. Return value 1.
Action start 12:08:25: IsolateComponents.
MSI (s) (28:F8) [12:08:25:573]: Doing action: CostFinalize
Action ended 12:08:25: IsolateComponents. Return value 0.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Condition
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding newfolder1 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding newfolder2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding NEW_DIRECTORY2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding System16Folder property. Its value is 'C:\'.
MSI (s) (28:F8) [12:08:25:573]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1).
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying SendToFolder property. Its current value is 'C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\'. Its new value: 'C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\'.
MSI (s) (28:F8) [12:08:25:573]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying ProgramFiles64Folder property. Its current value is 'C:\Program Files\'. Its new value: 'C:\Program Files (x86)\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'C:\'.
MSI (s) (28:F8) [12:08:25:573]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\config\systemprofile\AppData\Local\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1).
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying LocalAppDataFolder property. Its current value is 'C:\Windows\system32\config\systemprofile\AppData\Local\'. Its new value: 'C:\Windows\SysWOW64\config\systemprofile\AppData\Local\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding GlobalAssemblyCache property. Its value is 'C:\'.
MSI (s) (28:F8) [12:08:25:573]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\config\systemprofile\Favorites\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1).
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying FavoritesFolder property. Its current value is 'C:\Windows\system32\config\systemprofile\Favorites\'. Its new value: 'C:\Windows\SysWOW64\config\systemprofile\Favorites\'.
MSI (s) (28:F8) [12:08:25:573]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\Common Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying CommonFiles64Folder property. Its current value is 'C:\Program Files\Common Files\'. Its new value: 'C:\Program Files (x86)\Common Files\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Users\Default'. Its new value: 'C:\Users\Default\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying ALLUSERSPROFILE property. Its current value is 'C:\ProgramData'. Its new value: 'C:\ProgramData\'.
MSI (s) (28:F8) [12:08:25:573]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1).
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying System64Folder property. Its current value is 'C:\Windows\system32\'. Its new value: 'C:\Windows\SysWOW64\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SOPHOS property. Its value is 'C:\Program Files (x86)\Sophos\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SOPHOS_ANTI_VIRUS property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding INSTALLDIR_X64 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding INSTALLDIR_WIN32 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding Microsoft.VC90.CRT property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding Microsoft.VC90.ATL property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding NEW_DIRECTORY1 property. Its value is 'C:\ProgramData\Sophos\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SOPHOS_TAMPER_PROTECTION property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding LOGS3 property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\logs\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SOPHOS_DEVICE_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding LOGS2 property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\logs\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SOPHOS_DATA_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding LOGS1 property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\logs\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding RESOURCES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding RES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding NEW_DIRECTORY3 property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding CACHE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding TEMP property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SAFESTORE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding LOGS property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\logs\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding INFECTED property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding LOW property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding CONFIG property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:25:573]: Target path resolution complete. Dumping Directory table...
MSI (s) (28:F8) [12:08:25:573]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: TARGETDIR , Object: C:\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: ProgramMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: newfolder1 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: newfolder2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: StartMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: WindowsVolume , Object: C:\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: WindowsFolder , Object: C:\Windows\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: TemplateFolder , Object: C:\ProgramData\Microsoft\Windows\Templates\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: TempFolder , Object: C:\Windows\TEMP\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: System16Folder , Object: C:\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: StartupFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SendToFolder , Object: C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: ProgramFiles64Folder , Object: C:\Program Files (x86)\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: PrimaryVolumePath , Object: C:\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: LocalAppDataFolder , Object: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: GlobalAssemblyCache , Object: C:\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: FontsFolder , Object: C:\Windows\Fonts\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: FavoritesFolder , Object: C:\Windows\SysWOW64\config\systemprofile\Favorites\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: DesktopFolder , Object: C:\Users\Public\Desktop\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: CommonFiles64Folder , Object: C:\Program Files (x86)\Common Files\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: AdminToolsFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: USERPROFILE , Object: C:\Users\Default\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: ALLUSERSPROFILE , Object: C:\ProgramData\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SystemFolder , Object: C:\Windows\SysWOW64\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: System64Folder , Object: C:\Windows\SysWOW64\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files (x86)\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SOPHOS , Object: C:\Program Files (x86)\Sophos\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SOPHOS_ANTI_VIRUS , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: INSTALLDIR_X64 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: INSTALLDIR_WIN32 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: Microsoft.VC90.CRT , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: Microsoft.VC90.ATL , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: LOGS3 , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\logs\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\Sophos Device Control\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: LOGS2 , Object: C:\ProgramData\Sophos\Sophos Device Control\logs\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\Sophos Data Control\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: LOGS1 , Object: C:\ProgramData\Sophos\Sophos Data Control\logs\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: RESOURCES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: RES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: CACHE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: TEMP , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SAFESTORE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: LOGS , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\logs\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: INFECTED , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: LOW , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: CONFIG , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
Action start 12:08:25: CostFinalize.
MSI (s) (28:F8) [12:08:25:604]: Doing action: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:25: CostFinalize. Return value 1.
MSI (s) (28:F8) [12:08:25:604]: PROPERTY CHANGE: Modifying SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\'.
Action start 12:08:25: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:25:604]: Doing action: ResolveSource
Action ended 12:08:25: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:25:604]: Resolving source.
MSI (s) (28:F8) [12:08:25:604]: Resolving source to launched-from source.
MSI (s) (28:F8) [12:08:25:604]: Setting launched-from source as last-used.
MSI (s) (28:F8) [12:08:25:604]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\'.
MSI (s) (28:F8) [12:08:25:604]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\'.
MSI (s) (28:F8) [12:08:25:604]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{65323B2D-83D4-470D-A209-D769DB30BBDB}'.
MSI (s) (28:F8) [12:08:25:604]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
MSI (s) (28:F8) [12:08:25:604]: SOURCEDIR product ==> {65323B2D-83D4-470D-A209-D769DB30BBDB}
MSI (s) (28:F8) [12:08:25:604]: SECREPAIR: CryptAcquireContext succeeded
MSI (s) (28:F8) [12:08:25:604]: Determining source type
MSI (s) (28:F8) [12:08:25:604]: Source type from package 'Sophos Anti-Virus.msi': 0
MSI (s) (28:F8) [12:08:25:604]: SECREPAIR: Hash Database: C:\Windows\Installer\SourceHash{65323B2D-83D4-470D-A209-D769DB30BBDB}
MSI (s) (28:F8) [12:08:25:604]: Note: 1: 2262 2: SourceHash 3: -2147287038
MSI (s) (28:F8) [12:08:25:604]: SECREPAIR: New Hash Database creation complete.
Action start 12:08:25: ResolveSource.
MSI (s) (28:F8) [12:08:26:073]: Source path resolution complete. Dumping Directory table...
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: TARGETDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ , LongSubPath: , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: ProgramMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\ , LongSubPath: Programs\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: newfolder1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\Sophos\ , LongSubPath: Programs\Sophos\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: newfolder2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\Sophos\Sophos Endpoint Security and Control\ , LongSubPath: Programs\Sophos\Sophos Endpoint Security and Control\ , ShortSubPath: Programs\Sophos\SOPHOS~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: StartMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Start Menu\ , LongSubPath: Start Menu\ , ShortSubPath: STARTM~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Start Menu\Sophos\ , LongSubPath: Start Menu\Sophos\ , ShortSubPath: STARTM~1\Sophos\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: WindowsVolume , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinRoot\ , LongSubPath: WinRoot\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: WindowsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: TemplateFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ShellNew\ , LongSubPath: ShellNew\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: TempFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Temp\ , LongSubPath: Temp\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: System16Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System\ , LongSubPath: System\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: StartupFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\StartUp\ , LongSubPath: StartUp\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SendToFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\SendTo\ , LongSubPath: SendTo\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: ProgramFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Program Files 64\ , LongSubPath: Program Files 64\ , ShortSubPath: Prog64~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: PrimaryVolumePath , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\PrimaryVolumePath\ , LongSubPath: PrimaryVolumePath\ , ShortSubPath: Primar~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: LocalAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\LocalAppData\ , LongSubPath: LocalAppData\ , ShortSubPath: LocalA~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: GlobalAssemblyCache , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\GlobalAssemblyCache\ , LongSubPath: GlobalAssemblyCache\ , ShortSubPath: Global~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: FontsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Fonts\ , LongSubPath: Fonts\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: FavoritesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Favorites\ , LongSubPath: Favorites\ , ShortSubPath: FAVORI~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: DesktopFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Desktop\ , LongSubPath: Desktop\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: CommonFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common64\ , LongSubPath: Common64\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: AdminToolsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\AdminTools\ , LongSubPath: AdminTools\ , ShortSubPath: Admint~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: USERPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\UserProfile\ , LongSubPath: UserProfile\ , ShortSubPath: USERPR~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: ALLUSERSPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\All Users\ , LongSubPath: All Users\ , ShortSubPath: ALLUSE~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SystemFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System32\ , LongSubPath: System32\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: System64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System64\ , LongSubPath: System64\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: ProgramFilesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\ , LongSubPath: program files\ , ShortSubPath: PROGRA~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SOPHOS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\ , LongSubPath: program files\Sophos\ , ShortSubPath: PROGRA~1\Sophos\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SOPHOS_ANTI_VIRUS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: INSTALLDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Control\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: INSTALLDIR_X64 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_X64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_X64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\WSC_X64\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: INSTALLDIR_WIN32 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\jwgiamqy\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: Microsoft.VC90.CRT , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\oeg2ttzz\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: Microsoft.VC90.ATL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\l3j1top6\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: CommonAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\ , LongSubPath: CommonAppData\ , ShortSubPath: Common~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\ , LongSubPath: CommonAppData\Sophos\ , ShortSubPath: Common~1\Sophos\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Tamper Protection\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: LOGS3 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Tamper Protection\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\logs\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Device Control\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: LOGS2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Device Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\logs\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Data Control\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: LOGS1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Data Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\logs\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: RESOURCES , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: RES , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: CACHE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Cache\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: TEMP , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Temp\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SAFESTORE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Safestore\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Safestore\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\ynotdaxl\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: LOGS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\logs\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: INFECTED , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: LOW , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\Low\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\Low\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\Low\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: CONFIG , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Config\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Config\
MSI (s) (28:F8) [12:08:26:073]: Doing action: SetInstallDir
Action ended 12:08:26: ResolveSource. Return value 1.
Action start 12:08:26: SetInstallDir.
MSI (s) (28:F8) [12:08:26:073]: Skipping action: UninstallDowngradeCheck (condition is false)
MSI (s) (28:F8) [12:08:26:073]: Doing action: SetScriptProperty
Action ended 12:08:26: SetInstallDir. Return value 1.
MSI (s) (28:F8) [12:08:26:073]: PROPERTY CHANGE: Adding RunPreLaunchScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"'.
Action start 12:08:26: SetScriptProperty.
MSI (s) (28:F8) [12:08:26:073]: Skipping action: CheckForSophosClientFirewall (condition is false)
MSI (s) (28:F8) [12:08:26:073]: Doing action: ISInitAllUsers
Action ended 12:08:26: SetScriptProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:073]: PROPERTY CHANGE: Modifying ALLUSERS property. Its current value is '1'. Its new value: '2'.
Action start 12:08:26: ISInitAllUsers.
MSI (s) (28:F8) [12:08:26:073]: Doing action: SetODBCFolders
Action ended 12:08:26: ISInitAllUsers. Return value 1.
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCDriver`, `Component` WHERE `ODBCDriver`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2)
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCTranslator`, `Component` WHERE `ODBCTranslator`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2)
Action start 12:08:26: SetODBCFolders.
MSI (s) (28:F8) [12:08:26:089]: Doing action: MigrateFeatureStates
Action ended 12:08:26: SetODBCFolders. Return value 0.
Action start 12:08:26: MigrateFeatureStates.
MSI (s) (28:F8) [12:08:26:089]: Doing action: InstallValidate
Action ended 12:08:26: MigrateFeatureStates. Return value 0.
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: Dialog
MSI (s) (28:F8) [12:08:26:089]: Feature: SAVService; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Feature: MainComponents; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Feature: HomeEdition; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Feature: ConfigFiles; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Feature: Resources; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Feature: EngineFiles; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Feature: ServiceComponents; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ConfigFilesNoReplace; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ConfigFilesReplace; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ConfigFilesReplaceHome; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles2; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles9; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles1; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAFESTOREDIR; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles3; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles8; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles5; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles6; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles7; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ControlSAVAdminService; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ControlSAVService; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SophosCleanupService.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: scs_integrity_dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SophosOfficeAV.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SophosOfficeAVx64.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: sav32cli.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: bpaif.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles4; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpChs.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpCht.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpDeu.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpEsp.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpFra.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpIta.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpJap.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SCF.dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SOF.dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavHelpEng.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavShellExtx64; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: TamperProtectionControlx64; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_de; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_es; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_fr; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_it; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_ja; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_zh_cn; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_zh_tw; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcuts; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Categories.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavNeutralRes.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavRes.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResChs.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResCht.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResDeu.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResEng.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResEsp.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResFra.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResIt.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResJap.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: BackgroundScanClient.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavAdapter.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Microsoft.VC90.ATL.manifest; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: atl90.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Microsoft.VC90.CRT.manifest; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: msvcm90.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: msvcp90.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: msvcr90.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: PsRootCertificate; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: PsCertificateRevocationList; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: integrity_dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ForceUpdateAlongSideSGN.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WSCClientW32; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: WSCClientX64; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVService; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVAdminService; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AuthorisedLists.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AppFeedManager.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ApplicationManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DCManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DataControlManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DataControlPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DetectionFeedback.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DeviceControlPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: BHOManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: BackgroundScanning.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ComponentManager.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Configuration.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DesktopMessaging.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVUserContext.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DriveProcessor.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: EEConsumer.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: FSDecomposer.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: FilterProcessors.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ICAdapter.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ICManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ICProcessors.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Instrumentation.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Instrumentation.man; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: LegacyConsumers.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Localisation.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Logging.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Persistance.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVControl.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SIPSManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SWIManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavMain.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavProgress.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavShellExt.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVTelem.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ScanEditExports.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ScanEditFacade.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ScanManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavSecurity.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SophtainerAdapter.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SystemInformation.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: TamperProtectionControl.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: TamperProtectionManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: TamperProtectionPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ThreatDetection.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ThreatManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Translators.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: VEController.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: VirusDetection.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SafeStore32.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SafeStore64.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ssr32.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ssr64.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: HomeEditionComponent; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: swc_service_exe.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: integrity_dat.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SWCAdapter_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WebControlMessaging_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WebControlMessaging_dll_reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SwiCallout64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SwiDi.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Difx_dll_64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SwiComponent32OnlyNotWFP_SwiUpdate32.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: SwiComponent64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SwiCallout_cat.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Swi_di.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Difx_dll.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: SwiProxy.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SwiProxyChild.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: integrity.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcuts65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_de65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcuts66; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcuts67; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SavMain.exe65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_es65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_fr65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_it65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_ja65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_zh_cn65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_zh_tw65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __SAFESTOREDIR65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SAVService65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SAVTelem.exe65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __VirusDetection.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SafeStore32.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C10165; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SavShellExt.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SavMain.exe66; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SavProgress.exe65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __DesktopMessaging.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SavPlugin.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __DataControlManagement.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __DCManagement.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: BindImage
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: ProgId
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: Extension
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: Font
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: Class
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: TypeLib
Action start 12:08:26: InstallValidate.
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: _RemoveFilePath
MSI (s) (28:F8) [12:08:26:136]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: BindImage
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: ProgId
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: Extension
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: Font
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: Class
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2727 2:
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2727 2:
MSI (s) (28:F8) [12:08:26:136]: Doing action: SetARPINSTALLLOCATION
Action ended 12:08:26: InstallValidate. Return value 1.
MSI (s) (28:F8) [12:08:26:136]: PROPERTY CHANGE: Adding ARPINSTALLLOCATION property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetARPINSTALLLOCATION.
MSI (s) (28:F8) [12:08:26:136]: Skipping action: SetSAVSERVICEUSER (condition is false)
MSI (s) (28:F8) [12:08:26:136]: Doing action: RemoveExistingProducts
Action ended 12:08:26: SetARPINSTALLLOCATION. Return value 1.
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: Upgrade
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2228 2: 3: Upgrade 4: SELECT `Attributes`, `ActionProperty`, `Remove` FROM `Upgrade`
Action start 12:08:26: RemoveExistingProducts.
MSI (s) (28:F8) [12:08:26:136]: Doing action: InstallInitialize
Action ended 12:08:26: RemoveExistingProducts. Return value 0.
MSI (s) (28:F8) [12:08:26:136]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (28:F8) [12:08:26:136]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (28:F8) [12:08:26:136]: BeginTransaction: Locking Server
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (28:F8) [12:08:26:136]: SRSetRestorePoint skipped for this transaction.
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (28:F8) [12:08:26:136]: Server not locked: locking for product {65323B2D-83D4-470D-A209-D769DB30BBDB}
Action start 12:08:26: InstallInitialize.
MSI (s) (28:F8) [12:08:26:198]: Doing action: SetUpdateFailed
Action ended 12:08:26: InstallInitialize. Return value 1.
MSI (s) (28:F8) [12:08:26:198]: Note: 1: 2205 2: 3: MsiPatchCertificate
MSI (s) (28:F8) [12:08:26:198]: LUA patching is disabled: missing MsiPatchCertificate table
Action start 12:08:26: SetUpdateFailed.
MSI (s) (28:F8) [12:08:26:229]: Doing action: SetRestoreMovedFiles
Action ended 12:08:26: SetUpdateFailed. Return value 1.
MSI (s) (28:F8) [12:08:26:229]: PROPERTY CHANGE: Adding RestoreMovedFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRestoreMovedFiles.
MSI (s) (28:F8) [12:08:26:229]: Doing action: RestoreMovedFiles
Action ended 12:08:26: SetRestoreMovedFiles. Return value 1.
Action start 12:08:26: RestoreMovedFiles.
MSI (s) (28:F8) [12:08:26:229]: Doing action: CheckRegForNullDACLs
Action ended 12:08:26: RestoreMovedFiles. Return value 1.
Action start 12:08:26: CheckRegForNullDACLs.
MSI (s) (28:F8) [12:08:26:229]: Doing action: SetErrorScriptProperty
Action ended 12:08:26: CheckRegForNullDACLs. Return value 1.
MSI (s) (28:F8) [12:08:26:229]: PROPERTY CHANGE: Adding RunErrorScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"'.
Action start 12:08:26: SetErrorScriptProperty.
MSI (s) (28:F8) [12:08:26:229]: Doing action: RunErrorScript
Action ended 12:08:26: SetErrorScriptProperty. Return value 1.
Action start 12:08:26: RunErrorScript.
MSI (s) (28:F8) [12:08:26:229]: Doing action: ExtractClassicConfig
Action ended 12:08:26: RunErrorScript. Return value 1.
MSI (s) (28:28) [12:08:26:245]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA41A.tmp, Entrypoint: ExtractClassicConfig
MSI (s) (28:20) [12:08:26:245]: Generating random cookie.
MSI (s) (28:20) [12:08:26:245]: Created Custom Action Server with PID 3392 (0xD40).
MSI (s) (28:7C) [12:08:26:261]: Running as a service.
MSI (s) (28:7C) [12:08:26:261]: Hello, I'm your 32bit Elevated Non-remapped custom action server.
Action start 12:08:26: ExtractClassicConfig.
MSI (s) (28:F8) [12:08:26:276]: Doing action: PreInstallChecks
Action ended 12:08:26: ExtractClassicConfig. Return value 1.
MSI (s) (28:F4) [12:08:26:276]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA44A.tmp, Entrypoint: PreInstallChecks
Action start 12:08:26: PreInstallChecks.
MSI (s) (28:F8) [12:08:26:292]: Skipping action: SetUpdateBegin (condition is false)
MSI (s) (28:F8) [12:08:26:292]: Doing action: SetBootDriverStartupProperty
Action ended 12:08:26: PreInstallChecks. Return value 1.
MSI (s) (28:AC) [12:08:26:292]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA45B.tmp, Entrypoint: SetBootDriverStartupProperty
Action start 12:08:26: SetBootDriverStartupProperty.
MSI (s) (28:F8) [12:08:26:308]: Skipping action: CloseSavMainWindow (condition is false)
MSI (s) (28:F8) [12:08:26:308]: Doing action: AllocateRegistrySpace
Action ended 12:08:26: SetBootDriverStartupProperty. Return value 1.
Action start 12:08:26: AllocateRegistrySpace.
MSI (s) (28:F8) [12:08:26:308]: Doing action: ProcessComponents
Action ended 12:08:26: AllocateRegistrySpace. Return value 1.
Action start 12:08:26: ProcessComponents.
MSI (s) (28:F8) [12:08:26:323]: Doing action: UnpublishComponents
Action ended 12:08:26: ProcessComponents. Return value 1.
MSI (s) (28:F8) [12:08:26:323]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (28:F8) [12:08:26:323]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND (`Feature`.`Action` = 0 OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 12:08:26: UnpublishComponents.
MSI (s) (28:F8) [12:08:26:323]: Doing action: MsiUnpublishAssemblies
Action ended 12:08:26: UnpublishComponents. Return value 0.
MSI (s) (28:F8) [12:08:26:323]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (28:F8) [12:08:26:323]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT null, null, `Component`.`Component`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `MsiAssembly`, `Component`, `Feature` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Feature_` = `Feature`.`Feature` AND `MsiAssembly`.`File_Application` = null AND (`Feature`.`Action` = 0 OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 12:08:26: MsiUnpublishAssemblies.
MSI (s) (28:F8) [12:08:26:323]: Doing action: UnpublishFeatures
Action ended 12:08:26: MsiUnpublishAssemblies. Return value 0.
Action start 12:08:26: UnpublishFeatures.
MSI (s) (28:F8) [12:08:26:323]: Doing action: SchedSecureObjectsRollback
Action ended 12:08:26: UnpublishFeatures. Return value 1.
MSI (s) (28:E4) [12:08:26:323]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA47B.tmp, Entrypoint: SchedSecureObjectsRollback
MSI (s) (28!68) [12:08:26:323]: PROPERTY CHANGE: Adding ExecSecureObjectsRollback property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\CreateFolderD:AI(A;;FA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;OICIIO;GA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;ID;FA;;;BA)(A;OICIIOID;GA;;;BA)(A;ID;FA;;;SY)(A;OICIIOID;GA;;;SY)(A;ID;0x1200a9;;;WD)(A;OICIIOID;GXGR;;;WD)0'.
Action start 12:08:26: SchedSecureObjectsRollback.
MSI (s) (28!68) [12:08:26:323]: Doing action: ExecSecureObjectsRollback
Action start 12:08:26: ExecSecureObjectsRollback.
Action ended 12:08:26: ExecSecureObjectsRollback. Return value 1.
SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070002 - continuing
SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070002 - continuing
MSI (s) (28:F8) [12:08:26:323]: Skipping action: RollbackDisableServices (condition is false)
MSI (s) (28:F8) [12:08:26:323]: Skipping action: DisableServices (condition is false)
MSI (s) (28:F8) [12:08:26:323]: Doing action: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:26: SchedSecureObjectsRollback. Return value 1.
MSI (s) (28:F4) [12:08:26:323]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA47C.tmp, Entrypoint: SwcDisableSwcServiceStart
Action start 12:08:26: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:26:323]: Skipping action: SwiServiceUnregister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:323]: Skipping action: SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:323]: Doing action: StopServices
Action ended 12:08:26: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:26: StopServices.
MSI (s) (28:F8) [12:08:26:323]: Doing action: DeleteSwiFc.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:26: StopServices. Return value 1.
MSI (s) (28:F8) [12:08:26:339]: PROPERTY CHANGE: Adding DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe'.
Action start 12:08:26: DeleteSwiFc.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:26:339]: Doing action: DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:26: DeleteSwiFc.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:26: DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:26:339]: Doing action: DeleteScfDotDat.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:26: DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:26:339]: PROPERTY CHANGE: Adding DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat'.
Action start 12:08:26: DeleteScfDotDat.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:26:339]: Doing action: DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:26: DeleteScfDotDat.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:26: DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:26:339]: Skipping action: SwiCalloutUninstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: SwiFilterUninstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: SwiFilterUninstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: SwiCalloutUninstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: ForceStopSAVService (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Doing action: WaitForSAVService
Action ended 12:08:26: DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:26: WaitForSAVService.
MSI (s) (28:F8) [12:08:26:339]: Skipping action: CleanUpSsspUserAccount.SetProperty (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: CleanUpSsspUserAccountRollback.SetProperty (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: CleanUpSsspUserAccountRollback (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: CleanUpSsspUserAccount (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveSIPSSubmitterUserAccount.SetProperty (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveSIPSSubmitterUserAccount (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveSIPSSubmitterUserAccountRollback.SetProperty (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveSIPSSubmitterUserAccountRollback (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveTamperProtectionRegKeyRollback (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveTamperProtectionRegKey (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Doing action: DeleteServices
Action ended 12:08:26: WaitForSAVService. Return value 1.
Action start 12:08:26: DeleteServices.
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveSophosCleanupService (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Doing action: UnregisterComPlus
Action ended 12:08:26: DeleteServices. Return value 1.
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: Complus
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND `Action` = 0
Action start 12:08:26: UnregisterComPlus.
MSI (s) (28:F8) [12:08:26:339]: Doing action: SelfUnregModules
Action ended 12:08:26: UnregisterComPlus. Return value 0.
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: SelfReg 4: Select `File`.`FileName`,`Component`.`Directory_`,`Component`.`Installed`, `File`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `File`, `Component` Where `SelfReg`.`File_` = `File`.`File` And `File`.`Component_` = `Component`.`Component` And `Component`.`Action` = 0
Action start 12:08:26: SelfUnregModules.
MSI (s) (28:F8) [12:08:26:339]: Doing action: UnregisterTypeLibraries
Action ended 12:08:26: SelfUnregModules. Return value 1.
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: TypeLib 4: SELECT `LibID`, `TypeLib`.`Version`, `TypeLib`.`Language`, `TypeLib`.`Directory_`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `BinaryType`, `Component`.`Component`, `Component`.`Attributes` FROM `TypeLib`, `Component`, `File` WHERE `TypeLib`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Component`.`Action`=0)
Action start 12:08:26: UnregisterTypeLibraries.
MSI (s) (28:F8) [12:08:26:339]: Doing action: RemoveODBC
Action ended 12:08:26: UnregisterTypeLibraries. Return value 0.
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2711 2: ODBCDriverManager
Action start 12:08:26: RemoveODBC.
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2711 2: ODBCDriverManager64
MSI (s) (28:F8) [12:08:26:339]: Doing action: UnregisterFonts
Action ended 12:08:26: RemoveODBC. Return value 1.
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: Font
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Installed`From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And `FileAction`.`Action` = 0 ORDER BY `FileAction`.`Directory_`
Action start 12:08:26: UnregisterFonts.
MSI (s) (28:F8) [12:08:26:339]: Skipping action: UninstallSecurityCenter (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Doing action: RemoveRegistryValues
Action ended 12:08:26: UnregisterFonts. Return value 1.
Action start 12:08:26: RemoveRegistryValues.
MSI (s) (28:F8) [12:08:26:370]: Skipping action: SwcPauseForUnload.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:26:370]: Doing action: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:26: RemoveRegistryValues. Return value 1.
Action start 12:08:26: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:26:370]: Skipping action: SwcDeleteReg.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:26:370]: Skipping action: SwcService_unreg_rb.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:26:370]: Skipping action: SwcService_unregister.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:26:370]: Skipping action: Swc_postcleanup.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:26:370]: Doing action: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:26: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:26: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:26:370]: Doing action: ConfigureEventManifestUnregister
Action ended 12:08:26: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (28:38) [12:08:26:386]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA4AC.tmp, Entrypoint: ConfigureEventManifestUnregister
Action start 12:08:26: ConfigureEventManifestUnregister.
MSI (s) (28:F8) [12:08:26:401]: Doing action: UnregisterClassInfo
Action ended 12:08:26: ConfigureEventManifestUnregister. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2205 2: 3: Class
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2228 2: 3: Class 4: SELECT `BinaryType`, `CLSID`, `ProgId_Default`, `Class`.`Description`, `Context`, `Feature_`, `ComponentId`, `Component`, `Class`.`Attributes`, `AppId_`, `FileTypeMask`, `Icon_`, `IconIndex`, `DefInprocHandler`, `Argument`, `Component`.`RuntimeFlags`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action`, `Component`.`Attributes` FROM `Class`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 12:08:26: UnregisterClassInfo.
MSI (s) (28:F8) [12:08:26:401]: Doing action: UnregisterExtensionInfo
Action ended 12:08:26: UnregisterClassInfo. Return value 0.
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2205 2: 3: Extension
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2228 2: 3: Extension 4: SELECT `Extension`, `BinaryType`, `ProgId_`, null, null, `MIME_`, `Feature_`, `ComponentId`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action` FROM `Extension`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 12:08:26: UnregisterExtensionInfo.
MSI (s) (28:F8) [12:08:26:401]: Doing action: UnregisterProgIdInfo
Action ended 12:08:26: UnregisterExtensionInfo. Return value 0.
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2205 2: 3: ProgId
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2228 2: 3: ProgId 4: SELECT DISTINCT `BinaryType`, `ProgId`, `Class_`, `ProgId`.`Description`, `ProgId`.`Icon_`, `ProgId`.`IconIndex`, null, `Component`.`RuntimeFlags` , `Component`.`Component`, `Component`.`Attributes` FROM `ProgId`, `Class`, `Feature`, `Component` WHERE `ProgId`.`Class_` = `Class`.`CLSID` AND `Class`.`Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 12:08:26: UnregisterProgIdInfo.
MSI (s) (28:F8) [12:08:26:401]: Doing action: UnregisterMIMEInfo
Action ended 12:08:26: UnregisterProgIdInfo. Return value 0.
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2205 2: 3: MIME
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 12:08:26: UnregisterMIMEInfo.
MSI (s) (28:F8) [12:08:26:401]: Doing action: RemoveIniValues
Action ended 12:08:26: UnregisterMIMEInfo. Return value 0.
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2205 2: 3: IniFile
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND `Component`.`Action`=0 ORDER BY `FileName`,`Section`
Action start 12:08:26: RemoveIniValues.
MSI (s) (28:F8) [12:08:26:401]: Doing action: RemoveShortcuts
Action ended 12:08:26: RemoveIniValues. Return value 1.
Action start 12:08:26: RemoveShortcuts.
MSI (s) (28:F8) [12:08:26:401]: Doing action: RemoveEnvironmentStrings
Action ended 12:08:26: RemoveShortcuts. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2205 2: 3: Environment
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 0)
Action start 12:08:26: RemoveEnvironmentStrings.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetRemoveSAVIProperty
Action ended 12:08:26: RemoveEnvironmentStrings. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Modifying RemoveSAVI property. Its current value is 'INSTALLDIR'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRemoveSAVIProperty.
MSI (s) (28:F8) [12:08:26:401]: Skipping action: RemoveSAVI (condition is false)
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallDriverFilesOnUpdateProperty
Action ended 12:08:26: SetRemoveSAVIProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallDriverFilesOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'.
Action start 12:08:26: SetUninstallDriverFilesOnUpdateProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallBootDriverProperty
Action ended 12:08:26: SetUninstallDriverFilesOnUpdateProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallBootDriver property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'.
Action start 12:08:26: SetUninstallBootDriverProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallBootDriverOnUpdateProperty
Action ended 12:08:26: SetUninstallBootDriverProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallBootDriverOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'.
Action start 12:08:26: SetUninstallBootDriverOnUpdateProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallKMSDriverProperty
Action ended 12:08:26: SetUninstallBootDriverOnUpdateProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallKMSDriver property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF'.
Action start 12:08:26: SetUninstallKMSDriverProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallKMSDriverOnUpdateProperty
Action ended 12:08:26: SetUninstallKMSDriverProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallKMSDriverOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF'.
Action start 12:08:26: SetUninstallKMSDriverOnUpdateProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallDriverFilesVistaProperty
Action ended 12:08:26: SetUninstallKMSDriverOnUpdateProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallDriverFilesVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'.
Action start 12:08:26: SetUninstallDriverFilesVistaProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallClassFilterVistaProperty
Action ended 12:08:26: SetUninstallDriverFilesVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallClassFilterVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf'.
Action start 12:08:26: SetUninstallClassFilterVistaProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetClassFilterPresentProperty
Action ended 12:08:26: SetUninstallClassFilterVistaProperty. Return value 1.
MSI (s) (28:50) [12:08:26:401]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA4CC.tmp, Entrypoint: SetClassFilterPresentProperty
Action start 12:08:26: SetClassFilterPresentProperty.
MSI (s) (28:F8) [12:08:26:433]: Doing action: CheckUninstallDrivers
Action ended 12:08:26: SetClassFilterPresentProperty. Return value 1.
Action start 12:08:26: CheckUninstallDrivers.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDriverFilesOnUpdate (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDriverFiles64OnUpdate (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDriverFiles (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDriverFiles64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDriverFilesVista (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDriverFiles64Vista (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallBootDriverOnUpdate (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallBootDriverOnUpdate64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallBootDriver (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallBootDriver64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallClassFilterCleanReg (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallClassFilter64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallClassFilter64Vista (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallClassFilter (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallClassFilterVista (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallKMSDriver (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallKMSDriverOnUpdate (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UnregisterTamperProtectionControlX64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UnregisterSavShellExtX64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UnregisterSophosOfficeAV (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UnregisterSophosOfficeAVX64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetUninstallDeviceControlProperty
Action ended 12:08:26: CheckUninstallDrivers. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Adding UninstallDeviceControl property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'.
Action start 12:08:26: SetUninstallDeviceControlProperty.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDeviceControl (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetDeleteDriverKeysProperty
Action ended 12:08:26: SetUninstallDeviceControlProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Adding DeleteDriverKeys property. Its value is '0'.
Action start 12:08:26: SetDeleteDriverKeysProperty.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: DeleteDriverKeys (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: DeleteSKMScanDriverKeys (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: DeleteSDCFilterDriverKeys (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: DeleteSDCFilterDriverFiles (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetUnregisterBufferOverflowProtection
Action ended 12:08:26: SetDeleteDriverKeysProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Adding UnregisterBufferOverflowProtection property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetUnregisterBufferOverflowProtection.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UnregisterBufferOverflowProtection (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetDeleteNonEngineFilesProperty
Action ended 12:08:26: SetUnregisterBufferOverflowProtection. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Adding DeleteNonEngineFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetDeleteNonEngineFilesProperty.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: DeleteNonEngineFiles (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetDeleteOtherFilesProperty
Action ended 12:08:26: SetDeleteNonEngineFilesProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Adding DeleteOtherFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetDeleteOtherFilesProperty.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: DeleteOtherFiles (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: CreateRebootTestFile (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: CheckCTAInstalled (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: RemoveDuplicateFiles
Action ended 12:08:26: SetDeleteOtherFilesProperty. Return value 1.
Action start 12:08:26: RemoveDuplicateFiles.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: EnableWindowsDefender (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: SwiUpdateCleanup.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: SwiUpdateCleanup.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: Win8Cleanup.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: SwiUpdateCleanup64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: SwiUpdateCleanup64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: RemoveFiles
Action ended 12:08:26: RemoveDuplicateFiles. Return value 1.
Action start 12:08:26: RemoveFiles.
MSI (s) (28:F8) [12:08:26:433]: Doing action: RemoveFolders
Action ended 12:08:26: RemoveFiles. Return value 1.
Action start 12:08:26: RemoveFolders.
MSI (s) (28:F8) [12:08:26:433]: Doing action: CreateFolders
Action ended 12:08:26: RemoveFolders. Return value 1.
Action start 12:08:26: CreateFolders.
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetDeleteIDEsProperty
Action ended 12:08:26: CreateFolders. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Modifying DeleteIDEs property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetDeleteIDEsProperty.
MSI (s) (28:F8) [12:08:26:433]: Doing action: DeleteIDEs
Action ended 12:08:26: SetDeleteIDEsProperty. Return value 1.
Action start 12:08:26: DeleteIDEs.
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetDeleteBDLsProperty
Action ended 12:08:26: DeleteIDEs. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Modifying DeleteBDLs property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetDeleteBDLsProperty.
MSI (s) (28:F8) [12:08:26:433]: Doing action: DeleteBDLs
Action ended 12:08:26: SetDeleteBDLsProperty. Return value 1.
Action start 12:08:26: DeleteBDLs.
MSI (s) (28:F8) [12:08:26:448]: Doing action: SetDeleteHIPSConfigProperty
Action ended 12:08:26: DeleteBDLs. Return value 1.
MSI (s) (28:F8) [12:08:26:448]: PROPERTY CHANGE: Adding DeleteHIPSConfig property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetDeleteHIPSConfigProperty.
MSI (s) (28:F8) [12:08:26:448]: Doing action: DeleteHIPSConfig
Action ended 12:08:26: SetDeleteHIPSConfigProperty. Return value 1.
Action start 12:08:26: DeleteHIPSConfig.
MSI (s) (28:F8) [12:08:26:448]: Doing action: SetRemoveFilesOnUpgradeProperty
Action ended 12:08:26: DeleteHIPSConfig. Return value 1.
MSI (s) (28:F8) [12:08:26:448]: PROPERTY CHANGE: Adding RemoveFilesOnUpgrade property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRemoveFilesOnUpgradeProperty.
MSI (s) (28:F8) [12:08:26:448]: Skipping action: RemoveFilesOnUpgrade (condition is false)
MSI (s) (28:F8) [12:08:26:448]: Doing action: SetRollbackForceProperty
Action ended 12:08:26: SetRemoveFilesOnUpgradeProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:448]: PROPERTY CHANGE: Adding RollbackForceDeleteFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRollbackForceProperty.
MSI (s) (28:F8) [12:08:26:448]: Doing action: RollbackForceDeleteFiles
Action ended 12:08:26: SetRollbackForceProperty. Return value 1.
Action start 12:08:26: RollbackForceDeleteFiles.
MSI (s) (28:F8) [12:08:26:448]: Doing action: SetRollbackForceUserProperty
Action ended 12:08:26: RollbackForceDeleteFiles. Return value 1.
MSI (s) (28:F8) [12:08:26:448]: PROPERTY CHANGE: Adding RollbackForceDeleteUserPlugin property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRollbackForceUserProperty.
MSI (s) (28:F8) [12:08:26:448]: Doing action: RollbackForceDeleteUserPlugin
Action ended 12:08:26: SetRollbackForceUserProperty. Return value 1.
Action start 12:08:26: RollbackForceDeleteUserPlugin.
MSI (s) (28:F8) [12:08:26:448]: Doing action: SetRollbackOtherFilesProperty
Action ended 12:08:26: RollbackForceDeleteUserPlugin. Return value 1.
MSI (s) (28:F8) [12:08:26:448]: PROPERTY CHANGE: Modifying RollbackOtherFiles property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRollbackOtherFilesProperty.
MSI (s) (28:F8) [12:08:26:448]: Doing action: RollbackOtherFiles
Action ended 12:08:26: SetRollbackOtherFilesProperty. Return value 1.
Action start 12:08:26: RollbackOtherFiles.
MSI (s) (28:F8) [12:08:26:448]: Doing action: SetRollbackUpdateSavAdapterDllProperty
Action ended 12:08:26: RollbackOtherFiles. Return value 1.
MSI (s) (28:F8) [12:08:26:448]: PROPERTY CHANGE: Adding RollbackUpdateSavAdapterDll property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRollbackUpdateSavAdapterDllProperty.
MSI (s) (28:F8) [12:08:26:448]: Doing action: RollbackUpdateSavAdapterDll
Action ended 12:08:26: SetRollbackUpdateSavAdapterDllProperty. Return value 1.
Action start 12:08:26: RollbackUpdateSavAdapterDll.
MSI (s) (28:F8) [12:08:26:464]: Doing action: SetUpdateSavAdapterDllProperty
Action ended 12:08:26: RollbackUpdateSavAdapterDll. Return value 1.
MSI (s) (28:F8) [12:08:26:464]: PROPERTY CHANGE: Adding UpdateSavAdapterDll property. Its value is ';10.7.2.49;'.
Action start 12:08:26: SetUpdateSavAdapterDllProperty.
MSI (s) (28:F8) [12:08:26:464]: Doing action: UpdateSavAdapterDll
Action ended 12:08:26: SetUpdateSavAdapterDllProperty. Return value 1.
Action start 12:08:26: UpdateSavAdapterDll.
MSI (s) (28:F8) [12:08:26:464]: Doing action: SetRollbackUpdateDesktopMessagingProperty
Action ended 12:08:26: UpdateSavAdapterDll. Return value 1.
MSI (s) (28:F8) [12:08:26:464]: PROPERTY CHANGE: Adding RollbackUpdateDesktopMessaging property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRollbackUpdateDesktopMessagingProperty.
MSI (s) (28:F8) [12:08:26:464]: Doing action: RollbackUpdateDesktopMessaging
Action ended 12:08:26: SetRollbackUpdateDesktopMessagingProperty. Return value 1.
Action start 12:08:26: RollbackUpdateDesktopMessaging.
MSI (s) (28:F8) [12:08:26:464]: Doing action: SetUpdateDesktopMessagingProperty
Action ended 12:08:26: RollbackUpdateDesktopMessaging. Return value 1.
MSI (s) (28:F8) [12:08:26:464]: PROPERTY CHANGE: Adding UpdateDesktopMessaging property. Its value is ';10.7.2.49;'.
Action start 12:08:26: SetUpdateDesktopMessagingProperty.
MSI (s) (28:F8) [12:08:26:464]: Doing action: UpdateDesktopMessaging
Action ended 12:08:26: SetUpdateDesktopMessagingProperty. Return value 1.
Action start 12:08:26: UpdateDesktopMessaging.
MSI (s) (28:F8) [12:08:26:464]: Doing action: SetInitialDriverProperty
Action ended 12:08:26: UpdateDesktopMessaging. Return value 1.
Action start 12:08:26: SetInitialDriverProperty.
MSI (s) (28:F8) [12:08:26:464]: Doing action: SetInstallDriverProperty
Action ended 12:08:26: SetInitialDriverProperty. Return value 1.
MSI (s) (28:30) [12:08:26:480]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA51B.tmp, Entrypoint: SetDriverProperty
MSI (s) (28!14) [12:08:26:480]: PROPERTY CHANGE: Modifying DRIVERVERSION property. Its current value is '0'. Its new value: 'WIN7_AMD64'.
MSI (s) (28!14) [12:08:26:480]: PROPERTY CHANGE: Modifying BOOTDRIVERSIGNED property. Its current value is '0'. Its new value: '1'.
Action start 12:08:26: SetInstallDriverProperty.
MSI (s) (28:F8) [12:08:26:495]: Doing action: SetProcessorProperties
Action ended 12:08:26: SetInstallDriverProperty. Return value 1.
MSI (s) (28:10) [12:08:26:495]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA52C.tmp, Entrypoint: SetProcessorProperties
MSI (s) (28!F8) [12:08:26:495]: PROPERTY CHANGE: Modifying PROCESSOR_NX_ENABLED property. Its current value is '0'. Its new value: '1'.
Action start 12:08:26: SetProcessorProperties.
MSI (s) (28:F8) [12:08:26:511]: Doing action: SetCopyOtherFilesProperty
Action ended 12:08:26: SetProcessorProperties. Return value 1.
MSI (s) (28:F8) [12:08:26:511]: PROPERTY CHANGE: Adding CopyOtherFiles property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"'.
Action start 12:08:26: SetCopyOtherFilesProperty.
MSI (s) (28:F8) [12:08:26:511]: Doing action: CopyOtherFiles
Action ended 12:08:26: SetCopyOtherFilesProperty. Return value 1.
Action start 12:08:26: CopyOtherFiles.
MSI (s) (28:F8) [12:08:26:511]: Doing action: SetForceDeleteUserPluginProperty
Action ended 12:08:26: CopyOtherFiles. Return value 1.
MSI (s) (28:F8) [12:08:26:511]: PROPERTY CHANGE: Adding ForceDeleteUserPlugin property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetForceDeleteUserPluginProperty.
MSI (s) (28:F8) [12:08:26:511]: Skipping action: ForceDeleteUserPlugin (condition is false)
MSI (s) (28:F8) [12:08:26:511]: Doing action: SetRegisterBufferOverflowProtection
Action ended 12:08:26: SetForceDeleteUserPluginProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:511]: PROPERTY CHANGE: Adding RegisterBufferOverflowProtection property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRegisterBufferOverflowProtection.
MSI (s) (28:F8) [12:08:26:511]: Doing action: RegisterBufferOverflowProtection
Action ended 12:08:26: SetRegisterBufferOverflowProtection. Return value 1.
Action start 12:08:26: RegisterBufferOverflowProtection.
MSI (s) (28:F8) [12:08:26:511]: Skipping action: RollbackClassFilter (condition is false)
MSI (s) (28:F8) [12:08:26:511]: Skipping action: RollbackClassFilter64 (condition is false)
MSI (s) (28:F8) [12:08:26:511]: Doing action: RollbackClassFilter64Vista
Action ended 12:08:26: RegisterBufferOverflowProtection. Return value 1.
Action start 12:08:26: RollbackClassFilter64Vista.
MSI (s) (28:F8) [12:08:26:511]: Skipping action: RollbackDriverFiles (condition is false)
MSI (s) (28:F8) [12:08:26:511]: Skipping action: RollbackBootDriver (condition is false)
MSI (s) (28:F8) [12:08:26:511]: Doing action: SetRestoreExcludedProcessesProperty
Action ended 12:08:26: RollbackClassFilter64Vista. Return value 1.
MSI (s) (28:94) [12:08:26:511]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA53D.tmp, Entrypoint: SetRestoreExcludedProcessesProperty
Action start 12:08:26: SetRestoreExcludedProcessesProperty.
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackDriverFiles64 (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackBootDriver64 (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackKMSDriver (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Doing action: SetRollbackDriverFilesVistaProperty
Action ended 12:08:26: SetRestoreExcludedProcessesProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:526]: PROPERTY CHANGE: Adding RollbackDriverFilesVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'.
Action start 12:08:26: SetRollbackDriverFilesVistaProperty.
MSI (s) (28:F8) [12:08:26:526]: Doing action: SetRollbackBootDriverVistaProperty
Action ended 12:08:26: SetRollbackDriverFilesVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:526]: PROPERTY CHANGE: Adding RollbackBootDriverVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'.
Action start 12:08:26: SetRollbackBootDriverVistaProperty.
MSI (s) (28:F8) [12:08:26:526]: Doing action: SetRollbackClassFilterVistaProperty
Action ended 12:08:26: SetRollbackBootDriverVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:526]: PROPERTY CHANGE: Adding RollbackClassFilterVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf'.
Action start 12:08:26: SetRollbackClassFilterVistaProperty.
MSI (s) (28:F8) [12:08:26:526]: Doing action: SetRollbackKMSDriverVistaProperty
Action ended 12:08:26: SetRollbackClassFilterVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:526]: PROPERTY CHANGE: Adding RollbackKMSDriverVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\skmscan.inf'.
Action start 12:08:26: SetRollbackKMSDriverVistaProperty.
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackBootDriverVista (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackDriverFilesVista (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackClassFilterVista (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Doing action: RollbackBootDriver64Vista
Action ended 12:08:26: SetRollbackKMSDriverVistaProperty. Return value 1.
Action start 12:08:26: RollbackBootDriver64Vista.
MSI (s) (28:F8) [12:08:26:526]: Doing action: RollbackDriverFiles64Vista
Action ended 12:08:26: RollbackBootDriver64Vista. Return value 1.
Action start 12:08:26: RollbackDriverFiles64Vista.
MSI (s) (28:F8) [12:08:26:526]: Doing action: RestoreExcludedProcesses
Action ended 12:08:26: RollbackDriverFiles64Vista. Return value 1.
Action start 12:08:26: RestoreExcludedProcesses.
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackKMSDriverVista (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Skipping action: InstallDriverFilesXP (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Skipping action: InstallBootDriverXP (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Doing action: SetInstallDriverFilesVistaProperty
Action ended 12:08:26: RestoreExcludedProcesses. Return value 1.
MSI (s) (28:F8) [12:08:26:526]: PROPERTY CHANGE: Adding InstallDriverFilesVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\wlh_i386\SAVONACCESSDRIV.INF'.
Action start 12:08:26: SetInstallDriverFilesVistaProperty.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallDriverFilesVista (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallDriverFilesWin7Property
Action ended 12:08:26: SetInstallDriverFilesVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallDriverFilesWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\win7_i386\SAVONACCESSDRIV.INF'.
Action start 12:08:26: SetInstallDriverFilesWin7Property.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallDriverFilesWin7 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallClassFilterVistaProperty
Action ended 12:08:26: SetInstallDriverFilesWin7Property. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallClassFilterVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\wxp_i386\sdcfilter.inf'.
Action start 12:08:26: SetInstallClassFilterVistaProperty.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallClassFilterWin7Property
Action ended 12:08:26: SetInstallClassFilterVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallClassFilterWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\win7_i386\sdcfilter.inf'.
Action start 12:08:26: SetInstallClassFilterWin7Property.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallClassFilterVista (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallClassFilterWin7 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallBootDriverVistaProperty
Action ended 12:08:26: SetInstallClassFilterWin7Property. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallBootDriverVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\wxp_i386\SOPHOSBOOTDRIVER.INF'.
Action start 12:08:26: SetInstallBootDriverVistaProperty.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallBootDriverWin7Property
Action ended 12:08:26: SetInstallBootDriverVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallBootDriverWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_i386\SOPHOSBOOTDRIVER.INF'.
Action start 12:08:26: SetInstallBootDriverWin7Property.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallBootDriverVista (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallBootDriverWin7 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallBootDriverAMD64 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallDriverFilesAMD64 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallBootDriverAMD64Vista (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: InstallBootDriverAMD64Win7
Action ended 12:08:26: SetInstallBootDriverWin7Property. Return value 1.
Action start 12:08:26: InstallBootDriverAMD64Win7.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallDriverFilesAMD64Vista (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: InstallDriverFilesAMD64Win7
Action ended 12:08:26: InstallBootDriverAMD64Win7. Return value 1.
Action start 12:08:26: InstallDriverFilesAMD64Win7.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallUnsignedBootDriver
Action ended 12:08:26: InstallDriverFilesAMD64Win7. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallUnsignedBootDriver property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"'.
Action start 12:08:26: SetInstallUnsignedBootDriver.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallUnsignedDrivers
Action ended 12:08:26: SetInstallUnsignedBootDriver. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallUnsignedDrivers property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"'.
Action start 12:08:26: SetInstallUnsignedDrivers.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallUnsignedBootDriver (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallUnsignedDrivers (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallUnsignedBootDriverAMD64 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallUnsignedDriversAMD64 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallClassFilterXP (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallClassFilterAMD64 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallClassFilterAMD64Vista (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: InstallClassFilterAMD64Win7
Action ended 12:08:26: SetInstallUnsignedDrivers. Return value 1.
Action start 12:08:26: InstallClassFilterAMD64Win7.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallKMSDriverProperty
Action ended 12:08:26: InstallClassFilterAMD64Win7. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallKMSDriver property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\kms\wxp_i386\skmscan.inf'.
Action start 12:08:26: SetInstallKMSDriverProperty.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallKMSDriver (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallKMSDriverWin7Property
Action ended 12:08:26: SetInstallKMSDriverProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallKMSDriverWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\kms\win7_i386\skmscan.inf'.
Action start 12:08:26: SetInstallKMSDriverWin7Property.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallKMSDriverWin7 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetStartDriverServicesProperty
Action ended 12:08:26: SetInstallKMSDriverWin7Property. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding StartDriverServices property. Its value is 'WIN7_AMD64'.
Action start 12:08:26: SetStartDriverServicesProperty.
MSI (s) (28:F8) [12:08:26:542]: Doing action: StartDriverServices
Action ended 12:08:26: SetStartDriverServicesProperty. Return value 1.
Action start 12:08:26: StartDriverServices.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetMoveLockedFiles
Action ended 12:08:26: StartDriverServices. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding MoveLockedFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\|'.
Action start 12:08:26: SetMoveLockedFiles.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: MoveLockedFiles (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: MoveFiles
Action ended 12:08:26: SetMoveLockedFiles. Return value 1.
Action start 12:08:26: MoveFiles.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:26: MoveFiles. Return value 1.
MSI (s) (28:B0) [12:08:26:542]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA55D.tmp, Entrypoint: SwcDeleteSAUPluginRegistry
Action start 12:08:26: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:26:558]: Doing action: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:26: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (28:28) [12:08:26:558]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA56E.tmp, Entrypoint: SwcDeleteRMSPluginRegistry
Action start 12:08:26: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:26:558]: Doing action: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:26: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (28:30) [12:08:26:558]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA56F.tmp, Entrypoint: SwcPauseForUnhook
Action start 12:08:26: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:31:572]: Doing action: InstallFiles
Action ended 12:08:31: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:31: InstallFiles.
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2205 2: 3: MsiSFCBypass
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2228 2: 3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ?
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ?
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (28:F8) [12:08:31:588]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:588]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:588]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:588]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:619]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:619]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:619]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:619]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:634]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:634]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:634]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:634]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:666]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:666]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:666]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:666]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:728]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:728]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:728]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:728]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:791]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:791]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:791]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:791]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:806]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:806]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:806]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:806]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:853]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:853]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:853]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:853]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:853]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:853]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:884]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:884]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:884]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:884]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:931]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:931]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:931]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:931]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:963]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:963]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:963]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:963]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:978]: Skipping action: SwcService_unreg_nc.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:31:978]: Skipping action: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:31:978]: Doing action: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:31: InstallFiles. Return value 1.
Action start 12:08:31: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:31:978]: Skipping action: SwcDeleteRegExceptId.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:31:978]: Doing action: PatchFiles
Action ended 12:08:31: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (28:F8) [12:08:31:978]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:978]: Note: 1: 2228 2: 3: Patch 4: SELECT `File`,`FileName`,`FileSize`,`Directory_`,`PatchSize`,`File`.`Attributes`,`Patch`.`Attributes`,`Patch`.`Sequence`,`Component`.`Component`,`Component`.`ComponentId` FROM `File`,`Component`,`Patch` WHERE `Patch`.`#_MsiActive`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
Action start 12:08:31: PatchFiles.
MSI (s) (28:F8) [12:08:31:978]: Doing action: DuplicateFiles
Action ended 12:08:31: PatchFiles. Return value 0.
Action start 12:08:31: DuplicateFiles.
MSI (s) (28:F8) [12:08:31:978]: Doing action: SchedXmlFile
Action ended 12:08:31: DuplicateFiles. Return value 1.
MSI (s) (28:8C) [12:08:31:978]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIBA8E.tmp, Entrypoint: SchedXmlFile
MSI (s) (28!B0) [12:08:31:994]: PROPERTY CHANGE: Adding ExecXmlFile property. Its value is '10C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@messageFileName]messageFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll71/*/*/*/*[@parameterFileName]parameterFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll10C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@resourceFileName]resourceFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll'.
Action start 12:08:31: SchedXmlFile.
MSI (s) (28!B0) [12:08:31:994]: Doing action: ExecXmlFile
Action start 12:08:31: ExecXmlFile.
Action ended 12:08:31: ExecXmlFile. Return value 1.
MSI (s) (28:F8) [12:08:31:994]: Doing action: ConfigureEventManifestRegister
Action ended 12:08:31: SchedXmlFile. Return value 1.
MSI (s) (28:74) [12:08:31:994]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIBA9E.tmp, Entrypoint: ConfigureEventManifestRegister
MSI (s) (28:48) [12:08:32:010]: PROPERTY CHANGE: Adding RollbackRegisterEventManifest property. Its value is '"wevtutil.exe" um "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"'.
Action start 12:08:31: ConfigureEventManifestRegister.
MSI (s) (28:48) [12:08:32:010]: Doing action: RollbackRegisterEventManifest
Action start 12:08:32: RollbackRegisterEventManifest.
MSI (s) (28:48) [12:08:32:010]: PROPERTY CHANGE: Adding RegisterEventManifest property. Its value is '"wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"'.
Action ended 12:08:32: RollbackRegisterEventManifest. Return value 1.
MSI (s) (28:48) [12:08:32:010]: Doing action: RegisterEventManifest
Action start 12:08:32: RegisterEventManifest.
Action ended 12:08:32: RegisterEventManifest. Return value 1.
MSI (s) (28:F8) [12:08:32:010]: Skipping action: DeleteUserGroups (condition is false)
MSI (s) (28:F8) [12:08:32:010]: Doing action: RollbackUserGroups
Action ended 12:08:32: ConfigureEventManifestRegister. Return value 1.
Action start 12:08:32: RollbackUserGroups.
MSI (s) (28:F8) [12:08:32:025]: Doing action: SetUserGroupsProperty
Action ended 12:08:32: RollbackUserGroups. Return value 1.
MSI (s) (28:F8) [12:08:32:025]: PROPERTY CHANGE: Adding CreateUserGroups property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 12:08:32: SetUserGroupsProperty.
MSI (s) (28:F8) [12:08:32:025]: Doing action: CreateUserGroups
Action ended 12:08:32: SetUserGroupsProperty. Return value 1.
Action start 12:08:32: CreateUserGroups.
MSI (s) (28:F8) [12:08:32:025]: Doing action: PurgeIOfficeAVCache
Action ended 12:08:32: CreateUserGroups. Return value 1.
Action start 12:08:32: PurgeIOfficeAVCache.
MSI (s) (28:F8) [12:08:32:041]: Doing action: EnableAttachmentScanning
Action ended 12:08:32: PurgeIOfficeAVCache. Return value 1.
Action start 12:08:32: EnableAttachmentScanning.
MSI (s) (28:F8) [12:08:32:041]: Doing action: AddDomainGroups
Action ended 12:08:32: EnableAttachmentScanning. Return value 1.
Action start 12:08:32: AddDomainGroups.
MSI (s) (28:F8) [12:08:32:041]: Doing action: BindImage
Action ended 12:08:32: AddDomainGroups. Return value 1.
Action start 12:08:32: BindImage.
MSI (s) (28:F8) [12:08:32:041]: Doing action: CreateShortcuts
Action ended 12:08:32: BindImage. Return value 1.
Action start 12:08:32: CreateShortcuts.
MSI (s) (28:F8) [12:08:32:056]: Doing action: RegisterClassInfo
Action ended 12:08:32: CreateShortcuts. Return value 1.
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2205 2: 3: Class
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2228 2: 3: Class 4: SELECT `BinaryType`, `CLSID`, `ProgId_Default`, `Class`.`Description`, `Context`, `Feature_`, `ComponentId`, `Component`, `Class`.`Attributes`, `AppId_`, `FileTypeMask`, `Icon_`, `IconIndex`, `DefInprocHandler`, `Argument`, `Component`.`RuntimeFlags`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action`, `Component`.`Attributes` FROM `Class`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 12:08:32: RegisterClassInfo.
MSI (s) (28:F8) [12:08:32:056]: Doing action: RegisterExtensionInfo
Action ended 12:08:32: RegisterClassInfo. Return value 0.
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2205 2: 3: Extension
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2228 2: 3: Extension 4: SELECT `Extension`, `BinaryType`, `ProgId_`, null, null, `MIME_`, `Feature_`, `ComponentId`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action` FROM `Extension`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 12:08:32: RegisterExtensionInfo.
MSI (s) (28:F8) [12:08:32:056]: Doing action: RegisterProgIdInfo
Action ended 12:08:32: RegisterExtensionInfo. Return value 0.
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2205 2: 3: ProgId
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2228 2: 3: ProgId 4: SELECT DISTINCT `BinaryType`, `ProgId`, `Class_`, `ProgId`.`Description`, `ProgId`.`Icon_`, `ProgId`.`IconIndex`, null, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `ProgId`, `Class`, `Feature`, `Component` WHERE `ProgId`.`Class_` = `Class`.`CLSID` AND `Class`.`Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 12:08:32: RegisterProgIdInfo.
MSI (s) (28:F8) [12:08:32:056]: Doing action: RegisterMIMEInfo
Action ended 12:08:32: RegisterProgIdInfo. Return value 0.
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2205 2: 3: MIME
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 12:08:32: RegisterMIMEInfo.
MSI (s) (28:F8) [12:08:32:056]: Doing action: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:32: RegisterMIMEInfo. Return value 0.
Action start 12:08:32: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:32:056]: Doing action: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:32: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (28:F8) [12:08:32:072]: PROPERTY CHANGE: Adding SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll'.
Action start 12:08:32: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:32:072]: Doing action: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:32: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:32: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:32:072]: Doing action: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:32: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (28:F8) [12:08:32:072]: PROPERTY CHANGE: Adding SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll'.
Action start 12:08:32: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:32:072]: Doing action: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:32: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:32: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:32:072]: Doing action: WriteRegistryValues
Action ended 12:08:32: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:32: WriteRegistryValues.
MSI (s) (28:F8) [12:08:33:276]: Doing action: SetSAVAdminUpdateBegin
Action ended 12:08:33: WriteRegistryValues. Return value 1.
Action start 12:08:33: SetSAVAdminUpdateBegin.
MSI (s) (28:F8) [12:08:33:276]: Doing action: SetRollBackSaviProperty
Action ended 12:08:33: SetSAVAdminUpdateBegin. Return value 1.
MSI (s) (28:F8) [12:08:33:276]: PROPERTY CHANGE: Modifying RollbackSavi property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:33: SetRollBackSaviProperty.
MSI (s) (28:F8) [12:08:33:276]: Doing action: RollbackSavi
Action ended 12:08:33: SetRollBackSaviProperty. Return value 1.
Action start 12:08:33: RollbackSavi.
MSI (s) (28:F8) [12:08:33:291]: Doing action: SetUpdateSaviProperty
Action ended 12:08:33: RollbackSavi. Return value 1.
MSI (s) (28:F8) [12:08:33:291]: PROPERTY CHANGE: Modifying UpdateSAVI property. Its current value is '0'. Its new value: '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"'.
Action start 12:08:33: SetUpdateSaviProperty.
MSI (s) (28:F8) [12:08:33:291]: Doing action: UpdateSAVI
Action ended 12:08:33: SetUpdateSaviProperty. Return value 1.
Action start 12:08:33: UpdateSAVI.
MSI (s) (28:F8) [12:08:33:291]: Doing action: SetSetFolderPermissions
Action ended 12:08:33: UpdateSAVI. Return value 1.
MSI (s) (28:F8) [12:08:33:291]: PROPERTY CHANGE: Adding SetFolderPermissions property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:33: SetSetFolderPermissions.
MSI (s) (28:F8) [12:08:33:291]: Doing action: SetFolderPermissions
Action ended 12:08:33: SetSetFolderPermissions. Return value 1.
Action start 12:08:33: SetFolderPermissions.
MSI (s) (28:F8) [12:08:33:291]: Doing action: WriteIniValues
Action ended 12:08:33: SetFolderPermissions. Return value 1.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: IniFile
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND (`Component`.`Action`=1 OR `Component`.`Action`=2) ORDER BY `FileName`,`Section`
Action start 12:08:33: WriteIniValues.
MSI (s) (28:F8) [12:08:33:291]: Doing action: WriteEnvironmentStrings
Action ended 12:08:33: WriteIniValues. Return value 1.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: Environment
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2)
Action start 12:08:33: WriteEnvironmentStrings.
MSI (s) (28:F8) [12:08:33:291]: Doing action: RegisterFonts
Action ended 12:08:33: WriteEnvironmentStrings. Return value 1.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: Font
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Action` From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 Or `FileAction`.`Action` = 2) ORDER BY `FileAction`.`Directory_`
Action start 12:08:33: RegisterFonts.
MSI (s) (28:F8) [12:08:33:291]: Doing action: InstallODBC
Action ended 12:08:33: RegisterFonts. Return value 1.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2711 2: ODBCDriverManager
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2711 2: ODBCDriverManager64
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ?
Action start 12:08:33: InstallODBC.
MSI (s) (28:F8) [12:08:33:291]: Doing action: RegisterTypeLibraries
Action ended 12:08:33: InstallODBC. Return value 0.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: TypeLib 4: SELECT `LibID`, `TypeLib`.`Version`, `TypeLib`.`Language`, `TypeLib`.`Directory_`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `BinaryType`, `Component`.`Component`, `Component`.`Attributes`, `Component`.`RuntimeFlags` FROM `TypeLib`, `Component`, `File` WHERE `TypeLib`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Component`.`Action`=1 OR `Component`.`Action`=2) OR (`Component`.`Action` = null AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2)))
Action start 12:08:33: RegisterTypeLibraries.
MSI (s) (28:F8) [12:08:33:291]: Doing action: RegisterComPlus
Action ended 12:08:33: RegisterTypeLibraries. Return value 0.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: Complus
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Action` = 1 OR `Action` = 2)
Action start 12:08:33: RegisterComPlus.
MSI (s) (28:F8) [12:08:33:291]: Doing action: SelfRegModules
Action ended 12:08:33: RegisterComPlus. Return value 0.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: SelfReg 4: Select `FileAction`.`FileName`,`FileAction`.`Directory_`,`FileAction`.`Action`, `FileAction`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `FileAction` Where `SelfReg`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 OR `FileAction`.`Action` = 2)
Action start 12:08:33: SelfRegModules.
MSI (s) (28:F8) [12:08:33:291]: Doing action: InstallServices
Action ended 12:08:33: SelfRegModules. Return value 1.
Action start 12:08:33: InstallServices.
MSI (s) (28:F8) [12:08:33:307]: Doing action: AddSIPSSubmitterUserAccount.SetProperty
Action ended 12:08:33: InstallServices. Return value 1.
MSI (s) (28:F8) [12:08:33:307]: PROPERTY CHANGE: Adding AddSIPSSubmitterUserAccount property. Its value is 'NT SERVICE\SAVService'.
Action start 12:08:33: AddSIPSSubmitterUserAccount.SetProperty.
MSI (s) (28:F8) [12:08:33:307]: Doing action: AddSIPSSubmitterUserAccount
Action ended 12:08:33: AddSIPSSubmitterUserAccount.SetProperty. Return value 1.
Action start 12:08:33: AddSIPSSubmitterUserAccount.
MSI (s) (28:F8) [12:08:33:307]: Doing action: AddSIPSSubmitterUserAccountRollback.SetProperty
Action ended 12:08:33: AddSIPSSubmitterUserAccount. Return value 1.
MSI (s) (28:F8) [12:08:33:307]: PROPERTY CHANGE: Adding AddSIPSSubmitterUserAccountRollback property. Its value is 'NT SERVICE\SAVService'.
Action start 12:08:33: AddSIPSSubmitterUserAccountRollback.SetProperty.
MSI (s) (28:F8) [12:08:33:307]: Doing action: AddSIPSSubmitterUserAccountRollback
Action ended 12:08:33: AddSIPSSubmitterUserAccountRollback.SetProperty. Return value 1.
Action start 12:08:33: AddSIPSSubmitterUserAccountRollback.
MSI (s) (28:F8) [12:08:33:307]: Doing action: CreateTamperProtectionRegKeyRollback
Action ended 12:08:33: AddSIPSSubmitterUserAccountRollback. Return value 1.
Action start 12:08:33: CreateTamperProtectionRegKeyRollback.
MSI (s) (28:F8) [12:08:33:307]: Doing action: CreateTamperProtectionRegKey
Action ended 12:08:33: CreateTamperProtectionRegKeyRollback. Return value 1.
Action start 12:08:33: CreateTamperProtectionRegKey.
MSI (s) (28:F8) [12:08:33:307]: Doing action: SchedSecureObjects
Action ended 12:08:33: CreateTamperProtectionRegKey. Return value 1.
MSI (s) (28:AC) [12:08:33:323]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIBFC0.tmp, Entrypoint: SchedSecureObjects
MSI (s) (28!60) [12:08:33:323]: PROPERTY CHANGE: Adding ExecSecureObjects property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\CreateFolderNT SERVICE\SavService268435456MACHINE\SOFTWARE\Sophos\SAVService\TelemetryRegistryNT SERVICE\SavService268435456MACHINE\SOFTWARE\Sophos\SAVService\ThreatLifetimeRegistryNT SERVICE\SavService268435456'.
Action start 12:08:33: SchedSecureObjects.
MSI (s) (28!60) [12:08:33:323]: Doing action: ExecSecureObjects
Action start 12:08:33: ExecSecureObjects.
Action ended 12:08:33: ExecSecureObjects. Return value 1.
MSI (s) (28:F8) [12:08:33:323]: Doing action: SetupSspUserAccount.SetProperty
Action ended 12:08:33: SchedSecureObjects. Return value 1.
MSI (s) (28:F8) [12:08:33:323]: PROPERTY CHANGE: Adding SetupSspUserAccount property. Its value is 'NT SERVICE\SAVService'.
Action start 12:08:33: SetupSspUserAccount.SetProperty.
MSI (s) (28:F8) [12:08:33:323]: Doing action: SetupSspUserAccountRollback.SetProperty
Action ended 12:08:33: SetupSspUserAccount.SetProperty. Return value 1.
MSI (s) (28:F8) [12:08:33:323]: PROPERTY CHANGE: Adding SetupSspUserAccountRollback property. Its value is 'NT SERVICE\SAVService'.
Action start 12:08:33: SetupSspUserAccountRollback.SetProperty.
MSI (s) (28:F8) [12:08:33:323]: Doing action: SetupSspUserAccountRollback
Action ended 12:08:33: SetupSspUserAccountRollback.SetProperty. Return value 1.
Action start 12:08:33: SetupSspUserAccountRollback.
MSI (s) (28:F8) [12:08:33:338]: Doing action: SetupSspUserAccount
Action ended 12:08:33: SetupSspUserAccountRollback. Return value 1.
Action start 12:08:33: SetupSspUserAccount.
MSI (s) (28:F8) [12:08:33:338]: Doing action: SetServiceXP
Action ended 12:08:33: SetupSspUserAccount. Return value 1.
Action start 12:08:33: SetServiceXP.
MSI (s) (28:F8) [12:08:33:338]: Doing action: SetSAVServiceSID
Action ended 12:08:33: SetServiceXP. Return value 1.
Action start 12:08:33: SetSAVServiceSID.
MSI (s) (28:F8) [12:08:33:338]: Skipping action: RestartDriversAfterSecurityChange (condition is false)
MSI (s) (28:F8) [12:08:33:338]: Doing action: SetServiceSecurity
Action ended 12:08:33: SetSAVServiceSID. Return value 1.
Action start 12:08:33: SetServiceSecurity.
MSI (s) (28:F8) [12:08:33:338]: Doing action: SetServiceRecoveryActions
Action ended 12:08:33: SetServiceSecurity. Return value 1.
Action start 12:08:33: SetServiceRecoveryActions.
MSI (s) (28:F8) [12:08:33:354]: Doing action: SetRollbackInstallDeviceControlProperty
Action ended 12:08:33: SetServiceRecoveryActions. Return value 1.
MSI (s) (28:F8) [12:08:33:354]: PROPERTY CHANGE: Adding RollBackInstallDeviceControl property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:33: SetRollbackInstallDeviceControlProperty.
MSI (s) (28:F8) [12:08:33:354]: Doing action: RollbackInstallDeviceControl
Action ended 12:08:33: SetRollbackInstallDeviceControlProperty. Return value 1.
Action start 12:08:33: RollbackInstallDeviceControl.
MSI (s) (28:F8) [12:08:33:354]: Doing action: SetInstallDeviceControlProperty
Action ended 12:08:33: RollbackInstallDeviceControl. Return value 1.
MSI (s) (28:F8) [12:08:33:354]: PROPERTY CHANGE: Adding InstallDeviceControl property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"'.
Action start 12:08:33: SetInstallDeviceControlProperty.
MSI (s) (28:F8) [12:08:33:354]: Doing action: InstallDeviceControl
Action ended 12:08:33: SetInstallDeviceControlProperty. Return value 1.
Action start 12:08:33: InstallDeviceControl.
MSI (s) (28:F8) [12:08:33:354]: Doing action: SetAdminGroupDescription
Action ended 12:08:33: InstallDeviceControl. Return value 1.
Action start 12:08:33: SetAdminGroupDescription.
MSI (s) (28:F8) [12:08:33:354]: Doing action: SetPowerGroupDescription
Action ended 12:08:33: SetAdminGroupDescription. Return value 1.
Action start 12:08:33: SetPowerGroupDescription.
MSI (s) (28:F8) [12:08:33:370]: Doing action: SetUserGroupDescription
Action ended 12:08:33: SetPowerGroupDescription. Return value 1.
Action start 12:08:33: SetUserGroupDescription.
MSI (s) (28:F8) [12:08:33:370]: Doing action: MsiConfigureServices
Action ended 12:08:33: SetUserGroupDescription. Return value 1.
Action start 12:08:33: MsiConfigureServices.
MSI (s) (28:F8) [12:08:33:370]: Note: 1: 2205 2: 3: MsiServiceConfigFailureActions
MSI (s) (28:F8) [12:08:33:370]: Note: 1: 2228 2: 3: MsiServiceConfigFailureActions 4: SELECT `Name`, `Event`, `ResetPeriod`, `RebootMessage`,`Command`, `Actions`, `DelayActions`, `Action` FROM `MsiServiceConfigFailureActions`, `Component` WHERE `Component_` = `Component` AND (`Action` = 0 OR `Action` = 1 OR `Action` = 3)
MSI (s) (28:F8) [12:08:33:370]: Doing action: SetOnAccessGroupDescription
Action ended 12:08:33: MsiConfigureServices. Return value 1.
Action start 12:08:33: SetOnAccessGroupDescription.
MSI (s) (28:F8) [12:08:33:370]: Skipping action: DisableOnAccess (condition is false)
MSI (s) (28:F8) [12:08:33:370]: Doing action: DisablePUADetection_setprop
Action ended 12:08:33: SetOnAccessGroupDescription. Return value 1.
MSI (s) (28:F8) [12:08:33:370]: PROPERTY CHANGE: Adding DisablePUADetection property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 12:08:33: DisablePUADetection_setprop.
MSI (s) (28:F8) [12:08:33:370]: Doing action: DisablePUADetection
Action ended 12:08:33: DisablePUADetection_setprop. Return value 1.
Action start 12:08:33: DisablePUADetection.
MSI (s) (28:F8) [12:08:33:370]: Doing action: DeleteExpiredCaches
Action ended 12:08:33: DisablePUADetection. Return value 1.
Action start 12:08:33: DeleteExpiredCaches.
MSI (s) (28:F8) [12:08:33:385]: Doing action: EnableJournals
Action ended 12:08:33: DeleteExpiredCaches. Return value 1.
Action start 12:08:33: EnableJournals.
MSI (s) (28:F8) [12:08:33:385]: Doing action: DisableWebProtection_setprop
Action ended 12:08:33: EnableJournals. Return value 1.
MSI (s) (28:F8) [12:08:33:385]: PROPERTY CHANGE: Adding DisableWebProtection property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 12:08:33: DisableWebProtection_setprop.
MSI (s) (28:F8) [12:08:33:385]: Doing action: DisableWebProtection
Action ended 12:08:33: DisableWebProtection_setprop. Return value 1.
Action start 12:08:33: DisableWebProtection.
MSI (s) (28:F8) [12:08:33:385]: Doing action: DisableSxlLookups_setprop
Action ended 12:08:33: DisableWebProtection. Return value 1.
MSI (s) (28:F8) [12:08:33:385]: PROPERTY CHANGE: Adding DisableSxlLookups property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 12:08:33: DisableSxlLookups_setprop.
MSI (s) (28:F8) [12:08:33:385]: Doing action: DisableSxlLookups
Action ended 12:08:33: DisableSxlLookups_setprop. Return value 1.
Action start 12:08:33: DisableSxlLookups.
MSI (s) (28:F8) [12:08:33:385]: Doing action: CheckSNMPDLLPresence_setprop
Action ended 12:08:33: DisableSxlLookups. Return value 1.
MSI (s) (28:F8) [12:08:33:385]: PROPERTY CHANGE: Adding CheckSNMPDLLPresence property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 12:08:33: CheckSNMPDLLPresence_setprop.
MSI (s) (28:F8) [12:08:33:385]: Doing action: CheckSNMPDLLPresence
Action ended 12:08:33: CheckSNMPDLLPresence_setprop. Return value 1.
Action start 12:08:33: CheckSNMPDLLPresence.
MSI (s) (28:F8) [12:08:33:385]: Doing action: SetUpdateSXLServerList
Action ended 12:08:33: CheckSNMPDLLPresence. Return value 1.
MSI (s) (28:F8) [12:08:33:385]: PROPERTY CHANGE: Adding UpdateSXLServerList property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'.
Action start 12:08:33: SetUpdateSXLServerList.
MSI (s) (28:F8) [12:08:33:385]: Doing action: UpdateSXLServerList
Action ended 12:08:33: SetUpdateSXLServerList. Return value 1.
Action start 12:08:33: UpdateSXLServerList.
MSI (s) (28:F8) [12:08:33:401]: Doing action: GenerateSavMachineId
Action ended 12:08:33: UpdateSXLServerList. Return value 1.
Action start 12:08:33: GenerateSavMachineId.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RegisterUser
Action ended 12:08:33: GenerateSavMachineId. Return value 1.
Action start 12:08:33: RegisterUser.
MSI (s) (28:F8) [12:08:33:401]: Skipping action: ConfigureScanMyComputerScan_setprop (condition is false)
MSI (s) (28:F8) [12:08:33:401]: Skipping action: ConfigureScanMyComputerScan (condition is false)
MSI (s) (28:F8) [12:08:33:401]: Skipping action: DisableWindowsDefender (condition is false)
MSI (s) (28:F8) [12:08:33:401]: Doing action: RegisterProduct
Action ended 12:08:33: RegisterUser. Return value 1.
Action start 12:08:33: RegisterProduct.
MSI (s) (28:F8) [12:08:33:401]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
MSI (s) (28:F8) [12:08:33:401]: Doing action: PublishComponents
Action ended 12:08:33: RegisterProduct. Return value 1.
MSI (s) (28:F8) [12:08:33:401]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (28:F8) [12:08:33:401]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))
Action start 12:08:33: PublishComponents.
MSI (s) (28:F8) [12:08:33:401]: Doing action: MsiPublishAssemblies
Action ended 12:08:33: PublishComponents. Return value 0.
MSI (s) (28:F8) [12:08:33:401]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (28:F8) [12:08:33:401]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT null, null, `Component`.`Component`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `MsiAssembly`, `Component`, `Feature` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Feature_` = `Feature`.`Feature` AND `MsiAssembly`.`File_Application` = null AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))
Action start 12:08:33: MsiPublishAssemblies.
MSI (s) (28:F8) [12:08:33:401]: Doing action: PublishFeatures
Action ended 12:08:33: MsiPublishAssemblies. Return value 0.
Action start 12:08:33: PublishFeatures.
MSI (s) (28:F8) [12:08:33:401]: Doing action: PublishProduct
Action ended 12:08:33: PublishFeatures. Return value 1.
Action start 12:08:33: PublishProduct.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RollbackRegisterTamperProtectionControlX64
Action ended 12:08:33: PublishProduct. Return value 1.
Action start 12:08:33: RollbackRegisterTamperProtectionControlX64.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RollbackRegisterSavShellExtX64
Action ended 12:08:33: RollbackRegisterTamperProtectionControlX64. Return value 1.
Action start 12:08:33: RollbackRegisterSavShellExtX64.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RollbackRegisterSophosOfficeAV
Action ended 12:08:33: RollbackRegisterSavShellExtX64. Return value 1.
Action start 12:08:33: RollbackRegisterSophosOfficeAV.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RollbackRegisterSophosOfficeAVX64
Action ended 12:08:33: RollbackRegisterSophosOfficeAV. Return value 1.
Action start 12:08:33: RollbackRegisterSophosOfficeAVX64.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RegisterTamperProtectionControlX64
Action ended 12:08:33: RollbackRegisterSophosOfficeAVX64. Return value 1.
Action start 12:08:33: RegisterTamperProtectionControlX64.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RegisterSavShellExtX64
Action ended 12:08:33: RegisterTamperProtectionControlX64. Return value 1.
Action start 12:08:33: RegisterSavShellExtX64.
MSI (s) (28:F8) [12:08:33:416]: Doing action: RegisterSophosOfficeAV
Action ended 12:08:33: RegisterSavShellExtX64. Return value 1.
Action start 12:08:33: RegisterSophosOfficeAV.
MSI (s) (28:F8) [12:08:33:416]: Doing action: RegisterSophosOfficeAVX64
Action ended 12:08:33: RegisterSophosOfficeAV. Return value 1.
Action start 12:08:33: RegisterSophosOfficeAVX64.
MSI (s) (28:F8) [12:08:33:416]: Doing action: RollbackInstallSecurityCenter
Action ended 12:08:33: RegisterSophosOfficeAVX64. Return value 1.
Action start 12:08:33: RollbackInstallSecurityCenter.
MSI (s) (28:F8) [12:08:33:416]: Doing action: SetRestoreFirstInstallTimeProperty
Action ended 12:08:33: RollbackInstallSecurityCenter. Return value 1.
MSI (s) (28:F8) [12:08:33:416]: PROPERTY CHANGE: Adding RestoreFirstInstallTime property. Its value is '0'.
Action start 12:08:33: SetRestoreFirstInstallTimeProperty.
MSI (s) (28:F8) [12:08:33:416]: Skipping action: RestoreFirstInstallTime (condition is false)
MSI (s) (28:F8) [12:08:33:416]: Doing action: SetSAVAdminUpdateComplete
Action ended 12:08:33: SetRestoreFirstInstallTimeProperty. Return value 1.
Action start 12:08:33: SetSAVAdminUpdateComplete.
MSI (s) (28:F8) [12:08:33:416]: Doing action: RunPreLaunchScript
Action ended 12:08:33: SetSAVAdminUpdateComplete. Return value 1.
Action start 12:08:33: RunPreLaunchScript.
MSI (s) (28:F8) [12:08:33:416]: Doing action: RegisterDCIfEnabled
Action ended 12:08:33: RunPreLaunchScript. Return value 1.
Action start 12:08:33: RegisterDCIfEnabled.
MSI (s) (28:F8) [12:08:33:416]: Doing action: StartSAVServices
Action ended 12:08:33: RegisterDCIfEnabled. Return value 1.
Action start 12:08:33: StartSAVServices.
MSI (s) (28:F8) [12:08:33:432]: Skipping action: ApplyCachedPolicies (condition is false)
MSI (s) (28:F8) [12:08:33:432]: Doing action: CopySwiFcRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: StartSAVServices. Return value 1.
MSI (s) (28:F8) [12:08:33:432]: PROPERTY CHANGE: Adding CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe'.
Action start 12:08:33: CopySwiFcRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: CopySwiFcRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: CopySwiFcToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:432]: PROPERTY CHANGE: Adding CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe'.
Action start 12:08:33: CopySwiFcToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: CopySwiFcToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: CopyScfDotDatToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:432]: PROPERTY CHANGE: Adding CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat'.
Action start 12:08:33: CopyScfDotDatToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: CopyScfDotDatToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:432]: PROPERTY CHANGE: Adding SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'swi_service'.
Action start 12:08:33: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:432]: PROPERTY CHANGE: Adding SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /registerService'.
Action start 12:08:33: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: SwiCalloutInstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:432]: PROPERTY CHANGE: Adding SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe" -r "C:\Windows\TEMP\SwiRebootRequired.txt" "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf"'.
Action start 12:08:33: SwiCalloutInstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: SwiCalloutRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiCalloutInstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:448]: PROPERTY CHANGE: Adding SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe" -r "C:\Windows\TEMP\SwiRebootRequired.txt" /u "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf"'.
Action start 12:08:33: SwiCalloutRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiCalloutRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwiFilterRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:448]: PROPERTY CHANGE: Adding SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe" -i'.
Action start 12:08:33: SwiFilterRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwiFilterRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiFilterRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:448]: PROPERTY CHANGE: Adding SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'swi_filter'.
Action start 12:08:33: SwiFilterRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiFilterRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: StartServices
Action ended 12:08:33: SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: StartServices.
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateInstallRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateInstall.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateInstall64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateUpgradeRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateUpgrade.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateUpgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateUpgrade64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateUpgrade64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:33: StartServices. Return value 1.
MSI (s) (28:34) [12:08:33:448]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC04E.tmp, Entrypoint: SwcEnableSwcServiceStart
Action start 12:08:33: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:33:448]: Doing action: BootDriverStartup
Action ended 12:08:33: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:33: BootDriverStartup.
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetUpdateDriversProperty
Action ended 12:08:33: BootDriverStartup. Return value 1.
MSI (s) (28:F8) [12:08:33:479]: PROPERTY CHANGE: Modifying UPDATEDRIVERS property. Its current value is '1'. Its new value: '0'.
Action start 12:08:33: SetUpdateDriversProperty.
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetConfigureSAVProperty
Action ended 12:08:33: SetUpdateDriversProperty. Return value 1.
MSI (s) (28:F8) [12:08:33:479]: PROPERTY CHANGE: Adding ConfigureSAV property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""0"'.
Action start 12:08:33: SetConfigureSAVProperty.
MSI (s) (28:F8) [12:08:33:479]: Skipping action: ScheduleReboot (condition is false)
MSI (s) (28:F8) [12:08:33:479]: Doing action: ConfigureSAV
Action ended 12:08:33: SetConfigureSAVProperty. Return value 1.
Action start 12:08:33: ConfigureSAV.
MSI (s) (28:F8) [12:08:33:479]: Skipping action: SetUpdateFinished (condition is false)
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetInstallationComplete
Action ended 12:08:33: ConfigureSAV. Return value 1.
Action start 12:08:33: SetInstallationComplete.
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetCreateSavAdapterDllRegistryEntryProperty
Action ended 12:08:33: SetInstallationComplete. Return value 1.
MSI (s) (28:F8) [12:08:33:479]: PROPERTY CHANGE: Adding CreateSavAdapterDllRegistryEntry property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:33: SetCreateSavAdapterDllRegistryEntryProperty.
MSI (s) (28:F8) [12:08:33:479]: Doing action: CreateSavAdapterDllRegistryEntry
Action ended 12:08:33: SetCreateSavAdapterDllRegistryEntryProperty. Return value 1.
Action start 12:08:33: CreateSavAdapterDllRegistryEntry.
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetForceDeleteFilesProperty
Action ended 12:08:33: CreateSavAdapterDllRegistryEntry. Return value 1.
MSI (s) (28:F8) [12:08:33:479]: PROPERTY CHANGE: Adding ForceDeleteFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:33: SetForceDeleteFilesProperty.
MSI (s) (28:F8) [12:08:33:479]: Skipping action: ForceDeleteFiles (condition is false)
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetAfterScriptProperty
Action ended 12:08:33: SetForceDeleteFilesProperty. Return value 1.
MSI (s) (28:F8) [12:08:33:479]: PROPERTY CHANGE: Adding RunAfterScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"'.
Action start 12:08:33: SetAfterScriptProperty.
MSI (s) (28:F8) [12:08:33:479]: Doing action: RunAfterScript
Action ended 12:08:33: SetAfterScriptProperty. Return value 1.
Action start 12:08:33: RunAfterScript.
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetCopySavSyncFileProperty
Action ended 12:08:33: RunAfterScript. Return value 1.
MSI (s) (28:F8) [12:08:33:495]: PROPERTY CHANGE: Adding CopySAVSyncFile property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"'.
Action start 12:08:33: SetCopySavSyncFileProperty.
MSI (s) (28:F8) [12:08:33:495]: Doing action: CopySAVSyncFile
Action ended 12:08:33: SetCopySavSyncFileProperty. Return value 1.
Action start 12:08:33: CopySAVSyncFile.
MSI (s) (28:F8) [12:08:33:495]: Skipping action: RestoreWindowsDefender (condition is false)
MSI (s) (28:F8) [12:08:33:495]: Skipping action: WixFailWhenDeferred (condition is false)
MSI (s) (28:F8) [12:08:33:495]: Doing action: InstallFinalize
Action ended 12:08:33: CopySAVSyncFile. Return value 1.
MSI (s) (28:F8) [12:08:33:495]: Running Script: C:\Windows\Installer\MSIA3FA.tmp
MSI (s) (28:F8) [12:08:33:495]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'.
MSI (s) (28:F8) [12:08:33:495]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (28:F8) [12:08:33:495]: Machine policy value 'DisableRollback' is 0
MSI (s) (28:F8) [12:08:33:495]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (28:F8) [12:08:33:495]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1253990670,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
Action start 12:08:33: InstallFinalize.
MSI (s) (28:F8) [12:08:33:495]: Executing op: ProductInfo(ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=168230914,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={B11B63E0-A3EB-478A-AF04-AAE0B577AEB2},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
MSI (s) (28:F8) [12:08:33:495]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (28:F8) [12:08:33:495]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus)
MSI (s) (28:F8) [12:08:33:495]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (28:F8) [12:08:33:495]: Executing op: SetBaseline(Baseline=0,)
MSI (s) (28:F8) [12:08:33:495]: Executing op: SetBaseline(Baseline=1,)
MSI (s) (28:F8) [12:08:33:495]: Executing op: ActionStart(Name=SetUpdateFailed,,)
MSI (s) (28:F8) [12:08:33:495]: Executing op: CustomActionSchedule(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,)
MSI (s) (28:F8) [12:08:33:495]: Executing op: ActionStart(Name=RestoreMovedFiles,,)
MSI (s) (28:F8) [12:08:33:495]: Executing op: CustomActionSchedule(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:33:495]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,)
MSI (s) (28:F8) [12:08:33:495]: Executing op: CustomActionSchedule(Action=CheckRegForNullDACLs,ActionType=1025,Source=BinaryData,Target=CheckRegForNullDACLs,)
MSI (s) (28:CC) [12:08:33:510]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC07E.tmp, Entrypoint: CheckRegForNullDACLs
MSI (s) (28:F8) [12:08:33:510]: Executing op: ActionStart(Name=RunErrorScript,,)
MSI (s) (28:F8) [12:08:33:510]: Executing op: CustomActionSchedule(Action=RunErrorScript,ActionType=1345,Source=BinaryData,Target=RunErrorScripts,CustomActionData="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49")
MSI (s) (28:F8) [12:08:33:510]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ProgressTotal(Total=160,Type=1,ByteEquivalent=24000)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={CCC8000A-8A29-4FFE-8FE8-185FFE19444C},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={CCFFD125-B6F4-4E85-B42F-EEDE0E647001},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={034A5FFF-0A1F-4035-920F-73803E07C209},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={A4D31E85-0B09-4E42-96C3-DE5DE60EB97F},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={BC7402A1-8EC2-4834-BDFF-7D991375467D},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={4AEE9519-9D9B-44CE-9852-434F0BB544E3},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={6EE91E7E-1391-4C83-838D-8EE0407A2C5E},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={63284722-D09A-447D-861D-CFEBE89D28F4},KeyPath=C:\ProgramData\Sophos\Sophos Data Control\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={B7EF36A2-B450-43CD-9919-427EAE165995},KeyPath=C:\ProgramData\Sophos\Sophos Device Control\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={177335D9-9D47-4E12-A841-7884DB0B65FE},KeyPath=C:\ProgramData\Sophos\Sophos Tamper Protection\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={A153DC07-D119-4900-B5D1-F671EC25C7EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={F4E436FD-FE28-4278-86D5-E3412859F5E5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={484E3E44-1A83-4137-BAA1-B984E5636086},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={68FF2A0F-9051-42F8-9394-384797B1AAD2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={D2BB3772-EC58-4939-8333-E89A6E780F18},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={CD46A165-DB78-470B-B062-D973ED80944B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={3CFF4AE8-C6ED-41A6-9AC0-6E0B51B84C41},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={A891B002-2209-413D-896C-A999F157D57A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={B763A398-206E-43BF-9810-E482FC158A74},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={49A894EE-FF4F-4862-B9B8-A4EBBEA0A77E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={E3FAD286-FF50-4A29-93F2-FA93F9E5E897},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={C0E2EF20-B6D0-44A7-88AD-DAFAA4A325BF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={1601B2AC-3E23-4EA6-861E-17F52F42AAA4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={B46DA52C-6057-4314-B5BE-670483AB08D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={C5E5F1CE-2724-447B-A7E2-3B4B4BE9E801},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={9EED603A-240C-44CD-9136-F3703168D6A8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={6368E4D7-C225-4D2B-AA09-75E27732DDD4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={72649A5C-570A-467A-96A8-D77FAB4A16ED},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={E05D9609-9A70-4DEF-A8D3-5B884BEA1139},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={175C5C85-0E0E-44BF-8F48-CD96A4EBBA5B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={A46E98B3-190F-4296-871A-431FB198DB58},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={29262C23-36F0-4117-9406-A551A1CF11E4},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={9D161347-EFC6-46A9-9AEC-97722B0C8636},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={556C7464-36A2-464B-9250-2F924DA27FA7},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={4BCA7B9E-D378-4830-B7EE-62B8EDD570C5},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={B4C73573-F81E-4459-80C7-FBC3FA74C1D5},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={A54E5967-C145-461E-9452-F701F47D3DE2},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={F6C47B05-6049-4F2B-94C5-28C6F9CC00AB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={09743465-1197-4046-87F7-3F24D3FD7CEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={9D8FDDD5-6302-4133-A040-27AE6FCA4A50},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={F2814579-3850-4A1C-9312-5F0644872616},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={7D755E63-DF4E-4F44-A3CC-D43CA33ABC53},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={274E0945-DD13-4FB3-8FED-A4865A87E518},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={494298F4-4204-4E18-BA16-8152108CE3DD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={CB2061C6-BCA4-431E-8768-637BA7B6A021},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={FAEE7082-8088-4157-B163-68605546E3D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={F403AD90-FEC7-4036-9C1A-BB012A8E790E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={691C4A89-DB0D-4C7C-B684-ACAA9F794FAD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={C8CFF022-47AD-4EBF-A615-683844308F40},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={F74F470D-4B17-4901-9B74-60A3838B7457},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={341B1BFF-FEAD-4104-A29F-E9363B7517BF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={36E7E558-86C8-4D1B-8CA8-2EEF33963A1E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={8F31C598-9FCF-46DD-92CE-BF02EAAF7CC8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={C9B04594-F409-4FA4-B2BC-086361DBC58D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={A5486A6B-FF88-41D8-82F3-B46ED9697255},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={238C4CC5-16A9-4A25-B94F-C07F9692D5E2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={BC39E663-65CB-43D3-880E-BAB2744A9597},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={3D564A97-4F0A-44FD-97D1-CBF283B05453},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={39F322E9-713E-417C-8380-2A8CBEB5E46C},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={0A8056D0-75A3-466F-95CE-FDE62CFF9C1A},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={A94755DD-6057-4746-8C39-B06D97E39D54},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={FE613E3D-0469-40F8-9A0F-635D16097928},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={7ED7F039-CC97-4CF5-8CCB-8CB15DF14759},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={52411750-073E-47D7-BB97-8B404AF42B76},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={F5D90A95-0F03-41CF-BEA3-247569C57BD3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={DC99F7C0-7CFB-413C-8E6F-D16EE6F7AB8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={3276B786-D941-4ABD-810D-5AE5E3106F02},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={F85BB204-89AC-441C-8589-F6F0D7F329B4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={3BF07D0A-37CC-4FA8-81DA-D351E301276A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={D36CD500-4FBE-4943-90EC-D7646AA41519},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={BFCC0446-6C34-413E-9611-520B993B04B1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={B1C9846E-5F65-40D5-BA10-79055269A722},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={2BDF5C8A-E036-4C5F-9275-9927CA13F3C6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={65937A4F-1784-4285-8C24-D06DA20D3AF0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={A4BACF9D-BF67-4909-AC27-8627DEA42367},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={C45AAE65-B109-4933-AA74-817CFBE6233A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={59C347AA-B20B-4146-B11B-E570BFDF7D81},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={E25426F9-3251-4E63-A4A4-06BA9A25ABDD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={9BC4D741-ADF6-496E-9DA7-8ADEDFF50252},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={63B09FF1-4A74-4963-B2D9-182293950F88},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={FBF7F8C3-003B-40EB-B316-260E7D5DD274},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={823855BF-3AC5-4C0C-87E6-AD864B361AAF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={7B2E98BC-F11A-4210-A219-05880ABC3333},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={9315FDA5-16DD-4475-84D6-277B8FD87283},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={9221364E-2674-41A1-B3AF-A7BEBBE7567D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={05AEBC59-942F-43EE-929D-21174A215441},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={ECE39B6C-338A-465E-A941-158F7D2E5795},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={B9937941-AA62-41C9-BCE7-3DBE63781A79},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={57056C41-556E-4FFA-A53F-31BB318C2243},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={AE86B1D3-36AD-45E7-B7A6-301DE878C695},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={ECB3B148-F965-49B5-A338-857D09CBC0B3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={5E31220B-69F2-4AD7-BD59-69C7F695A17C},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={719B5EDD-B014-4686-AB60-A4474B84240D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={E54C4F8D-A952-4E5C-B973-76D109A0E0EC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={9BB8ADD9-6613-46AC-9BD3-24B31A9F1594},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={E5EB5509-3611-458A-BE68-3477BF3D96CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={09FFDB10-614F-4899-82E8-85A7D8BFA32A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={FCEAE5B9-2AE7-47F8-91A5-D21203F761F0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={11B3AA50-1BDE-42AF-A841-1C249A848A31},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={E9D16629-7181-425B-83DC-0FDF61D63E11},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={189F69DA-324A-4F9A-9CDE-EF79A930D2AD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={262EB741-DEA1-43F2-BA2D-9DE0661F9C8C},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={8A03894B-68DA-452F-A18A-712256FA8A85},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={F21CB2A2-E3F4-4AF7-AC06-A1A66ACA0735},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={F4BF2F3A-652E-4CBA-8B19-B7EE4E251C29},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={2B97F024-FE76-40AC-9D67-FF52C6A46570},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={524153EC-3AC1-4F92-B7F5-18415FD243CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={01CC3BCC-55E1-4B1A-906A-FB7CE1A4629B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={5282C6CF-9946-4B05-B59F-6638E098E3DC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={B43C5DBE-50BB-429B-B447-4EB82AD8554D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={5C56F239-F279-4B01-879F-8729A44D44A0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={AE660058-42CE-44E1-8D2E-BD62AD69EE1E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={63138B11-92E8-4415-8064-1B9BC3A17F93},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={08A57BC6-9561-4F83-B710-A130F47DBA83},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={CA6E867B-7D76-4BBE-B278-04AFA8C84F9E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={C5B8B969-E83E-41E3-820E-9E47E219644E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={60BD5635-B25C-450A-9E36-EA84EDB18BDA},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={2E247D31-0A06-4AF5-ACE4-018BA1A73978},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={8BD71FEA-7E62-46B4-BBB2-19D4D3706BEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={56B38697-86C5-4537-92A0-F2E6CEF972B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={6C6EA6F0-CE05-4D37-8F3F-A957850E1AC6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={AEF7CD44-576B-4841-A0B4-58CEF190AFC5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={3570C981-DCAC-4D6C-AEB0-8D4943972259},KeyPath=02:\Software\Sophos\Web Intelligence\WebControlAvailable,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={B9CA91A9-8C87-4CCA-AA1A-73DFA321CE92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={15A3052C-E1D6-4ADE-9DF2-DAAF479F9A7B},KeyPath=02:\Software\Sophos\SAVService\SAVUI\plugins\WebControlPlugin.WebControlUIPlugin,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={DBD323D5-758C-4D26-BD2E-E46EB73EAC11},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={A871FD4C-242A-4F0A-B4AC-74BE34EC1BA0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={533F61E5-9143-4664-8DD0-02E1DACF312D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={26BAD5C1-B5B8-4E0A-888F-A4AD4B1095AE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\difxapi.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\difxapi.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={3630E612-875A-427A-8A2A-2708A9B24393},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={606B5C5C-66C9-490B-BBC3-77BFF00880E5},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={62922683-34EB-46E1-8AF4-E9D59E61833E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={A154E863-F3EA-44EA-B782-B241DECCC60B},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={B9056343-C8F6-454A-AAF5-DBA44FC0E1F5},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={BDE220A0-D203-449C-8A3F-648E1C889744},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={759C3654-CC88-4826-A930-E0BFB04EBD6B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={266D54B1-B706-4CCD-9C0A-01C33A70F79B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={8B4CB61B-B986-4851-A3A8-8A29B744166F},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:573]: Executing op: ActionStart(Name=ExecSecureObjectsRollback,,)
MSI (s) (28:F8) [12:08:33:573]: Executing op: CustomActionSchedule(Action=ExecSecureObjectsRollback,ActionType=3329,Source=BinaryData,Target=ExecSecureObjectsRollback,CustomActionData=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\CreateFolderD:AI(A;;FA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;OICIIO;GA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;ID;FA;;;BA)(A;OICIIOID;GA;;;BA)(A;ID;FA;;;SY)(A;OICIIOID;GA;;;SY)(A;ID;0x1200a9;;;WD)(A;OICIIOID;GXGR;;;WD)0)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1])
MSI (s) (28:F8) [12:08:33:573]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ServiceControl(,Name=Sophos Web Control Service,Action=2,Wait=1,)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ActionStart(Name=DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101,,)
MSI (s) (28:F8) [12:08:33:573]: Executing op: CustomActionSchedule(Action=DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101,ActionType=3073,Source=BinaryData,Target=RenameAndMarkForDelete,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe)
MSI (s) (28:40) [12:08:33:573]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC0CE.tmp, Entrypoint: RenameAndMarkForDelete
MSI (s) (28:F8) [12:08:33:573]: Executing op: ActionStart(Name=DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101,,)
MSI (s) (28:F8) [12:08:33:573]: Executing op: CustomActionSchedule(Action=DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101,ActionType=3073,Source=BinaryData,Target=RenameAndMarkForDelete,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat)
MSI (s) (28:84) [12:08:33:573]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC0CF.tmp, Entrypoint: RenameAndMarkForDelete
MSI (s) (28:F8) [12:08:33:588]: Executing op: ActionStart(Name=WaitForSAVService,,)
MSI (s) (28:F8) [12:08:33:588]: Executing op: CustomActionSchedule(Action=WaitForSAVService,ActionType=1025,Source=BinaryData,Target=WaitForSAVService,)
MSI (s) (28:8C) [12:08:33:588]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC0DF.tmp, Entrypoint: WaitForSAVService
MSI (s) (28:F8) [12:08:33:588]: Executing op: ActionStart(Name=DeleteServices,Description=Deleting services,Template=Service: [1])
MSI (s) (28:F8) [12:08:33:588]: Executing op: ProgressTotal(Total=2,Type=1,ByteEquivalent=1300000)
MSI (s) (28:F8) [12:08:33:588]: Executing op: ServiceControl(,Name=SAVAdminService,Action=8,Wait=1,)
MSI (s) (28:F8) [12:08:34:614]: Executing op: ServiceControl(,Name=SAVService,Action=8,Wait=1,)
MSI (s) (28:F8) [12:08:34:614]: Executing op: ActionStart(Name=RemoveODBC,Description=Removing ODBC components,)
MSI (s) (28:F8) [12:08:34:614]: Executing op: ODBCDriverManager(,BinaryType=0)
MSI (s) (28:F8) [12:08:34:614]: Executing op: ODBCDriverManager(,BinaryType=1)
MSI (s) (28:F8) [12:08:34:614]: Executing op: ActionStart(Name=RemoveRegistryValues,Description=Removing system registry values,Template=Key: [1], Name: [2])
MSI (s) (28:F8) [12:08:34:614]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200)
MSI (s) (28:F8) [12:08:34:614]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\SAVI,,BinaryType=0,,)
MSI (s) (28:F8) [12:08:34:614]: Executing op: RegRemoveKey()
MSI (s) (28:F8) [12:08:34:614]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Sophos\SAVI 3: 2
MSI (s) (28:F8) [12:08:34:614]: Executing op: ActionStart(Name=Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A,,)
MSI (s) (28:F8) [12:08:34:614]: Executing op: CustomActionSchedule(Action=Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A,ActionType=1089,Source=BinaryData,Target=SwcPostUpgradeTasks,)
MSI (s) (28:FC) [12:08:34:614]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC4E7.tmp, Entrypoint: SwcPostUpgradeTasks
MSI (s) (28:F8) [12:08:34:629]: Executing op: ActionStart(Name=CheckUninstallDrivers,,)
MSI (s) (28:F8) [12:08:34:629]: Executing op: CustomActionSchedule(Action=CheckUninstallDrivers,ActionType=1025,Source=BinaryData,Target=CheckUninstallDrivers,)
MSI (s) (28:40) [12:08:34:629]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC4F8.tmp, Entrypoint: CheckUninstallDrivers
MSI (s) (28:F8) [12:08:34:645]: Executing op: ActionStart(Name=RemoveFiles,Description=Removing files,Template=File: [1], Directory: [9])
MSI (s) (28:F8) [12:08:34:645]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=175000)
MSI (s) (28:F8) [12:08:34:645]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FileRemove(,FileName=factory.xml,,)
MSI (s) (28:F8) [12:08:34:645]: Verifying accessibility of file: factory.xml
MSI (s) (28:F8) [12:08:34:645]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:34:645]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:34:645]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\logs\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Data Control\logs\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Device Control\logs\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Tamper Protection\logs\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:661]: Executing op: ActionStart(Name=DeleteIDEs,,)
MSI (s) (28:F8) [12:08:34:661]: Executing op: CustomActionSchedule(Action=DeleteIDEs,ActionType=1025,Source=BinaryData,Target=DeleteIDEs,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:CC) [12:08:34:661]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC518.tmp, Entrypoint: DeleteIDEs
MSI (s) (28:F8) [12:08:34:676]: Executing op: ActionStart(Name=DeleteBDLs,,)
MSI (s) (28:F8) [12:08:34:676]: Executing op: CustomActionSchedule(Action=DeleteBDLs,ActionType=1025,Source=BinaryData,Target=DeleteBDLs,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:4C) [12:08:34:676]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC529.tmp, Entrypoint: DeleteBDLs
MSI (s) (28:F8) [12:08:34:692]: Executing op: ActionStart(Name=DeleteHIPSConfig,,)
MSI (s) (28:F8) [12:08:34:692]: Executing op: CustomActionSchedule(Action=DeleteHIPSConfig,ActionType=1025,Source=BinaryData,Target=DeleteHIPSConfig,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:68) [12:08:34:692]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC53A.tmp, Entrypoint: DeleteHIPSConfig
MSI (s) (28:F8) [12:08:34:707]: Executing op: ActionStart(Name=RollbackForceDeleteFiles,,)
MSI (s) (28:F8) [12:08:34:707]: Executing op: CustomActionSchedule(Action=RollbackForceDeleteFiles,ActionType=1281,Source=BinaryData,Target=ForceDeleteFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:34:707]: Executing op: ActionStart(Name=RollbackForceDeleteUserPlugin,,)
MSI (s) (28:F8) [12:08:34:707]: Executing op: CustomActionSchedule(Action=RollbackForceDeleteUserPlugin,ActionType=1281,Source=BinaryData,Target=ForceDeleteUserPlugin,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:34:723]: Executing op: ActionStart(Name=RollbackOtherFiles,,)
MSI (s) (28:F8) [12:08:34:723]: Executing op: CustomActionSchedule(Action=RollbackOtherFiles,ActionType=1281,Source=BinaryData,Target=DeleteOtherFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:34:723]: Executing op: ActionStart(Name=RollbackUpdateSavAdapterDll,,)
MSI (s) (28:F8) [12:08:34:723]: Executing op: CustomActionSchedule(Action=RollbackUpdateSavAdapterDll,ActionType=1281,Source=BinaryData,Target=RollbackUpdateSavAdapterDll,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:34:723]: Executing op: ActionStart(Name=UpdateSavAdapterDll,,)
MSI (s) (28:F8) [12:08:34:723]: Executing op: CustomActionSchedule(Action=UpdateSavAdapterDll,ActionType=1025,Source=BinaryData,Target=UpdateSavAdapterDll,CustomActionData=;10.7.2.49;)
MSI (s) (28:A0) [12:08:34:723]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC55A.tmp, Entrypoint: UpdateSavAdapterDll
MSI (s) (28:F8) [12:08:44:761]: Executing op: ActionStart(Name=RollbackUpdateDesktopMessaging,,)
MSI (s) (28:F8) [12:08:44:761]: Executing op: CustomActionSchedule(Action=RollbackUpdateDesktopMessaging,ActionType=1281,Source=BinaryData,Target=UpdateDesktopMessaging,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:44:761]: Executing op: ActionStart(Name=UpdateDesktopMessaging,,)
MSI (s) (28:F8) [12:08:44:761]: Executing op: CustomActionSchedule(Action=UpdateDesktopMessaging,ActionType=1025,Source=BinaryData,Target=UpdateDesktopMessaging,CustomActionData=;10.7.2.49;)
MSI (s) (28:0C) [12:08:44:761]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIEC8A.tmp, Entrypoint: UpdateDesktopMessaging
MSI (s) (28:F8) [12:08:44:777]: Executing op: ActionStart(Name=CopyOtherFiles,,)
MSI (s) (28:F8) [12:08:44:777]: Executing op: CustomActionSchedule(Action=CopyOtherFiles,ActionType=1025,Source=BinaryData,Target=CopyOtherFiles,CustomActionData="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64")
MSI (s) (28:68) [12:08:44:777]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIEC9B.tmp, Entrypoint: CopyOtherFiles
MSI (s) (28:F8) [12:08:44:808]: Executing op: ActionStart(Name=RegisterBufferOverflowProtection,,)
MSI (s) (28:F8) [12:08:44:808]: Executing op: CustomActionSchedule(Action=RegisterBufferOverflowProtection,ActionType=1025,Source=BinaryData,Target=RegisterBufferOverflowProtection,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:1C) [12:08:44:808]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIECBB.tmp, Entrypoint: RegisterBufferOverflowProtection
MSI (s) (28:F8) [12:08:44:823]: Executing op: ActionStart(Name=RollbackClassFilter64Vista,,)
MSI (s) (28:F8) [12:08:44:823]: Executing op: CustomActionSchedule(Action=RollbackClassFilter64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SDCFILTER.INF",)
MSI (s) (28:F8) [12:08:44:823]: Executing op: ActionStart(Name=RollbackBootDriver64Vista,,)
MSI (s) (28:F8) [12:08:44:823]: Executing op: CustomActionSchedule(Action=RollbackBootDriver64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF",)
MSI (s) (28:F8) [12:08:44:823]: Executing op: ActionStart(Name=RollbackDriverFiles64Vista,,)
MSI (s) (28:F8) [12:08:44:823]: Executing op: CustomActionSchedule(Action=RollbackDriverFiles64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF",)
MSI (s) (28:F8) [12:08:44:823]: Executing op: ActionStart(Name=RestoreExcludedProcesses,,)
MSI (s) (28:F8) [12:08:44:823]: Executing op: CustomActionSchedule(Action=RestoreExcludedProcesses,ActionType=1025,Source=BinaryData,Target=RestoreExcludedProcesses,)
MSI (s) (28:28) [12:08:44:839]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIECCC.tmp, Entrypoint: RestoreExcludedProcesses
MSI (s) (28:F8) [12:08:44:839]: Executing op: ActionStart(Name=InstallBootDriverAMD64Win7,,)
MSI (s) (28:F8) [12:08:44:839]: Executing op: CustomActionSchedule(Action=InstallBootDriverAMD64Win7,ActionType=1058,Source=C:\Windows\SysWOW64\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhi "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_amd64\SOPHOSBOOTDRIVER.INF",)
MSI (s) (28:F8) [12:08:44:948]: Executing op: ActionStart(Name=InstallDriverFilesAMD64Win7,,)
MSI (s) (28:F8) [12:08:44:948]: Executing op: CustomActionSchedule(Action=InstallDriverFilesAMD64Win7,ActionType=1058,Source=C:\Windows\SysWOW64\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhi "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\win7_amd64\SAVONACCESSDRIV.INF",)
MSI (s) (28:F8) [12:08:44:980]: Executing op: ActionStart(Name=InstallClassFilterAMD64Win7,,)
MSI (s) (28:F8) [12:08:44:980]: Executing op: CustomActionSchedule(Action=InstallClassFilterAMD64Win7,ActionType=1058,Source=C:\Windows\SysWOW64\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhi "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\win7_amd64\SDCFILTER.INF",)
MSI (s) (28:F8) [12:08:45:011]: Executing op: ActionStart(Name=StartDriverServices,,)
MSI (s) (28:F8) [12:08:45:011]: Executing op: CustomActionSchedule(Action=StartDriverServices,ActionType=1025,Source=BinaryData,Target=StartDriverServices,CustomActionData=WIN7_AMD64)
MSI (s) (28:FC) [12:08:45:011]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIED88.tmp, Entrypoint: StartDriverServices
MSI (s) (28:F8) [12:08:45:027]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1], Directory: [9], Size: [6])
MSI (s) (28:F8) [12:08:45:027]: Executing op: ProgressTotal(Total=52261196,Type=0,ByteEquivalent=1)
MSI (s) (28:F8) [12:08:45:027]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:027]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:027]: Executing op: ChangeMedia(MediaVolumeLabel=DISK1,MediaPrompt=Please insert the disk: 1,,BytesPerTick=65536,CopierType=0,,,,,,IsFirstPhysicalMedia=1)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=AppFeedManager.dll,Component={52411750-073E-47D7-BB97-8B404AF42B76},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=AppFeedManager.dll,Component={52411750-073E-47D7-BB97-8B404AF42B76},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: FileCopy(SourceName=APPFEE~1.DLL|AppFeedManager.dll,SourceCabKey=AppFeedManager.dll,DestName=AppFeedManager.dll,Attributes=8192,FileSize=388048,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:027]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=ApplicationManagement.dll,Component={F5D90A95-0F03-41CF-BEA3-247569C57BD3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=ApplicationManagement.dll,Component={F5D90A95-0F03-41CF-BEA3-247569C57BD3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: FileCopy(SourceName=APPLIC~1.DLL|ApplicationManagement.dll,SourceCabKey=ApplicationManagement.dll,DestName=ApplicationManagement.dll,Attributes=8192,FileSize=395848,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:027]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:027]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\)
MSI (s) (28:F8) [12:08:45:027]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\l3j1top6\|program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=atl90.dll,Component={341B1BFF-FEAD-4104-A29F-E9363B7517BF},ComponentVersion=9.0.30729.6161,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=atl90.dll,Component={341B1BFF-FEAD-4104-A29F-E9363B7517BF},ComponentVersion=9.0.30729.6161,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: FileCopy(SourceName=atl90.dll,SourceCabKey=atl90.dll,DestName=atl90.dll,Attributes=512,FileSize=159048,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=9.0.30729.6161,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:027]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:027]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:027]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=authorisedlists.dll,Component={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=authorisedlists.dll,Component={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: FileCopy(SourceName=AUTHOR~1.DLL|AuthorisedLists.dll,SourceCabKey=authorisedlists.dll,DestName=AuthorisedLists.dll,Attributes=8192,FileSize=212528,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=BACKGR~1.EXE|BackgroundScanClient.exe,SourceCabKey=backgroundscanclient.exe,DestName=BackgroundScanClient.exe,Attributes=8192,FileSize=78512,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:042]: Source for file 'BackgroundScanClient.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=backgroundscanning.dll,Component={D36CD500-4FBE-4943-90EC-D7646AA41519},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=backgroundscanning.dll,Component={D36CD500-4FBE-4943-90EC-D7646AA41519},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=BACKGR~1.DLL|BackgroundScanning.dll,SourceCabKey=backgroundscanning.dll,DestName=BackgroundScanning.dll,Attributes=8192,FileSize=78456,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=bhomanagement.dll,Component={3BF07D0A-37CC-4FA8-81DA-D351E301276A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=bhomanagement.dll,Component={3BF07D0A-37CC-4FA8-81DA-D351E301276A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=BHOMAN~1.DLL|BHOManagement.dll,SourceCabKey=bhomanagement.dll,DestName=BHOManagement.dll,Attributes=8192,FileSize=312728,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:042]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:042]: Executing op: SetSourceFolder(Folder=1\Common~1\Sophos\SOPHOS~1\Config\|CommonAppData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=BOOTST~1.XML|bootstrap.xml,SourceCabKey=bootstrap.xml1,DestName=bootstrap.xml,Attributes=8192,FileSize=684,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1283468515,HashPart2=-1301290065,HashPart3=26756618,HashPart4=1310087793,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\bootstrap.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:042]: Source for file 'bootstrap.xml' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:45:042]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:042]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=bpaif.dll,Component={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},ComponentVersion=2.5.0.99,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=bpaif.dll,Component={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},ComponentVersion=2.5.0.99,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=bpaif.dll,SourceCabKey=bpaif.dll,DestName=bpaif.dll,Attributes=8192,FileSize=265480,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.5.0.99,Language=2057,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=CATEGO~1.DLL|Categories.dll,SourceCabKey=Categories.dll,DestName=Categories.dll,Attributes=8192,FileSize=21784,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:042]: Source for file 'Categories.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=componentmanager.dll,Component={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=componentmanager.dll,Component={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=COMPON~1.DLL|ComponentManager.dll,SourceCabKey=componentmanager.dll,DestName=ComponentManager.dll,Attributes=8192,FileSize=98664,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=configuration.dll,Component={BFCC0446-6C34-413E-9611-520B993B04B1},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=configuration.dll,Component={BFCC0446-6C34-413E-9611-520B993B04B1},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=CONFIG~1.DLL|Configuration.dll,SourceCabKey=configuration.dll,DestName=Configuration.dll,Attributes=8192,FileSize=347568,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=datacontrolmanagement.dll,Component={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=datacontrolmanagement.dll,Component={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=DATACO~1.DLL|DataControlManagement.dll,SourceCabKey=datacontrolmanagement.dll,DestName=DataControlManagement.dll,Attributes=8192,FileSize=660296,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=DATACO~2.DLL|DataControlPlugin.dll,SourceCabKey=datacontrolplugin.dll,DestName=DataControlPlugin.dll,Attributes=8192,FileSize=243672,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:058]: Source for file 'DataControlPlugin.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=dcmanagement.dll,Component={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=dcmanagement.dll,Component={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=DCMANA~1.DLL|DCManagement.dll,SourceCabKey=dcmanagement.dll,DestName=DCManagement.dll,Attributes=8192,FileSize=159016,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=DESKTO~1.DLL|DesktopMessaging.dll,SourceCabKey=desktopmessaging.dll,DestName=DesktopMessaging.dll,Attributes=8192,FileSize=454600,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:058]: Source for file 'DesktopMessaging.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=detectionfeedback.dll,Component={3276B786-D941-4ABD-810D-5AE5E3106F02},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=detectionfeedback.dll,Component={3276B786-D941-4ABD-810D-5AE5E3106F02},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=DETECT~1.DLL|DetectionFeedback.dll,SourceCabKey=detectionfeedback.dll,DestName=DetectionFeedback.dll,Attributes=8192,FileSize=1175064,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=DEVICE~1.DLL|DeviceControlPlugin.dll,SourceCabKey=devicecontrolplugin.dll,DestName=DeviceControlPlugin.dll,Attributes=8192,FileSize=259272,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:058]: Source for file 'DeviceControlPlugin.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:058]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:058]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\)
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=difxapi.dll,SourceCabKey=DIFxApi_64.dll.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=difxapi.dll,Attributes=9728,FileSize=414152,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.0.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\difxapi.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:058]: Source for file 'difxapi.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (28:F8) [12:08:45:058]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:058]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=driveprocessor.dll,Component={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=driveprocessor.dll,Component={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:073]: Executing op: FileCopy(SourceName=DRIVEP~1.DLL|DriveProcessor.dll,SourceCabKey=driveprocessor.dll,DestName=DriveProcessor.dll,Attributes=8192,FileSize=150640,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:073]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:073]: Executing op: RegisterSharedComponentProvider(,,File=eeconsumer.dll,Component={65937A4F-1784-4285-8C24-D06DA20D3AF0},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:073]: Executing op: RegisterSharedComponentProvider(,,File=eeconsumer.dll,Component={65937A4F-1784-4285-8C24-D06DA20D3AF0},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:073]: Executing op: FileCopy(SourceName=EECONS~1.DLL|EEConsumer.dll,SourceCabKey=eeconsumer.dll,DestName=EEConsumer.dll,Attributes=8192,FileSize=111704,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:073]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:073]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:073]: Executing op: SetSourceFolder(Folder=1\Common~1\Sophos\SOPHOS~1\Config\|CommonAppData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:073]: Executing op: FileCopy(SourceName=factory.xml,SourceCabKey=factory.xml1,DestName=factory.xml,Attributes=8192,FileSize=126126,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-921359334,HashPart2=-1894227237,HashPart3=-1212140918,HashPart4=1460286026,,)
MSI (s) (28:F8) [12:08:45:073]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:073]: Source for file 'factory.xml' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:45:073]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:073]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:073]: Executing op: FileCopy(SourceName=2fgepqm2.dll|swi_filter.dll,SourceCabKey=FilterDll_32.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_filter.dll,Attributes=9728,FileSize=2402232,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:089]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:089]: Executing op: FileCopy(SourceName=9vuh_wua.dll|swi_filter_64.dll,SourceCabKey=FilterDll_64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_filter_64.dll,Attributes=9728,FileSize=3607536,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter_64.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:105]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:105]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=filterprocessors.dll,Component={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=filterprocessors.dll,Component={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=FILTER~1.DLL|FilterProcessors.dll,SourceCabKey=filterprocessors.dll,DestName=FilterProcessors.dll,Attributes=8192,FileSize=234392,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=FORCEU~1.EXE|ForceUpdateAlongSideSGN.exe,SourceCabKey=ForceUpdateAlongSideSGN.exe,DestName=ForceUpdateAlongSideSGN.exe,Attributes=8192,FileSize=220840,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:105]: Source for file 'ForceUpdateAlongSideSGN.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=fsdecomposer.dll,Component={A4BACF9D-BF67-4909-AC27-8627DEA42367},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=fsdecomposer.dll,Component={A4BACF9D-BF67-4909-AC27-8627DEA42367},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=FSDECO~1.DLL|FSDecomposer.dll,SourceCabKey=fsdecomposer.dll,DestName=FSDecomposer.dll,Attributes=8192,FileSize=97128,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=icadapter.dll,Component={C45AAE65-B109-4933-AA74-817CFBE6233A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=icadapter.dll,Component={C45AAE65-B109-4933-AA74-817CFBE6233A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=ICADAP~1.DLL|ICAdapter.dll,SourceCabKey=icadapter.dll,DestName=ICAdapter.dll,Attributes=8192,FileSize=171992,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=icmanagement.dll,Component={59C347AA-B20B-4146-B11B-E570BFDF7D81},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=icmanagement.dll,Component={59C347AA-B20B-4146-B11B-E570BFDF7D81},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=ICMANA~1.DLL|ICManagement.dll,SourceCabKey=icmanagement.dll,DestName=ICManagement.dll,Attributes=8192,FileSize=587592,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=icprocessors.dll,Component={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=icprocessors.dll,Component={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=ICPROC~1.DLL|ICProcessors.dll,SourceCabKey=icprocessors.dll,DestName=ICProcessors.dll,Attributes=8192,FileSize=350704,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:105]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:105]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=_gto3zmn.dll|swi_ifslsp.dll,SourceCabKey=IfsLspDll_32.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_ifslsp.dll,Attributes=9728,FileSize=139832,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_ifslsp.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:120]: Executing op: FileCopy(SourceName=98vqitdp.dll|swi_ifslsp_64.dll,SourceCabKey=IfsLspDll_64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_ifslsp_64.dll,Attributes=9728,FileSize=198016,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_ifslsp_64.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: FileCopy(SourceName=zwfnvjni.dll|Instrumentation.dll,SourceCabKey=instrumentation.dll,DestName=Instrumentation.dll,Attributes=8192,FileSize=69568,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:120]: Source for file 'Instrumentation.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:120]: Executing op: FileCopy(SourceName=rzrxcnul.man|Instrumentation.man,SourceCabKey=Instrumentation.man,DestName=Instrumentation.man,Attributes=9728,FileSize=199680,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1688015182,HashPart2=1885137337,HashPart3=-743041656,HashPart4=1998841971,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:120]: Source for file 'Instrumentation.man' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:120]: Executing op: FileCopy(SourceName=INTEGR~1.DAT|integrity.dat,SourceCabKey=integrity.dat,DestName=integrity.dat,Attributes=8192,FileSize=3453,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-681942415,HashPart2=1484325737,HashPart3=-492754262,HashPart4=-1009882956,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:120]: Source for file 'integrity.dat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: FileCopy(SourceName=yqktopiz.dat|integrity.dat,SourceCabKey=integrity.dat.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=integrity.dat,Attributes=9728,FileSize=3643,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-680901075,HashPart2=1417526268,HashPart3=-277959069,HashPart4=-1650354639,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:120]: Source for file 'integrity.dat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\|program files\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: FileCopy(SourceName=8shyajoi.dat|integrity.dat,SourceCabKey=integrity_dat.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=integrity.dat,Attributes=8192,FileSize=1658,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1923858163,HashPart2=1012856950,HashPart3=-66078569,HashPart4=1535861683,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:120]: Source for file 'integrity.dat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: RegisterSharedComponentProvider(,,File=legacyconsumers.dll,Component={63B09FF1-4A74-4963-B2D9-182293950F88},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:120]: Executing op: RegisterSharedComponentProvider(,,File=legacyconsumers.dll,Component={63B09FF1-4A74-4963-B2D9-182293950F88},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=LEGACY~1.DLL|LegacyConsumers.dll,SourceCabKey=legacyconsumers.dll,DestName=LegacyConsumers.dll,Attributes=8192,FileSize=99744,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:136]: Executing op: RegisterSharedComponentProvider(,,File=localisation.dll,Component={FBF7F8C3-003B-40EB-B316-260E7D5DD274},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:136]: Executing op: RegisterSharedComponentProvider(,,File=localisation.dll,Component={FBF7F8C3-003B-40EB-B316-260E7D5DD274},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=LOCALI~1.DLL|Localisation.dll,SourceCabKey=localisation.dll,DestName=Localisation.dll,Attributes=8192,FileSize=126792,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:136]: Executing op: RegisterSharedComponentProvider(,,File=logging.dll,Component={823855BF-3AC5-4C0C-87E6-AD864B361AAF},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:136]: Executing op: RegisterSharedComponentProvider(,,File=logging.dll,Component={823855BF-3AC5-4C0C-87E6-AD864B361AAF},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=Logging.dll,SourceCabKey=logging.dll,DestName=Logging.dll,Attributes=8192,FileSize=459840,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=8wviy5e1.exe|swi_lsp32_util.exe,SourceCabKey=LspUtil_32.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_lsp32_util.exe,Attributes=9728,FileSize=251472,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_lsp32_util.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetSourceFolder(Folder=1\Common~1\Sophos\SOPHOS~1\Config\|CommonAppData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=machine.xml,SourceCabKey=machine.xml1,DestName=machine.xml,Attributes=8192,FileSize=31430,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1240029550,HashPart2=-1164467261,HashPart3=-14045040,HashPart4=1512465604,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:136]: Source for file 'machine.xml' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\l3j1top6\|program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=mpzerb-d.man|Microsoft.VC90.ATL.manifest,SourceCabKey=Microsoft.VC90.ATL.manifest,DestName=Microsoft.VC90.ATL.manifest,Attributes=512,FileSize=856,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1414776,HashPart2=977359063,HashPart3=2115947134,HashPart4=-1416651439,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:136]: Source for file 'Microsoft.VC90.ATL.manifest' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\'.
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\oeg2ttzz\|program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=nh5e9bnm.man|Microsoft.VC90.CRT.manifest,SourceCabKey=Microsoft.VC90.CRT.manifest,DestName=Microsoft.VC90.CRT.manifest,Attributes=512,FileSize=1860,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1849787048,HashPart2=1770411215,HashPart3=-1880307480,HashPart4=1204704877,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:136]: Source for file 'Microsoft.VC90.CRT.manifest' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'.
MSI (s) (28:F8) [12:08:45:152]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:152]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=mime.txt,SourceCabKey=mimemagic.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=mime.txt,Attributes=9728,FileSize=8692,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1300833179,HashPart2=2127525240,HashPart3=990588511,HashPart4=-457325937,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\mime.txt; Won't Overwrite; Won't patch; Existing file is unversioned and unmodified - hash matches source file
MSI (s) (28:F8) [12:08:45:152]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\)
MSI (s) (28:F8) [12:08:45:152]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\oeg2ttzz\|program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\)
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=msvcm90.dll,SourceCabKey=msvcm90.dll,DestName=msvcm90.dll,Attributes=512,FileSize=225280,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=9.0.30729.6161,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:152]: Source for file 'msvcm90.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'.
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=msvcp90.dll,SourceCabKey=msvcp90.dll,DestName=msvcp90.dll,Attributes=512,FileSize=569680,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=9.0.30729.6161,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:152]: Source for file 'msvcp90.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'.
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=msvcr90.dll,SourceCabKey=msvcr90.dll,DestName=msvcr90.dll,Attributes=512,FileSize=653136,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=9.0.30729.6161,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:152]: Source for file 'msvcr90.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'.
MSI (s) (28:F8) [12:08:45:152]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:152]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:152]: Executing op: RegisterSharedComponentProvider(,,File=persistance.dll,Component={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:152]: Executing op: RegisterSharedComponentProvider(,,File=persistance.dll,Component={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=PERSIS~1.DLL|Persistance.dll,SourceCabKey=persistance.dll,DestName=Persistance.dll,Attributes=8192,FileSize=101280,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=ps.crl,SourceCabKey=ps.crl,DestName=ps.crl,Attributes=8192,FileSize=2088,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1485947798,HashPart2=882664647,HashPart3=-868776249,HashPart4=1085696365,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:152]: Source for file 'ps.crl' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=zcmmymj9.crt|ps_rootca.crt,SourceCabKey=ps_rootca.crt,DestName=ps_rootca.crt,Attributes=8192,FileSize=1306,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1125782938,HashPart2=-1631502551,HashPart3=-1580007443,HashPart4=1881380357,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:152]: Source for file 'ps_rootca.crt' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:167]: Executing op: FileCopy(SourceName=public.pem,SourceCabKey=public.pem,DestName=public.pem,Attributes=8192,FileSize=451,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1893667783,HashPart2=-756523641,HashPart3=1309756759,HashPart4=1579450992,,)
MSI (s) (28:F8) [12:08:45:167]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:167]: Source for file 'public.pem' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:167]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:167]: Executing op: SetSourceFolder(Folder=1\Common~1\Sophos\SOPHOS~1\Config\|CommonAppData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:167]: Executing op: FileCopy(SourceName=QUARAN~1.XML|Quarantine.xml,SourceCabKey=Quarantine.xml1,DestName=Quarantine.xml,Attributes=8192,FileSize=224,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1914655278,HashPart2=-40098590,HashPart3=-1419608711,HashPart4=-55984252,,)
MSI (s) (28:F8) [12:08:45:167]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\Quarantine.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:167]: Source for file 'Quarantine.xml' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:45:167]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:167]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:167]: Executing op: FileCopy(SourceName=s4yqkaur.dll|Safestore32.dll,SourceCabKey=SafeStore32.dll,DestName=Safestore32.dll,Attributes=8192,FileSize=1683128,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.1.0.16,Language=2057,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:167]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:167]: Source for file 'Safestore32.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:167]: Executing op: FileCopy(SourceName=udwfuvfg.dll|SafeStore64.dll,SourceCabKey=SafeStore64.dll,DestName=SafeStore64.dll,Attributes=8192,FileSize=2254544,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.1.0.8,Language=2057,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:167]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:167]: Source for file 'SafeStore64.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=sav32cli.exe,SourceCabKey=sav32cli.exe,DestName=sav32cli.exe,Attributes=8192,FileSize=517792,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.99.4.0,Language=2057,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:183]: Source for file 'sav32cli.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:183]: Executing op: RegisterSharedComponentProvider(,,File=savadapter.dll,Component={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:183]: Executing op: RegisterSharedComponentProvider(,,File=savadapter.dll,Component={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=SAVADA~1.DLL|SavAdapter.dll,SourceCabKey=savadapter.dll,DestName=SavAdapter.dll,Attributes=8192,FileSize=1202560,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:183]: Executing op: RegisterSharedComponentProvider(,,File=SAVAdminService.exe,Component={FE613E3D-0469-40F8-9A0F-635D16097928},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:183]: Executing op: RegisterSharedComponentProvider(,,File=SAVAdminService.exe,Component={FE613E3D-0469-40F8-9A0F-635D16097928},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=SAVADM~1.EXE|SAVAdminService.exe,SourceCabKey=SAVAdminService.exe,DestName=SAVAdminService.exe,Attributes=8192,FileSize=229664,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=SAVCLE~1.EXE|SAVCleanupService.exe,SourceCabKey=SAVCleanupService.exe,DestName=SAVCleanupService.exe,Attributes=8192,FileSize=153712,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:183]: Source for file 'SAVCleanupService.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=SAVCON~1.DLL|SAVControl.dll,SourceCabKey=savcontrol.dll,DestName=SAVControl.dll,Attributes=8192,FileSize=207800,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:183]: Source for file 'SAVControl.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=SAVHEL~1.CHM|SAVHelpChs.chm,SourceCabKey=SAVHelpChs.chm,DestName=SAVHelpChs.chm,Attributes=8192,FileSize=339785,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-859269826,HashPart2=-729265504,HashPart3=-978718668,HashPart4=671312745,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:183]: Source for file 'SAVHelpChs.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=SAVHEL~2.CHM|SAVHelpCht.chm,SourceCabKey=SAVHelpCht.chm,DestName=SAVHelpCht.chm,Attributes=8192,FileSize=336410,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1208305288,HashPart2=-612818263,HashPart3=1839325732,HashPart4=380833433,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:183]: Source for file 'SAVHelpCht.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:199]: Executing op: FileCopy(SourceName=SAVHEL~3.CHM|SAVHelpDeu.chm,SourceCabKey=SAVHelpDeu.chm,DestName=SAVHelpDeu.chm,Attributes=8192,FileSize=328498,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=467790353,HashPart2=225288528,HashPart3=-329565745,HashPart4=-1866898155,,)
MSI (s) (28:F8) [12:08:45:199]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:199]: Source for file 'SAVHelpDeu.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:199]: Executing op: FileCopy(SourceName=SAVHEL~8.CHM|SavHelpEng.chm,SourceCabKey=SavHelpEng.chm,DestName=SavHelpEng.chm,Attributes=8192,FileSize=304856,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-58577952,HashPart2=-1754722703,HashPart3=1875168507,HashPart4=349898754,,)
MSI (s) (28:F8) [12:08:45:199]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:199]: Source for file 'SavHelpEng.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:199]: Executing op: FileCopy(SourceName=SAVHEL~4.CHM|SAVHelpEsp.chm,SourceCabKey=SAVHelpEsp.chm,DestName=SAVHelpEsp.chm,Attributes=8192,FileSize=318190,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-445411864,HashPart2=1943045887,HashPart3=2131213194,HashPart4=745528321,,)
MSI (s) (28:F8) [12:08:45:199]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:199]: Source for file 'SAVHelpEsp.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:199]: Executing op: FileCopy(SourceName=SAVHEL~5.CHM|SAVHelpFra.chm,SourceCabKey=SAVHelpFra.chm,DestName=SAVHelpFra.chm,Attributes=8192,FileSize=341587,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-359820583,HashPart2=-1433059567,HashPart3=968942044,HashPart4=-78657211,,)
MSI (s) (28:F8) [12:08:45:199]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:199]: Source for file 'SAVHelpFra.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:214]: Executing op: FileCopy(SourceName=SAVHEL~6.CHM|SAVHelpIta.chm,SourceCabKey=SAVHelpIta.chm,DestName=SAVHelpIta.chm,Attributes=8192,FileSize=330329,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-386050520,HashPart2=501722575,HashPart3=485291917,HashPart4=1341090753,,)
MSI (s) (28:F8) [12:08:45:214]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:214]: Source for file 'SAVHelpIta.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:214]: Executing op: FileCopy(SourceName=SAVHEL~7.CHM|SAVHelpJap.chm,SourceCabKey=SAVHelpJap.chm,DestName=SAVHelpJap.chm,Attributes=8192,FileSize=388696,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-810646475,HashPart2=-1327943539,HashPart3=-48323760,HashPart4=-1945953068,,)
MSI (s) (28:F8) [12:08:45:214]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:214]: Source for file 'SAVHelpJap.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:214]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:214]: Executing op: SetSourceFolder(Folder=1\Common~1\Sophos\SOPHOS~1\Config\|CommonAppData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:214]: Executing op: FileCopy(SourceName=SAVICO~1.XML|SAVIConfigFile.xml,SourceCabKey=SAVIConfigFile.xml,DestName=SAVIConfigFile.xml,Attributes=8192,FileSize=20069,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-714473973,HashPart2=-1535442045,HashPart3=1258245095,HashPart4=-2146596827,,)
MSI (s) (28:F8) [12:08:45:214]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\SAVIConfigFile.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:214]: Source for file 'SAVIConfigFile.xml' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:45:214]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:214]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:214]: Executing op: FileCopy(SourceName=SavMain.exe,SourceCabKey=savmain.exe,DestName=SavMain.exe,Attributes=8192,FileSize=1659392,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:214]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:214]: Source for file 'SavMain.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:230]: Executing op: FileCopy(SourceName=SAVNEU~1.DLL|SavNeutralRes.dll,SourceCabKey=SavNeutralRes.dll,DestName=SavNeutralRes.dll,Attributes=8192,FileSize=3232856,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:230]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:230]: Source for file 'SavNeutralRes.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:230]: Executing op: FileCopy(SourceName=SAVPLU~1.DLL|SavPlugin.dll,SourceCabKey=savplugin.dll,DestName=SavPlugin.dll,Attributes=8192,FileSize=87280,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:230]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:230]: Source for file 'SavPlugin.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:230]: Executing op: FileCopy(SourceName=SAVPRO~1.EXE|SavProgress.exe,SourceCabKey=savprogress.exe,DestName=SavProgress.exe,Attributes=8192,FileSize=410992,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:230]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:230]: Source for file 'SavProgress.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:230]: Executing op: RegisterSharedComponentProvider(,,File=SavRes.dll,Component={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:230]: Executing op: RegisterSharedComponentProvider(,,File=SavRes.dll,Component={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:230]: Executing op: FileCopy(SourceName=SavRes.dll,SourceCabKey=SavRes.dll,DestName=SavRes.dll,Attributes=8192,FileSize=769376,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:230]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:230]: Executing op: FileCopy(SourceName=SAVRES~1.DLL|SavResChs.dll,SourceCabKey=SavResChs.dll,DestName=SavResChs.dll,Attributes=8192,FileSize=143352,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:230]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:230]: Source for file 'SavResChs.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:245]: Executing op: FileCopy(SourceName=SAVRES~2.DLL|SavResCht.dll,SourceCabKey=SavResCht.dll,DestName=SavResCht.dll,Attributes=8192,FileSize=142840,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:245]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:245]: Source for file 'SavResCht.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:245]: Executing op: FileCopy(SourceName=SAVRES~3.DLL|SavResDeu.dll,SourceCabKey=SavResDeu.dll,DestName=SavResDeu.dll,Attributes=8192,FileSize=203136,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:245]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:245]: Source for file 'SavResDeu.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:245]: Executing op: FileCopy(SourceName=SAVRES~4.DLL|SavResEng.dll,SourceCabKey=SavResEng.dll,DestName=SavResEng.dll,Attributes=8192,FileSize=194824,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:245]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:245]: Source for file 'SavResEng.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:245]: Executing op: FileCopy(SourceName=SAVRES~5.DLL|SavResEsp.dll,SourceCabKey=SavResEsp.dll,DestName=SavResEsp.dll,Attributes=8192,FileSize=202560,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:245]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:245]: Source for file 'SavResEsp.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:245]: Executing op: FileCopy(SourceName=SAVRES~6.DLL|SavResFra.dll,SourceCabKey=SavResFra.dll,DestName=SavResFra.dll,Attributes=8192,FileSize=214008,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:245]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:245]: Source for file 'SavResFra.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SavResIt.dll,SourceCabKey=SavResIt.dll,DestName=SavResIt.dll,Attributes=8192,FileSize=209336,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:261]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:261]: Source for file 'SavResIt.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SAVRES~7.DLL|SavResJap.dll,SourceCabKey=SavResJap.dll,DestName=SavResJap.dll,Attributes=8192,FileSize=157928,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:261]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:261]: Source for file 'SavResJap.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:261]: Executing op: RegisterSharedComponentProvider(,,File=savsecurity.dll,Component={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:261]: Executing op: RegisterSharedComponentProvider(,,File=savsecurity.dll,Component={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SAVSEC~1.DLL|SavSecurity.dll,SourceCabKey=savsecurity.dll,DestName=SavSecurity.dll,Attributes=8192,FileSize=137152,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:261]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:261]: Executing op: RegisterSharedComponentProvider(,,File=SAVService.exe,Component={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:261]: Executing op: RegisterSharedComponentProvider(,,File=SAVService.exe,Component={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SAVSER~1.EXE|SavService.exe,SourceCabKey=SAVService.exe,DestName=SavService.exe,Attributes=8192,FileSize=200064,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:261]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SAVSHE~3.DLL|SavShellExt.dll,SourceCabKey=savshellext.dll,DestName=SavShellExt.dll,Attributes=8192,FileSize=222888,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:261]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:261]: Source for file 'SavShellExt.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SAVSHE~2.DLL|SavShellExtX64.dll,SourceCabKey=SavShellExtX64.dll,DestName=SavShellExtX64.dll,Attributes=8192,FileSize=546488,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:261]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:261]: Source for file 'SavShellExtX64.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SAVTelem.exe,SourceCabKey=SAVTelem.exe,DestName=SAVTelem.exe,Attributes=8192,FileSize=54088,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:277]: Source for file 'SAVTelem.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=SAVUS~1.DLL|SAVUserContext.dll,SourceCabKey=savusercontext.dll,DestName=SAVUserContext.dll,Attributes=8192,FileSize=87792,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:277]: Source for file 'SAVUserContext.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=SCANED~1.DLL|ScanEditExports.dll,SourceCabKey=scaneditexports.dll,DestName=ScanEditExports.dll,Attributes=8192,FileSize=35352,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:277]: Source for file 'ScanEditExports.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:277]: Executing op: RegisterSharedComponentProvider(,,File=scaneditfacade.dll,Component={AE86B1D3-36AD-45E7-B7A6-301DE878C695},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:277]: Executing op: RegisterSharedComponentProvider(,,File=scaneditfacade.dll,Component={AE86B1D3-36AD-45E7-B7A6-301DE878C695},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=SCANED~2.DLL|ScanEditFacade.dll,SourceCabKey=scaneditfacade.dll,DestName=ScanEditFacade.dll,Attributes=8192,FileSize=190664,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:277]: Executing op: RegisterSharedComponentProvider(,,File=scanmanagement.dll,Component={ECB3B148-F965-49B5-A338-857D09CBC0B3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:277]: Executing op: RegisterSharedComponentProvider(,,File=scanmanagement.dll,Component={ECB3B148-F965-49B5-A338-857D09CBC0B3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=SCANMA~1.DLL|ScanManagement.dll,SourceCabKey=scanmanagement.dll,DestName=ScanManagement.dll,Attributes=8192,FileSize=296160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=scf.dat,SourceCabKey=scf.dat,DestName=scf.dat,Attributes=8192,FileSize=3265,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1162287114,HashPart2=798828652,HashPart3=614476915,HashPart4=670360116,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:277]: Source for file 'scf.dat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:277]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:277]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=scf.dat,SourceCabKey=ScfDotDat_32.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=scf.dat,Attributes=9728,FileSize=3052,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=755188754,HashPart2=-182841540,HashPart3=-224286364,HashPart4=-1540807358,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat; Won't Overwrite; Won't patch; Existing file is unversioned and unmodified - hash matches source file
MSI (s) (28:F8) [12:08:45:277]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:277]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=SCS-IN~1.DAT|scs-integrity.dat,SourceCabKey=scs_integrity.dat,DestName=scs-integrity.dat,Attributes=8192,FileSize=1391,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=2097349618,HashPart2=1808505035,HashPart3=-376412528,HashPart4=-300102071,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:277]: Source for file 'scs-integrity.dat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:292]: Executing op: RegisterSharedComponentProvider(,,File=sipsmanagement.dll,Component={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:292]: Executing op: RegisterSharedComponentProvider(,,File=sipsmanagement.dll,Component={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:292]: Executing op: FileCopy(SourceName=SIPSMA~1.DLL|SIPSManagement.dll,SourceCabKey=sipsmanagement.dll,DestName=SIPSManagement.dll,Attributes=8192,FileSize=655112,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:292]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:292]: Executing op: FileCopy(SourceName=sof.dat,SourceCabKey=sof.dat,DestName=sof.dat,Attributes=8192,FileSize=2996,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1614902659,HashPart2=-1710135127,HashPart3=-368729681,HashPart4=-649737683,,)
MSI (s) (28:F8) [12:08:45:292]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:292]: Source for file 'sof.dat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:292]: Executing op: FileCopy(SourceName=SOPHOS~8.URL|Sophos Anti-Virus.URL,SourceCabKey=Sophos_Anti_Virus.URL,DestName=Sophos Anti-Virus.URL,Attributes=8192,FileSize=49,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1970428397,HashPart2=-196572636,HashPart3=528231796,HashPart4=-423115448,,)
MSI (s) (28:F8) [12:08:45:292]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:292]: Source for file 'Sophos Anti-Virus.URL' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:292]: Executing op: FileCopy(SourceName=y_9ftlzp.dll|SophosOfficeAV.dll,SourceCabKey=SophosOfficeAV.dll,DestName=SophosOfficeAV.dll,Attributes=8192,FileSize=132544,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:292]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:292]: Source for file 'SophosOfficeAV.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:292]: Executing op: FileCopy(SourceName=qznpshab.dll|SophosOfficeAVx64.dll,SourceCabKey=SophosOfficeAVx64.dll,DestName=SophosOfficeAVx64.dll,Attributes=8192,FileSize=167264,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:292]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:292]: Source for file 'SophosOfficeAVx64.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:292]: Executing op: RegisterSharedComponentProvider(,,File=sophtaineradapter.dll,Component={5E31220B-69F2-4AD7-BD59-69C7F695A17C},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:292]: Executing op: RegisterSharedComponentProvider(,,File=sophtaineradapter.dll,Component={5E31220B-69F2-4AD7-BD59-69C7F695A17C},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:292]: Executing op: FileCopy(SourceName=SOPHTA~1.DLL|SophtainerAdapter.dll,SourceCabKey=sophtaineradapter.dll,DestName=SophtainerAdapter.dll,Attributes=8192,FileSize=69120,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:308]: Executing op: FileCopy(SourceName=ssr32.exe,SourceCabKey=ssr32.exe,DestName=ssr32.exe,Attributes=8192,FileSize=150016,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.1.0.8,Language=2057,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:308]: Source for file 'ssr32.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:308]: Executing op: FileCopy(SourceName=ssr64.exe,SourceCabKey=ssr64.exe,DestName=ssr64.exe,Attributes=8192,FileSize=172904,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.1.0.8,Language=2057,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:308]: Source for file 'ssr64.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:308]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:308]: Executing op: SetSourceFolder(Folder=1\Common~1\Sophos\SOPHOS~1\Config\|CommonAppData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:308]: Executing op: FileCopy(SourceName=STOREB~1.XML|storebootstrap.xml,SourceCabKey=storebootstrap.xml2,DestName=storebootstrap.xml,Attributes=8192,FileSize=315,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1036855121,HashPart2=-1310717950,HashPart3=1072932941,HashPart4=-1863427859,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\storebootstrap.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:308]: Source for file 'storebootstrap.xml' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:45:308]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:45:308]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\|program files\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:45:308]: Executing op: RegisterSharedComponentProvider(,,File=swc_service.92A5750A_B99C_4D18_8E96_314353D4097A,Component={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},ComponentVersion=1.5.1539.0,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:308]: Executing op: RegisterSharedComponentProvider(,,File=swc_service.92A5750A_B99C_4D18_8E96_314353D4097A,Component={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},ComponentVersion=1.5.1539.0,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:308]: Executing op: FileCopy(SourceName=10f0iidq.exe|swc_service.exe,SourceCabKey=swc_service.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=swc_service.exe,Attributes=8192,FileSize=360040,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:308]: Executing op: FileCopy(SourceName=vbx_4n6d.dll|SWCAdapter.dll,SourceCabKey=SWCAdapter.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=SWCAdapter.dll,Attributes=8192,FileSize=328384,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:308]: Source for file 'SWCAdapter.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:308]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:308]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:308]: Executing op: FileCopy(SourceName=swi_fc.exe,SourceCabKey=swi_fc.exe.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_fc.exe,Attributes=9728,FileSize=2646352,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:308]: Source for file 'swi_fc.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (28:F8) [12:08:45:324]: Executing op: FileCopy(SourceName=rustw54y.exe|swi_filter.exe,SourceCabKey=swi_filter.exe.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_filter.exe,Attributes=9728,FileSize=475384,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:324]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:324]: Source for file 'swi_filter.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (28:F8) [12:08:45:324]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:324]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\)
MSI (s) (28:F8) [12:08:45:324]: Executing op: FileCopy(SourceName=wqcg8y7k.cat|swi_callout.cat,SourceCabKey=SwiCat64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_callout.cat,Attributes=9728,FileSize=19745,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1706504615,HashPart2=820750791,HashPart3=1564457956,HashPart4=1277375312,,)
MSI (s) (28:F8) [12:08:45:324]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:324]: Source for file 'swi_callout.cat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (28:F8) [12:08:45:324]: Executing op: FileCopy(SourceName=swi_di.exe,SourceCabKey=SwiDI64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_di.exe,Attributes=9728,FileSize=298840,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:324]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:324]: Source for file 'swi_di.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (28:F8) [12:08:45:324]: Executing op: SetCompanionParent(ParentPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\,ParentName=swi_callout.cat,,)
MSI (s) (28:F8) [12:08:45:324]: Executing op: FileCopy(SourceName=duxispho.inf|swi_callout.inf,SourceCabKey=SwiInf64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_callout.inf,Attributes=9728,FileSize=1292,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SwiCat64.11DACB83_28A7_4FA6_AF5B_C006E340C101,,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:324]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf; Overwrite; Won't patch; Existing file is unversioned and unmodified - no source file hash provided to compare (Checked using version of companion: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat)
MSI (s) (28:F8) [12:08:45:324]: Source for file 'swi_callout.inf' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (28:F8) [12:08:45:339]: Re-applying security from existing file.
MSI (s) (28:F8) [12:08:45:339]: Verifying accessibility of file: swi_callout.inf
MSI (s) (28:F8) [12:08:45:339]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:45:339]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:45:339]: File will have security applied from OpCode.
MSI (s) (28:F8) [12:08:45:339]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:339]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:339]: Executing op: FileCopy(SourceName=pc-xuy8e.exe|swi_lspdiag.exe,SourceCabKey=SwiLspDiag_32.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_lspdiag.exe,Attributes=9728,FileSize=213552,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:339]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_lspdiag.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:339]: Executing op: FileCopy(SourceName=nwpja_co.exe|swi_lspdiag_64.exe,SourceCabKey=SwiLspDiag_64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_lspdiag_64.exe,Attributes=9728,FileSize=262976,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:370]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_lspdiag_64.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:370]: Executing op: RegisterSharedComponentProvider(,,File=swimanagement.dll,Component={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:370]: Executing op: RegisterSharedComponentProvider(,,File=swimanagement.dll,Component={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:370]: Executing op: FileCopy(SourceName=SWIMAN~1.DLL|SWIManagement.dll,SourceCabKey=swimanagement.dll,DestName=SWIManagement.dll,Attributes=8192,FileSize=206264,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:370]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:370]: Executing op: FileCopy(SourceName=khx7o7_6.exe|swi_service.exe,SourceCabKey=SwiService_32.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_service.exe,Attributes=9728,FileSize=3644368,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:370]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:370]: Source for file 'swi_service.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\)
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetCompanionParent(ParentPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\,ParentName=swi_callout.cat,,)
MSI (s) (28:F8) [12:08:45:370]: Executing op: FileCopy(SourceName=uxfve7ft.sys|swi_callout.sys,SourceCabKey=SwiSys64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_callout.sys,Attributes=9728,FileSize=47760,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SwiCat64.11DACB83_28A7_4FA6_AF5B_C006E340C101,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:370]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.sys; Overwrite; Won't patch; Existing file is unversioned and unmodified - no source file hash provided to compare (Checked using version of companion: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat)
MSI (s) (28:F8) [12:08:45:370]: Source for file 'swi_callout.sys' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (28:F8) [12:08:45:370]: Re-applying security from existing file.
MSI (s) (28:F8) [12:08:45:370]: Verifying accessibility of file: swi_callout.sys
MSI (s) (28:F8) [12:08:45:370]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:45:386]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:45:386]: File will have security applied from OpCode.
MSI (s) (28:F8) [12:08:45:386]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:386]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:386]: Executing op: FileCopy(SourceName=c6aspuc4.exe|swi_update_64.exe,SourceCabKey=SwiUpdate_64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_update_64.exe,Attributes=9728,FileSize=2121216,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:386]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:386]: Source for file 'swi_update_64.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (28:F8) [12:08:45:386]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:386]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:386]: Executing op: RegisterSharedComponentProvider(,,File=systeminformation.dll,Component={719B5EDD-B014-4686-AB60-A4474B84240D},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:386]: Executing op: RegisterSharedComponentProvider(,,File=systeminformation.dll,Component={719B5EDD-B014-4686-AB60-A4474B84240D},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:386]: Executing op: FileCopy(SourceName=SYSTEM~1.DLL|SystemInformation.dll,SourceCabKey=systeminformation.dll,DestName=SystemInformation.dll,Attributes=8192,FileSize=110616,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:386]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:386]: Executing op: FileCopy(SourceName=TAMPER~1.DLL|TamperProtectionControl.dll,SourceCabKey=tamperprotectioncontrol.dll,DestName=TamperProtectionControl.dll,Attributes=8192,FileSize=136128,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:386]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:386]: Source for file 'TamperProtectionControl.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:386]: Executing op: FileCopy(SourceName=TAMPER~4.DLL|TamperProtectionControlX64.dll,SourceCabKey=TamperProtectionControlX64.dll,DestName=TamperProtectionControlX64.dll,Attributes=8192,FileSize=161120,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:386]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:386]: Source for file 'TamperProtectionControlX64.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:386]: Executing op: RegisterSharedComponentProvider(,,File=tamperprotectionmanagement.d,Component={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:386]: Executing op: RegisterSharedComponentProvider(,,File=tamperprotectionmanagement.d,Component={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:386]: Executing op: FileCopy(SourceName=TAMPER~2.DLL|TamperProtectionManagement.dll,SourceCabKey=tamperprotectionmanagement.d,DestName=TamperProtectionManagement.dll,Attributes=8192,FileSize=209336,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:386]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:386]: Executing op: FileCopy(SourceName=TAMPER~3.DLL|TamperProtectionPlugin.dll,SourceCabKey=tamperprotectionplugin.dll,DestName=TamperProtectionPlugin.dll,Attributes=8192,FileSize=206776,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:386]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:386]: Source for file 'TamperProtectionPlugin.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=threatdetection.dll,Component={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=threatdetection.dll,Component={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=THREAT~1.DLL|ThreatDetection.dll,SourceCabKey=threatdetection.dll,DestName=ThreatDetection.dll,Attributes=8192,FileSize=531008,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=threatmanagement.dll,Component={E5EB5509-3611-458A-BE68-3477BF3D96CB},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=threatmanagement.dll,Component={E5EB5509-3611-458A-BE68-3477BF3D96CB},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=THREAT~2.DLL|ThreatManagement.dll,SourceCabKey=threatmanagement.dll,DestName=ThreatManagement.dll,Attributes=8192,FileSize=652552,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=translators.dll,Component={09FFDB10-614F-4899-82E8-85A7D8BFA32A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=translators.dll,Component={09FFDB10-614F-4899-82E8-85A7D8BFA32A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=TRANSL~1.DLL|Translators.dll,SourceCabKey=translators.dll,DestName=Translators.dll,Attributes=8192,FileSize=195904,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=vecontroller.dll,Component={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=vecontroller.dll,Component={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=VECONT~1.DLL|VEController.dll,SourceCabKey=vecontroller.dll,DestName=VEController.dll,Attributes=8192,FileSize=256712,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=virusdetection.dll,Component={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=virusdetection.dll,Component={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=VIRUSD~1.DLL|VirusDetection.dll,SourceCabKey=virusdetection.dll,DestName=VirusDetection.dll,Attributes=8192,FileSize=872880,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:402]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:45:402]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\|program files\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=tqev-0rb.dll|WCMResChs.dll,SourceCabKey=WCMResChs.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResChs.dll,Attributes=8192,FileSize=18648,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:402]: Source for file 'WCMResChs.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=abx1c0mn.dll|WCMResCht.dll,SourceCabKey=WCMResCht.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResCht.dll,Attributes=8192,FileSize=18648,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:402]: Source for file 'WCMResCht.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=t98cjnmj.dll|WCMResDeu.dll,SourceCabKey=WCMResDeu.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResDeu.dll,Attributes=8192,FileSize=19160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCMResDeu.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:417]: Executing op: FileCopy(SourceName=pofhy1ao.dll|WCMResEng.dll,SourceCabKey=WCMResEng.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResEng.dll,Attributes=8192,FileSize=18136,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCMResEng.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:417]: Executing op: FileCopy(SourceName=oe33a3rv.dll|WCMResEsp.dll,SourceCabKey=WCMResEsp.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResEsp.dll,Attributes=8192,FileSize=19160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCMResEsp.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:417]: Executing op: FileCopy(SourceName=yknbbt_8.dll|WCMResFra.dll,SourceCabKey=WCMResFra.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResFra.dll,Attributes=8192,FileSize=19160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCMResFra.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:417]: Executing op: FileCopy(SourceName=WCMResIt.dll,SourceCabKey=WCMResIt.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResIt.dll,Attributes=8192,FileSize=19160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCMResIt.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:417]: Executing op: FileCopy(SourceName=ugt2y2aq.dll|WCMResJap.dll,SourceCabKey=WCMResJap.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResJap.dll,Attributes=8192,FileSize=19160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCMResJap.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:417]: Executing op: FileCopy(SourceName=gl5jssdo.dll|WCPResChs.dll,SourceCabKey=WCPResChs.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResChs.dll,Attributes=8192,FileSize=87792,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCPResChs.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=mbkrrgfk.dll|WCPResCht.dll,SourceCabKey=WCPResCht.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResCht.dll,Attributes=8192,FileSize=87792,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResCht.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=lz0dhlmb.dll|WCPResDeu.dll,SourceCabKey=WCPResDeu.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResDeu.dll,Attributes=8192,FileSize=88304,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResDeu.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=qmce8vpe.dll|WCPResEng.dll,SourceCabKey=WCPResEng.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResEng.dll,Attributes=8192,FileSize=87280,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResEng.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=euf7zhv5.dll|WCPResEsp.dll,SourceCabKey=WCPResEsp.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResEsp.dll,Attributes=8192,FileSize=88304,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResEsp.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=94hwbqsy.dll|WCPResFra.dll,SourceCabKey=WCPResFra.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResFra.dll,Attributes=8192,FileSize=88304,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResFra.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=WCPResIt.dll,SourceCabKey=WCPResIt.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResIt.dll,Attributes=8192,FileSize=88304,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResIt.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=my8ewoes.dll|WCPResJap.dll,SourceCabKey=WCPResJap.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResJap.dll,Attributes=8192,FileSize=87792,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResJap.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:449]: Executing op: FileCopy(SourceName=gwkjhd-6.dll|WebControlMessaging.dll,SourceCabKey=WebControlMessaging_dll.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WebControlMessaging.dll,Attributes=8192,FileSize=196872,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:449]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:449]: Source for file 'WebControlMessaging.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:449]: Executing op: FileCopy(SourceName=d6gbuksk.dll|WebControlPlugin.dll,SourceCabKey=WebControlPlugin.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WebControlPlugin.dll,Attributes=8192,FileSize=312216,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:449]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:449]: Source for file 'WebControlPlugin.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:449]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:449]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\WSC_X64\|program files\Sophos\Sophos Anti-Virus\WSC_X64\)
MSI (s) (28:F8) [12:08:45:449]: Executing op: FileCopy(SourceName=WSCCLI~1.EXE|WSCClient.exe,SourceCabKey=WSCClientExeX64,DestName=WSCClient.exe,Attributes=8192,FileSize=287336,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:449]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:449]: Source for file 'WSCClient.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_X64\'.
MSI (s) (28:F8) [12:08:45:449]: Executing op: CacheSizeFlush(,)
MSI (s) (28:F8) [12:08:45:449]: Executing op: ActionStart(Name=SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A,,)
MSI (s) (28:F8) [12:08:45:449]: Executing op: CustomActionSchedule(Action=SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A,ActionType=1058,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe" /Service,)
MSI (s) (28:F8) [12:08:45:512]: Executing op: ActionStart(Name=ExecXmlFile,,)
MSI (s) (28:F8) [12:08:45:512]: Executing op: CustomActionSchedule(Action=ExecXmlFile,ActionType=3073,Source=BinaryData,Target=ExecXmlFile,CustomActionData=10C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@messageFileName]messageFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll71/*/*/*/*[@parameterFileName]parameterFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll10C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@resourceFileName]resourceFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll)
MSI (s) (28:2C) [12:08:45:512]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIEF7D.tmp, Entrypoint: ExecXmlFile
MSI (s) (28:F8) [12:08:45:542]: Executing op: ActionStart(Name=RollbackRegisterEventManifest,,)
MSI (s) (28:F8) [12:08:45:542]: Executing op: CustomActionSchedule(Action=RollbackRegisterEventManifest,ActionType=3393,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" um "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man")
MSI (s) (28:F8) [12:08:45:542]: Executing op: ActionStart(Name=RegisterEventManifest,,)
MSI (s) (28:F8) [12:08:45:542]: Executing op: CustomActionSchedule(Action=RegisterEventManifest,ActionType=3073,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man")
MSI (s) (28:64) [12:08:45:558]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIEF9D.tmp, Entrypoint: CAQuietExec
MSI (s) (28:F8) [12:08:45:777]: Executing op: ActionStart(Name=RollbackUserGroups,,)
MSI (s) (28:F8) [12:08:45:777]: Executing op: CustomActionSchedule(Action=RollbackUserGroups,ActionType=1281,Source=BinaryData,Target=DeleteUserGroups,)
MSI (s) (28:F8) [12:08:45:777]: Executing op: ActionStart(Name=CreateUserGroups,,)
MSI (s) (28:F8) [12:08:45:777]: Executing op: CustomActionSchedule(Action=CreateUserGroups,ActionType=1025,Source=BinaryData,Target=CreateUserGroups,CustomActionData=C:\ProgramData\Sophos\Sophos Anti-Virus\Config)
MSI (s) (28:B4) [12:08:45:777]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF089.tmp, Entrypoint: CreateUserGroups
CustomAction CreateUserGroups returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (28:F8) [12:08:46:439]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (28:F8) [12:08:46:439]: User policy value 'DisableRollback' is 0
MSI (s) (28:F8) [12:08:46:439]: Machine policy value 'DisableRollback' is 0
Action ended 12:08:46: InstallFinalize. Return value 3.
MSI (s) (28:F8) [12:08:46:455]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1253990673,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (28:F8) [12:08:46:455]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (28:F8) [12:08:46:455]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus)
MSI (s) (28:F8) [12:08:46:455]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (28:F8) [12:08:46:455]: Executing op: RegisterBackupFile(File=C:\Config.Msi\2fa0a15d.rbf)
MSI (s) (28:F8) [12:08:46:455]: Executing op: RegisterBackupFile(File=C:\Config.Msi\2fa0a15e.rbf)
MSI (s) (28:F8) [12:08:46:455]: Executing op: RegisterBackupFile(File=C:\Config.Msi\2fa0a15f.rbf)
MSI (s) (28:F8) [12:08:46:455]: Executing op: ActionStart(Name=CreateUserGroups,,)
MSI (s) (28:F8) [12:08:46:455]: Executing op: ProductInfo(ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=168230914,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={B11B63E0-A3EB-478A-AF04-AAE0B577AEB2},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
MSI (s) (28:F8) [12:08:46:455]: Executing op: ActionStart(Name=RollbackUserGroups,,)
MSI (s) (28:F8) [12:08:46:455]: Executing op: CustomActionRollback(Action=RollbackUserGroups,ActionType=1281,Source=BinaryData,Target=DeleteUserGroups,)
MSI (s) (28:A8) [12:08:46:455]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF339.tmp, Entrypoint: DeleteUserGroups
MSI (s) (28:F8) [12:08:46:470]: Executing op: ActionStart(Name=RegisterEventManifest,,)
MSI (s) (28:F8) [12:08:46:470]: Executing op: ActionStart(Name=RollbackRegisterEventManifest,,)
MSI (s) (28:F8) [12:08:46:470]: Executing op: CustomActionRollback(Action=RollbackRegisterEventManifest,ActionType=3393,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" um "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man")
MSI (s) (28:40) [12:08:46:486]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF34A.tmp, Entrypoint: CAQuietExec
MSI (s) (28:F8) [12:08:46:627]: Executing op: ActionStart(Name=ExecXmlFile,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: ActionStart(Name=SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1], Directory: [9], Size: [6])
MSI (s) (28:F8) [12:08:46:627]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:627]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:46:627]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:642]: Executing op: RegisterSharedComponentProvider(,,File=virusdetection.dll,Component={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:642]: Executing op: UnregisterSharedComponentProvider(Component={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:642]: Executing op: RegisterSharedComponentProvider(,,File=vecontroller.dll,Component={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:642]: Executing op: UnregisterSharedComponentProvider(Component={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:642]: Executing op: RegisterSharedComponentProvider(,,File=translators.dll,Component={09FFDB10-614F-4899-82E8-85A7D8BFA32A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:642]: Executing op: UnregisterSharedComponentProvider(Component={09FFDB10-614F-4899-82E8-85A7D8BFA32A},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:642]: Executing op: RegisterSharedComponentProvider(,,File=threatmanagement.dll,Component={E5EB5509-3611-458A-BE68-3477BF3D96CB},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:658]: Executing op: UnregisterSharedComponentProvider(Component={E5EB5509-3611-458A-BE68-3477BF3D96CB},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:658]: Executing op: RegisterSharedComponentProvider(,,File=threatdetection.dll,Component={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:658]: Executing op: UnregisterSharedComponentProvider(Component={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:658]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll,,)
MSI (s) (28:F8) [12:08:46:658]: Executing op: RegisterSharedComponentProvider(,,File=tamperprotectionmanagement.d,Component={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:658]: Executing op: UnregisterSharedComponentProvider(Component={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:658]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll,,)
MSI (s) (28:F8) [12:08:46:658]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll,,)
MSI (s) (28:F8) [12:08:46:658]: Executing op: RegisterSharedComponentProvider(,,File=systeminformation.dll,Component={719B5EDD-B014-4686-AB60-A4474B84240D},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:658]: Executing op: UnregisterSharedComponentProvider(Component={719B5EDD-B014-4686-AB60-A4474B84240D},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:658]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:658]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe,,)
MSI (s) (28:F8) [12:08:46:658]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:658]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:658]: Executing op: FileCopy(SourceName=C:\Config.Msi\2fa0a15f.rbf,,DestName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.sys,Attributes=32800,FileSize=47760,PerTick=0,,VerifyMedia=0,ElevateFlags=3,,,,,,,InstallMode=4194308,,,,,,,)
MSI (s) (28:F8) [12:08:46:658]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.sys; Overwrite; Won't patch; REINSTALLMODE specifies all files to be overwritten
MSI (s) (28:F8) [12:08:46:658]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:658]: Verifying accessibility of file: 2fa0a15f.rbf
MSI (s) (28:F8) [12:08:46:658]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:658]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:658]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe,,)
MSI (s) (28:F8) [12:08:46:658]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:658]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:658]: Executing op: RegisterSharedComponentProvider(,,File=swimanagement.dll,Component={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:658]: Executing op: UnregisterSharedComponentProvider(Component={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:674]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:674]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileCopy(SourceName=C:\Config.Msi\2fa0a15e.rbf,,DestName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf,Attributes=32800,FileSize=1292,PerTick=0,,VerifyMedia=0,ElevateFlags=3,,,,,,,InstallMode=4194308,,,,,,,)
MSI (s) (28:F8) [12:08:46:674]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf; Overwrite; Won't patch; REINSTALLMODE specifies all files to be overwritten
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Verifying accessibility of file: 2fa0a15e.rbf
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe,,)
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat,,)
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe,,)
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe,,)
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll,,)
MSI (s) (28:F8) [12:08:46:674]: Executing op: RegisterSharedComponentProvider(,,File=swc_service.92A5750A_B99C_4D18_8E96_314353D4097A,Component={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},ComponentVersion=1.5.1539.0,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:674]: Executing op: UnregisterSharedComponentProvider(Component={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:674]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\storebootstrap.xml,,)
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe,,)
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe,,)
MSI (s) (28:F8) [12:08:46:674]: Executing op: RegisterSharedComponentProvider(,,File=sophtaineradapter.dll,Component={5E31220B-69F2-4AD7-BD59-69C7F695A17C},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:674]: Executing op: UnregisterSharedComponentProvider(Component={5E31220B-69F2-4AD7-BD59-69C7F695A17C},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: RegisterSharedComponentProvider(,,File=sipsmanagement.dll,Component={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:689]: Executing op: UnregisterSharedComponentProvider(Component={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:689]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: RegisterSharedComponentProvider(,,File=scanmanagement.dll,Component={ECB3B148-F965-49B5-A338-857D09CBC0B3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:689]: Executing op: UnregisterSharedComponentProvider(Component={ECB3B148-F965-49B5-A338-857D09CBC0B3},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:689]: Executing op: RegisterSharedComponentProvider(,,File=scaneditfacade.dll,Component={AE86B1D3-36AD-45E7-B7A6-301DE878C695},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:689]: Executing op: UnregisterSharedComponentProvider(Component={AE86B1D3-36AD-45E7-B7A6-301DE878C695},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: RegisterSharedComponentProvider(,,File=SAVService.exe,Component={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:689]: Executing op: UnregisterSharedComponentProvider(Component={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:689]: Executing op: RegisterSharedComponentProvider(,,File=savsecurity.dll,Component={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:689]: Executing op: UnregisterSharedComponentProvider(Component={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: RegisterSharedComponentProvider(,,File=SavRes.dll,Component={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:705]: Executing op: UnregisterSharedComponentProvider(Component={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\SAVIConfigFile.xml,,)
MSI (s) (28:F8) [12:08:46:705]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:705]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: RegisterSharedComponentProvider(,,File=SAVAdminService.exe,Component={FE613E3D-0469-40F8-9A0F-635D16097928},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:720]: Executing op: UnregisterSharedComponentProvider(Component={FE613E3D-0469-40F8-9A0F-635D16097928},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:720]: Executing op: RegisterSharedComponentProvider(,,File=savadapter.dll,Component={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:720]: Executing op: UnregisterSharedComponentProvider(Component={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\Quarantine.xml,,)
MSI (s) (28:F8) [12:08:46:720]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:720]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt,,)
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl,,)
MSI (s) (28:F8) [12:08:46:736]: Executing op: RegisterSharedComponentProvider(,,File=persistance.dll,Component={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:736]: Executing op: UnregisterSharedComponentProvider(Component={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll,,)
MSI (s) (28:F8) [12:08:46:736]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll,,)
MSI (s) (28:F8) [12:08:46:736]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll,,)
MSI (s) (28:F8) [12:08:46:736]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest,,)
MSI (s) (28:F8) [12:08:46:736]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest,,)
MSI (s) (28:F8) [12:08:46:736]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,,)
MSI (s) (28:F8) [12:08:46:736]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: RegisterSharedComponentProvider(,,File=logging.dll,Component={823855BF-3AC5-4C0C-87E6-AD864B361AAF},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:736]: Executing op: UnregisterSharedComponentProvider(Component={823855BF-3AC5-4C0C-87E6-AD864B361AAF},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:736]: Executing op: RegisterSharedComponentProvider(,,File=localisation.dll,Component={FBF7F8C3-003B-40EB-B316-260E7D5DD274},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:736]: Executing op: UnregisterSharedComponentProvider(Component={FBF7F8C3-003B-40EB-B316-260E7D5DD274},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:736]: Executing op: RegisterSharedComponentProvider(,,File=legacyconsumers.dll,Component={63B09FF1-4A74-4963-B2D9-182293950F88},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:736]: Executing op: UnregisterSharedComponentProvider(Component={63B09FF1-4A74-4963-B2D9-182293950F88},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat,,)
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat,,)
MSI (s) (28:F8) [12:08:46:752]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat,,)
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man,,)
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll,,)
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=icprocessors.dll,Component={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=icmanagement.dll,Component={59C347AA-B20B-4146-B11B-E570BFDF7D81},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={59C347AA-B20B-4146-B11B-E570BFDF7D81},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=icadapter.dll,Component={C45AAE65-B109-4933-AA74-817CFBE6233A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={C45AAE65-B109-4933-AA74-817CFBE6233A},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=fsdecomposer.dll,Component={A4BACF9D-BF67-4909-AC27-8627DEA42367},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={A4BACF9D-BF67-4909-AC27-8627DEA42367},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe,,)
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=filterprocessors.dll,Component={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,,)
MSI (s) (28:F8) [12:08:46:752]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=eeconsumer.dll,Component={65937A4F-1784-4285-8C24-D06DA20D3AF0},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={65937A4F-1784-4285-8C24-D06DA20D3AF0},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=driveprocessor.dll,Component={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\difxapi.dll,,)
MSI (s) (28:F8) [12:08:46:752]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:767]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:767]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll,,)
MSI (s) (28:F8) [12:08:46:767]: Executing op: RegisterSharedComponentProvider(,,File=detectionfeedback.dll,Component={3276B786-D941-4ABD-810D-5AE5E3106F02},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:767]: Executing op: UnregisterSharedComponentProvider(Component={3276B786-D941-4ABD-810D-5AE5E3106F02},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:767]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll,,)
MSI (s) (28:F8) [12:08:46:767]: Executing op: RegisterSharedComponentProvider(,,File=dcmanagement.dll,Component={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:767]: Executing op: UnregisterSharedComponentProvider(Component={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:767]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll,,)
MSI (s) (28:F8) [12:08:46:767]: Executing op: RegisterSharedComponentProvider(,,File=datacontrolmanagement.dll,Component={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:767]: Executing op: UnregisterSharedComponentProvider(Component={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:767]: Executing op: RegisterSharedComponentProvider(,,File=configuration.dll,Component={BFCC0446-6C34-413E-9611-520B993B04B1},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:767]: Executing op: UnregisterSharedComponentProvider(Component={BFCC0446-6C34-413E-9611-520B993B04B1},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:767]: Executing op: RegisterSharedComponentProvider(,,File=componentmanager.dll,Component={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:767]: Executing op: UnregisterSharedComponentProvider(Component={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:767]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll,,)
MSI (s) (28:F8) [12:08:46:767]: Executing op: RegisterSharedComponentProvider(,,File=bpaif.dll,Component={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},ComponentVersion=2.5.0.99,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:767]: Executing op: UnregisterSharedComponentProvider(Component={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:767]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:767]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\bootstrap.xml,,)
MSI (s) (28:F8) [12:08:46:767]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:783]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:783]: Executing op: RegisterSharedComponentProvider(,,File=bhomanagement.dll,Component={3BF07D0A-37CC-4FA8-81DA-D351E301276A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:783]: Executing op: UnregisterSharedComponentProvider(Component={3BF07D0A-37CC-4FA8-81DA-D351E301276A},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:783]: Executing op: RegisterSharedComponentProvider(,,File=backgroundscanning.dll,Component={D36CD500-4FBE-4943-90EC-D7646AA41519},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:783]: Executing op: UnregisterSharedComponentProvider(Component={D36CD500-4FBE-4943-90EC-D7646AA41519},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:783]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: RegisterSharedComponentProvider(,,File=authorisedlists.dll,Component={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:783]: Executing op: UnregisterSharedComponentProvider(Component={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:783]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\)
MSI (s) (28:F8) [12:08:46:783]: Executing op: RegisterSharedComponentProvider(,,File=atl90.dll,Component={341B1BFF-FEAD-4104-A29F-E9363B7517BF},ComponentVersion=9.0.30729.6161,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:783]: Executing op: UnregisterSharedComponentProvider(Component={341B1BFF-FEAD-4104-A29F-E9363B7517BF},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:783]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:783]: Executing op: RegisterSharedComponentProvider(,,File=ApplicationManagement.dll,Component={F5D90A95-0F03-41CF-BEA3-247569C57BD3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:783]: Executing op: UnregisterSharedComponentProvider(Component={F5D90A95-0F03-41CF-BEA3-247569C57BD3},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:783]: Executing op: RegisterSharedComponentProvider(,,File=AppFeedManager.dll,Component={52411750-073E-47D7-BB97-8B404AF42B76},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:783]: Executing op: UnregisterSharedComponentProvider(Component={52411750-073E-47D7-BB97-8B404AF42B76},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:783]: Executing op: ActionStart(Name=StartDriverServices,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: ActionStart(Name=InstallClassFilterAMD64Win7,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: ActionStart(Name=InstallDriverFilesAMD64Win7,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: ActionStart(Name=InstallBootDriverAMD64Win7,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: ActionStart(Name=RestoreExcludedProcesses,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: ActionStart(Name=RollbackDriverFiles64Vista,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: CustomActionRollback(Action=RollbackDriverFiles64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF",)
MSI (s) (28:F8) [12:08:46:814]: Executing op: ActionStart(Name=RollbackBootDriver64Vista,,)
MSI (s) (28:F8) [12:08:46:814]: Executing op: CustomActionRollback(Action=RollbackBootDriver64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF",)
MSI (s) (28:F8) [12:08:46:830]: Executing op: ActionStart(Name=RollbackClassFilter64Vista,,)
MSI (s) (28:F8) [12:08:46:830]: Executing op: CustomActionRollback(Action=RollbackClassFilter64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SDCFILTER.INF",)
MSI (s) (28:F8) [12:08:46:845]: Executing op: ActionStart(Name=RegisterBufferOverflowProtection,,)
MSI (s) (28:F8) [12:08:46:845]: Executing op: ActionStart(Name=CopyOtherFiles,,)
MSI (s) (28:F8) [12:08:46:845]: Executing op: ActionStart(Name=UpdateDesktopMessaging,,)
MSI (s) (28:F8) [12:08:46:845]: Executing op: ActionStart(Name=RollbackUpdateDesktopMessaging,,)
MSI (s) (28:F8) [12:08:46:861]: Executing op: CustomActionRollback(Action=RollbackUpdateDesktopMessaging,ActionType=1281,Source=BinaryData,Target=UpdateDesktopMessaging,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:1C) [12:08:46:861]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF4D1.tmp, Entrypoint: UpdateDesktopMessaging
MSI (s) (28:F8) [12:08:46:861]: Executing op: ActionStart(Name=UpdateSavAdapterDll,,)
MSI (s) (28:F8) [12:08:46:861]: Executing op: ActionStart(Name=RollbackUpdateSavAdapterDll,,)
MSI (s) (28:F8) [12:08:46:861]: Executing op: CustomActionRollback(Action=RollbackUpdateSavAdapterDll,ActionType=1281,Source=BinaryData,Target=RollbackUpdateSavAdapterDll,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:C8) [12:08:46:877]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF4D2.tmp, Entrypoint: RollbackUpdateSavAdapterDll
MSI (s) (28:F8) [12:08:46:877]: Executing op: ActionStart(Name=RollbackOtherFiles,,)
MSI (s) (28:F8) [12:08:46:877]: Executing op: CustomActionRollback(Action=RollbackOtherFiles,ActionType=1281,Source=BinaryData,Target=DeleteOtherFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:D8) [12:08:46:877]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF4E3.tmp, Entrypoint: DeleteOtherFiles
MSI (s) (28:F8) [12:08:46:908]: Executing op: ActionStart(Name=RollbackForceDeleteUserPlugin,,)
MSI (s) (28:F8) [12:08:46:908]: Executing op: CustomActionRollback(Action=RollbackForceDeleteUserPlugin,ActionType=1281,Source=BinaryData,Target=ForceDeleteUserPlugin,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:0C) [12:08:46:908]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF503.tmp, Entrypoint: ForceDeleteUserPlugin
MSI (s) (28:F8) [12:08:46:924]: Executing op: ActionStart(Name=RollbackForceDeleteFiles,,)
MSI (s) (28:F8) [12:08:46:924]: Executing op: CustomActionRollback(Action=RollbackForceDeleteFiles,ActionType=1281,Source=BinaryData,Target=ForceDeleteFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F4) [12:08:46:924]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF514.tmp, Entrypoint: ForceDeleteFiles
MSI (s) (28:F8) [12:08:46:939]: Executing op: ActionStart(Name=DeleteHIPSConfig,,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: ActionStart(Name=DeleteBDLs,,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: ActionStart(Name=DeleteIDEs,,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Tamper Protection\logs\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Device Control\logs\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Data Control\logs\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\logs\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: ActionStart(Name=RemoveFiles,Description=Removing files,Template=File: [1], Directory: [9])
MSI (s) (28:F8) [12:08:46:939]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:939]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FileCopy(SourceName=C:\Config.Msi\2fa0a15d.rbf,,DestName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,Attributes=40992,FileSize=126126,PerTick=0,,VerifyMedia=0,ElevateFlags=3,,,,,,,InstallMode=4194308,,,,,,,)
MSI (s) (28:F8) [12:08:46:939]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:46:955]: Verifying accessibility of file: 2fa0a15d.rbf
MSI (s) (28:F8) [12:08:46:955]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:955]: Executing op: ActionStart(Name=CheckUninstallDrivers,,)
MSI (s) (28:F8) [12:08:46:955]: Executing op: ActionStart(Name=Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A,,)
MSI (s) (28:F8) [12:08:46:955]: Executing op: ActionStart(Name=RemoveRegistryValues,Description=Removing system registry values,Template=Key: [1], Name: [2])
MSI (s) (28:F8) [12:08:46:955]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\SAVI,,BinaryType=0,,)
MSI (s) (28:F8) [12:08:46:955]: Executing op: RegRemoveKey()
MSI (s) (28:F8) [12:08:46:955]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Sophos\SAVI 3: 2
MSI (s) (28:F8) [12:08:46:955]: Executing op: ActionStart(Name=RemoveODBC,Description=Removing ODBC components,)
MSI (s) (28:F8) [12:08:46:955]: Executing op: ActionStart(Name=DeleteServices,Description=Deleting services,Template=Service: [1])
MSI (s) (28:F8) [12:08:46:955]: Executing op: ServiceInstall(Name=SAVService,DisplayName=Sophos Anti-Virus,ImagePath="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe",ServiceType=16,StartType=2,ErrorControl=1,LoadOrderGroup=PlugPlay,Dependencies=RPCSS[~][~],TagId=0,StartName=NT AUTHORITY\LocalService,Password=**********,Description=Performs threat scanning and cleanup functions.,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:955]: Executing op: ServiceInstall(Name=SAVAdminService,DisplayName=Sophos Anti-Virus status reporter,ImagePath="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe",ServiceType=16,StartType=2,ErrorControl=1,,Dependencies=[~][~],TagId=0,StartName=LocalSystem,Password=**********,Description=Provides information to Windows Security Center on whether Sophos Anti-Virus is up to date and whether on-access scanning is enabled.,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:970]: Executing op: ServiceControl(,Name=SAVAdminService,Action=1,Wait=1,)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ActionStart(Name=WaitForSAVService,,)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ActionStart(Name=DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101,,)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ActionStart(Name=DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101,,)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1])
MSI (s) (28:F8) [12:08:48:013]: Executing op: ActionStart(Name=ExecSecureObjectsRollback,,)
MSI (s) (28:F8) [12:08:48:013]: Executing op: CustomActionRollback(Action=ExecSecureObjectsRollback,ActionType=3329,Source=BinaryData,Target=ExecSecureObjectsRollback,CustomActionData=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\CreateFolderD:AI(A;;FA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;OICIIO;GA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;ID;FA;;;BA)(A;OICIIOID;GA;;;BA)(A;ID;FA;;;SY)(A;OICIIOID;GA;;;SY)(A;ID;0x1200a9;;;WD)(A;OICIIOID;GXGR;;;WD)0)
MSI (s) (28:E8) [12:08:48:013]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF94B.tmp, Entrypoint: ExecSecureObjectsRollback
MSI (s) (28:F8) [12:08:48:013]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={8B4CB61B-B986-4851-A3A8-8A29B744166F},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={266D54B1-B706-4CCD-9C0A-01C33A70F79B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={759C3654-CC88-4826-A930-E0BFB04EBD6B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={BDE220A0-D203-449C-8A3F-648E1C889744},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={B9056343-C8F6-454A-AAF5-DBA44FC0E1F5},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={A154E863-F3EA-44EA-B782-B241DECCC60B},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={62922683-34EB-46E1-8AF4-E9D59E61833E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={606B5C5C-66C9-490B-BBC3-77BFF00880E5},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={3630E612-875A-427A-8A2A-2708A9B24393},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={26BAD5C1-B5B8-4E0A-888F-A4AD4B1095AE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\difxapi.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\difxapi.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={533F61E5-9143-4664-8DD0-02E1DACF312D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={A871FD4C-242A-4F0A-B4AC-74BE34EC1BA0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={DBD323D5-758C-4D26-BD2E-E46EB73EAC11},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={15A3052C-E1D6-4ADE-9DF2-DAAF479F9A7B},KeyPath=02:\Software\Sophos\SAVService\SAVUI\plugins\WebControlPlugin.WebControlUIPlugin,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={B9CA91A9-8C87-4CCA-AA1A-73DFA321CE92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={3570C981-DCAC-4D6C-AEB0-8D4943972259},KeyPath=02:\Software\Sophos\Web Intelligence\WebControlAvailable,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={AEF7CD44-576B-4841-A0B4-58CEF190AFC5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={6C6EA6F0-CE05-4D37-8F3F-A957850E1AC6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={56B38697-86C5-4537-92A0-F2E6CEF972B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={8BD71FEA-7E62-46B4-BBB2-19D4D3706BEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={2E247D31-0A06-4AF5-ACE4-018BA1A73978},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={60BD5635-B25C-450A-9E36-EA84EDB18BDA},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={C5B8B969-E83E-41E3-820E-9E47E219644E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={CA6E867B-7D76-4BBE-B278-04AFA8C84F9E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={08A57BC6-9561-4F83-B710-A130F47DBA83},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={63138B11-92E8-4415-8064-1B9BC3A17F93},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={AE660058-42CE-44E1-8D2E-BD62AD69EE1E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={5C56F239-F279-4B01-879F-8729A44D44A0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={B43C5DBE-50BB-429B-B447-4EB82AD8554D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={5282C6CF-9946-4B05-B59F-6638E098E3DC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={01CC3BCC-55E1-4B1A-906A-FB7CE1A4629B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={524153EC-3AC1-4F92-B7F5-18415FD243CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={2B97F024-FE76-40AC-9D67-FF52C6A46570},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={F4BF2F3A-652E-4CBA-8B19-B7EE4E251C29},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={F21CB2A2-E3F4-4AF7-AC06-A1A66ACA0735},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={8A03894B-68DA-452F-A18A-712256FA8A85},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={262EB741-DEA1-43F2-BA2D-9DE0661F9C8C},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={189F69DA-324A-4F9A-9CDE-EF79A930D2AD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={E9D16629-7181-425B-83DC-0FDF61D63E11},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={11B3AA50-1BDE-42AF-A841-1C249A848A31},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={FCEAE5B9-2AE7-47F8-91A5-D21203F761F0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={09FFDB10-614F-4899-82E8-85A7D8BFA32A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={E5EB5509-3611-458A-BE68-3477BF3D96CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={9BB8ADD9-6613-46AC-9BD3-24B31A9F1594},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={E54C4F8D-A952-4E5C-B973-76D109A0E0EC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={719B5EDD-B014-4686-AB60-A4474B84240D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={5E31220B-69F2-4AD7-BD59-69C7F695A17C},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={ECB3B148-F965-49B5-A338-857D09CBC0B3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={AE86B1D3-36AD-45E7-B7A6-301DE878C695},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={57056C41-556E-4FFA-A53F-31BB318C2243},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={B9937941-AA62-41C9-BCE7-3DBE63781A79},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={ECE39B6C-338A-465E-A941-158F7D2E5795},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={05AEBC59-942F-43EE-929D-21174A215441},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={9221364E-2674-41A1-B3AF-A7BEBBE7567D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={9315FDA5-16DD-4475-84D6-277B8FD87283},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={7B2E98BC-F11A-4210-A219-05880ABC3333},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={823855BF-3AC5-4C0C-87E6-AD864B361AAF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={FBF7F8C3-003B-40EB-B316-260E7D5DD274},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={63B09FF1-4A74-4963-B2D9-182293950F88},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={9BC4D741-ADF6-496E-9DA7-8ADEDFF50252},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={E25426F9-3251-4E63-A4A4-06BA9A25ABDD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={59C347AA-B20B-4146-B11B-E570BFDF7D81},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={C45AAE65-B109-4933-AA74-817CFBE6233A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={A4BACF9D-BF67-4909-AC27-8627DEA42367},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={65937A4F-1784-4285-8C24-D06DA20D3AF0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={2BDF5C8A-E036-4C5F-9275-9927CA13F3C6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={B1C9846E-5F65-40D5-BA10-79055269A722},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={BFCC0446-6C34-413E-9611-520B993B04B1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={D36CD500-4FBE-4943-90EC-D7646AA41519},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={3BF07D0A-37CC-4FA8-81DA-D351E301276A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={F85BB204-89AC-441C-8589-F6F0D7F329B4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={3276B786-D941-4ABD-810D-5AE5E3106F02},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={DC99F7C0-7CFB-413C-8E6F-D16EE6F7AB8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={F5D90A95-0F03-41CF-BEA3-247569C57BD3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={52411750-073E-47D7-BB97-8B404AF42B76},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={7ED7F039-CC97-4CF5-8CCB-8CB15DF14759},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={FE613E3D-0469-40F8-9A0F-635D16097928},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={A94755DD-6057-4746-8C39-B06D97E39D54},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={0A8056D0-75A3-466F-95CE-FDE62CFF9C1A},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={39F322E9-713E-417C-8380-2A8CBEB5E46C},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={3D564A97-4F0A-44FD-97D1-CBF283B05453},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={BC39E663-65CB-43D3-880E-BAB2744A9597},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={238C4CC5-16A9-4A25-B94F-C07F9692D5E2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={A5486A6B-FF88-41D8-82F3-B46ED9697255},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={C9B04594-F409-4FA4-B2BC-086361DBC58D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={8F31C598-9FCF-46DD-92CE-BF02EAAF7CC8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={36E7E558-86C8-4D1B-8CA8-2EEF33963A1E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={341B1BFF-FEAD-4104-A29F-E9363B7517BF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={F74F470D-4B17-4901-9B74-60A3838B7457},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={C8CFF022-47AD-4EBF-A615-683844308F40},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={691C4A89-DB0D-4C7C-B684-ACAA9F794FAD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={F403AD90-FEC7-4036-9C1A-BB012A8E790E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={FAEE7082-8088-4157-B163-68605546E3D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={CB2061C6-BCA4-431E-8768-637BA7B6A021},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={494298F4-4204-4E18-BA16-8152108CE3DD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={274E0945-DD13-4FB3-8FED-A4865A87E518},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={7D755E63-DF4E-4F44-A3CC-D43CA33ABC53},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={F2814579-3850-4A1C-9312-5F0644872616},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={9D8FDDD5-6302-4133-A040-27AE6FCA4A50},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={09743465-1197-4046-87F7-3F24D3FD7CEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={F6C47B05-6049-4F2B-94C5-28C6F9CC00AB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={A54E5967-C145-461E-9452-F701F47D3DE2},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={B4C73573-F81E-4459-80C7-FBC3FA74C1D5},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={4BCA7B9E-D378-4830-B7EE-62B8EDD570C5},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={556C7464-36A2-464B-9250-2F924DA27FA7},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={9D161347-EFC6-46A9-9AEC-97722B0C8636},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={29262C23-36F0-4117-9406-A551A1CF11E4},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={A46E98B3-190F-4296-871A-431FB198DB58},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={175C5C85-0E0E-44BF-8F48-CD96A4EBBA5B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={E05D9609-9A70-4DEF-A8D3-5B884BEA1139},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={72649A5C-570A-467A-96A8-D77FAB4A16ED},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={6368E4D7-C225-4D2B-AA09-75E27732DDD4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={9EED603A-240C-44CD-9136-F3703168D6A8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={C5E5F1CE-2724-447B-A7E2-3B4B4BE9E801},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={B46DA52C-6057-4314-B5BE-670483AB08D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={1601B2AC-3E23-4EA6-861E-17F52F42AAA4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={C0E2EF20-B6D0-44A7-88AD-DAFAA4A325BF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={E3FAD286-FF50-4A29-93F2-FA93F9E5E897},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={49A894EE-FF4F-4862-B9B8-A4EBBEA0A77E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={B763A398-206E-43BF-9810-E482FC158A74},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={A891B002-2209-413D-896C-A999F157D57A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={3CFF4AE8-C6ED-41A6-9AC0-6E0B51B84C41},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={CD46A165-DB78-470B-B062-D973ED80944B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={D2BB3772-EC58-4939-8333-E89A6E780F18},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={68FF2A0F-9051-42F8-9394-384797B1AAD2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={484E3E44-1A83-4137-BAA1-B984E5636086},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={F4E436FD-FE28-4278-86D5-E3412859F5E5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={A153DC07-D119-4900-B5D1-F671EC25C7EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={177335D9-9D47-4E12-A841-7884DB0B65FE},KeyPath=C:\ProgramData\Sophos\Sophos Tamper Protection\logs\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={B7EF36A2-B450-43CD-9919-427EAE165995},KeyPath=C:\ProgramData\Sophos\Sophos Device Control\logs\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={63284722-D09A-447D-861D-CFEBE89D28F4},KeyPath=C:\ProgramData\Sophos\Sophos Data Control\logs\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={6EE91E7E-1391-4C83-838D-8EE0407A2C5E},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={4AEE9519-9D9B-44CE-9852-434F0BB544E3},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={BC7402A1-8EC2-4834-BDFF-7D991375467D},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={A4D31E85-0B09-4E42-96C3-DE5DE60EB97F},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\logs\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={034A5FFF-0A1F-4035-920F-73803E07C209},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={CCFFD125-B6F4-4E85-B42F-EEDE0E647001},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={CCC8000A-8A29-4FFE-8FE8-185FFE19444C},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ActionStart(Name=RunErrorScript,,)
MSI (s) (28:F8) [12:08:48:091]: Executing op: CustomActionRollback(Action=RunErrorScript,ActionType=1345,Source=BinaryData,Target=RunErrorScripts,CustomActionData="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49")
MSI (s) (28:CC) [12:08:48:107]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF99A.tmp, Entrypoint: RunErrorScripts
MSI (s) (28:F8) [12:08:48:107]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,)
MSI (s) (28:F8) [12:08:48:107]: Executing op: ActionStart(Name=RestoreMovedFiles,,)
MSI (s) (28:F8) [12:08:48:107]: Executing op: CustomActionRollback(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:28) [12:08:48:122]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF9AB.tmp, Entrypoint: RestoreMovedFiles
MSI (s) (28:F8) [12:08:48:122]: Executing op: ActionStart(Name=SetUpdateFailed,,)
MSI (s) (28:F8) [12:08:48:122]: Executing op: CustomActionRollback(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,)
MSI (s) (28:24) [12:08:48:138]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF9BB.tmp, Entrypoint: SetUpdateFailed
MSI (s) (28:F8) [12:08:48:153]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (28:F8) [12:08:48:153]: Error in rollback skipped. Return: 5
MSI (s) (28:F8) [12:08:48:153]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:48:153]: No System Restore sequence number for this installation.
MSI (s) (28:F8) [12:08:48:153]: Unlocking Server
MSI (s) (28:F8) [12:08:48:169]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 12:08:48: INSTALL. Return value 3.
Property(S): DiskPrompt = [1]
Property(S): CONFIG = C:\ProgramData\Sophos\Sophos Anti-Virus\Config\
Property(S): INFECTED = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\
Property(S): LOW = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\
Property(S): LOGS = C:\ProgramData\Sophos\Sophos Anti-Virus\logs\
Property(S): SAFESTORE = C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\
Property(S): TEMP = C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\
Property(S): CACHE = C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\
Property(S): LOGS1 = C:\ProgramData\Sophos\Sophos Data Control\logs\
Property(S): LOGS2 = C:\ProgramData\Sophos\Sophos Device Control\logs\
Property(S): LOGS3 = C:\ProgramData\Sophos\Sophos Tamper Protection\logs\
Property(S): INSTALLDIR = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): MsiAMD64 = 6
Property(S): Microsoft.VC90.ATL = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\
Property(S): Microsoft.VC90.CRT = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\
Property(S): INSTALLDIR_WIN32 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): INSTALLDIR_X64 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): VersionNT64 = 603
Property(S): BootDriverStartup = 0
Property(S): CheckSNMPDLLPresence = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): ConfigureSAV = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""0"
Property(S): CopyOtherFiles = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"
Property(S): CopySAVSyncFile = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"
Property(S): CreateSavAdapterDllRegistryEntry = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): CreateUserGroups = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): DeleteBDLs = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DeleteDriverKeys = 0
Property(S): DeleteHIPSConfig = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DeleteIDEs = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DeleteNonEngineFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DeleteOtherFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DisablePUADetection = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): DisableSxlLookups = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): DisableWebProtection = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): ForceDeleteFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): ForceDeleteUserPlugin = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): ALLUSERS = 2
Property(S): System64Folder = C:\Windows\SysWOW64\
Property(S): InstallBootDriverVista = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\wxp_i386\SOPHOSBOOTDRIVER.INF
Property(S): InstallBootDriverWin7 = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_i386\SOPHOSBOOTDRIVER.INF
Property(S): SystemFolder = C:\Windows\SysWOW64\
Property(S): InstallClassFilterVista = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\wxp_i386\sdcfilter.inf
Property(S): InstallClassFilterWin7 = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\win7_i386\sdcfilter.inf
Property(S): InstallDeviceControl = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"
Property(S): InstallDriverFilesVista = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\wlh_i386\SAVONACCESSDRIV.INF
Property(S): InstallDriverFilesWin7 = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\win7_i386\SAVONACCESSDRIV.INF
Property(S): InstallKMSDriver = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\kms\wxp_i386\skmscan.inf
Property(S): InstallKMSDriverWin7 = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\kms\win7_i386\skmscan.inf
Property(S): InstallUnsignedBootDriver = "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"
Property(S): InstallUnsignedDrivers = "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"
Property(S): MoveLockedFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\|
Property(S): RegisterBufferOverflowProtection = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RemoveFilesOnUpgrade = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RemoveSAVI = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RestoreFirstInstallTime = 0
Property(S): RestoreMovedFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackBootDriverVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF
Property(S): RollbackClassFilterVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf
Property(S): RollbackDriverFilesVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF
Property(S): RollbackForceDeleteFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackForceDeleteUserPlugin = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackKMSDriverVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\skmscan.inf
Property(S): RollbackOtherFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackSavi = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackUpdateSavAdapterDll = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackUpdateDesktopMessaging = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): UpdateDesktopMessaging = ;10.7.2.49;
Property(S): RunAfterScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"
Property(S): RunErrorScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"
Property(S): RunPreLaunchScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"
Property(S): SetAdminGroupDescription = SophosAdministrators may run Sophos Anti-Virus with complete access
Property(S): ALLUSERSPROFILE = C:\ProgramData\
Property(S): SetFolderPermissions = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): UPDATEDRIVERS = 0
Property(S): TARGETDIR = C:\
Property(S): SetOnAccessGroupDescription = Contains accounts used by Sophos Anti-Virus when it performs threat scanning and cleanup functions
Property(S): SetPowerGroupDescription = SophosPowerUsers may run Sophos Anti-Virus with the access that SophosUsers have, plus greater access to cleanup
Property(S): RollBackInstallDeviceControl = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): StartDriverServices = WIN7_AMD64
Property(S): UninstallBootDriverOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF
Property(S): UninstallBootDriver = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF
Property(S): UninstallClassFilterVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf
Property(S): UninstallDeviceControl = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"
Property(S): UninstallDriverFilesOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF
Property(S): UninstallDriverFilesVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF
Property(S): UninstallKMSDriverOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF
Property(S): UninstallKMSDriver = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF
Property(S): UnregisterBufferOverflowProtection = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): UpdateSXLServerList = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"
Property(S): UpdateSAVI = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"
Property(S): SetUserGroupDescription = SophosUsers may run Sophos Anti-Virus with limited access to scanning configuration and cleanup
Property(S): UpdateSavAdapterDll = ;10.7.2.49;
Property(S): USERPROFILE = C:\Users\Default\
Property(S): EventType = BEGIN_SYSTEM_CHANGE
Property(S): SetupSspUserAccount = NT SERVICE\SAVService
Property(S): SetupSspUserAccountRollback = NT SERVICE\SAVService
Property(S): AddSIPSSubmitterUserAccount = NT SERVICE\SAVService
Property(S): AddSIPSSubmitterUserAccountRollback = NT SERVICE\SAVService
Property(S): ARPINSTALLLOCATION = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): SAVSERVICEUSER = NT SERVICE\SavService
Property(S): ExecSecureObjects = C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\CreateFolderNT SERVICE\SavService268435456MACHINE\SOFTWARE\Sophos\SAVService\TelemetryRegistryNT SERVICE\SavService268435456MACHINE\SOFTWARE\Sophos\SAVService\ThreatLifetimeRegistryNT SERVICE\SavService268435456
Property(S): ExecSecureObjectsRollback = C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\CreateFolderD:AI(A;;FA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;OICIIO;GA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;ID;FA;;;BA)(A;OICIIOID;GA;;;BA)(A;ID;FA;;;SY)(A;OICIIOID;GA;;;SY)(A;ID;0x1200a9;;;WD)(A;OICIIOID;GXGR;;;WD)0
Property(S): RegisterEventManifest = "wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"
Property(S): RollbackRegisterEventManifest = "wevtutil.exe" um "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"
Property(S): ExecXmlFile = 10C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@messageFileName]messageFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll71/*/*/*/*[@parameterFileName]parameterFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll10C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@resourceFileName]resourceFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): CommonFiles64Folder = C:\Program Files (x86)\Common Files\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FavoritesFolder = C:\Windows\SysWOW64\config\systemprofile\Favorites\
Property(S): FontsFolder = C:\Windows\Fonts\
Property(S): GlobalAssemblyCache = C:\
Property(S): LocalAppDataFolder = C:\Windows\SysWOW64\config\systemprofile\AppData\Local\
Property(S): PrimaryVolumePath = C:\
Property(S): ProgramFiles64Folder = C:\Program Files (x86)\
Property(S): SendToFolder = C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): System16Folder = C:\
Property(S): TempFolder = C:\Windows\TEMP\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): WindowsFolder = C:\Windows\
Property(S): WindowsVolume = C:\
Property(S): RESOURCES = C:\ProgramData\Sophos\Sophos Anti-Virus\
Property(S): NEW_DIRECTORY3 = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
Property(S): RES = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
Property(S): NEW_DIRECTORY1 = C:\ProgramData\Sophos\
Property(S): SOPHOS_DATA_CONTROL = C:\ProgramData\Sophos\Sophos Data Control\
Property(S): SOPHOS_DEVICE_CONTROL = C:\ProgramData\Sophos\Sophos Device Control\
Property(S): SOPHOS_TAMPER_PROTECTION = C:\ProgramData\Sophos\Sophos Tamper Protection\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): SOPHOS_ANTI_VIRUS = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): SOPHOS = C:\Program Files (x86)\Sophos\
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): NEW_DIRECTORY2 = C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): newfolder2 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\
Property(S): newfolder1 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
Property(S): VersionNT = 603
Property(S): AdminUser = 1
Property(S): Manufacturer = Sophos Limited
Property(S): ProductCode = {65323B2D-83D4-470D-A209-D769DB30BBDB}
Property(S): ProductLanguage = 1033
Property(S): ProductName = Sophos Anti-Virus
Property(S): ProductVersion = 10.7.2.49
Property(S): UpgradeCode = {597B239E-3032-491A-A322-817737925E8A}
Property(S): _IsMaintenance = Change
Property(S): _IsSetupTypeMin = Typical
Property(S): AFTERREBOOT = 0
Property(S): AgreeToLicense = No
Property(S): ApplicationUsers = AllUsers
Property(S): APPLYCLASSICCONFIG = 0
Property(S): ARPCOMMENTS = Protects your computer and network from threats
Property(S): ARPCONTACT = Sophos Technical Support
Property(S): ARPHELPLINK = http://www.sophos.com/support
Property(S): ARPHELPTELEPHONE =
Property(S): ARPNOMODIFY = 1
Property(S): ARPNOREPAIR = 1
Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe
Property(S): ARPURLINFOABOUT = http://www.sophos.com
Property(S): ARPURLUPDATEINFO = www.sophos.com/.../updates
Property(S): BOOTDRIVERSIGNED = 1
Property(S): CHECKFORCOMPETITORS = 1
Property(S): CHECKFORSCF = 1
Property(S): CLASSFILTERPRESENT = 0
Property(S): CopyBDLs = 0
Property(S): CopyIDEs = 0
Property(S): DATACONTROL = 1
Property(S): DefaultUIFont = Tahoma8
Property(S): DEVICECONTROL = 1
Property(S): DialogCaption = Sophos Installer
Property(S): DISABLEONACCESS = 0
Property(S): Display_IsBitmapDlg = 1
Property(S): DisplayNameCustom = Custom
Property(S): DisplayNameMinimal = Minimal
Property(S): DisplayNameTypical = Typical
Property(S): DRIVERVERSION = WIN7_AMD64
Property(S): FIRST_INSTALL_DATE = 0
Property(S): IDEONLY = 0
Property(S): InstallChoice = AR
Property(S): INSTALLLEVEL = 100
Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1]
Property(S): IS_PROGMSG_XML_COSTING = Costing XML files...
Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s...
Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes...
Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s...
Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes...
Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s...
Property(S): IS_SQLSERVER_AUTHENTICATION = 0
Property(S): IS_SQLSERVER_USERNAME = sa
Property(S): ISReleaseFlags = SAV
Property(S): ISVROOT_PORT_NO = 0
Property(S): MAJORUPGRADE = 0
Property(S): MANAGED = 1
Property(S): MSIRESTARTMANAGERCONTROL = Disable
Property(S): NEEDREBOOT = 0
Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@
Property(S): PRODUCTTYPE = 0
Property(S): PROCESSOR_NX_ENABLED = 1
Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s
Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools...
Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s
Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories...
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions...
Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories...
Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool
Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools...
Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d
Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s
Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions...
Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools...
Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes...
Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions...
Property(S): ProgressType0 = install
Property(S): ProgressType1 = Installing
Property(S): ProgressType2 = installed
Property(S): ProgressType3 = installs
Property(S): RebootYesNo = Yes
Property(S): Registration = No
Property(S): ReinstallModeText = omus
Property(S): SAVIONLY = 0
Property(S): SCRIPTDIR = [SOURCEDIR]
Property(S): SequenceNumber = 0
Property(S): SetupType = Typical
Property(S): UITYPE = full
Property(S): UNINSTALLBOOTDRIVERS = 1
Property(S): UNINSTALLCLASSFILTER = 1
Property(S): UNINSTALLDRIVERS = 1
Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus.
Property(S): UNINSTALLKMSDRIVERS = 1
Property(S): UPDATEBOOTDRIVERS = 1
Property(S): UPDATECLASSFILTER = 1
Property(S): VIRUSDATAUPDATE = 0
Property(S): SecureCustomProperties = EXCLUDEDPROCESSES;INSTALLINGVERSION;MAJORUPGRADE;WEBCONTROL
Property(S): WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\
Property(S): SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll
Property(S): SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll
Property(S): SWCSERVICEFILEEXISTS.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\
Property(S): SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
Property(S): SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
Property(S): DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe
Property(S): DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat
Property(S): CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe
Property(S): CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe
Property(S): CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat
Property(S): SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = swi_service
Property(S): SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /registerService
Property(S): SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe" -r "C:\Windows\TEMP\SwiRebootRequired.txt" /u "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf"
Property(S): SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe" -r "C:\Windows\TEMP\SwiRebootRequired.txt" "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf"
Property(S): SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = swi_filter
Property(S): SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe" -i
Property(S): REBOOTREQUIREDFILE.11DACB83_28A7_4FA6_AF5B_C006E340C101 = SwiRebootRequired.txt
Property(S): MsiLogFileLocation = C:\Windows\TEMP\Sophos Anti-Virus Major Install Log_170530_110825.txt
Property(S): PackageCode = {B11B63E0-A3EB-478A-AF04-AAE0B577AEB2}
Property(S): ProductState = -1
Property(S): PackagecodeChanging = 1
Property(S): REBOOT = ReallySuppress
Property(S): UPDATEKMSDRIVERS = 1
Property(S): RECOVERYMODE = 0
Property(S): WEBCONTROL = 1
Property(S): CURRENTDIRECTORY = C:\Windows\system32
Property(S): CLIENTUILEVEL = 3
Property(S): MSICLIENTUSESEXTERNALUI = 1
Property(S): CLIENTPROCESSID = 5124
Property(S): MsiSystemRebootPending = 1
Property(S): VersionDatabase = 200
Property(S): VersionMsi = 5.00
Property(S): WindowsBuild = 9600
Property(S): ServicePackLevel = 0
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 2
Property(S): RemoteAdminTS = 1
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): AppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\
Property(S): NetHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Windows\system32\config\systemprofile\Documents\
Property(S): PrintHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): MyPicturesFolder = C:\Windows\system32\config\systemprofile\Pictures\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): Msix64 = 6
Property(S): Intel = 6
Property(S): PhysicalMemory = 3069
Property(S): VirtualMemory = 2337
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = SYSTEM
Property(S): UserSID = S-1-5-18
Property(S): UserLanguageID = 2057
Property(S): ComputerName = SGMACCP84004DC
Property(S): SystemLanguageID = 2057
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 23
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 12:08:48
Property(S): Date = 30/05/2017
Property(S): MsiNetAssemblySupport = 4.0.30319.33440
Property(S): MsiWin32AssemblySupport = 6.3.9600.17415
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): USERNAME = Windows User
Property(S): DATABASE = C:\Windows\Installer\2fa0a15a.msi
Property(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
Property(S): UILevel = 2
Property(S): ACTION = INSTALL
Property(S): ROOTDRIVE = C:\
Property(S): CostingComplete = 1
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
Property(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
Property(S): SourcedirProduct = {65323B2D-83D4-470D-A209-D769DB30BBDB}
Property(S): ProductToBeRegistered = 1
MSI (s) (28:F8) [12:08:48:231]: Note: 1: 1708
MSI (s) (28:F8) [12:08:48:231]: Product: Sophos Anti-Virus -- Installation operation failed.

MSI (s) (28:F8) [12:08:48:231]: Windows Installer installed the product. Product Name: Sophos Anti-Virus. Product Version: 10.7.2.49. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1603.

MSI (s) (28:F8) [12:08:48:231]: Deferring clean up of packages/files, if any exist
MSI (s) (28:F8) [12:08:48:231]: MainEngineThread is returning 1603
MSI (s) (28:58) [12:08:48:231]: No System Restore sequence number for this installation.
=== Logging stopped: 30/05/2017 12:08:48 ===
MSI (s) (28:58) [12:08:48:247]: User policy value 'DisableRollback' is 0
MSI (s) (28:58) [12:08:48:247]: Machine policy value 'DisableRollback' is 0
MSI (s) (28:58) [12:08:48:247]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (28:58) [12:08:48:247]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (28:58) [12:08:48:247]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (28:58) [12:08:48:247]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (28:58) [12:08:48:247]: Destroying RemoteAPI object.
MSI (s) (28:20) [12:08:48:247]: Custom Action Manager thread ending.
MSI (c) (04:D0) [12:08:48:247]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (04:D0) [12:08:48:247]: MainEngineThread is returning 1603
=== Verbose logging stopped: 30/05/2017 12:08:48 ===

2017-05-30 12:08:48 ERROR: Installation failed
2017-05-30 12:08:48 Info: SetupPlugin: Unable to open Application registry key to get Install Path.
2017-05-30 12:08:48 ERROR: Failed to get current install location to register with tamper protection. Error 0x80070002
Cancel
Vote Up 0 Vote Down

Cancel
+1 QC over 7 years ago in reply to TomHilton

Hello Tom,

guess it's trying to create the Sophos Groups - and naturally fails (details should be in the Sophos Anti-Virus Major CustomActions Log with label CreateUserGroups). Are there any of the Sophos Groups in AD? Is Sophos already installed on a writable DC (in this case they should already exist)? If not all groups are there please create the missing ones as domain local groups.

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 TomHilton over 7 years ago in reply to QC

Creating the groups on AD first did the trick thanks Christian
Cancel
Vote Up 0 Vote Down

Cancel