Hi,
Has anyone had any luck doing this? I know the KB on Sophos advises to create a local account but as far as i'm aware you can't on RODC?
Thanks
Tom
This thread was automatically locked due to age.
Hi,
The article is KB's are 43659 & 48910, We are getting the error 3051 during the install. I have scoured the net to find an option to create local accounts but must articles say it isn't technically possible on a RODC which makes sense since its read only and there is no local database for accounts?
Thanks
Tom
Hi,
The update now downloads the installation files but it gets stuck on Installing Package 1 of 1 - Starting Sophos Anti-Virus for Windows Setup
2017-05-30 12:08:24 PROCESSOR_ARCHITECTURE environment variable is: AMD64
2017-05-30 12:08:24 Info: Logging started: installing/upgrading Sophos Anti-Virus
2017-05-30 12:08:24 Info: InstallFromPath is: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
2017-05-30 12:08:24 Info: InstallToPath is:
2017-05-30 12:08:24 Info: SAV is not installed. Installing to {InstallToPath}
2017-05-30 12:08:24 INFO: Checking the validity of the VDL manifest file.
2017-05-30 12:08:25 INFO: The manifest file has been successfully validated.
2017-05-30 12:08:25 INFO: Checking the validity of the AppFeed manifest file.
2017-05-30 12:08:25 INFO: The manifest file has been successfully validated.
2017-05-30 12:08:25 Info: Managed install (from SAU)
2017-05-30 12:08:25 Check for UI changes
2017-05-30 12:08:25 Unable to QI IProductConfig
2017-05-30 12:08:25 Info: productType: 0
2017-05-30 12:08:25 Info: Performing major update of Sophos Anti-Virus using msi.
2017-05-30 12:08:25 Info: Update is signalled.
2017-05-30 12:08:25 Info: Added SAVService to ServicesList.
2017-05-30 12:08:25 Info: Added SAVAdminService to ServicesList.
2017-05-30 12:08:25 Info: Added Sophos Device Control Service to ServicesList.
2017-05-30 12:08:25 Info: Added SophosBootDriver to ServicesList.
2017-05-30 12:08:25 Info: Added swi_service to ServicesList.
2017-05-30 12:08:25 Info: Added swi_filter to ServicesList.
2017-05-30 12:08:25 Info: Added Sophos Web Control Service to ServicesList.
2017-05-30 12:08:25 Info: Added SAVOnAccess to ServicesList.
2017-05-30 12:08:25 Info: component SAV is not registered - skipping.
2017-05-30 12:08:25 Info: component SDC is not registered - skipping.
2017-05-30 12:08:25 Info: component SCS is not registered - skipping.
2017-05-30 12:08:25 Info: component SWI is not registered - skipping.
2017-05-30 12:08:25 Info: component SWC is not registered - skipping.
2017-05-30 12:08:25 UpdateVersionInfo(), SAU can't supply version info - using msi version
2017-05-30 12:08:25 Info: PutSetupOptionsToRegistry
2017-05-30 12:08:25 Info: Check MSXML
2017-05-30 12:08:25 Info: Check boot driver and kms driver
2017-05-30 12:08:25 Info: no existing installation of Sophos Anti-Virus was found
2017-05-30 12:08:25 Info: Restart required for Data Control (clean managed full install)
2017-05-30 12:08:25 Info: Transform file returned:
2017-05-30 12:08:25 Info: SAV Setup plugin: running MsiInstallProduct (C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi, INSTALLDIR="" REBOOT=ReallySuppress UITYPE=full PRODUCTTYPE=0 UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1)
=== Verbose logging started: 30/05/2017 12:08:25 Build type: SHIP UNICODE 5.00.9600.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe ===
MSI (c) (04:D0) [12:08:25:479]: Resetting cached policy values
MSI (c) (04:D0) [12:08:25:479]: Machine policy value 'Debug' is 0
MSI (c) (04:D0) [12:08:25:479]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
******* Action:
******* CommandLine: **********
MSI (c) (04:D0) [12:08:25:479]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (04:D0) [12:08:25:479]: Grabbed execution mutex.
MSI (c) (04:D0) [12:08:25:510]: Cloaking enabled.
MSI (c) (04:D0) [12:08:25:510]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (04:D0) [12:08:25:510]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (28:58) [12:08:25:510]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
MSI (s) (28:58) [12:08:25:510]: Grabbed execution mutex.
MSI (s) (28:F8) [12:08:25:510]: Resetting cached policy values
MSI (s) (28:F8) [12:08:25:510]: Machine policy value 'Debug' is 0
MSI (s) (28:F8) [12:08:25:510]: ******* RunEngine:
******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
******* Action:
******* CommandLine: **********
MSI (s) (28:F8) [12:08:25:510]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (28:F8) [12:08:25:510]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (28:F8) [12:08:25:526]: SRSetRestorePoint skipped for this transaction.
MSI (s) (28:F8) [12:08:25:526]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (s) (28:F8) [12:08:25:526]: File will have security applied from OpCode.
MSI (s) (28:F8) [12:08:25:526]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi' against software restriction policy
MSI (s) (28:F8) [12:08:25:526]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi has a digital signature
MSI (s) (28:F8) [12:08:25:526]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi is permitted to run because the user token authorizes execution (system or service token).
MSI (s) (28:F8) [12:08:25:526]: MSCOREE not loaded loading copy from system32
MSI (s) (28:F8) [12:08:25:526]: End dialog not enabled
MSI (s) (28:F8) [12:08:25:526]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
MSI (s) (28:F8) [12:08:25:526]: Package we're running from ==> C:\Windows\Installer\2fa0a15a.msi
MSI (s) (28:F8) [12:08:25:542]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (28:F8) [12:08:25:542]: APPCOMPAT: looking for appcompat database entry with ProductCode '{65323B2D-83D4-470D-A209-D769DB30BBDB}'.
MSI (s) (28:F8) [12:08:25:542]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'TransformsSecure' is 1
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'DisablePatch' is 0
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (28:F8) [12:08:25:542]: APPCOMPAT: looking for appcompat database entry with ProductCode '{65323B2D-83D4-470D-A209-D769DB30BBDB}'.
MSI (s) (28:F8) [12:08:25:542]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (28:F8) [12:08:25:542]: Transforms are not secure.
MSI (s) (28:F8) [12:08:25:542]: Note: 1: 2205 2: 3: Control
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos Anti-Virus Major Install Log_170530_110825.txt'.
MSI (s) (28:F8) [12:08:25:542]: Command Line: INSTALLDIR= REBOOT=ReallySuppress UITYPE=full PRODUCTTYPE=0 UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1 CURRENTDIRECTORY=C:\Windows\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=5124
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{B11B63E0-A3EB-478A-AF04-AAE0B577AEB2}'.
MSI (s) (28:F8) [12:08:25:542]: Product Code passed to Engine.Initialize: ''
MSI (s) (28:F8) [12:08:25:542]: Product Code from property table before transforms: '{65323B2D-83D4-470D-A209-D769DB30BBDB}'
MSI (s) (28:F8) [12:08:25:542]: Product Code from property table after transforms: '{65323B2D-83D4-470D-A209-D769DB30BBDB}'
MSI (s) (28:F8) [12:08:25:542]: Product not registered: beginning first-time install
MSI (s) (28:F8) [12:08:25:542]: Product {65323B2D-83D4-470D-A209-D769DB30BBDB} is not managed.
MSI (s) (28:F8) [12:08:25:542]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (28:F8) [12:08:25:542]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (28:F8) [12:08:25:542]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (28:F8) [12:08:25:542]: Adding new sources is allowed.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:542]: Package name extracted from package path: 'Sophos Anti-Virus.msi'
MSI (s) (28:F8) [12:08:25:542]: Package to be registered: 'Sophos Anti-Virus.msi'
MSI (s) (28:F8) [12:08:25:542]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'DisableMsi' is 1
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (28:F8) [12:08:25:542]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (28:F8) [12:08:25:542]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (28:F8) [12:08:25:542]: Running product '{65323B2D-83D4-470D-A209-D769DB30BBDB}' with elevated privileges: Product is assigned.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Modifying UPDATECLASSFILTER property. Its current value is '0'. Its new value: '1'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding UPDATEKMSDRIVERS property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding RECOVERYMODE property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Modifying DATACONTROL property. Its current value is '0'. Its new value: '1'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Modifying DEVICECONTROL property. Its current value is '0'. Its new value: '1'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding WEBCONTROL property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Windows\system32'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '5124'.
MSI (s) (28:F8) [12:08:25:542]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (28:F8) [12:08:25:542]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:542]: TRANSFORMS property is now:
MSI (s) (28:F8) [12:08:25:542]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (s) (28:F8) [12:08:25:542]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming
MSI (s) (28:F8) [12:08:25:542]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites
MSI (s) (28:F8) [12:08:25:542]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (28:F8) [12:08:25:542]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents
MSI (s) (28:F8) [12:08:25:542]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (28:F8) [12:08:25:542]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (28:F8) [12:08:25:557]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (s) (28:F8) [12:08:25:557]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (28:F8) [12:08:25:557]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (28:F8) [12:08:25:557]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:557]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (28:F8) [12:08:25:557]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (28:F8) [12:08:25:557]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Windows User'.
MSI (s) (28:F8) [12:08:25:557]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (28:F8) [12:08:25:557]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\2fa0a15a.msi'.
MSI (s) (28:F8) [12:08:25:557]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi'.
MSI (s) (28:F8) [12:08:25:557]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (28:F8) [12:08:25:557]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
MSI (s) (28:F8) [12:08:25:557]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (28:F8) [12:08:25:557]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (28:F8) [12:08:25:557]: Machine policy value 'DisableRollback' is 0
MSI (s) (28:F8) [12:08:25:557]: User policy value 'DisableRollback' is 0
MSI (s) (28:F8) [12:08:25:557]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
=== Logging started: 30/05/2017 12:08:25 ===
MSI (s) (28:F8) [12:08:25:557]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (28:F8) [12:08:25:557]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (28:F8) [12:08:25:573]: Doing action: INSTALL
Action start 12:08:25: INSTALL.
MSI (s) (28:F8) [12:08:25:573]: Running ExecuteSequence
MSI (s) (28:F8) [12:08:25:573]: Doing action: AppSearch
Action start 12:08:25: AppSearch.
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SWCSERVICEFILEEXISTS.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:25:573]: Doing action: LaunchConditions
Action ended 12:08:25: AppSearch. Return value 1.
Action start 12:08:25: LaunchConditions.
MSI (s) (28:F8) [12:08:25:573]: Skipping action: CheckUserIsSophosAdmin (condition is false)
MSI (s) (28:F8) [12:08:25:573]: Skipping action: TP_CheckRemoveAllowed (condition is false)
MSI (s) (28:F8) [12:08:25:573]: Doing action: FindRelatedProducts
Action ended 12:08:25: LaunchConditions. Return value 1.
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Upgrade
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2228 2: 3: Upgrade 4: SELECT `UpgradeCode`,`VersionMin`,`VersionMax`,`Language`,`Attributes`,`ActionProperty` FROM `Upgrade`
Action start 12:08:25: FindRelatedProducts.
MSI (s) (28:F8) [12:08:25:573]: Skipping action: CCPSearch (condition is false)
MSI (s) (28:F8) [12:08:25:573]: Skipping action: IsSafeToDowngrade (condition is false)
MSI (s) (28:F8) [12:08:25:573]: Skipping action: RMCCPSearch (condition is false)
MSI (s) (28:F8) [12:08:25:573]: Doing action: ValidateProductID
Action ended 12:08:25: FindRelatedProducts. Return value 0.
Action start 12:08:25: ValidateProductID.
MSI (s) (28:F8) [12:08:25:573]: Doing action: setUserProfileNT
Action ended 12:08:25: ValidateProductID. Return value 1.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Users\Default'.
Action start 12:08:25: setUserProfileNT.
MSI (s) (28:F8) [12:08:25:573]: Skipping action: SetAllUsersProfileNT (condition is false)
MSI (s) (28:F8) [12:08:25:573]: Doing action: setAllUsersProfile2K
Action ended 12:08:25: setUserProfileNT. Return value 1.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\ProgramData'.
Action start 12:08:25: setAllUsersProfile2K.
MSI (s) (28:F8) [12:08:25:573]: Doing action: CostInitialize
Action ended 12:08:25: setAllUsersProfile2K. Return value 1.
MSI (s) (28:F8) [12:08:25:573]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: __MsiPatchFileList
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId`
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Patch
Action start 12:08:25: CostInitialize.
MSI (s) (28:F8) [12:08:25:573]: Doing action: FileCost
Action ended 12:08:25: CostInitialize. Return value 1.
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Class
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Extension
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: TypeLib
Action start 12:08:25: FileCost.
MSI (s) (28:F8) [12:08:25:573]: Doing action: SetMFC71
Action ended 12:08:25: FileCost. Return value 1.
Action start 12:08:25: SetMFC71.
MSI (s) (28:F8) [12:08:25:573]: Doing action: IsolateComponents
Action ended 12:08:25: SetMFC71. Return value 1.
Action start 12:08:25: IsolateComponents.
MSI (s) (28:F8) [12:08:25:573]: Doing action: CostFinalize
Action ended 12:08:25: IsolateComponents. Return value 0.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: Condition
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding newfolder1 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding newfolder2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding NEW_DIRECTORY2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding System16Folder property. Its value is 'C:\'.
MSI (s) (28:F8) [12:08:25:573]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1).
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying SendToFolder property. Its current value is 'C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\'. Its new value: 'C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\'.
MSI (s) (28:F8) [12:08:25:573]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying ProgramFiles64Folder property. Its current value is 'C:\Program Files\'. Its new value: 'C:\Program Files (x86)\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'C:\'.
MSI (s) (28:F8) [12:08:25:573]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\config\systemprofile\AppData\Local\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1).
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying LocalAppDataFolder property. Its current value is 'C:\Windows\system32\config\systemprofile\AppData\Local\'. Its new value: 'C:\Windows\SysWOW64\config\systemprofile\AppData\Local\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding GlobalAssemblyCache property. Its value is 'C:\'.
MSI (s) (28:F8) [12:08:25:573]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\config\systemprofile\Favorites\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1).
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying FavoritesFolder property. Its current value is 'C:\Windows\system32\config\systemprofile\Favorites\'. Its new value: 'C:\Windows\SysWOW64\config\systemprofile\Favorites\'.
MSI (s) (28:F8) [12:08:25:573]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\Common Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying CommonFiles64Folder property. Its current value is 'C:\Program Files\Common Files\'. Its new value: 'C:\Program Files (x86)\Common Files\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Users\Default'. Its new value: 'C:\Users\Default\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying ALLUSERSPROFILE property. Its current value is 'C:\ProgramData'. Its new value: 'C:\ProgramData\'.
MSI (s) (28:F8) [12:08:25:573]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1).
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Modifying System64Folder property. Its current value is 'C:\Windows\system32\'. Its new value: 'C:\Windows\SysWOW64\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SOPHOS property. Its value is 'C:\Program Files (x86)\Sophos\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SOPHOS_ANTI_VIRUS property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding INSTALLDIR_X64 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding INSTALLDIR_WIN32 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding Microsoft.VC90.CRT property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding Microsoft.VC90.ATL property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding NEW_DIRECTORY1 property. Its value is 'C:\ProgramData\Sophos\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SOPHOS_TAMPER_PROTECTION property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding LOGS3 property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\logs\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SOPHOS_DEVICE_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding LOGS2 property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\logs\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SOPHOS_DATA_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding LOGS1 property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\logs\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding RESOURCES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding RES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding NEW_DIRECTORY3 property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding CACHE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding TEMP property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding SAFESTORE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding LOGS property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\logs\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding INFECTED property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding LOW property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\'.
MSI (s) (28:F8) [12:08:25:573]: PROPERTY CHANGE: Adding CONFIG property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:25:573]: Target path resolution complete. Dumping Directory table...
MSI (s) (28:F8) [12:08:25:573]: Note: target paths subject to change (via custom actions or browsing)
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: TARGETDIR , Object: C:\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: ProgramMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: newfolder1 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: newfolder2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: StartMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: WindowsVolume , Object: C:\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: WindowsFolder , Object: C:\Windows\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: TemplateFolder , Object: C:\ProgramData\Microsoft\Windows\Templates\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: TempFolder , Object: C:\Windows\TEMP\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: System16Folder , Object: C:\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: StartupFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SendToFolder , Object: C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: ProgramFiles64Folder , Object: C:\Program Files (x86)\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: PrimaryVolumePath , Object: C:\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: LocalAppDataFolder , Object: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: GlobalAssemblyCache , Object: C:\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: FontsFolder , Object: C:\Windows\Fonts\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: FavoritesFolder , Object: C:\Windows\SysWOW64\config\systemprofile\Favorites\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: DesktopFolder , Object: C:\Users\Public\Desktop\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: CommonFiles64Folder , Object: C:\Program Files (x86)\Common Files\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: AdminToolsFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: USERPROFILE , Object: C:\Users\Default\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: ALLUSERSPROFILE , Object: C:\ProgramData\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SystemFolder , Object: C:\Windows\SysWOW64\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: System64Folder , Object: C:\Windows\SysWOW64\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files (x86)\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SOPHOS , Object: C:\Program Files (x86)\Sophos\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SOPHOS_ANTI_VIRUS , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: INSTALLDIR_X64 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: INSTALLDIR_WIN32 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: Microsoft.VC90.CRT , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: Microsoft.VC90.ATL , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: LOGS3 , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\logs\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\Sophos Device Control\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: LOGS2 , Object: C:\ProgramData\Sophos\Sophos Device Control\logs\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\Sophos Data Control\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: LOGS1 , Object: C:\ProgramData\Sophos\Sophos Data Control\logs\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: RESOURCES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: RES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: CACHE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: TEMP , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: SAFESTORE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: LOGS , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\logs\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: INFECTED , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: LOW , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\
MSI (s) (28:F8) [12:08:25:573]: Dir (target): Key: CONFIG , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (28:F8) [12:08:25:573]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
Action start 12:08:25: CostFinalize.
MSI (s) (28:F8) [12:08:25:604]: Doing action: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:25: CostFinalize. Return value 1.
MSI (s) (28:F8) [12:08:25:604]: PROPERTY CHANGE: Modifying SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\'.
Action start 12:08:25: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:25:604]: Doing action: ResolveSource
Action ended 12:08:25: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:25:604]: Resolving source.
MSI (s) (28:F8) [12:08:25:604]: Resolving source to launched-from source.
MSI (s) (28:F8) [12:08:25:604]: Setting launched-from source as last-used.
MSI (s) (28:F8) [12:08:25:604]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\'.
MSI (s) (28:F8) [12:08:25:604]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\'.
MSI (s) (28:F8) [12:08:25:604]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{65323B2D-83D4-470D-A209-D769DB30BBDB}'.
MSI (s) (28:F8) [12:08:25:604]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
MSI (s) (28:F8) [12:08:25:604]: SOURCEDIR product ==> {65323B2D-83D4-470D-A209-D769DB30BBDB}
MSI (s) (28:F8) [12:08:25:604]: SECREPAIR: CryptAcquireContext succeeded
MSI (s) (28:F8) [12:08:25:604]: Determining source type
MSI (s) (28:F8) [12:08:25:604]: Source type from package 'Sophos Anti-Virus.msi': 0
MSI (s) (28:F8) [12:08:25:604]: SECREPAIR: Hash Database: C:\Windows\Installer\SourceHash{65323B2D-83D4-470D-A209-D769DB30BBDB}
MSI (s) (28:F8) [12:08:25:604]: Note: 1: 2262 2: SourceHash 3: -2147287038
MSI (s) (28:F8) [12:08:25:604]: SECREPAIR: New Hash Database creation complete.
Action start 12:08:25: ResolveSource.
MSI (s) (28:F8) [12:08:26:073]: Source path resolution complete. Dumping Directory table...
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: TARGETDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ , LongSubPath: , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: ProgramMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\ , LongSubPath: Programs\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: newfolder1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\Sophos\ , LongSubPath: Programs\Sophos\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: newfolder2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\Sophos\Sophos Endpoint Security and Control\ , LongSubPath: Programs\Sophos\Sophos Endpoint Security and Control\ , ShortSubPath: Programs\Sophos\SOPHOS~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: StartMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Start Menu\ , LongSubPath: Start Menu\ , ShortSubPath: STARTM~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Start Menu\Sophos\ , LongSubPath: Start Menu\Sophos\ , ShortSubPath: STARTM~1\Sophos\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: WindowsVolume , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinRoot\ , LongSubPath: WinRoot\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: WindowsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: TemplateFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ShellNew\ , LongSubPath: ShellNew\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: TempFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Temp\ , LongSubPath: Temp\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: System16Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System\ , LongSubPath: System\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: StartupFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\StartUp\ , LongSubPath: StartUp\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SendToFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\SendTo\ , LongSubPath: SendTo\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: ProgramFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Program Files 64\ , LongSubPath: Program Files 64\ , ShortSubPath: Prog64~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: PrimaryVolumePath , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\PrimaryVolumePath\ , LongSubPath: PrimaryVolumePath\ , ShortSubPath: Primar~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: LocalAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\LocalAppData\ , LongSubPath: LocalAppData\ , ShortSubPath: LocalA~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: GlobalAssemblyCache , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\GlobalAssemblyCache\ , LongSubPath: GlobalAssemblyCache\ , ShortSubPath: Global~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: FontsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Fonts\ , LongSubPath: Fonts\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: FavoritesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Favorites\ , LongSubPath: Favorites\ , ShortSubPath: FAVORI~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: DesktopFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Desktop\ , LongSubPath: Desktop\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: CommonFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common64\ , LongSubPath: Common64\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: AdminToolsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\AdminTools\ , LongSubPath: AdminTools\ , ShortSubPath: Admint~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: USERPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\UserProfile\ , LongSubPath: UserProfile\ , ShortSubPath: USERPR~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: ALLUSERSPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\All Users\ , LongSubPath: All Users\ , ShortSubPath: ALLUSE~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SystemFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System32\ , LongSubPath: System32\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: System64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System64\ , LongSubPath: System64\ , ShortSubPath:
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: ProgramFilesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\ , LongSubPath: program files\ , ShortSubPath: PROGRA~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SOPHOS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\ , LongSubPath: program files\Sophos\ , ShortSubPath: PROGRA~1\Sophos\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SOPHOS_ANTI_VIRUS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: INSTALLDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Control\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: INSTALLDIR_X64 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_X64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_X64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\WSC_X64\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: INSTALLDIR_WIN32 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\jwgiamqy\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: Microsoft.VC90.CRT , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\oeg2ttzz\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: Microsoft.VC90.ATL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\l3j1top6\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: CommonAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\ , LongSubPath: CommonAppData\ , ShortSubPath: Common~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\ , LongSubPath: CommonAppData\Sophos\ , ShortSubPath: Common~1\Sophos\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Tamper Protection\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: LOGS3 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Tamper Protection\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\logs\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Device Control\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: LOGS2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Device Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\logs\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Data Control\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: LOGS1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Data Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\logs\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: RESOURCES , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: RES , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: CACHE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Cache\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: TEMP , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Temp\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: SAFESTORE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Safestore\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Safestore\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\ynotdaxl\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: LOGS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\logs\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: INFECTED , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: LOW , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\Low\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\Low\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\Low\
MSI (s) (28:F8) [12:08:26:073]: Dir (source): Key: CONFIG , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Config\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Config\
MSI (s) (28:F8) [12:08:26:073]: Doing action: SetInstallDir
Action ended 12:08:26: ResolveSource. Return value 1.
Action start 12:08:26: SetInstallDir.
MSI (s) (28:F8) [12:08:26:073]: Skipping action: UninstallDowngradeCheck (condition is false)
MSI (s) (28:F8) [12:08:26:073]: Doing action: SetScriptProperty
Action ended 12:08:26: SetInstallDir. Return value 1.
MSI (s) (28:F8) [12:08:26:073]: PROPERTY CHANGE: Adding RunPreLaunchScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"'.
Action start 12:08:26: SetScriptProperty.
MSI (s) (28:F8) [12:08:26:073]: Skipping action: CheckForSophosClientFirewall (condition is false)
MSI (s) (28:F8) [12:08:26:073]: Doing action: ISInitAllUsers
Action ended 12:08:26: SetScriptProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:073]: PROPERTY CHANGE: Modifying ALLUSERS property. Its current value is '1'. Its new value: '2'.
Action start 12:08:26: ISInitAllUsers.
MSI (s) (28:F8) [12:08:26:073]: Doing action: SetODBCFolders
Action ended 12:08:26: ISInitAllUsers. Return value 1.
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCDriver`, `Component` WHERE `ODBCDriver`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2)
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCTranslator`, `Component` WHERE `ODBCTranslator`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2)
Action start 12:08:26: SetODBCFolders.
MSI (s) (28:F8) [12:08:26:089]: Doing action: MigrateFeatureStates
Action ended 12:08:26: SetODBCFolders. Return value 0.
Action start 12:08:26: MigrateFeatureStates.
MSI (s) (28:F8) [12:08:26:089]: Doing action: InstallValidate
Action ended 12:08:26: MigrateFeatureStates. Return value 0.
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: Dialog
MSI (s) (28:F8) [12:08:26:089]: Feature: SAVService; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Feature: MainComponents; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Feature: HomeEdition; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Feature: ConfigFiles; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Feature: Resources; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Feature: EngineFiles; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Feature: ServiceComponents; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ConfigFilesNoReplace; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ConfigFilesReplace; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ConfigFilesReplaceHome; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles2; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles9; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles1; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAFESTOREDIR; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles3; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles8; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles5; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles6; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles7; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ControlSAVAdminService; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ControlSAVService; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SophosCleanupService.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: scs_integrity_dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SophosOfficeAV.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SophosOfficeAVx64.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: sav32cli.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: bpaif.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles4; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpChs.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpCht.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpDeu.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpEsp.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpFra.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpIta.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVHelpJap.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SCF.dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SOF.dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavHelpEng.chm; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavShellExtx64; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: TamperProtectionControlx64; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_de; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_es; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_fr; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_it; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_ja; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_zh_cn; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcut_zh_tw; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Shortcuts; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Categories.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavNeutralRes.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavRes.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResChs.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResCht.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResDeu.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResEng.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResEsp.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResFra.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResIt.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavResJap.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: BackgroundScanClient.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavAdapter.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Microsoft.VC90.ATL.manifest; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: atl90.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Microsoft.VC90.CRT.manifest; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: msvcm90.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: msvcp90.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: msvcr90.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: PsRootCertificate; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: PsCertificateRevocationList; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: integrity_dat; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ForceUpdateAlongSideSGN.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WSCClientW32; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: WSCClientX64; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVService; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVAdminService; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AllOtherFiles; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AuthorisedLists.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: AppFeedManager.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ApplicationManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DCManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DataControlManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DataControlPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DetectionFeedback.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DeviceControlPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: BHOManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: BackgroundScanning.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ComponentManager.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Configuration.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DesktopMessaging.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVUserContext.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: DriveProcessor.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: EEConsumer.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: FSDecomposer.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: FilterProcessors.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ICAdapter.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ICManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ICProcessors.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Instrumentation.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Instrumentation.man; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: LegacyConsumers.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Localisation.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Logging.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Persistance.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVControl.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SIPSManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SWIManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavMain.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavProgress.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavShellExt.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SAVTelem.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ScanEditExports.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ScanEditFacade.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ScanManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavSecurity.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SophtainerAdapter.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SystemInformation.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: TamperProtectionControl.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: TamperProtectionManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: TamperProtectionPlugin.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ThreatDetection.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ThreatManagement.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Translators.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: VEController.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: VirusDetection.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SafeStore32.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SafeStore64.dll; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ssr32.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: ssr64.exe; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: HomeEditionComponent; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: swc_service_exe.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: integrity_dat.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SWCAdapter_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCPResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WebControlMessaging_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WCMResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: WebControlMessaging_dll_reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SwiCallout64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SwiDi.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: Difx_dll_64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SwiComponent32OnlyNotWFP_SwiUpdate32.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: SwiComponent64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SwiCallout_cat.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Swi_di.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: Difx_dll.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: SwiProxy.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: SwiProxyChild.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: integrity.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcuts65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_de65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcuts66; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcuts67; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SavMain.exe65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_es65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_fr65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_it65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_ja65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_zh_cn65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __Shortcut_zh_tw65; Installed: Null; Request: Local; Action: Null
MSI (s) (28:F8) [12:08:26:089]: Component: __SAFESTOREDIR65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SAVService65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SAVTelem.exe65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __VirusDetection.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SafeStore32.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C10165; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SavShellExt.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SavMain.exe66; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SavProgress.exe65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __DesktopMessaging.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __SavPlugin.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __DataControlManagement.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Component: __DCManagement.dll65; Installed: Null; Request: Local; Action: Local
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: BindImage
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: ProgId
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: Extension
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: Font
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: Class
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: TypeLib
Action start 12:08:26: InstallValidate.
MSI (s) (28:F8) [12:08:26:089]: Note: 1: 2205 2: 3: _RemoveFilePath
MSI (s) (28:F8) [12:08:26:136]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'.
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: BindImage
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: ProgId
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: Extension
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: Font
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: Class
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2727 2:
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2727 2:
MSI (s) (28:F8) [12:08:26:136]: Doing action: SetARPINSTALLLOCATION
Action ended 12:08:26: InstallValidate. Return value 1.
MSI (s) (28:F8) [12:08:26:136]: PROPERTY CHANGE: Adding ARPINSTALLLOCATION property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetARPINSTALLLOCATION.
MSI (s) (28:F8) [12:08:26:136]: Skipping action: SetSAVSERVICEUSER (condition is false)
MSI (s) (28:F8) [12:08:26:136]: Doing action: RemoveExistingProducts
Action ended 12:08:26: SetARPINSTALLLOCATION. Return value 1.
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2205 2: 3: Upgrade
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2228 2: 3: Upgrade 4: SELECT `Attributes`, `ActionProperty`, `Remove` FROM `Upgrade`
Action start 12:08:26: RemoveExistingProducts.
MSI (s) (28:F8) [12:08:26:136]: Doing action: InstallInitialize
Action ended 12:08:26: RemoveExistingProducts. Return value 0.
MSI (s) (28:F8) [12:08:26:136]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (28:F8) [12:08:26:136]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (28:F8) [12:08:26:136]: BeginTransaction: Locking Server
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (28:F8) [12:08:26:136]: SRSetRestorePoint skipped for this transaction.
MSI (s) (28:F8) [12:08:26:136]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
MSI (s) (28:F8) [12:08:26:136]: Server not locked: locking for product {65323B2D-83D4-470D-A209-D769DB30BBDB}
Action start 12:08:26: InstallInitialize.
MSI (s) (28:F8) [12:08:26:198]: Doing action: SetUpdateFailed
Action ended 12:08:26: InstallInitialize. Return value 1.
MSI (s) (28:F8) [12:08:26:198]: Note: 1: 2205 2: 3: MsiPatchCertificate
MSI (s) (28:F8) [12:08:26:198]: LUA patching is disabled: missing MsiPatchCertificate table
Action start 12:08:26: SetUpdateFailed.
MSI (s) (28:F8) [12:08:26:229]: Doing action: SetRestoreMovedFiles
Action ended 12:08:26: SetUpdateFailed. Return value 1.
MSI (s) (28:F8) [12:08:26:229]: PROPERTY CHANGE: Adding RestoreMovedFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRestoreMovedFiles.
MSI (s) (28:F8) [12:08:26:229]: Doing action: RestoreMovedFiles
Action ended 12:08:26: SetRestoreMovedFiles. Return value 1.
Action start 12:08:26: RestoreMovedFiles.
MSI (s) (28:F8) [12:08:26:229]: Doing action: CheckRegForNullDACLs
Action ended 12:08:26: RestoreMovedFiles. Return value 1.
Action start 12:08:26: CheckRegForNullDACLs.
MSI (s) (28:F8) [12:08:26:229]: Doing action: SetErrorScriptProperty
Action ended 12:08:26: CheckRegForNullDACLs. Return value 1.
MSI (s) (28:F8) [12:08:26:229]: PROPERTY CHANGE: Adding RunErrorScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"'.
Action start 12:08:26: SetErrorScriptProperty.
MSI (s) (28:F8) [12:08:26:229]: Doing action: RunErrorScript
Action ended 12:08:26: SetErrorScriptProperty. Return value 1.
Action start 12:08:26: RunErrorScript.
MSI (s) (28:F8) [12:08:26:229]: Doing action: ExtractClassicConfig
Action ended 12:08:26: RunErrorScript. Return value 1.
MSI (s) (28:28) [12:08:26:245]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA41A.tmp, Entrypoint: ExtractClassicConfig
MSI (s) (28:20) [12:08:26:245]: Generating random cookie.
MSI (s) (28:20) [12:08:26:245]: Created Custom Action Server with PID 3392 (0xD40).
MSI (s) (28:7C) [12:08:26:261]: Running as a service.
MSI (s) (28:7C) [12:08:26:261]: Hello, I'm your 32bit Elevated Non-remapped custom action server.
Action start 12:08:26: ExtractClassicConfig.
MSI (s) (28:F8) [12:08:26:276]: Doing action: PreInstallChecks
Action ended 12:08:26: ExtractClassicConfig. Return value 1.
MSI (s) (28:F4) [12:08:26:276]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA44A.tmp, Entrypoint: PreInstallChecks
Action start 12:08:26: PreInstallChecks.
MSI (s) (28:F8) [12:08:26:292]: Skipping action: SetUpdateBegin (condition is false)
MSI (s) (28:F8) [12:08:26:292]: Doing action: SetBootDriverStartupProperty
Action ended 12:08:26: PreInstallChecks. Return value 1.
MSI (s) (28:AC) [12:08:26:292]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA45B.tmp, Entrypoint: SetBootDriverStartupProperty
Action start 12:08:26: SetBootDriverStartupProperty.
MSI (s) (28:F8) [12:08:26:308]: Skipping action: CloseSavMainWindow (condition is false)
MSI (s) (28:F8) [12:08:26:308]: Doing action: AllocateRegistrySpace
Action ended 12:08:26: SetBootDriverStartupProperty. Return value 1.
Action start 12:08:26: AllocateRegistrySpace.
MSI (s) (28:F8) [12:08:26:308]: Doing action: ProcessComponents
Action ended 12:08:26: AllocateRegistrySpace. Return value 1.
Action start 12:08:26: ProcessComponents.
MSI (s) (28:F8) [12:08:26:323]: Doing action: UnpublishComponents
Action ended 12:08:26: ProcessComponents. Return value 1.
MSI (s) (28:F8) [12:08:26:323]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (28:F8) [12:08:26:323]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND (`Feature`.`Action` = 0 OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 12:08:26: UnpublishComponents.
MSI (s) (28:F8) [12:08:26:323]: Doing action: MsiUnpublishAssemblies
Action ended 12:08:26: UnpublishComponents. Return value 0.
MSI (s) (28:F8) [12:08:26:323]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (28:F8) [12:08:26:323]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT null, null, `Component`.`Component`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `MsiAssembly`, `Component`, `Feature` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Feature_` = `Feature`.`Feature` AND `MsiAssembly`.`File_Application` = null AND (`Feature`.`Action` = 0 OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 12:08:26: MsiUnpublishAssemblies.
MSI (s) (28:F8) [12:08:26:323]: Doing action: UnpublishFeatures
Action ended 12:08:26: MsiUnpublishAssemblies. Return value 0.
Action start 12:08:26: UnpublishFeatures.
MSI (s) (28:F8) [12:08:26:323]: Doing action: SchedSecureObjectsRollback
Action ended 12:08:26: UnpublishFeatures. Return value 1.
MSI (s) (28:E4) [12:08:26:323]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA47B.tmp, Entrypoint: SchedSecureObjectsRollback
MSI (s) (28!68) [12:08:26:323]: PROPERTY CHANGE: Adding ExecSecureObjectsRollback property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\CreateFolderD:AI(A;;FA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;OICIIO;GA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;ID;FA;;;BA)(A;OICIIOID;GA;;;BA)(A;ID;FA;;;SY)(A;OICIIOID;GA;;;SY)(A;ID;0x1200a9;;;WD)(A;OICIIOID;GXGR;;;WD)0'.
Action start 12:08:26: SchedSecureObjectsRollback.
MSI (s) (28!68) [12:08:26:323]: Doing action: ExecSecureObjectsRollback
Action start 12:08:26: ExecSecureObjectsRollback.
Action ended 12:08:26: ExecSecureObjectsRollback. Return value 1.
SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070002 - continuing
SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070002 - continuing
MSI (s) (28:F8) [12:08:26:323]: Skipping action: RollbackDisableServices (condition is false)
MSI (s) (28:F8) [12:08:26:323]: Skipping action: DisableServices (condition is false)
MSI (s) (28:F8) [12:08:26:323]: Doing action: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:26: SchedSecureObjectsRollback. Return value 1.
MSI (s) (28:F4) [12:08:26:323]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA47C.tmp, Entrypoint: SwcDisableSwcServiceStart
Action start 12:08:26: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:26:323]: Skipping action: SwiServiceUnregister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:323]: Skipping action: SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:323]: Doing action: StopServices
Action ended 12:08:26: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:26: StopServices.
MSI (s) (28:F8) [12:08:26:323]: Doing action: DeleteSwiFc.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:26: StopServices. Return value 1.
MSI (s) (28:F8) [12:08:26:339]: PROPERTY CHANGE: Adding DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe'.
Action start 12:08:26: DeleteSwiFc.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:26:339]: Doing action: DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:26: DeleteSwiFc.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:26: DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:26:339]: Doing action: DeleteScfDotDat.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:26: DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:26:339]: PROPERTY CHANGE: Adding DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat'.
Action start 12:08:26: DeleteScfDotDat.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:26:339]: Doing action: DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:26: DeleteScfDotDat.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:26: DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:26:339]: Skipping action: SwiCalloutUninstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: SwiFilterUninstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: SwiFilterUninstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: SwiCalloutUninstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: ForceStopSAVService (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Doing action: WaitForSAVService
Action ended 12:08:26: DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:26: WaitForSAVService.
MSI (s) (28:F8) [12:08:26:339]: Skipping action: CleanUpSsspUserAccount.SetProperty (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: CleanUpSsspUserAccountRollback.SetProperty (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: CleanUpSsspUserAccountRollback (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: CleanUpSsspUserAccount (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveSIPSSubmitterUserAccount.SetProperty (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveSIPSSubmitterUserAccount (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveSIPSSubmitterUserAccountRollback.SetProperty (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveSIPSSubmitterUserAccountRollback (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveTamperProtectionRegKeyRollback (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveTamperProtectionRegKey (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Doing action: DeleteServices
Action ended 12:08:26: WaitForSAVService. Return value 1.
Action start 12:08:26: DeleteServices.
MSI (s) (28:F8) [12:08:26:339]: Skipping action: RemoveSophosCleanupService (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Doing action: UnregisterComPlus
Action ended 12:08:26: DeleteServices. Return value 1.
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: Complus
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND `Action` = 0
Action start 12:08:26: UnregisterComPlus.
MSI (s) (28:F8) [12:08:26:339]: Doing action: SelfUnregModules
Action ended 12:08:26: UnregisterComPlus. Return value 0.
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: SelfReg 4: Select `File`.`FileName`,`Component`.`Directory_`,`Component`.`Installed`, `File`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `File`, `Component` Where `SelfReg`.`File_` = `File`.`File` And `File`.`Component_` = `Component`.`Component` And `Component`.`Action` = 0
Action start 12:08:26: SelfUnregModules.
MSI (s) (28:F8) [12:08:26:339]: Doing action: UnregisterTypeLibraries
Action ended 12:08:26: SelfUnregModules. Return value 1.
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: TypeLib 4: SELECT `LibID`, `TypeLib`.`Version`, `TypeLib`.`Language`, `TypeLib`.`Directory_`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `BinaryType`, `Component`.`Component`, `Component`.`Attributes` FROM `TypeLib`, `Component`, `File` WHERE `TypeLib`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Component`.`Action`=0)
Action start 12:08:26: UnregisterTypeLibraries.
MSI (s) (28:F8) [12:08:26:339]: Doing action: RemoveODBC
Action ended 12:08:26: UnregisterTypeLibraries. Return value 0.
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2711 2: ODBCDriverManager
Action start 12:08:26: RemoveODBC.
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2711 2: ODBCDriverManager64
MSI (s) (28:F8) [12:08:26:339]: Doing action: UnregisterFonts
Action ended 12:08:26: RemoveODBC. Return value 1.
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2205 2: 3: Font
MSI (s) (28:F8) [12:08:26:339]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Installed`From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And `FileAction`.`Action` = 0 ORDER BY `FileAction`.`Directory_`
Action start 12:08:26: UnregisterFonts.
MSI (s) (28:F8) [12:08:26:339]: Skipping action: UninstallSecurityCenter (condition is false)
MSI (s) (28:F8) [12:08:26:339]: Doing action: RemoveRegistryValues
Action ended 12:08:26: UnregisterFonts. Return value 1.
Action start 12:08:26: RemoveRegistryValues.
MSI (s) (28:F8) [12:08:26:370]: Skipping action: SwcPauseForUnload.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:26:370]: Doing action: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:26: RemoveRegistryValues. Return value 1.
Action start 12:08:26: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:26:370]: Skipping action: SwcDeleteReg.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:26:370]: Skipping action: SwcService_unreg_rb.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:26:370]: Skipping action: SwcService_unregister.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:26:370]: Skipping action: Swc_postcleanup.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:26:370]: Doing action: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:26: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:26: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:26:370]: Doing action: ConfigureEventManifestUnregister
Action ended 12:08:26: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (28:38) [12:08:26:386]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA4AC.tmp, Entrypoint: ConfigureEventManifestUnregister
Action start 12:08:26: ConfigureEventManifestUnregister.
MSI (s) (28:F8) [12:08:26:401]: Doing action: UnregisterClassInfo
Action ended 12:08:26: ConfigureEventManifestUnregister. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2205 2: 3: Class
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2228 2: 3: Class 4: SELECT `BinaryType`, `CLSID`, `ProgId_Default`, `Class`.`Description`, `Context`, `Feature_`, `ComponentId`, `Component`, `Class`.`Attributes`, `AppId_`, `FileTypeMask`, `Icon_`, `IconIndex`, `DefInprocHandler`, `Argument`, `Component`.`RuntimeFlags`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action`, `Component`.`Attributes` FROM `Class`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 12:08:26: UnregisterClassInfo.
MSI (s) (28:F8) [12:08:26:401]: Doing action: UnregisterExtensionInfo
Action ended 12:08:26: UnregisterClassInfo. Return value 0.
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2205 2: 3: Extension
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2228 2: 3: Extension 4: SELECT `Extension`, `BinaryType`, `ProgId_`, null, null, `MIME_`, `Feature_`, `ComponentId`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action` FROM `Extension`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 12:08:26: UnregisterExtensionInfo.
MSI (s) (28:F8) [12:08:26:401]: Doing action: UnregisterProgIdInfo
Action ended 12:08:26: UnregisterExtensionInfo. Return value 0.
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2205 2: 3: ProgId
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2228 2: 3: ProgId 4: SELECT DISTINCT `BinaryType`, `ProgId`, `Class_`, `ProgId`.`Description`, `ProgId`.`Icon_`, `ProgId`.`IconIndex`, null, `Component`.`RuntimeFlags` , `Component`.`Component`, `Component`.`Attributes` FROM `ProgId`, `Class`, `Feature`, `Component` WHERE `ProgId`.`Class_` = `Class`.`CLSID` AND `Class`.`Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 12:08:26: UnregisterProgIdInfo.
MSI (s) (28:F8) [12:08:26:401]: Doing action: UnregisterMIMEInfo
Action ended 12:08:26: UnregisterProgIdInfo. Return value 0.
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2205 2: 3: MIME
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)))
Action start 12:08:26: UnregisterMIMEInfo.
MSI (s) (28:F8) [12:08:26:401]: Doing action: RemoveIniValues
Action ended 12:08:26: UnregisterMIMEInfo. Return value 0.
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2205 2: 3: IniFile
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND `Component`.`Action`=0 ORDER BY `FileName`,`Section`
Action start 12:08:26: RemoveIniValues.
MSI (s) (28:F8) [12:08:26:401]: Doing action: RemoveShortcuts
Action ended 12:08:26: RemoveIniValues. Return value 1.
Action start 12:08:26: RemoveShortcuts.
MSI (s) (28:F8) [12:08:26:401]: Doing action: RemoveEnvironmentStrings
Action ended 12:08:26: RemoveShortcuts. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2205 2: 3: Environment
MSI (s) (28:F8) [12:08:26:401]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 0)
Action start 12:08:26: RemoveEnvironmentStrings.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetRemoveSAVIProperty
Action ended 12:08:26: RemoveEnvironmentStrings. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Modifying RemoveSAVI property. Its current value is 'INSTALLDIR'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRemoveSAVIProperty.
MSI (s) (28:F8) [12:08:26:401]: Skipping action: RemoveSAVI (condition is false)
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallDriverFilesOnUpdateProperty
Action ended 12:08:26: SetRemoveSAVIProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallDriverFilesOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'.
Action start 12:08:26: SetUninstallDriverFilesOnUpdateProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallBootDriverProperty
Action ended 12:08:26: SetUninstallDriverFilesOnUpdateProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallBootDriver property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'.
Action start 12:08:26: SetUninstallBootDriverProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallBootDriverOnUpdateProperty
Action ended 12:08:26: SetUninstallBootDriverProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallBootDriverOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'.
Action start 12:08:26: SetUninstallBootDriverOnUpdateProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallKMSDriverProperty
Action ended 12:08:26: SetUninstallBootDriverOnUpdateProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallKMSDriver property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF'.
Action start 12:08:26: SetUninstallKMSDriverProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallKMSDriverOnUpdateProperty
Action ended 12:08:26: SetUninstallKMSDriverProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallKMSDriverOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF'.
Action start 12:08:26: SetUninstallKMSDriverOnUpdateProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallDriverFilesVistaProperty
Action ended 12:08:26: SetUninstallKMSDriverOnUpdateProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallDriverFilesVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'.
Action start 12:08:26: SetUninstallDriverFilesVistaProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetUninstallClassFilterVistaProperty
Action ended 12:08:26: SetUninstallDriverFilesVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:401]: PROPERTY CHANGE: Adding UninstallClassFilterVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf'.
Action start 12:08:26: SetUninstallClassFilterVistaProperty.
MSI (s) (28:F8) [12:08:26:401]: Doing action: SetClassFilterPresentProperty
Action ended 12:08:26: SetUninstallClassFilterVistaProperty. Return value 1.
MSI (s) (28:50) [12:08:26:401]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA4CC.tmp, Entrypoint: SetClassFilterPresentProperty
Action start 12:08:26: SetClassFilterPresentProperty.
MSI (s) (28:F8) [12:08:26:433]: Doing action: CheckUninstallDrivers
Action ended 12:08:26: SetClassFilterPresentProperty. Return value 1.
Action start 12:08:26: CheckUninstallDrivers.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDriverFilesOnUpdate (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDriverFiles64OnUpdate (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDriverFiles (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDriverFiles64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDriverFilesVista (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDriverFiles64Vista (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallBootDriverOnUpdate (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallBootDriverOnUpdate64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallBootDriver (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallBootDriver64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallClassFilterCleanReg (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallClassFilter64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallClassFilter64Vista (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallClassFilter (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallClassFilterVista (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallKMSDriver (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallKMSDriverOnUpdate (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UnregisterTamperProtectionControlX64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UnregisterSavShellExtX64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UnregisterSophosOfficeAV (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UnregisterSophosOfficeAVX64 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetUninstallDeviceControlProperty
Action ended 12:08:26: CheckUninstallDrivers. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Adding UninstallDeviceControl property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'.
Action start 12:08:26: SetUninstallDeviceControlProperty.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UninstallDeviceControl (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetDeleteDriverKeysProperty
Action ended 12:08:26: SetUninstallDeviceControlProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Adding DeleteDriverKeys property. Its value is '0'.
Action start 12:08:26: SetDeleteDriverKeysProperty.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: DeleteDriverKeys (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: DeleteSKMScanDriverKeys (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: DeleteSDCFilterDriverKeys (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: DeleteSDCFilterDriverFiles (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetUnregisterBufferOverflowProtection
Action ended 12:08:26: SetDeleteDriverKeysProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Adding UnregisterBufferOverflowProtection property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetUnregisterBufferOverflowProtection.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: UnregisterBufferOverflowProtection (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetDeleteNonEngineFilesProperty
Action ended 12:08:26: SetUnregisterBufferOverflowProtection. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Adding DeleteNonEngineFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetDeleteNonEngineFilesProperty.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: DeleteNonEngineFiles (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetDeleteOtherFilesProperty
Action ended 12:08:26: SetDeleteNonEngineFilesProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Adding DeleteOtherFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetDeleteOtherFilesProperty.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: DeleteOtherFiles (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: CreateRebootTestFile (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: CheckCTAInstalled (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: RemoveDuplicateFiles
Action ended 12:08:26: SetDeleteOtherFilesProperty. Return value 1.
Action start 12:08:26: RemoveDuplicateFiles.
MSI (s) (28:F8) [12:08:26:433]: Skipping action: EnableWindowsDefender (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: SwiUpdateCleanup.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: SwiUpdateCleanup.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: Win8Cleanup.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: SwiUpdateCleanup64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Skipping action: SwiUpdateCleanup64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:26:433]: Doing action: RemoveFiles
Action ended 12:08:26: RemoveDuplicateFiles. Return value 1.
Action start 12:08:26: RemoveFiles.
MSI (s) (28:F8) [12:08:26:433]: Doing action: RemoveFolders
Action ended 12:08:26: RemoveFiles. Return value 1.
Action start 12:08:26: RemoveFolders.
MSI (s) (28:F8) [12:08:26:433]: Doing action: CreateFolders
Action ended 12:08:26: RemoveFolders. Return value 1.
Action start 12:08:26: CreateFolders.
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetDeleteIDEsProperty
Action ended 12:08:26: CreateFolders. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Modifying DeleteIDEs property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetDeleteIDEsProperty.
MSI (s) (28:F8) [12:08:26:433]: Doing action: DeleteIDEs
Action ended 12:08:26: SetDeleteIDEsProperty. Return value 1.
Action start 12:08:26: DeleteIDEs.
MSI (s) (28:F8) [12:08:26:433]: Doing action: SetDeleteBDLsProperty
Action ended 12:08:26: DeleteIDEs. Return value 1.
MSI (s) (28:F8) [12:08:26:433]: PROPERTY CHANGE: Modifying DeleteBDLs property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetDeleteBDLsProperty.
MSI (s) (28:F8) [12:08:26:433]: Doing action: DeleteBDLs
Action ended 12:08:26: SetDeleteBDLsProperty. Return value 1.
Action start 12:08:26: DeleteBDLs.
MSI (s) (28:F8) [12:08:26:448]: Doing action: SetDeleteHIPSConfigProperty
Action ended 12:08:26: DeleteBDLs. Return value 1.
MSI (s) (28:F8) [12:08:26:448]: PROPERTY CHANGE: Adding DeleteHIPSConfig property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetDeleteHIPSConfigProperty.
MSI (s) (28:F8) [12:08:26:448]: Doing action: DeleteHIPSConfig
Action ended 12:08:26: SetDeleteHIPSConfigProperty. Return value 1.
Action start 12:08:26: DeleteHIPSConfig.
MSI (s) (28:F8) [12:08:26:448]: Doing action: SetRemoveFilesOnUpgradeProperty
Action ended 12:08:26: DeleteHIPSConfig. Return value 1.
MSI (s) (28:F8) [12:08:26:448]: PROPERTY CHANGE: Adding RemoveFilesOnUpgrade property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRemoveFilesOnUpgradeProperty.
MSI (s) (28:F8) [12:08:26:448]: Skipping action: RemoveFilesOnUpgrade (condition is false)
MSI (s) (28:F8) [12:08:26:448]: Doing action: SetRollbackForceProperty
Action ended 12:08:26: SetRemoveFilesOnUpgradeProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:448]: PROPERTY CHANGE: Adding RollbackForceDeleteFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRollbackForceProperty.
MSI (s) (28:F8) [12:08:26:448]: Doing action: RollbackForceDeleteFiles
Action ended 12:08:26: SetRollbackForceProperty. Return value 1.
Action start 12:08:26: RollbackForceDeleteFiles.
MSI (s) (28:F8) [12:08:26:448]: Doing action: SetRollbackForceUserProperty
Action ended 12:08:26: RollbackForceDeleteFiles. Return value 1.
MSI (s) (28:F8) [12:08:26:448]: PROPERTY CHANGE: Adding RollbackForceDeleteUserPlugin property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRollbackForceUserProperty.
MSI (s) (28:F8) [12:08:26:448]: Doing action: RollbackForceDeleteUserPlugin
Action ended 12:08:26: SetRollbackForceUserProperty. Return value 1.
Action start 12:08:26: RollbackForceDeleteUserPlugin.
MSI (s) (28:F8) [12:08:26:448]: Doing action: SetRollbackOtherFilesProperty
Action ended 12:08:26: RollbackForceDeleteUserPlugin. Return value 1.
MSI (s) (28:F8) [12:08:26:448]: PROPERTY CHANGE: Modifying RollbackOtherFiles property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRollbackOtherFilesProperty.
MSI (s) (28:F8) [12:08:26:448]: Doing action: RollbackOtherFiles
Action ended 12:08:26: SetRollbackOtherFilesProperty. Return value 1.
Action start 12:08:26: RollbackOtherFiles.
MSI (s) (28:F8) [12:08:26:448]: Doing action: SetRollbackUpdateSavAdapterDllProperty
Action ended 12:08:26: RollbackOtherFiles. Return value 1.
MSI (s) (28:F8) [12:08:26:448]: PROPERTY CHANGE: Adding RollbackUpdateSavAdapterDll property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRollbackUpdateSavAdapterDllProperty.
MSI (s) (28:F8) [12:08:26:448]: Doing action: RollbackUpdateSavAdapterDll
Action ended 12:08:26: SetRollbackUpdateSavAdapterDllProperty. Return value 1.
Action start 12:08:26: RollbackUpdateSavAdapterDll.
MSI (s) (28:F8) [12:08:26:464]: Doing action: SetUpdateSavAdapterDllProperty
Action ended 12:08:26: RollbackUpdateSavAdapterDll. Return value 1.
MSI (s) (28:F8) [12:08:26:464]: PROPERTY CHANGE: Adding UpdateSavAdapterDll property. Its value is ';10.7.2.49;'.
Action start 12:08:26: SetUpdateSavAdapterDllProperty.
MSI (s) (28:F8) [12:08:26:464]: Doing action: UpdateSavAdapterDll
Action ended 12:08:26: SetUpdateSavAdapterDllProperty. Return value 1.
Action start 12:08:26: UpdateSavAdapterDll.
MSI (s) (28:F8) [12:08:26:464]: Doing action: SetRollbackUpdateDesktopMessagingProperty
Action ended 12:08:26: UpdateSavAdapterDll. Return value 1.
MSI (s) (28:F8) [12:08:26:464]: PROPERTY CHANGE: Adding RollbackUpdateDesktopMessaging property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRollbackUpdateDesktopMessagingProperty.
MSI (s) (28:F8) [12:08:26:464]: Doing action: RollbackUpdateDesktopMessaging
Action ended 12:08:26: SetRollbackUpdateDesktopMessagingProperty. Return value 1.
Action start 12:08:26: RollbackUpdateDesktopMessaging.
MSI (s) (28:F8) [12:08:26:464]: Doing action: SetUpdateDesktopMessagingProperty
Action ended 12:08:26: RollbackUpdateDesktopMessaging. Return value 1.
MSI (s) (28:F8) [12:08:26:464]: PROPERTY CHANGE: Adding UpdateDesktopMessaging property. Its value is ';10.7.2.49;'.
Action start 12:08:26: SetUpdateDesktopMessagingProperty.
MSI (s) (28:F8) [12:08:26:464]: Doing action: UpdateDesktopMessaging
Action ended 12:08:26: SetUpdateDesktopMessagingProperty. Return value 1.
Action start 12:08:26: UpdateDesktopMessaging.
MSI (s) (28:F8) [12:08:26:464]: Doing action: SetInitialDriverProperty
Action ended 12:08:26: UpdateDesktopMessaging. Return value 1.
Action start 12:08:26: SetInitialDriverProperty.
MSI (s) (28:F8) [12:08:26:464]: Doing action: SetInstallDriverProperty
Action ended 12:08:26: SetInitialDriverProperty. Return value 1.
MSI (s) (28:30) [12:08:26:480]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA51B.tmp, Entrypoint: SetDriverProperty
MSI (s) (28!14) [12:08:26:480]: PROPERTY CHANGE: Modifying DRIVERVERSION property. Its current value is '0'. Its new value: 'WIN7_AMD64'.
MSI (s) (28!14) [12:08:26:480]: PROPERTY CHANGE: Modifying BOOTDRIVERSIGNED property. Its current value is '0'. Its new value: '1'.
Action start 12:08:26: SetInstallDriverProperty.
MSI (s) (28:F8) [12:08:26:495]: Doing action: SetProcessorProperties
Action ended 12:08:26: SetInstallDriverProperty. Return value 1.
MSI (s) (28:10) [12:08:26:495]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA52C.tmp, Entrypoint: SetProcessorProperties
MSI (s) (28!F8) [12:08:26:495]: PROPERTY CHANGE: Modifying PROCESSOR_NX_ENABLED property. Its current value is '0'. Its new value: '1'.
Action start 12:08:26: SetProcessorProperties.
MSI (s) (28:F8) [12:08:26:511]: Doing action: SetCopyOtherFilesProperty
Action ended 12:08:26: SetProcessorProperties. Return value 1.
MSI (s) (28:F8) [12:08:26:511]: PROPERTY CHANGE: Adding CopyOtherFiles property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"'.
Action start 12:08:26: SetCopyOtherFilesProperty.
MSI (s) (28:F8) [12:08:26:511]: Doing action: CopyOtherFiles
Action ended 12:08:26: SetCopyOtherFilesProperty. Return value 1.
Action start 12:08:26: CopyOtherFiles.
MSI (s) (28:F8) [12:08:26:511]: Doing action: SetForceDeleteUserPluginProperty
Action ended 12:08:26: CopyOtherFiles. Return value 1.
MSI (s) (28:F8) [12:08:26:511]: PROPERTY CHANGE: Adding ForceDeleteUserPlugin property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetForceDeleteUserPluginProperty.
MSI (s) (28:F8) [12:08:26:511]: Skipping action: ForceDeleteUserPlugin (condition is false)
MSI (s) (28:F8) [12:08:26:511]: Doing action: SetRegisterBufferOverflowProtection
Action ended 12:08:26: SetForceDeleteUserPluginProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:511]: PROPERTY CHANGE: Adding RegisterBufferOverflowProtection property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:26: SetRegisterBufferOverflowProtection.
MSI (s) (28:F8) [12:08:26:511]: Doing action: RegisterBufferOverflowProtection
Action ended 12:08:26: SetRegisterBufferOverflowProtection. Return value 1.
Action start 12:08:26: RegisterBufferOverflowProtection.
MSI (s) (28:F8) [12:08:26:511]: Skipping action: RollbackClassFilter (condition is false)
MSI (s) (28:F8) [12:08:26:511]: Skipping action: RollbackClassFilter64 (condition is false)
MSI (s) (28:F8) [12:08:26:511]: Doing action: RollbackClassFilter64Vista
Action ended 12:08:26: RegisterBufferOverflowProtection. Return value 1.
Action start 12:08:26: RollbackClassFilter64Vista.
MSI (s) (28:F8) [12:08:26:511]: Skipping action: RollbackDriverFiles (condition is false)
MSI (s) (28:F8) [12:08:26:511]: Skipping action: RollbackBootDriver (condition is false)
MSI (s) (28:F8) [12:08:26:511]: Doing action: SetRestoreExcludedProcessesProperty
Action ended 12:08:26: RollbackClassFilter64Vista. Return value 1.
MSI (s) (28:94) [12:08:26:511]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA53D.tmp, Entrypoint: SetRestoreExcludedProcessesProperty
Action start 12:08:26: SetRestoreExcludedProcessesProperty.
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackDriverFiles64 (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackBootDriver64 (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackKMSDriver (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Doing action: SetRollbackDriverFilesVistaProperty
Action ended 12:08:26: SetRestoreExcludedProcessesProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:526]: PROPERTY CHANGE: Adding RollbackDriverFilesVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'.
Action start 12:08:26: SetRollbackDriverFilesVistaProperty.
MSI (s) (28:F8) [12:08:26:526]: Doing action: SetRollbackBootDriverVistaProperty
Action ended 12:08:26: SetRollbackDriverFilesVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:526]: PROPERTY CHANGE: Adding RollbackBootDriverVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'.
Action start 12:08:26: SetRollbackBootDriverVistaProperty.
MSI (s) (28:F8) [12:08:26:526]: Doing action: SetRollbackClassFilterVistaProperty
Action ended 12:08:26: SetRollbackBootDriverVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:526]: PROPERTY CHANGE: Adding RollbackClassFilterVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf'.
Action start 12:08:26: SetRollbackClassFilterVistaProperty.
MSI (s) (28:F8) [12:08:26:526]: Doing action: SetRollbackKMSDriverVistaProperty
Action ended 12:08:26: SetRollbackClassFilterVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:526]: PROPERTY CHANGE: Adding RollbackKMSDriverVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\skmscan.inf'.
Action start 12:08:26: SetRollbackKMSDriverVistaProperty.
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackBootDriverVista (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackDriverFilesVista (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackClassFilterVista (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Doing action: RollbackBootDriver64Vista
Action ended 12:08:26: SetRollbackKMSDriverVistaProperty. Return value 1.
Action start 12:08:26: RollbackBootDriver64Vista.
MSI (s) (28:F8) [12:08:26:526]: Doing action: RollbackDriverFiles64Vista
Action ended 12:08:26: RollbackBootDriver64Vista. Return value 1.
Action start 12:08:26: RollbackDriverFiles64Vista.
MSI (s) (28:F8) [12:08:26:526]: Doing action: RestoreExcludedProcesses
Action ended 12:08:26: RollbackDriverFiles64Vista. Return value 1.
Action start 12:08:26: RestoreExcludedProcesses.
MSI (s) (28:F8) [12:08:26:526]: Skipping action: RollbackKMSDriverVista (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Skipping action: InstallDriverFilesXP (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Skipping action: InstallBootDriverXP (condition is false)
MSI (s) (28:F8) [12:08:26:526]: Doing action: SetInstallDriverFilesVistaProperty
Action ended 12:08:26: RestoreExcludedProcesses. Return value 1.
MSI (s) (28:F8) [12:08:26:526]: PROPERTY CHANGE: Adding InstallDriverFilesVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\wlh_i386\SAVONACCESSDRIV.INF'.
Action start 12:08:26: SetInstallDriverFilesVistaProperty.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallDriverFilesVista (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallDriverFilesWin7Property
Action ended 12:08:26: SetInstallDriverFilesVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallDriverFilesWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\win7_i386\SAVONACCESSDRIV.INF'.
Action start 12:08:26: SetInstallDriverFilesWin7Property.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallDriverFilesWin7 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallClassFilterVistaProperty
Action ended 12:08:26: SetInstallDriverFilesWin7Property. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallClassFilterVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\wxp_i386\sdcfilter.inf'.
Action start 12:08:26: SetInstallClassFilterVistaProperty.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallClassFilterWin7Property
Action ended 12:08:26: SetInstallClassFilterVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallClassFilterWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\win7_i386\sdcfilter.inf'.
Action start 12:08:26: SetInstallClassFilterWin7Property.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallClassFilterVista (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallClassFilterWin7 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallBootDriverVistaProperty
Action ended 12:08:26: SetInstallClassFilterWin7Property. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallBootDriverVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\wxp_i386\SOPHOSBOOTDRIVER.INF'.
Action start 12:08:26: SetInstallBootDriverVistaProperty.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallBootDriverWin7Property
Action ended 12:08:26: SetInstallBootDriverVistaProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallBootDriverWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_i386\SOPHOSBOOTDRIVER.INF'.
Action start 12:08:26: SetInstallBootDriverWin7Property.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallBootDriverVista (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallBootDriverWin7 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallBootDriverAMD64 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallDriverFilesAMD64 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallBootDriverAMD64Vista (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: InstallBootDriverAMD64Win7
Action ended 12:08:26: SetInstallBootDriverWin7Property. Return value 1.
Action start 12:08:26: InstallBootDriverAMD64Win7.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallDriverFilesAMD64Vista (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: InstallDriverFilesAMD64Win7
Action ended 12:08:26: InstallBootDriverAMD64Win7. Return value 1.
Action start 12:08:26: InstallDriverFilesAMD64Win7.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallUnsignedBootDriver
Action ended 12:08:26: InstallDriverFilesAMD64Win7. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallUnsignedBootDriver property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"'.
Action start 12:08:26: SetInstallUnsignedBootDriver.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallUnsignedDrivers
Action ended 12:08:26: SetInstallUnsignedBootDriver. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallUnsignedDrivers property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"'.
Action start 12:08:26: SetInstallUnsignedDrivers.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallUnsignedBootDriver (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallUnsignedDrivers (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallUnsignedBootDriverAMD64 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallUnsignedDriversAMD64 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallClassFilterXP (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallClassFilterAMD64 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallClassFilterAMD64Vista (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: InstallClassFilterAMD64Win7
Action ended 12:08:26: SetInstallUnsignedDrivers. Return value 1.
Action start 12:08:26: InstallClassFilterAMD64Win7.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallKMSDriverProperty
Action ended 12:08:26: InstallClassFilterAMD64Win7. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallKMSDriver property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\kms\wxp_i386\skmscan.inf'.
Action start 12:08:26: SetInstallKMSDriverProperty.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallKMSDriver (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetInstallKMSDriverWin7Property
Action ended 12:08:26: SetInstallKMSDriverProperty. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding InstallKMSDriverWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\kms\win7_i386\skmscan.inf'.
Action start 12:08:26: SetInstallKMSDriverWin7Property.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: InstallKMSDriverWin7 (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetStartDriverServicesProperty
Action ended 12:08:26: SetInstallKMSDriverWin7Property. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding StartDriverServices property. Its value is 'WIN7_AMD64'.
Action start 12:08:26: SetStartDriverServicesProperty.
MSI (s) (28:F8) [12:08:26:542]: Doing action: StartDriverServices
Action ended 12:08:26: SetStartDriverServicesProperty. Return value 1.
Action start 12:08:26: StartDriverServices.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SetMoveLockedFiles
Action ended 12:08:26: StartDriverServices. Return value 1.
MSI (s) (28:F8) [12:08:26:542]: PROPERTY CHANGE: Adding MoveLockedFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\|'.
Action start 12:08:26: SetMoveLockedFiles.
MSI (s) (28:F8) [12:08:26:542]: Skipping action: MoveLockedFiles (condition is false)
MSI (s) (28:F8) [12:08:26:542]: Doing action: MoveFiles
Action ended 12:08:26: SetMoveLockedFiles. Return value 1.
Action start 12:08:26: MoveFiles.
MSI (s) (28:F8) [12:08:26:542]: Doing action: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:26: MoveFiles. Return value 1.
MSI (s) (28:B0) [12:08:26:542]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA55D.tmp, Entrypoint: SwcDeleteSAUPluginRegistry
Action start 12:08:26: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:26:558]: Doing action: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:26: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (28:28) [12:08:26:558]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA56E.tmp, Entrypoint: SwcDeleteRMSPluginRegistry
Action start 12:08:26: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:26:558]: Doing action: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:26: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (28:30) [12:08:26:558]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIA56F.tmp, Entrypoint: SwcPauseForUnhook
Action start 12:08:26: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:31:572]: Doing action: InstallFiles
Action ended 12:08:31: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:31: InstallFiles.
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2205 2: 3: MsiSFCBypass
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2228 2: 3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ?
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ?
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2205 2: 3: MsiPatchHeaders
MSI (s) (28:F8) [12:08:31:572]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (28:F8) [12:08:31:588]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:588]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:588]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:588]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:603]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:619]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:619]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:619]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:619]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:634]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:634]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:634]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:634]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:650]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:666]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:666]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:666]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:666]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:681]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:697]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:712]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:728]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:728]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:728]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:728]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:744]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:775]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:791]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:791]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:791]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:791]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:806]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:806]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:806]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:806]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:822]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:838]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:853]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:853]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:853]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:853]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:853]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:853]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:869]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:884]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:884]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:884]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:884]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:900]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:916]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:931]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:931]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:931]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:931]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:947]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:963]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:963]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:963]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:963]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
MSI (s) (28:F8) [12:08:31:978]: Skipping action: SwcService_unreg_nc.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:31:978]: Skipping action: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:31:978]: Doing action: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:31: InstallFiles. Return value 1.
Action start 12:08:31: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:31:978]: Skipping action: SwcDeleteRegExceptId.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false)
MSI (s) (28:F8) [12:08:31:978]: Doing action: PatchFiles
Action ended 12:08:31: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (28:F8) [12:08:31:978]: Note: 1: 2205 2: 3: Patch
MSI (s) (28:F8) [12:08:31:978]: Note: 1: 2228 2: 3: Patch 4: SELECT `File`,`FileName`,`FileSize`,`Directory_`,`PatchSize`,`File`.`Attributes`,`Patch`.`Attributes`,`Patch`.`Sequence`,`Component`.`Component`,`Component`.`ComponentId` FROM `File`,`Component`,`Patch` WHERE `Patch`.`#_MsiActive`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence`
Action start 12:08:31: PatchFiles.
MSI (s) (28:F8) [12:08:31:978]: Doing action: DuplicateFiles
Action ended 12:08:31: PatchFiles. Return value 0.
Action start 12:08:31: DuplicateFiles.
MSI (s) (28:F8) [12:08:31:978]: Doing action: SchedXmlFile
Action ended 12:08:31: DuplicateFiles. Return value 1.
MSI (s) (28:8C) [12:08:31:978]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIBA8E.tmp, Entrypoint: SchedXmlFile
MSI (s) (28!B0) [12:08:31:994]: PROPERTY CHANGE: Adding ExecXmlFile property. Its value is '10C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@messageFileName]messageFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll71/*/*/*/*[@parameterFileName]parameterFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll10C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@resourceFileName]resourceFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll'.
Action start 12:08:31: SchedXmlFile.
MSI (s) (28!B0) [12:08:31:994]: Doing action: ExecXmlFile
Action start 12:08:31: ExecXmlFile.
Action ended 12:08:31: ExecXmlFile. Return value 1.
MSI (s) (28:F8) [12:08:31:994]: Doing action: ConfigureEventManifestRegister
Action ended 12:08:31: SchedXmlFile. Return value 1.
MSI (s) (28:74) [12:08:31:994]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIBA9E.tmp, Entrypoint: ConfigureEventManifestRegister
MSI (s) (28:48) [12:08:32:010]: PROPERTY CHANGE: Adding RollbackRegisterEventManifest property. Its value is '"wevtutil.exe" um "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"'.
Action start 12:08:31: ConfigureEventManifestRegister.
MSI (s) (28:48) [12:08:32:010]: Doing action: RollbackRegisterEventManifest
Action start 12:08:32: RollbackRegisterEventManifest.
MSI (s) (28:48) [12:08:32:010]: PROPERTY CHANGE: Adding RegisterEventManifest property. Its value is '"wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"'.
Action ended 12:08:32: RollbackRegisterEventManifest. Return value 1.
MSI (s) (28:48) [12:08:32:010]: Doing action: RegisterEventManifest
Action start 12:08:32: RegisterEventManifest.
Action ended 12:08:32: RegisterEventManifest. Return value 1.
MSI (s) (28:F8) [12:08:32:010]: Skipping action: DeleteUserGroups (condition is false)
MSI (s) (28:F8) [12:08:32:010]: Doing action: RollbackUserGroups
Action ended 12:08:32: ConfigureEventManifestRegister. Return value 1.
Action start 12:08:32: RollbackUserGroups.
MSI (s) (28:F8) [12:08:32:025]: Doing action: SetUserGroupsProperty
Action ended 12:08:32: RollbackUserGroups. Return value 1.
MSI (s) (28:F8) [12:08:32:025]: PROPERTY CHANGE: Adding CreateUserGroups property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 12:08:32: SetUserGroupsProperty.
MSI (s) (28:F8) [12:08:32:025]: Doing action: CreateUserGroups
Action ended 12:08:32: SetUserGroupsProperty. Return value 1.
Action start 12:08:32: CreateUserGroups.
MSI (s) (28:F8) [12:08:32:025]: Doing action: PurgeIOfficeAVCache
Action ended 12:08:32: CreateUserGroups. Return value 1.
Action start 12:08:32: PurgeIOfficeAVCache.
MSI (s) (28:F8) [12:08:32:041]: Doing action: EnableAttachmentScanning
Action ended 12:08:32: PurgeIOfficeAVCache. Return value 1.
Action start 12:08:32: EnableAttachmentScanning.
MSI (s) (28:F8) [12:08:32:041]: Doing action: AddDomainGroups
Action ended 12:08:32: EnableAttachmentScanning. Return value 1.
Action start 12:08:32: AddDomainGroups.
MSI (s) (28:F8) [12:08:32:041]: Doing action: BindImage
Action ended 12:08:32: AddDomainGroups. Return value 1.
Action start 12:08:32: BindImage.
MSI (s) (28:F8) [12:08:32:041]: Doing action: CreateShortcuts
Action ended 12:08:32: BindImage. Return value 1.
Action start 12:08:32: CreateShortcuts.
MSI (s) (28:F8) [12:08:32:056]: Doing action: RegisterClassInfo
Action ended 12:08:32: CreateShortcuts. Return value 1.
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2205 2: 3: Class
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2228 2: 3: Class 4: SELECT `BinaryType`, `CLSID`, `ProgId_Default`, `Class`.`Description`, `Context`, `Feature_`, `ComponentId`, `Component`, `Class`.`Attributes`, `AppId_`, `FileTypeMask`, `Icon_`, `IconIndex`, `DefInprocHandler`, `Argument`, `Component`.`RuntimeFlags`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action`, `Component`.`Attributes` FROM `Class`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 12:08:32: RegisterClassInfo.
MSI (s) (28:F8) [12:08:32:056]: Doing action: RegisterExtensionInfo
Action ended 12:08:32: RegisterClassInfo. Return value 0.
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2205 2: 3: Extension
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2228 2: 3: Extension 4: SELECT `Extension`, `BinaryType`, `ProgId_`, null, null, `MIME_`, `Feature_`, `ComponentId`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action` FROM `Extension`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 12:08:32: RegisterExtensionInfo.
MSI (s) (28:F8) [12:08:32:056]: Doing action: RegisterProgIdInfo
Action ended 12:08:32: RegisterExtensionInfo. Return value 0.
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2205 2: 3: ProgId
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2228 2: 3: ProgId 4: SELECT DISTINCT `BinaryType`, `ProgId`, `Class_`, `ProgId`.`Description`, `ProgId`.`Icon_`, `ProgId`.`IconIndex`, null, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `ProgId`, `Class`, `Feature`, `Component` WHERE `ProgId`.`Class_` = `Class`.`CLSID` AND `Class`.`Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 12:08:32: RegisterProgIdInfo.
MSI (s) (28:F8) [12:08:32:056]: Doing action: RegisterMIMEInfo
Action ended 12:08:32: RegisterProgIdInfo. Return value 0.
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2205 2: 3: MIME
MSI (s) (28:F8) [12:08:32:056]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))))
Action start 12:08:32: RegisterMIMEInfo.
MSI (s) (28:F8) [12:08:32:056]: Doing action: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:32: RegisterMIMEInfo. Return value 0.
Action start 12:08:32: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:32:056]: Doing action: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:32: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (28:F8) [12:08:32:072]: PROPERTY CHANGE: Adding SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll'.
Action start 12:08:32: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:32:072]: Doing action: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:32: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:32: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:32:072]: Doing action: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:32: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
MSI (s) (28:F8) [12:08:32:072]: PROPERTY CHANGE: Adding SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll'.
Action start 12:08:32: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:32:072]: Doing action: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:32: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:32: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:32:072]: Doing action: WriteRegistryValues
Action ended 12:08:32: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:32: WriteRegistryValues.
MSI (s) (28:F8) [12:08:33:276]: Doing action: SetSAVAdminUpdateBegin
Action ended 12:08:33: WriteRegistryValues. Return value 1.
Action start 12:08:33: SetSAVAdminUpdateBegin.
MSI (s) (28:F8) [12:08:33:276]: Doing action: SetRollBackSaviProperty
Action ended 12:08:33: SetSAVAdminUpdateBegin. Return value 1.
MSI (s) (28:F8) [12:08:33:276]: PROPERTY CHANGE: Modifying RollbackSavi property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:33: SetRollBackSaviProperty.
MSI (s) (28:F8) [12:08:33:276]: Doing action: RollbackSavi
Action ended 12:08:33: SetRollBackSaviProperty. Return value 1.
Action start 12:08:33: RollbackSavi.
MSI (s) (28:F8) [12:08:33:291]: Doing action: SetUpdateSaviProperty
Action ended 12:08:33: RollbackSavi. Return value 1.
MSI (s) (28:F8) [12:08:33:291]: PROPERTY CHANGE: Modifying UpdateSAVI property. Its current value is '0'. Its new value: '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"'.
Action start 12:08:33: SetUpdateSaviProperty.
MSI (s) (28:F8) [12:08:33:291]: Doing action: UpdateSAVI
Action ended 12:08:33: SetUpdateSaviProperty. Return value 1.
Action start 12:08:33: UpdateSAVI.
MSI (s) (28:F8) [12:08:33:291]: Doing action: SetSetFolderPermissions
Action ended 12:08:33: UpdateSAVI. Return value 1.
MSI (s) (28:F8) [12:08:33:291]: PROPERTY CHANGE: Adding SetFolderPermissions property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:33: SetSetFolderPermissions.
MSI (s) (28:F8) [12:08:33:291]: Doing action: SetFolderPermissions
Action ended 12:08:33: SetSetFolderPermissions. Return value 1.
Action start 12:08:33: SetFolderPermissions.
MSI (s) (28:F8) [12:08:33:291]: Doing action: WriteIniValues
Action ended 12:08:33: SetFolderPermissions. Return value 1.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: IniFile
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND (`Component`.`Action`=1 OR `Component`.`Action`=2) ORDER BY `FileName`,`Section`
Action start 12:08:33: WriteIniValues.
MSI (s) (28:F8) [12:08:33:291]: Doing action: WriteEnvironmentStrings
Action ended 12:08:33: WriteIniValues. Return value 1.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: Environment
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2)
Action start 12:08:33: WriteEnvironmentStrings.
MSI (s) (28:F8) [12:08:33:291]: Doing action: RegisterFonts
Action ended 12:08:33: WriteEnvironmentStrings. Return value 1.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: Font
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Action` From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 Or `FileAction`.`Action` = 2) ORDER BY `FileAction`.`Directory_`
Action start 12:08:33: RegisterFonts.
MSI (s) (28:F8) [12:08:33:291]: Doing action: InstallODBC
Action ended 12:08:33: RegisterFonts. Return value 1.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2711 2: ODBCDriverManager
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2711 2: ODBCDriverManager64
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: ODBCDriver
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: ODBCTranslator
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ?
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: ODBCDataSource
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ?
Action start 12:08:33: InstallODBC.
MSI (s) (28:F8) [12:08:33:291]: Doing action: RegisterTypeLibraries
Action ended 12:08:33: InstallODBC. Return value 0.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: TypeLib
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: TypeLib 4: SELECT `LibID`, `TypeLib`.`Version`, `TypeLib`.`Language`, `TypeLib`.`Directory_`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `BinaryType`, `Component`.`Component`, `Component`.`Attributes`, `Component`.`RuntimeFlags` FROM `TypeLib`, `Component`, `File` WHERE `TypeLib`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Component`.`Action`=1 OR `Component`.`Action`=2) OR (`Component`.`Action` = null AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2)))
Action start 12:08:33: RegisterTypeLibraries.
MSI (s) (28:F8) [12:08:33:291]: Doing action: RegisterComPlus
Action ended 12:08:33: RegisterTypeLibraries. Return value 0.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: Complus
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Action` = 1 OR `Action` = 2)
Action start 12:08:33: RegisterComPlus.
MSI (s) (28:F8) [12:08:33:291]: Doing action: SelfRegModules
Action ended 12:08:33: RegisterComPlus. Return value 0.
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2205 2: 3: SelfReg
MSI (s) (28:F8) [12:08:33:291]: Note: 1: 2228 2: 3: SelfReg 4: Select `FileAction`.`FileName`,`FileAction`.`Directory_`,`FileAction`.`Action`, `FileAction`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `FileAction` Where `SelfReg`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 OR `FileAction`.`Action` = 2)
Action start 12:08:33: SelfRegModules.
MSI (s) (28:F8) [12:08:33:291]: Doing action: InstallServices
Action ended 12:08:33: SelfRegModules. Return value 1.
Action start 12:08:33: InstallServices.
MSI (s) (28:F8) [12:08:33:307]: Doing action: AddSIPSSubmitterUserAccount.SetProperty
Action ended 12:08:33: InstallServices. Return value 1.
MSI (s) (28:F8) [12:08:33:307]: PROPERTY CHANGE: Adding AddSIPSSubmitterUserAccount property. Its value is 'NT SERVICE\SAVService'.
Action start 12:08:33: AddSIPSSubmitterUserAccount.SetProperty.
MSI (s) (28:F8) [12:08:33:307]: Doing action: AddSIPSSubmitterUserAccount
Action ended 12:08:33: AddSIPSSubmitterUserAccount.SetProperty. Return value 1.
Action start 12:08:33: AddSIPSSubmitterUserAccount.
MSI (s) (28:F8) [12:08:33:307]: Doing action: AddSIPSSubmitterUserAccountRollback.SetProperty
Action ended 12:08:33: AddSIPSSubmitterUserAccount. Return value 1.
MSI (s) (28:F8) [12:08:33:307]: PROPERTY CHANGE: Adding AddSIPSSubmitterUserAccountRollback property. Its value is 'NT SERVICE\SAVService'.
Action start 12:08:33: AddSIPSSubmitterUserAccountRollback.SetProperty.
MSI (s) (28:F8) [12:08:33:307]: Doing action: AddSIPSSubmitterUserAccountRollback
Action ended 12:08:33: AddSIPSSubmitterUserAccountRollback.SetProperty. Return value 1.
Action start 12:08:33: AddSIPSSubmitterUserAccountRollback.
MSI (s) (28:F8) [12:08:33:307]: Doing action: CreateTamperProtectionRegKeyRollback
Action ended 12:08:33: AddSIPSSubmitterUserAccountRollback. Return value 1.
Action start 12:08:33: CreateTamperProtectionRegKeyRollback.
MSI (s) (28:F8) [12:08:33:307]: Doing action: CreateTamperProtectionRegKey
Action ended 12:08:33: CreateTamperProtectionRegKeyRollback. Return value 1.
Action start 12:08:33: CreateTamperProtectionRegKey.
MSI (s) (28:F8) [12:08:33:307]: Doing action: SchedSecureObjects
Action ended 12:08:33: CreateTamperProtectionRegKey. Return value 1.
MSI (s) (28:AC) [12:08:33:323]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIBFC0.tmp, Entrypoint: SchedSecureObjects
MSI (s) (28!60) [12:08:33:323]: PROPERTY CHANGE: Adding ExecSecureObjects property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\CreateFolderNT SERVICE\SavService268435456MACHINE\SOFTWARE\Sophos\SAVService\TelemetryRegistryNT SERVICE\SavService268435456MACHINE\SOFTWARE\Sophos\SAVService\ThreatLifetimeRegistryNT SERVICE\SavService268435456'.
Action start 12:08:33: SchedSecureObjects.
MSI (s) (28!60) [12:08:33:323]: Doing action: ExecSecureObjects
Action start 12:08:33: ExecSecureObjects.
Action ended 12:08:33: ExecSecureObjects. Return value 1.
MSI (s) (28:F8) [12:08:33:323]: Doing action: SetupSspUserAccount.SetProperty
Action ended 12:08:33: SchedSecureObjects. Return value 1.
MSI (s) (28:F8) [12:08:33:323]: PROPERTY CHANGE: Adding SetupSspUserAccount property. Its value is 'NT SERVICE\SAVService'.
Action start 12:08:33: SetupSspUserAccount.SetProperty.
MSI (s) (28:F8) [12:08:33:323]: Doing action: SetupSspUserAccountRollback.SetProperty
Action ended 12:08:33: SetupSspUserAccount.SetProperty. Return value 1.
MSI (s) (28:F8) [12:08:33:323]: PROPERTY CHANGE: Adding SetupSspUserAccountRollback property. Its value is 'NT SERVICE\SAVService'.
Action start 12:08:33: SetupSspUserAccountRollback.SetProperty.
MSI (s) (28:F8) [12:08:33:323]: Doing action: SetupSspUserAccountRollback
Action ended 12:08:33: SetupSspUserAccountRollback.SetProperty. Return value 1.
Action start 12:08:33: SetupSspUserAccountRollback.
MSI (s) (28:F8) [12:08:33:338]: Doing action: SetupSspUserAccount
Action ended 12:08:33: SetupSspUserAccountRollback. Return value 1.
Action start 12:08:33: SetupSspUserAccount.
MSI (s) (28:F8) [12:08:33:338]: Doing action: SetServiceXP
Action ended 12:08:33: SetupSspUserAccount. Return value 1.
Action start 12:08:33: SetServiceXP.
MSI (s) (28:F8) [12:08:33:338]: Doing action: SetSAVServiceSID
Action ended 12:08:33: SetServiceXP. Return value 1.
Action start 12:08:33: SetSAVServiceSID.
MSI (s) (28:F8) [12:08:33:338]: Skipping action: RestartDriversAfterSecurityChange (condition is false)
MSI (s) (28:F8) [12:08:33:338]: Doing action: SetServiceSecurity
Action ended 12:08:33: SetSAVServiceSID. Return value 1.
Action start 12:08:33: SetServiceSecurity.
MSI (s) (28:F8) [12:08:33:338]: Doing action: SetServiceRecoveryActions
Action ended 12:08:33: SetServiceSecurity. Return value 1.
Action start 12:08:33: SetServiceRecoveryActions.
MSI (s) (28:F8) [12:08:33:354]: Doing action: SetRollbackInstallDeviceControlProperty
Action ended 12:08:33: SetServiceRecoveryActions. Return value 1.
MSI (s) (28:F8) [12:08:33:354]: PROPERTY CHANGE: Adding RollBackInstallDeviceControl property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:33: SetRollbackInstallDeviceControlProperty.
MSI (s) (28:F8) [12:08:33:354]: Doing action: RollbackInstallDeviceControl
Action ended 12:08:33: SetRollbackInstallDeviceControlProperty. Return value 1.
Action start 12:08:33: RollbackInstallDeviceControl.
MSI (s) (28:F8) [12:08:33:354]: Doing action: SetInstallDeviceControlProperty
Action ended 12:08:33: RollbackInstallDeviceControl. Return value 1.
MSI (s) (28:F8) [12:08:33:354]: PROPERTY CHANGE: Adding InstallDeviceControl property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"'.
Action start 12:08:33: SetInstallDeviceControlProperty.
MSI (s) (28:F8) [12:08:33:354]: Doing action: InstallDeviceControl
Action ended 12:08:33: SetInstallDeviceControlProperty. Return value 1.
Action start 12:08:33: InstallDeviceControl.
MSI (s) (28:F8) [12:08:33:354]: Doing action: SetAdminGroupDescription
Action ended 12:08:33: InstallDeviceControl. Return value 1.
Action start 12:08:33: SetAdminGroupDescription.
MSI (s) (28:F8) [12:08:33:354]: Doing action: SetPowerGroupDescription
Action ended 12:08:33: SetAdminGroupDescription. Return value 1.
Action start 12:08:33: SetPowerGroupDescription.
MSI (s) (28:F8) [12:08:33:370]: Doing action: SetUserGroupDescription
Action ended 12:08:33: SetPowerGroupDescription. Return value 1.
Action start 12:08:33: SetUserGroupDescription.
MSI (s) (28:F8) [12:08:33:370]: Doing action: MsiConfigureServices
Action ended 12:08:33: SetUserGroupDescription. Return value 1.
Action start 12:08:33: MsiConfigureServices.
MSI (s) (28:F8) [12:08:33:370]: Note: 1: 2205 2: 3: MsiServiceConfigFailureActions
MSI (s) (28:F8) [12:08:33:370]: Note: 1: 2228 2: 3: MsiServiceConfigFailureActions 4: SELECT `Name`, `Event`, `ResetPeriod`, `RebootMessage`,`Command`, `Actions`, `DelayActions`, `Action` FROM `MsiServiceConfigFailureActions`, `Component` WHERE `Component_` = `Component` AND (`Action` = 0 OR `Action` = 1 OR `Action` = 3)
MSI (s) (28:F8) [12:08:33:370]: Doing action: SetOnAccessGroupDescription
Action ended 12:08:33: MsiConfigureServices. Return value 1.
Action start 12:08:33: SetOnAccessGroupDescription.
MSI (s) (28:F8) [12:08:33:370]: Skipping action: DisableOnAccess (condition is false)
MSI (s) (28:F8) [12:08:33:370]: Doing action: DisablePUADetection_setprop
Action ended 12:08:33: SetOnAccessGroupDescription. Return value 1.
MSI (s) (28:F8) [12:08:33:370]: PROPERTY CHANGE: Adding DisablePUADetection property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 12:08:33: DisablePUADetection_setprop.
MSI (s) (28:F8) [12:08:33:370]: Doing action: DisablePUADetection
Action ended 12:08:33: DisablePUADetection_setprop. Return value 1.
Action start 12:08:33: DisablePUADetection.
MSI (s) (28:F8) [12:08:33:370]: Doing action: DeleteExpiredCaches
Action ended 12:08:33: DisablePUADetection. Return value 1.
Action start 12:08:33: DeleteExpiredCaches.
MSI (s) (28:F8) [12:08:33:385]: Doing action: EnableJournals
Action ended 12:08:33: DeleteExpiredCaches. Return value 1.
Action start 12:08:33: EnableJournals.
MSI (s) (28:F8) [12:08:33:385]: Doing action: DisableWebProtection_setprop
Action ended 12:08:33: EnableJournals. Return value 1.
MSI (s) (28:F8) [12:08:33:385]: PROPERTY CHANGE: Adding DisableWebProtection property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 12:08:33: DisableWebProtection_setprop.
MSI (s) (28:F8) [12:08:33:385]: Doing action: DisableWebProtection
Action ended 12:08:33: DisableWebProtection_setprop. Return value 1.
Action start 12:08:33: DisableWebProtection.
MSI (s) (28:F8) [12:08:33:385]: Doing action: DisableSxlLookups_setprop
Action ended 12:08:33: DisableWebProtection. Return value 1.
MSI (s) (28:F8) [12:08:33:385]: PROPERTY CHANGE: Adding DisableSxlLookups property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 12:08:33: DisableSxlLookups_setprop.
MSI (s) (28:F8) [12:08:33:385]: Doing action: DisableSxlLookups
Action ended 12:08:33: DisableSxlLookups_setprop. Return value 1.
Action start 12:08:33: DisableSxlLookups.
MSI (s) (28:F8) [12:08:33:385]: Doing action: CheckSNMPDLLPresence_setprop
Action ended 12:08:33: DisableSxlLookups. Return value 1.
MSI (s) (28:F8) [12:08:33:385]: PROPERTY CHANGE: Adding CheckSNMPDLLPresence property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'.
Action start 12:08:33: CheckSNMPDLLPresence_setprop.
MSI (s) (28:F8) [12:08:33:385]: Doing action: CheckSNMPDLLPresence
Action ended 12:08:33: CheckSNMPDLLPresence_setprop. Return value 1.
Action start 12:08:33: CheckSNMPDLLPresence.
MSI (s) (28:F8) [12:08:33:385]: Doing action: SetUpdateSXLServerList
Action ended 12:08:33: CheckSNMPDLLPresence. Return value 1.
MSI (s) (28:F8) [12:08:33:385]: PROPERTY CHANGE: Adding UpdateSXLServerList property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'.
Action start 12:08:33: SetUpdateSXLServerList.
MSI (s) (28:F8) [12:08:33:385]: Doing action: UpdateSXLServerList
Action ended 12:08:33: SetUpdateSXLServerList. Return value 1.
Action start 12:08:33: UpdateSXLServerList.
MSI (s) (28:F8) [12:08:33:401]: Doing action: GenerateSavMachineId
Action ended 12:08:33: UpdateSXLServerList. Return value 1.
Action start 12:08:33: GenerateSavMachineId.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RegisterUser
Action ended 12:08:33: GenerateSavMachineId. Return value 1.
Action start 12:08:33: RegisterUser.
MSI (s) (28:F8) [12:08:33:401]: Skipping action: ConfigureScanMyComputerScan_setprop (condition is false)
MSI (s) (28:F8) [12:08:33:401]: Skipping action: ConfigureScanMyComputerScan (condition is false)
MSI (s) (28:F8) [12:08:33:401]: Skipping action: DisableWindowsDefender (condition is false)
MSI (s) (28:F8) [12:08:33:401]: Doing action: RegisterProduct
Action ended 12:08:33: RegisterUser. Return value 1.
Action start 12:08:33: RegisterProduct.
MSI (s) (28:F8) [12:08:33:401]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
MSI (s) (28:F8) [12:08:33:401]: Doing action: PublishComponents
Action ended 12:08:33: RegisterProduct. Return value 1.
MSI (s) (28:F8) [12:08:33:401]: Note: 1: 2205 2: 3: PublishComponent
MSI (s) (28:F8) [12:08:33:401]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))
Action start 12:08:33: PublishComponents.
MSI (s) (28:F8) [12:08:33:401]: Doing action: MsiPublishAssemblies
Action ended 12:08:33: PublishComponents. Return value 0.
MSI (s) (28:F8) [12:08:33:401]: Note: 1: 2205 2: 3: MsiAssembly
MSI (s) (28:F8) [12:08:33:401]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT null, null, `Component`.`Component`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `MsiAssembly`, `Component`, `Feature` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Feature_` = `Feature`.`Feature` AND `MsiAssembly`.`File_Application` = null AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))
Action start 12:08:33: MsiPublishAssemblies.
MSI (s) (28:F8) [12:08:33:401]: Doing action: PublishFeatures
Action ended 12:08:33: MsiPublishAssemblies. Return value 0.
Action start 12:08:33: PublishFeatures.
MSI (s) (28:F8) [12:08:33:401]: Doing action: PublishProduct
Action ended 12:08:33: PublishFeatures. Return value 1.
Action start 12:08:33: PublishProduct.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RollbackRegisterTamperProtectionControlX64
Action ended 12:08:33: PublishProduct. Return value 1.
Action start 12:08:33: RollbackRegisterTamperProtectionControlX64.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RollbackRegisterSavShellExtX64
Action ended 12:08:33: RollbackRegisterTamperProtectionControlX64. Return value 1.
Action start 12:08:33: RollbackRegisterSavShellExtX64.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RollbackRegisterSophosOfficeAV
Action ended 12:08:33: RollbackRegisterSavShellExtX64. Return value 1.
Action start 12:08:33: RollbackRegisterSophosOfficeAV.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RollbackRegisterSophosOfficeAVX64
Action ended 12:08:33: RollbackRegisterSophosOfficeAV. Return value 1.
Action start 12:08:33: RollbackRegisterSophosOfficeAVX64.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RegisterTamperProtectionControlX64
Action ended 12:08:33: RollbackRegisterSophosOfficeAVX64. Return value 1.
Action start 12:08:33: RegisterTamperProtectionControlX64.
MSI (s) (28:F8) [12:08:33:401]: Doing action: RegisterSavShellExtX64
Action ended 12:08:33: RegisterTamperProtectionControlX64. Return value 1.
Action start 12:08:33: RegisterSavShellExtX64.
MSI (s) (28:F8) [12:08:33:416]: Doing action: RegisterSophosOfficeAV
Action ended 12:08:33: RegisterSavShellExtX64. Return value 1.
Action start 12:08:33: RegisterSophosOfficeAV.
MSI (s) (28:F8) [12:08:33:416]: Doing action: RegisterSophosOfficeAVX64
Action ended 12:08:33: RegisterSophosOfficeAV. Return value 1.
Action start 12:08:33: RegisterSophosOfficeAVX64.
MSI (s) (28:F8) [12:08:33:416]: Doing action: RollbackInstallSecurityCenter
Action ended 12:08:33: RegisterSophosOfficeAVX64. Return value 1.
Action start 12:08:33: RollbackInstallSecurityCenter.
MSI (s) (28:F8) [12:08:33:416]: Doing action: SetRestoreFirstInstallTimeProperty
Action ended 12:08:33: RollbackInstallSecurityCenter. Return value 1.
MSI (s) (28:F8) [12:08:33:416]: PROPERTY CHANGE: Adding RestoreFirstInstallTime property. Its value is '0'.
Action start 12:08:33: SetRestoreFirstInstallTimeProperty.
MSI (s) (28:F8) [12:08:33:416]: Skipping action: RestoreFirstInstallTime (condition is false)
MSI (s) (28:F8) [12:08:33:416]: Doing action: SetSAVAdminUpdateComplete
Action ended 12:08:33: SetRestoreFirstInstallTimeProperty. Return value 1.
Action start 12:08:33: SetSAVAdminUpdateComplete.
MSI (s) (28:F8) [12:08:33:416]: Doing action: RunPreLaunchScript
Action ended 12:08:33: SetSAVAdminUpdateComplete. Return value 1.
Action start 12:08:33: RunPreLaunchScript.
MSI (s) (28:F8) [12:08:33:416]: Doing action: RegisterDCIfEnabled
Action ended 12:08:33: RunPreLaunchScript. Return value 1.
Action start 12:08:33: RegisterDCIfEnabled.
MSI (s) (28:F8) [12:08:33:416]: Doing action: StartSAVServices
Action ended 12:08:33: RegisterDCIfEnabled. Return value 1.
Action start 12:08:33: StartSAVServices.
MSI (s) (28:F8) [12:08:33:432]: Skipping action: ApplyCachedPolicies (condition is false)
MSI (s) (28:F8) [12:08:33:432]: Doing action: CopySwiFcRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: StartSAVServices. Return value 1.
MSI (s) (28:F8) [12:08:33:432]: PROPERTY CHANGE: Adding CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe'.
Action start 12:08:33: CopySwiFcRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: CopySwiFcRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: CopySwiFcToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:432]: PROPERTY CHANGE: Adding CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe'.
Action start 12:08:33: CopySwiFcToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: CopySwiFcToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: CopyScfDotDatToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:432]: PROPERTY CHANGE: Adding CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat'.
Action start 12:08:33: CopyScfDotDatToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: CopyScfDotDatToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:432]: PROPERTY CHANGE: Adding SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'swi_service'.
Action start 12:08:33: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:432]: PROPERTY CHANGE: Adding SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /registerService'.
Action start 12:08:33: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: SwiCalloutInstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:432]: PROPERTY CHANGE: Adding SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe" -r "C:\Windows\TEMP\SwiRebootRequired.txt" "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf"'.
Action start 12:08:33: SwiCalloutInstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:432]: Doing action: SwiCalloutRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiCalloutInstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:448]: PROPERTY CHANGE: Adding SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe" -r "C:\Windows\TEMP\SwiRebootRequired.txt" /u "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf"'.
Action start 12:08:33: SwiCalloutRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiCalloutRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwiFilterRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:448]: PROPERTY CHANGE: Adding SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe" -i'.
Action start 12:08:33: SwiFilterRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwiFilterRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiFilterRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
MSI (s) (28:F8) [12:08:33:448]: PROPERTY CHANGE: Adding SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'swi_filter'.
Action start 12:08:33: SwiFilterRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiFilterRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101
Action ended 12:08:33: SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101.
MSI (s) (28:F8) [12:08:33:448]: Doing action: StartServices
Action ended 12:08:33: SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1.
Action start 12:08:33: StartServices.
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateInstallRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateInstall.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateInstall64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateUpgradeRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateUpgrade.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateUpgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateUpgrade64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Skipping action: SwiUpdateUpgrade64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false)
MSI (s) (28:F8) [12:08:33:448]: Doing action: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A
Action ended 12:08:33: StartServices. Return value 1.
MSI (s) (28:34) [12:08:33:448]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC04E.tmp, Entrypoint: SwcEnableSwcServiceStart
Action start 12:08:33: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A.
MSI (s) (28:F8) [12:08:33:448]: Doing action: BootDriverStartup
Action ended 12:08:33: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1.
Action start 12:08:33: BootDriverStartup.
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetUpdateDriversProperty
Action ended 12:08:33: BootDriverStartup. Return value 1.
MSI (s) (28:F8) [12:08:33:479]: PROPERTY CHANGE: Modifying UPDATEDRIVERS property. Its current value is '1'. Its new value: '0'.
Action start 12:08:33: SetUpdateDriversProperty.
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetConfigureSAVProperty
Action ended 12:08:33: SetUpdateDriversProperty. Return value 1.
MSI (s) (28:F8) [12:08:33:479]: PROPERTY CHANGE: Adding ConfigureSAV property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""0"'.
Action start 12:08:33: SetConfigureSAVProperty.
MSI (s) (28:F8) [12:08:33:479]: Skipping action: ScheduleReboot (condition is false)
MSI (s) (28:F8) [12:08:33:479]: Doing action: ConfigureSAV
Action ended 12:08:33: SetConfigureSAVProperty. Return value 1.
Action start 12:08:33: ConfigureSAV.
MSI (s) (28:F8) [12:08:33:479]: Skipping action: SetUpdateFinished (condition is false)
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetInstallationComplete
Action ended 12:08:33: ConfigureSAV. Return value 1.
Action start 12:08:33: SetInstallationComplete.
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetCreateSavAdapterDllRegistryEntryProperty
Action ended 12:08:33: SetInstallationComplete. Return value 1.
MSI (s) (28:F8) [12:08:33:479]: PROPERTY CHANGE: Adding CreateSavAdapterDllRegistryEntry property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:33: SetCreateSavAdapterDllRegistryEntryProperty.
MSI (s) (28:F8) [12:08:33:479]: Doing action: CreateSavAdapterDllRegistryEntry
Action ended 12:08:33: SetCreateSavAdapterDllRegistryEntryProperty. Return value 1.
Action start 12:08:33: CreateSavAdapterDllRegistryEntry.
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetForceDeleteFilesProperty
Action ended 12:08:33: CreateSavAdapterDllRegistryEntry. Return value 1.
MSI (s) (28:F8) [12:08:33:479]: PROPERTY CHANGE: Adding ForceDeleteFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'.
Action start 12:08:33: SetForceDeleteFilesProperty.
MSI (s) (28:F8) [12:08:33:479]: Skipping action: ForceDeleteFiles (condition is false)
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetAfterScriptProperty
Action ended 12:08:33: SetForceDeleteFilesProperty. Return value 1.
MSI (s) (28:F8) [12:08:33:479]: PROPERTY CHANGE: Adding RunAfterScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"'.
Action start 12:08:33: SetAfterScriptProperty.
MSI (s) (28:F8) [12:08:33:479]: Doing action: RunAfterScript
Action ended 12:08:33: SetAfterScriptProperty. Return value 1.
Action start 12:08:33: RunAfterScript.
MSI (s) (28:F8) [12:08:33:479]: Doing action: SetCopySavSyncFileProperty
Action ended 12:08:33: RunAfterScript. Return value 1.
MSI (s) (28:F8) [12:08:33:495]: PROPERTY CHANGE: Adding CopySAVSyncFile property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"'.
Action start 12:08:33: SetCopySavSyncFileProperty.
MSI (s) (28:F8) [12:08:33:495]: Doing action: CopySAVSyncFile
Action ended 12:08:33: SetCopySavSyncFileProperty. Return value 1.
Action start 12:08:33: CopySAVSyncFile.
MSI (s) (28:F8) [12:08:33:495]: Skipping action: RestoreWindowsDefender (condition is false)
MSI (s) (28:F8) [12:08:33:495]: Skipping action: WixFailWhenDeferred (condition is false)
MSI (s) (28:F8) [12:08:33:495]: Doing action: InstallFinalize
Action ended 12:08:33: CopySAVSyncFile. Return value 1.
MSI (s) (28:F8) [12:08:33:495]: Running Script: C:\Windows\Installer\MSIA3FA.tmp
MSI (s) (28:F8) [12:08:33:495]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'.
MSI (s) (28:F8) [12:08:33:495]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (28:F8) [12:08:33:495]: Machine policy value 'DisableRollback' is 0
MSI (s) (28:F8) [12:08:33:495]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (28:F8) [12:08:33:495]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1253990670,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
Action start 12:08:33: InstallFinalize.
MSI (s) (28:F8) [12:08:33:495]: Executing op: ProductInfo(ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=168230914,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={B11B63E0-A3EB-478A-AF04-AAE0B577AEB2},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
MSI (s) (28:F8) [12:08:33:495]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (28:F8) [12:08:33:495]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus)
MSI (s) (28:F8) [12:08:33:495]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (28:F8) [12:08:33:495]: Executing op: SetBaseline(Baseline=0,)
MSI (s) (28:F8) [12:08:33:495]: Executing op: SetBaseline(Baseline=1,)
MSI (s) (28:F8) [12:08:33:495]: Executing op: ActionStart(Name=SetUpdateFailed,,)
MSI (s) (28:F8) [12:08:33:495]: Executing op: CustomActionSchedule(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,)
MSI (s) (28:F8) [12:08:33:495]: Executing op: ActionStart(Name=RestoreMovedFiles,,)
MSI (s) (28:F8) [12:08:33:495]: Executing op: CustomActionSchedule(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:33:495]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,)
MSI (s) (28:F8) [12:08:33:495]: Executing op: CustomActionSchedule(Action=CheckRegForNullDACLs,ActionType=1025,Source=BinaryData,Target=CheckRegForNullDACLs,)
MSI (s) (28:CC) [12:08:33:510]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC07E.tmp, Entrypoint: CheckRegForNullDACLs
MSI (s) (28:F8) [12:08:33:510]: Executing op: ActionStart(Name=RunErrorScript,,)
MSI (s) (28:F8) [12:08:33:510]: Executing op: CustomActionSchedule(Action=RunErrorScript,ActionType=1345,Source=BinaryData,Target=RunErrorScripts,CustomActionData="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49")
MSI (s) (28:F8) [12:08:33:510]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ProgressTotal(Total=160,Type=1,ByteEquivalent=24000)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={CCC8000A-8A29-4FFE-8FE8-185FFE19444C},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={CCFFD125-B6F4-4E85-B42F-EEDE0E647001},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={034A5FFF-0A1F-4035-920F-73803E07C209},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={A4D31E85-0B09-4E42-96C3-DE5DE60EB97F},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={BC7402A1-8EC2-4834-BDFF-7D991375467D},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={4AEE9519-9D9B-44CE-9852-434F0BB544E3},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={6EE91E7E-1391-4C83-838D-8EE0407A2C5E},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={63284722-D09A-447D-861D-CFEBE89D28F4},KeyPath=C:\ProgramData\Sophos\Sophos Data Control\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={B7EF36A2-B450-43CD-9919-427EAE165995},KeyPath=C:\ProgramData\Sophos\Sophos Device Control\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={177335D9-9D47-4E12-A841-7884DB0B65FE},KeyPath=C:\ProgramData\Sophos\Sophos Tamper Protection\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={A153DC07-D119-4900-B5D1-F671EC25C7EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={F4E436FD-FE28-4278-86D5-E3412859F5E5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:510]: Executing op: ComponentRegister(ComponentId={484E3E44-1A83-4137-BAA1-B984E5636086},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={68FF2A0F-9051-42F8-9394-384797B1AAD2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={D2BB3772-EC58-4939-8333-E89A6E780F18},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={CD46A165-DB78-470B-B062-D973ED80944B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={3CFF4AE8-C6ED-41A6-9AC0-6E0B51B84C41},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={A891B002-2209-413D-896C-A999F157D57A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={B763A398-206E-43BF-9810-E482FC158A74},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={49A894EE-FF4F-4862-B9B8-A4EBBEA0A77E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={E3FAD286-FF50-4A29-93F2-FA93F9E5E897},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={C0E2EF20-B6D0-44A7-88AD-DAFAA4A325BF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={1601B2AC-3E23-4EA6-861E-17F52F42AAA4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={B46DA52C-6057-4314-B5BE-670483AB08D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={C5E5F1CE-2724-447B-A7E2-3B4B4BE9E801},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={9EED603A-240C-44CD-9136-F3703168D6A8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={6368E4D7-C225-4D2B-AA09-75E27732DDD4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={72649A5C-570A-467A-96A8-D77FAB4A16ED},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={E05D9609-9A70-4DEF-A8D3-5B884BEA1139},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={175C5C85-0E0E-44BF-8F48-CD96A4EBBA5B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={A46E98B3-190F-4296-871A-431FB198DB58},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={29262C23-36F0-4117-9406-A551A1CF11E4},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={9D161347-EFC6-46A9-9AEC-97722B0C8636},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={556C7464-36A2-464B-9250-2F924DA27FA7},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={4BCA7B9E-D378-4830-B7EE-62B8EDD570C5},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={B4C73573-F81E-4459-80C7-FBC3FA74C1D5},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={A54E5967-C145-461E-9452-F701F47D3DE2},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={F6C47B05-6049-4F2B-94C5-28C6F9CC00AB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={09743465-1197-4046-87F7-3F24D3FD7CEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={9D8FDDD5-6302-4133-A040-27AE6FCA4A50},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={F2814579-3850-4A1C-9312-5F0644872616},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={7D755E63-DF4E-4F44-A3CC-D43CA33ABC53},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={274E0945-DD13-4FB3-8FED-A4865A87E518},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={494298F4-4204-4E18-BA16-8152108CE3DD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={CB2061C6-BCA4-431E-8768-637BA7B6A021},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={FAEE7082-8088-4157-B163-68605546E3D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={F403AD90-FEC7-4036-9C1A-BB012A8E790E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={691C4A89-DB0D-4C7C-B684-ACAA9F794FAD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={C8CFF022-47AD-4EBF-A615-683844308F40},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={F74F470D-4B17-4901-9B74-60A3838B7457},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={341B1BFF-FEAD-4104-A29F-E9363B7517BF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={36E7E558-86C8-4D1B-8CA8-2EEF33963A1E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={8F31C598-9FCF-46DD-92CE-BF02EAAF7CC8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={C9B04594-F409-4FA4-B2BC-086361DBC58D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={A5486A6B-FF88-41D8-82F3-B46ED9697255},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={238C4CC5-16A9-4A25-B94F-C07F9692D5E2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={BC39E663-65CB-43D3-880E-BAB2744A9597},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={3D564A97-4F0A-44FD-97D1-CBF283B05453},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:526]: Executing op: ComponentRegister(ComponentId={39F322E9-713E-417C-8380-2A8CBEB5E46C},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:526]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={0A8056D0-75A3-466F-95CE-FDE62CFF9C1A},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={A94755DD-6057-4746-8C39-B06D97E39D54},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={FE613E3D-0469-40F8-9A0F-635D16097928},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={7ED7F039-CC97-4CF5-8CCB-8CB15DF14759},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={52411750-073E-47D7-BB97-8B404AF42B76},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={F5D90A95-0F03-41CF-BEA3-247569C57BD3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={DC99F7C0-7CFB-413C-8E6F-D16EE6F7AB8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={3276B786-D941-4ABD-810D-5AE5E3106F02},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={F85BB204-89AC-441C-8589-F6F0D7F329B4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={3BF07D0A-37CC-4FA8-81DA-D351E301276A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={D36CD500-4FBE-4943-90EC-D7646AA41519},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={BFCC0446-6C34-413E-9611-520B993B04B1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={B1C9846E-5F65-40D5-BA10-79055269A722},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={2BDF5C8A-E036-4C5F-9275-9927CA13F3C6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={65937A4F-1784-4285-8C24-D06DA20D3AF0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={A4BACF9D-BF67-4909-AC27-8627DEA42367},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={C45AAE65-B109-4933-AA74-817CFBE6233A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={59C347AA-B20B-4146-B11B-E570BFDF7D81},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={E25426F9-3251-4E63-A4A4-06BA9A25ABDD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={9BC4D741-ADF6-496E-9DA7-8ADEDFF50252},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={63B09FF1-4A74-4963-B2D9-182293950F88},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={FBF7F8C3-003B-40EB-B316-260E7D5DD274},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={823855BF-3AC5-4C0C-87E6-AD864B361AAF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={7B2E98BC-F11A-4210-A219-05880ABC3333},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={9315FDA5-16DD-4475-84D6-277B8FD87283},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={9221364E-2674-41A1-B3AF-A7BEBBE7567D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={05AEBC59-942F-43EE-929D-21174A215441},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={ECE39B6C-338A-465E-A941-158F7D2E5795},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={B9937941-AA62-41C9-BCE7-3DBE63781A79},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:542]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:542]: Executing op: ComponentRegister(ComponentId={57056C41-556E-4FFA-A53F-31BB318C2243},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={AE86B1D3-36AD-45E7-B7A6-301DE878C695},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={ECB3B148-F965-49B5-A338-857D09CBC0B3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={5E31220B-69F2-4AD7-BD59-69C7F695A17C},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={719B5EDD-B014-4686-AB60-A4474B84240D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={E54C4F8D-A952-4E5C-B973-76D109A0E0EC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={9BB8ADD9-6613-46AC-9BD3-24B31A9F1594},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={E5EB5509-3611-458A-BE68-3477BF3D96CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={09FFDB10-614F-4899-82E8-85A7D8BFA32A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={FCEAE5B9-2AE7-47F8-91A5-D21203F761F0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={11B3AA50-1BDE-42AF-A841-1C249A848A31},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={E9D16629-7181-425B-83DC-0FDF61D63E11},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={189F69DA-324A-4F9A-9CDE-EF79A930D2AD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={262EB741-DEA1-43F2-BA2D-9DE0661F9C8C},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={8A03894B-68DA-452F-A18A-712256FA8A85},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={F21CB2A2-E3F4-4AF7-AC06-A1A66ACA0735},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={F4BF2F3A-652E-4CBA-8B19-B7EE4E251C29},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={2B97F024-FE76-40AC-9D67-FF52C6A46570},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={524153EC-3AC1-4F92-B7F5-18415FD243CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={01CC3BCC-55E1-4B1A-906A-FB7CE1A4629B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={5282C6CF-9946-4B05-B59F-6638E098E3DC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={B43C5DBE-50BB-429B-B447-4EB82AD8554D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={5C56F239-F279-4B01-879F-8729A44D44A0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={AE660058-42CE-44E1-8D2E-BD62AD69EE1E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={63138B11-92E8-4415-8064-1B9BC3A17F93},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={08A57BC6-9561-4F83-B710-A130F47DBA83},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={CA6E867B-7D76-4BBE-B278-04AFA8C84F9E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={C5B8B969-E83E-41E3-820E-9E47E219644E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={60BD5635-B25C-450A-9E36-EA84EDB18BDA},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={2E247D31-0A06-4AF5-ACE4-018BA1A73978},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={8BD71FEA-7E62-46B4-BBB2-19D4D3706BEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={56B38697-86C5-4537-92A0-F2E6CEF972B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={6C6EA6F0-CE05-4D37-8F3F-A957850E1AC6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={AEF7CD44-576B-4841-A0B4-58CEF190AFC5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={3570C981-DCAC-4D6C-AEB0-8D4943972259},KeyPath=02:\Software\Sophos\Web Intelligence\WebControlAvailable,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={B9CA91A9-8C87-4CCA-AA1A-73DFA321CE92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={15A3052C-E1D6-4ADE-9DF2-DAAF479F9A7B},KeyPath=02:\Software\Sophos\SAVService\SAVUI\plugins\WebControlPlugin.WebControlUIPlugin,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={DBD323D5-758C-4D26-BD2E-E46EB73EAC11},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={A871FD4C-242A-4F0A-B4AC-74BE34EC1BA0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={533F61E5-9143-4664-8DD0-02E1DACF312D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:557]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:557]: Executing op: ComponentRegister(ComponentId={26BAD5C1-B5B8-4E0A-888F-A4AD4B1095AE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\difxapi.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\difxapi.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={3630E612-875A-427A-8A2A-2708A9B24393},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={606B5C5C-66C9-490B-BBC3-77BFF00880E5},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={62922683-34EB-46E1-8AF4-E9D59E61833E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={A154E863-F3EA-44EA-B782-B241DECCC60B},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={B9056343-C8F6-454A-AAF5-DBA44FC0E1F5},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={BDE220A0-D203-449C-8A3F-648E1C889744},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={759C3654-CC88-4826-A930-E0BFB04EBD6B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={266D54B1-B706-4CCD-9C0A-01C33A70F79B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:573]: Executing op: ComponentRegister(ComponentId={8B4CB61B-B986-4851-A3A8-8A29B744166F},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:33:573]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:33:573]: Executing op: ActionStart(Name=ExecSecureObjectsRollback,,)
MSI (s) (28:F8) [12:08:33:573]: Executing op: CustomActionSchedule(Action=ExecSecureObjectsRollback,ActionType=3329,Source=BinaryData,Target=ExecSecureObjectsRollback,CustomActionData=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\CreateFolderD:AI(A;;FA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;OICIIO;GA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;ID;FA;;;BA)(A;OICIIOID;GA;;;BA)(A;ID;FA;;;SY)(A;OICIIOID;GA;;;SY)(A;ID;0x1200a9;;;WD)(A;OICIIOID;GXGR;;;WD)0)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1])
MSI (s) (28:F8) [12:08:33:573]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ServiceControl(,Name=Sophos Web Control Service,Action=2,Wait=1,)
MSI (s) (28:F8) [12:08:33:573]: Executing op: ActionStart(Name=DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101,,)
MSI (s) (28:F8) [12:08:33:573]: Executing op: CustomActionSchedule(Action=DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101,ActionType=3073,Source=BinaryData,Target=RenameAndMarkForDelete,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe)
MSI (s) (28:40) [12:08:33:573]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC0CE.tmp, Entrypoint: RenameAndMarkForDelete
MSI (s) (28:F8) [12:08:33:573]: Executing op: ActionStart(Name=DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101,,)
MSI (s) (28:F8) [12:08:33:573]: Executing op: CustomActionSchedule(Action=DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101,ActionType=3073,Source=BinaryData,Target=RenameAndMarkForDelete,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat)
MSI (s) (28:84) [12:08:33:573]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC0CF.tmp, Entrypoint: RenameAndMarkForDelete
MSI (s) (28:F8) [12:08:33:588]: Executing op: ActionStart(Name=WaitForSAVService,,)
MSI (s) (28:F8) [12:08:33:588]: Executing op: CustomActionSchedule(Action=WaitForSAVService,ActionType=1025,Source=BinaryData,Target=WaitForSAVService,)
MSI (s) (28:8C) [12:08:33:588]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC0DF.tmp, Entrypoint: WaitForSAVService
MSI (s) (28:F8) [12:08:33:588]: Executing op: ActionStart(Name=DeleteServices,Description=Deleting services,Template=Service: [1])
MSI (s) (28:F8) [12:08:33:588]: Executing op: ProgressTotal(Total=2,Type=1,ByteEquivalent=1300000)
MSI (s) (28:F8) [12:08:33:588]: Executing op: ServiceControl(,Name=SAVAdminService,Action=8,Wait=1,)
MSI (s) (28:F8) [12:08:34:614]: Executing op: ServiceControl(,Name=SAVService,Action=8,Wait=1,)
MSI (s) (28:F8) [12:08:34:614]: Executing op: ActionStart(Name=RemoveODBC,Description=Removing ODBC components,)
MSI (s) (28:F8) [12:08:34:614]: Executing op: ODBCDriverManager(,BinaryType=0)
MSI (s) (28:F8) [12:08:34:614]: Executing op: ODBCDriverManager(,BinaryType=1)
MSI (s) (28:F8) [12:08:34:614]: Executing op: ActionStart(Name=RemoveRegistryValues,Description=Removing system registry values,Template=Key: [1], Name: [2])
MSI (s) (28:F8) [12:08:34:614]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200)
MSI (s) (28:F8) [12:08:34:614]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\SAVI,,BinaryType=0,,)
MSI (s) (28:F8) [12:08:34:614]: Executing op: RegRemoveKey()
MSI (s) (28:F8) [12:08:34:614]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Sophos\SAVI 3: 2
MSI (s) (28:F8) [12:08:34:614]: Executing op: ActionStart(Name=Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A,,)
MSI (s) (28:F8) [12:08:34:614]: Executing op: CustomActionSchedule(Action=Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A,ActionType=1089,Source=BinaryData,Target=SwcPostUpgradeTasks,)
MSI (s) (28:FC) [12:08:34:614]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC4E7.tmp, Entrypoint: SwcPostUpgradeTasks
MSI (s) (28:F8) [12:08:34:629]: Executing op: ActionStart(Name=CheckUninstallDrivers,,)
MSI (s) (28:F8) [12:08:34:629]: Executing op: CustomActionSchedule(Action=CheckUninstallDrivers,ActionType=1025,Source=BinaryData,Target=CheckUninstallDrivers,)
MSI (s) (28:40) [12:08:34:629]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC4F8.tmp, Entrypoint: CheckUninstallDrivers
MSI (s) (28:F8) [12:08:34:645]: Executing op: ActionStart(Name=RemoveFiles,Description=Removing files,Template=File: [1], Directory: [9])
MSI (s) (28:F8) [12:08:34:645]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=175000)
MSI (s) (28:F8) [12:08:34:645]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FileRemove(,FileName=factory.xml,,)
MSI (s) (28:F8) [12:08:34:645]: Verifying accessibility of file: factory.xml
MSI (s) (28:F8) [12:08:34:645]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:34:645]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:34:645]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\logs\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Data Control\logs\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Device Control\logs\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Tamper Protection\logs\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:645]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,,)
MSI (s) (28:F8) [12:08:34:661]: Executing op: ActionStart(Name=DeleteIDEs,,)
MSI (s) (28:F8) [12:08:34:661]: Executing op: CustomActionSchedule(Action=DeleteIDEs,ActionType=1025,Source=BinaryData,Target=DeleteIDEs,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:CC) [12:08:34:661]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC518.tmp, Entrypoint: DeleteIDEs
MSI (s) (28:F8) [12:08:34:676]: Executing op: ActionStart(Name=DeleteBDLs,,)
MSI (s) (28:F8) [12:08:34:676]: Executing op: CustomActionSchedule(Action=DeleteBDLs,ActionType=1025,Source=BinaryData,Target=DeleteBDLs,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:4C) [12:08:34:676]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC529.tmp, Entrypoint: DeleteBDLs
MSI (s) (28:F8) [12:08:34:692]: Executing op: ActionStart(Name=DeleteHIPSConfig,,)
MSI (s) (28:F8) [12:08:34:692]: Executing op: CustomActionSchedule(Action=DeleteHIPSConfig,ActionType=1025,Source=BinaryData,Target=DeleteHIPSConfig,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:68) [12:08:34:692]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC53A.tmp, Entrypoint: DeleteHIPSConfig
MSI (s) (28:F8) [12:08:34:707]: Executing op: ActionStart(Name=RollbackForceDeleteFiles,,)
MSI (s) (28:F8) [12:08:34:707]: Executing op: CustomActionSchedule(Action=RollbackForceDeleteFiles,ActionType=1281,Source=BinaryData,Target=ForceDeleteFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:34:707]: Executing op: ActionStart(Name=RollbackForceDeleteUserPlugin,,)
MSI (s) (28:F8) [12:08:34:707]: Executing op: CustomActionSchedule(Action=RollbackForceDeleteUserPlugin,ActionType=1281,Source=BinaryData,Target=ForceDeleteUserPlugin,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:34:723]: Executing op: ActionStart(Name=RollbackOtherFiles,,)
MSI (s) (28:F8) [12:08:34:723]: Executing op: CustomActionSchedule(Action=RollbackOtherFiles,ActionType=1281,Source=BinaryData,Target=DeleteOtherFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:34:723]: Executing op: ActionStart(Name=RollbackUpdateSavAdapterDll,,)
MSI (s) (28:F8) [12:08:34:723]: Executing op: CustomActionSchedule(Action=RollbackUpdateSavAdapterDll,ActionType=1281,Source=BinaryData,Target=RollbackUpdateSavAdapterDll,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:34:723]: Executing op: ActionStart(Name=UpdateSavAdapterDll,,)
MSI (s) (28:F8) [12:08:34:723]: Executing op: CustomActionSchedule(Action=UpdateSavAdapterDll,ActionType=1025,Source=BinaryData,Target=UpdateSavAdapterDll,CustomActionData=;10.7.2.49;)
MSI (s) (28:A0) [12:08:34:723]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC55A.tmp, Entrypoint: UpdateSavAdapterDll
MSI (s) (28:F8) [12:08:44:761]: Executing op: ActionStart(Name=RollbackUpdateDesktopMessaging,,)
MSI (s) (28:F8) [12:08:44:761]: Executing op: CustomActionSchedule(Action=RollbackUpdateDesktopMessaging,ActionType=1281,Source=BinaryData,Target=UpdateDesktopMessaging,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:44:761]: Executing op: ActionStart(Name=UpdateDesktopMessaging,,)
MSI (s) (28:F8) [12:08:44:761]: Executing op: CustomActionSchedule(Action=UpdateDesktopMessaging,ActionType=1025,Source=BinaryData,Target=UpdateDesktopMessaging,CustomActionData=;10.7.2.49;)
MSI (s) (28:0C) [12:08:44:761]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIEC8A.tmp, Entrypoint: UpdateDesktopMessaging
MSI (s) (28:F8) [12:08:44:777]: Executing op: ActionStart(Name=CopyOtherFiles,,)
MSI (s) (28:F8) [12:08:44:777]: Executing op: CustomActionSchedule(Action=CopyOtherFiles,ActionType=1025,Source=BinaryData,Target=CopyOtherFiles,CustomActionData="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64")
MSI (s) (28:68) [12:08:44:777]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIEC9B.tmp, Entrypoint: CopyOtherFiles
MSI (s) (28:F8) [12:08:44:808]: Executing op: ActionStart(Name=RegisterBufferOverflowProtection,,)
MSI (s) (28:F8) [12:08:44:808]: Executing op: CustomActionSchedule(Action=RegisterBufferOverflowProtection,ActionType=1025,Source=BinaryData,Target=RegisterBufferOverflowProtection,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:1C) [12:08:44:808]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIECBB.tmp, Entrypoint: RegisterBufferOverflowProtection
MSI (s) (28:F8) [12:08:44:823]: Executing op: ActionStart(Name=RollbackClassFilter64Vista,,)
MSI (s) (28:F8) [12:08:44:823]: Executing op: CustomActionSchedule(Action=RollbackClassFilter64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SDCFILTER.INF",)
MSI (s) (28:F8) [12:08:44:823]: Executing op: ActionStart(Name=RollbackBootDriver64Vista,,)
MSI (s) (28:F8) [12:08:44:823]: Executing op: CustomActionSchedule(Action=RollbackBootDriver64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF",)
MSI (s) (28:F8) [12:08:44:823]: Executing op: ActionStart(Name=RollbackDriverFiles64Vista,,)
MSI (s) (28:F8) [12:08:44:823]: Executing op: CustomActionSchedule(Action=RollbackDriverFiles64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF",)
MSI (s) (28:F8) [12:08:44:823]: Executing op: ActionStart(Name=RestoreExcludedProcesses,,)
MSI (s) (28:F8) [12:08:44:823]: Executing op: CustomActionSchedule(Action=RestoreExcludedProcesses,ActionType=1025,Source=BinaryData,Target=RestoreExcludedProcesses,)
MSI (s) (28:28) [12:08:44:839]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIECCC.tmp, Entrypoint: RestoreExcludedProcesses
MSI (s) (28:F8) [12:08:44:839]: Executing op: ActionStart(Name=InstallBootDriverAMD64Win7,,)
MSI (s) (28:F8) [12:08:44:839]: Executing op: CustomActionSchedule(Action=InstallBootDriverAMD64Win7,ActionType=1058,Source=C:\Windows\SysWOW64\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhi "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_amd64\SOPHOSBOOTDRIVER.INF",)
MSI (s) (28:F8) [12:08:44:948]: Executing op: ActionStart(Name=InstallDriverFilesAMD64Win7,,)
MSI (s) (28:F8) [12:08:44:948]: Executing op: CustomActionSchedule(Action=InstallDriverFilesAMD64Win7,ActionType=1058,Source=C:\Windows\SysWOW64\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhi "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\win7_amd64\SAVONACCESSDRIV.INF",)
MSI (s) (28:F8) [12:08:44:980]: Executing op: ActionStart(Name=InstallClassFilterAMD64Win7,,)
MSI (s) (28:F8) [12:08:44:980]: Executing op: CustomActionSchedule(Action=InstallClassFilterAMD64Win7,ActionType=1058,Source=C:\Windows\SysWOW64\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhi "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\win7_amd64\SDCFILTER.INF",)
MSI (s) (28:F8) [12:08:45:011]: Executing op: ActionStart(Name=StartDriverServices,,)
MSI (s) (28:F8) [12:08:45:011]: Executing op: CustomActionSchedule(Action=StartDriverServices,ActionType=1025,Source=BinaryData,Target=StartDriverServices,CustomActionData=WIN7_AMD64)
MSI (s) (28:FC) [12:08:45:011]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIED88.tmp, Entrypoint: StartDriverServices
MSI (s) (28:F8) [12:08:45:027]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1], Directory: [9], Size: [6])
MSI (s) (28:F8) [12:08:45:027]: Executing op: ProgressTotal(Total=52261196,Type=0,ByteEquivalent=1)
MSI (s) (28:F8) [12:08:45:027]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:027]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:027]: Executing op: ChangeMedia(MediaVolumeLabel=DISK1,MediaPrompt=Please insert the disk: 1,,BytesPerTick=65536,CopierType=0,,,,,,IsFirstPhysicalMedia=1)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=AppFeedManager.dll,Component={52411750-073E-47D7-BB97-8B404AF42B76},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=AppFeedManager.dll,Component={52411750-073E-47D7-BB97-8B404AF42B76},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: FileCopy(SourceName=APPFEE~1.DLL|AppFeedManager.dll,SourceCabKey=AppFeedManager.dll,DestName=AppFeedManager.dll,Attributes=8192,FileSize=388048,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:027]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=ApplicationManagement.dll,Component={F5D90A95-0F03-41CF-BEA3-247569C57BD3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=ApplicationManagement.dll,Component={F5D90A95-0F03-41CF-BEA3-247569C57BD3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: FileCopy(SourceName=APPLIC~1.DLL|ApplicationManagement.dll,SourceCabKey=ApplicationManagement.dll,DestName=ApplicationManagement.dll,Attributes=8192,FileSize=395848,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:027]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:027]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\)
MSI (s) (28:F8) [12:08:45:027]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\l3j1top6\|program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=atl90.dll,Component={341B1BFF-FEAD-4104-A29F-E9363B7517BF},ComponentVersion=9.0.30729.6161,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=atl90.dll,Component={341B1BFF-FEAD-4104-A29F-E9363B7517BF},ComponentVersion=9.0.30729.6161,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: FileCopy(SourceName=atl90.dll,SourceCabKey=atl90.dll,DestName=atl90.dll,Attributes=512,FileSize=159048,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=9.0.30729.6161,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:027]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:027]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:027]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=authorisedlists.dll,Component={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: RegisterSharedComponentProvider(,,File=authorisedlists.dll,Component={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:027]: Executing op: FileCopy(SourceName=AUTHOR~1.DLL|AuthorisedLists.dll,SourceCabKey=authorisedlists.dll,DestName=AuthorisedLists.dll,Attributes=8192,FileSize=212528,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=BACKGR~1.EXE|BackgroundScanClient.exe,SourceCabKey=backgroundscanclient.exe,DestName=BackgroundScanClient.exe,Attributes=8192,FileSize=78512,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:042]: Source for file 'BackgroundScanClient.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=backgroundscanning.dll,Component={D36CD500-4FBE-4943-90EC-D7646AA41519},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=backgroundscanning.dll,Component={D36CD500-4FBE-4943-90EC-D7646AA41519},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=BACKGR~1.DLL|BackgroundScanning.dll,SourceCabKey=backgroundscanning.dll,DestName=BackgroundScanning.dll,Attributes=8192,FileSize=78456,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=bhomanagement.dll,Component={3BF07D0A-37CC-4FA8-81DA-D351E301276A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=bhomanagement.dll,Component={3BF07D0A-37CC-4FA8-81DA-D351E301276A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=BHOMAN~1.DLL|BHOManagement.dll,SourceCabKey=bhomanagement.dll,DestName=BHOManagement.dll,Attributes=8192,FileSize=312728,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:042]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:042]: Executing op: SetSourceFolder(Folder=1\Common~1\Sophos\SOPHOS~1\Config\|CommonAppData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=BOOTST~1.XML|bootstrap.xml,SourceCabKey=bootstrap.xml1,DestName=bootstrap.xml,Attributes=8192,FileSize=684,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1283468515,HashPart2=-1301290065,HashPart3=26756618,HashPart4=1310087793,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\bootstrap.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:042]: Source for file 'bootstrap.xml' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:45:042]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:042]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=bpaif.dll,Component={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},ComponentVersion=2.5.0.99,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=bpaif.dll,Component={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},ComponentVersion=2.5.0.99,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=bpaif.dll,SourceCabKey=bpaif.dll,DestName=bpaif.dll,Attributes=8192,FileSize=265480,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.5.0.99,Language=2057,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=CATEGO~1.DLL|Categories.dll,SourceCabKey=Categories.dll,DestName=Categories.dll,Attributes=8192,FileSize=21784,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:042]: Source for file 'Categories.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=componentmanager.dll,Component={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=componentmanager.dll,Component={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=COMPON~1.DLL|ComponentManager.dll,SourceCabKey=componentmanager.dll,DestName=ComponentManager.dll,Attributes=8192,FileSize=98664,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=configuration.dll,Component={BFCC0446-6C34-413E-9611-520B993B04B1},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: RegisterSharedComponentProvider(,,File=configuration.dll,Component={BFCC0446-6C34-413E-9611-520B993B04B1},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:042]: Executing op: FileCopy(SourceName=CONFIG~1.DLL|Configuration.dll,SourceCabKey=configuration.dll,DestName=Configuration.dll,Attributes=8192,FileSize=347568,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:042]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=datacontrolmanagement.dll,Component={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=datacontrolmanagement.dll,Component={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=DATACO~1.DLL|DataControlManagement.dll,SourceCabKey=datacontrolmanagement.dll,DestName=DataControlManagement.dll,Attributes=8192,FileSize=660296,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=DATACO~2.DLL|DataControlPlugin.dll,SourceCabKey=datacontrolplugin.dll,DestName=DataControlPlugin.dll,Attributes=8192,FileSize=243672,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:058]: Source for file 'DataControlPlugin.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=dcmanagement.dll,Component={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=dcmanagement.dll,Component={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=DCMANA~1.DLL|DCManagement.dll,SourceCabKey=dcmanagement.dll,DestName=DCManagement.dll,Attributes=8192,FileSize=159016,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=DESKTO~1.DLL|DesktopMessaging.dll,SourceCabKey=desktopmessaging.dll,DestName=DesktopMessaging.dll,Attributes=8192,FileSize=454600,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:058]: Source for file 'DesktopMessaging.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=detectionfeedback.dll,Component={3276B786-D941-4ABD-810D-5AE5E3106F02},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=detectionfeedback.dll,Component={3276B786-D941-4ABD-810D-5AE5E3106F02},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=DETECT~1.DLL|DetectionFeedback.dll,SourceCabKey=detectionfeedback.dll,DestName=DetectionFeedback.dll,Attributes=8192,FileSize=1175064,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=DEVICE~1.DLL|DeviceControlPlugin.dll,SourceCabKey=devicecontrolplugin.dll,DestName=DeviceControlPlugin.dll,Attributes=8192,FileSize=259272,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:058]: Source for file 'DeviceControlPlugin.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:058]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:058]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\)
MSI (s) (28:F8) [12:08:45:058]: Executing op: FileCopy(SourceName=difxapi.dll,SourceCabKey=DIFxApi_64.dll.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=difxapi.dll,Attributes=9728,FileSize=414152,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.1.0.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:058]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\difxapi.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:058]: Source for file 'difxapi.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (28:F8) [12:08:45:058]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:058]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=driveprocessor.dll,Component={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:058]: Executing op: RegisterSharedComponentProvider(,,File=driveprocessor.dll,Component={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:073]: Executing op: FileCopy(SourceName=DRIVEP~1.DLL|DriveProcessor.dll,SourceCabKey=driveprocessor.dll,DestName=DriveProcessor.dll,Attributes=8192,FileSize=150640,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:073]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:073]: Executing op: RegisterSharedComponentProvider(,,File=eeconsumer.dll,Component={65937A4F-1784-4285-8C24-D06DA20D3AF0},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:073]: Executing op: RegisterSharedComponentProvider(,,File=eeconsumer.dll,Component={65937A4F-1784-4285-8C24-D06DA20D3AF0},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:073]: Executing op: FileCopy(SourceName=EECONS~1.DLL|EEConsumer.dll,SourceCabKey=eeconsumer.dll,DestName=EEConsumer.dll,Attributes=8192,FileSize=111704,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:073]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:073]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:073]: Executing op: SetSourceFolder(Folder=1\Common~1\Sophos\SOPHOS~1\Config\|CommonAppData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:073]: Executing op: FileCopy(SourceName=factory.xml,SourceCabKey=factory.xml1,DestName=factory.xml,Attributes=8192,FileSize=126126,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-921359334,HashPart2=-1894227237,HashPart3=-1212140918,HashPart4=1460286026,,)
MSI (s) (28:F8) [12:08:45:073]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:073]: Source for file 'factory.xml' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:45:073]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:073]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:073]: Executing op: FileCopy(SourceName=2fgepqm2.dll|swi_filter.dll,SourceCabKey=FilterDll_32.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_filter.dll,Attributes=9728,FileSize=2402232,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:089]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:089]: Executing op: FileCopy(SourceName=9vuh_wua.dll|swi_filter_64.dll,SourceCabKey=FilterDll_64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_filter_64.dll,Attributes=9728,FileSize=3607536,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter_64.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:105]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:105]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=filterprocessors.dll,Component={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=filterprocessors.dll,Component={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=FILTER~1.DLL|FilterProcessors.dll,SourceCabKey=filterprocessors.dll,DestName=FilterProcessors.dll,Attributes=8192,FileSize=234392,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=FORCEU~1.EXE|ForceUpdateAlongSideSGN.exe,SourceCabKey=ForceUpdateAlongSideSGN.exe,DestName=ForceUpdateAlongSideSGN.exe,Attributes=8192,FileSize=220840,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:105]: Source for file 'ForceUpdateAlongSideSGN.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=fsdecomposer.dll,Component={A4BACF9D-BF67-4909-AC27-8627DEA42367},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=fsdecomposer.dll,Component={A4BACF9D-BF67-4909-AC27-8627DEA42367},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=FSDECO~1.DLL|FSDecomposer.dll,SourceCabKey=fsdecomposer.dll,DestName=FSDecomposer.dll,Attributes=8192,FileSize=97128,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=icadapter.dll,Component={C45AAE65-B109-4933-AA74-817CFBE6233A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=icadapter.dll,Component={C45AAE65-B109-4933-AA74-817CFBE6233A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=ICADAP~1.DLL|ICAdapter.dll,SourceCabKey=icadapter.dll,DestName=ICAdapter.dll,Attributes=8192,FileSize=171992,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=icmanagement.dll,Component={59C347AA-B20B-4146-B11B-E570BFDF7D81},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=icmanagement.dll,Component={59C347AA-B20B-4146-B11B-E570BFDF7D81},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=ICMANA~1.DLL|ICManagement.dll,SourceCabKey=icmanagement.dll,DestName=ICManagement.dll,Attributes=8192,FileSize=587592,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=icprocessors.dll,Component={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: RegisterSharedComponentProvider(,,File=icprocessors.dll,Component={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=ICPROC~1.DLL|ICProcessors.dll,SourceCabKey=icprocessors.dll,DestName=ICProcessors.dll,Attributes=8192,FileSize=350704,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:105]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:105]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:105]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:105]: Executing op: FileCopy(SourceName=_gto3zmn.dll|swi_ifslsp.dll,SourceCabKey=IfsLspDll_32.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_ifslsp.dll,Attributes=9728,FileSize=139832,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_ifslsp.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:120]: Executing op: FileCopy(SourceName=98vqitdp.dll|swi_ifslsp_64.dll,SourceCabKey=IfsLspDll_64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_ifslsp_64.dll,Attributes=9728,FileSize=198016,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_ifslsp_64.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: FileCopy(SourceName=zwfnvjni.dll|Instrumentation.dll,SourceCabKey=instrumentation.dll,DestName=Instrumentation.dll,Attributes=8192,FileSize=69568,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:120]: Source for file 'Instrumentation.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:120]: Executing op: FileCopy(SourceName=rzrxcnul.man|Instrumentation.man,SourceCabKey=Instrumentation.man,DestName=Instrumentation.man,Attributes=9728,FileSize=199680,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1688015182,HashPart2=1885137337,HashPart3=-743041656,HashPart4=1998841971,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:120]: Source for file 'Instrumentation.man' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:120]: Executing op: FileCopy(SourceName=INTEGR~1.DAT|integrity.dat,SourceCabKey=integrity.dat,DestName=integrity.dat,Attributes=8192,FileSize=3453,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-681942415,HashPart2=1484325737,HashPart3=-492754262,HashPart4=-1009882956,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:120]: Source for file 'integrity.dat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: FileCopy(SourceName=yqktopiz.dat|integrity.dat,SourceCabKey=integrity.dat.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=integrity.dat,Attributes=9728,FileSize=3643,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-680901075,HashPart2=1417526268,HashPart3=-277959069,HashPart4=-1650354639,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:120]: Source for file 'integrity.dat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\|program files\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: FileCopy(SourceName=8shyajoi.dat|integrity.dat,SourceCabKey=integrity_dat.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=integrity.dat,Attributes=8192,FileSize=1658,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1923858163,HashPart2=1012856950,HashPart3=-66078569,HashPart4=1535861683,,)
MSI (s) (28:F8) [12:08:45:120]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:120]: Source for file 'integrity.dat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:120]: Executing op: RegisterSharedComponentProvider(,,File=legacyconsumers.dll,Component={63B09FF1-4A74-4963-B2D9-182293950F88},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:120]: Executing op: RegisterSharedComponentProvider(,,File=legacyconsumers.dll,Component={63B09FF1-4A74-4963-B2D9-182293950F88},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=LEGACY~1.DLL|LegacyConsumers.dll,SourceCabKey=legacyconsumers.dll,DestName=LegacyConsumers.dll,Attributes=8192,FileSize=99744,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:136]: Executing op: RegisterSharedComponentProvider(,,File=localisation.dll,Component={FBF7F8C3-003B-40EB-B316-260E7D5DD274},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:136]: Executing op: RegisterSharedComponentProvider(,,File=localisation.dll,Component={FBF7F8C3-003B-40EB-B316-260E7D5DD274},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=LOCALI~1.DLL|Localisation.dll,SourceCabKey=localisation.dll,DestName=Localisation.dll,Attributes=8192,FileSize=126792,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:136]: Executing op: RegisterSharedComponentProvider(,,File=logging.dll,Component={823855BF-3AC5-4C0C-87E6-AD864B361AAF},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:136]: Executing op: RegisterSharedComponentProvider(,,File=logging.dll,Component={823855BF-3AC5-4C0C-87E6-AD864B361AAF},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=Logging.dll,SourceCabKey=logging.dll,DestName=Logging.dll,Attributes=8192,FileSize=459840,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=8wviy5e1.exe|swi_lsp32_util.exe,SourceCabKey=LspUtil_32.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_lsp32_util.exe,Attributes=9728,FileSize=251472,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_lsp32_util.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetSourceFolder(Folder=1\Common~1\Sophos\SOPHOS~1\Config\|CommonAppData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=machine.xml,SourceCabKey=machine.xml1,DestName=machine.xml,Attributes=8192,FileSize=31430,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1240029550,HashPart2=-1164467261,HashPart3=-14045040,HashPart4=1512465604,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:136]: Source for file 'machine.xml' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\l3j1top6\|program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=mpzerb-d.man|Microsoft.VC90.ATL.manifest,SourceCabKey=Microsoft.VC90.ATL.manifest,DestName=Microsoft.VC90.ATL.manifest,Attributes=512,FileSize=856,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1414776,HashPart2=977359063,HashPart3=2115947134,HashPart4=-1416651439,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:136]: Source for file 'Microsoft.VC90.ATL.manifest' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\'.
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\oeg2ttzz\|program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\)
MSI (s) (28:F8) [12:08:45:136]: Executing op: FileCopy(SourceName=nh5e9bnm.man|Microsoft.VC90.CRT.manifest,SourceCabKey=Microsoft.VC90.CRT.manifest,DestName=Microsoft.VC90.CRT.manifest,Attributes=512,FileSize=1860,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1849787048,HashPart2=1770411215,HashPart3=-1880307480,HashPart4=1204704877,,)
MSI (s) (28:F8) [12:08:45:136]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:136]: Source for file 'Microsoft.VC90.CRT.manifest' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'.
MSI (s) (28:F8) [12:08:45:152]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:152]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=mime.txt,SourceCabKey=mimemagic.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=mime.txt,Attributes=9728,FileSize=8692,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1300833179,HashPart2=2127525240,HashPart3=990588511,HashPart4=-457325937,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\mime.txt; Won't Overwrite; Won't patch; Existing file is unversioned and unmodified - hash matches source file
MSI (s) (28:F8) [12:08:45:152]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\)
MSI (s) (28:F8) [12:08:45:152]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\oeg2ttzz\|program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\)
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=msvcm90.dll,SourceCabKey=msvcm90.dll,DestName=msvcm90.dll,Attributes=512,FileSize=225280,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=9.0.30729.6161,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:152]: Source for file 'msvcm90.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'.
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=msvcp90.dll,SourceCabKey=msvcp90.dll,DestName=msvcp90.dll,Attributes=512,FileSize=569680,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=9.0.30729.6161,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:152]: Source for file 'msvcp90.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'.
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=msvcr90.dll,SourceCabKey=msvcr90.dll,DestName=msvcr90.dll,Attributes=512,FileSize=653136,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=9.0.30729.6161,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:152]: Source for file 'msvcr90.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'.
MSI (s) (28:F8) [12:08:45:152]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:152]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:152]: Executing op: RegisterSharedComponentProvider(,,File=persistance.dll,Component={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:152]: Executing op: RegisterSharedComponentProvider(,,File=persistance.dll,Component={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=PERSIS~1.DLL|Persistance.dll,SourceCabKey=persistance.dll,DestName=Persistance.dll,Attributes=8192,FileSize=101280,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=ps.crl,SourceCabKey=ps.crl,DestName=ps.crl,Attributes=8192,FileSize=2088,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1485947798,HashPart2=882664647,HashPart3=-868776249,HashPart4=1085696365,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:152]: Source for file 'ps.crl' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:152]: Executing op: FileCopy(SourceName=zcmmymj9.crt|ps_rootca.crt,SourceCabKey=ps_rootca.crt,DestName=ps_rootca.crt,Attributes=8192,FileSize=1306,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1125782938,HashPart2=-1631502551,HashPart3=-1580007443,HashPart4=1881380357,,)
MSI (s) (28:F8) [12:08:45:152]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:152]: Source for file 'ps_rootca.crt' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:167]: Executing op: FileCopy(SourceName=public.pem,SourceCabKey=public.pem,DestName=public.pem,Attributes=8192,FileSize=451,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1893667783,HashPart2=-756523641,HashPart3=1309756759,HashPart4=1579450992,,)
MSI (s) (28:F8) [12:08:45:167]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:167]: Source for file 'public.pem' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:167]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:167]: Executing op: SetSourceFolder(Folder=1\Common~1\Sophos\SOPHOS~1\Config\|CommonAppData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:167]: Executing op: FileCopy(SourceName=QUARAN~1.XML|Quarantine.xml,SourceCabKey=Quarantine.xml1,DestName=Quarantine.xml,Attributes=8192,FileSize=224,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1914655278,HashPart2=-40098590,HashPart3=-1419608711,HashPart4=-55984252,,)
MSI (s) (28:F8) [12:08:45:167]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\Quarantine.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:167]: Source for file 'Quarantine.xml' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:45:167]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:167]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:167]: Executing op: FileCopy(SourceName=s4yqkaur.dll|Safestore32.dll,SourceCabKey=SafeStore32.dll,DestName=Safestore32.dll,Attributes=8192,FileSize=1683128,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.1.0.16,Language=2057,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:167]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:167]: Source for file 'Safestore32.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:167]: Executing op: FileCopy(SourceName=udwfuvfg.dll|SafeStore64.dll,SourceCabKey=SafeStore64.dll,DestName=SafeStore64.dll,Attributes=8192,FileSize=2254544,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.1.0.8,Language=2057,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:167]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:167]: Source for file 'SafeStore64.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=sav32cli.exe,SourceCabKey=sav32cli.exe,DestName=sav32cli.exe,Attributes=8192,FileSize=517792,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2.99.4.0,Language=2057,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:183]: Source for file 'sav32cli.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:183]: Executing op: RegisterSharedComponentProvider(,,File=savadapter.dll,Component={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:183]: Executing op: RegisterSharedComponentProvider(,,File=savadapter.dll,Component={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=SAVADA~1.DLL|SavAdapter.dll,SourceCabKey=savadapter.dll,DestName=SavAdapter.dll,Attributes=8192,FileSize=1202560,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:183]: Executing op: RegisterSharedComponentProvider(,,File=SAVAdminService.exe,Component={FE613E3D-0469-40F8-9A0F-635D16097928},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:183]: Executing op: RegisterSharedComponentProvider(,,File=SAVAdminService.exe,Component={FE613E3D-0469-40F8-9A0F-635D16097928},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=SAVADM~1.EXE|SAVAdminService.exe,SourceCabKey=SAVAdminService.exe,DestName=SAVAdminService.exe,Attributes=8192,FileSize=229664,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=SAVCLE~1.EXE|SAVCleanupService.exe,SourceCabKey=SAVCleanupService.exe,DestName=SAVCleanupService.exe,Attributes=8192,FileSize=153712,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:183]: Source for file 'SAVCleanupService.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=SAVCON~1.DLL|SAVControl.dll,SourceCabKey=savcontrol.dll,DestName=SAVControl.dll,Attributes=8192,FileSize=207800,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:183]: Source for file 'SAVControl.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=SAVHEL~1.CHM|SAVHelpChs.chm,SourceCabKey=SAVHelpChs.chm,DestName=SAVHelpChs.chm,Attributes=8192,FileSize=339785,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-859269826,HashPart2=-729265504,HashPart3=-978718668,HashPart4=671312745,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:183]: Source for file 'SAVHelpChs.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:183]: Executing op: FileCopy(SourceName=SAVHEL~2.CHM|SAVHelpCht.chm,SourceCabKey=SAVHelpCht.chm,DestName=SAVHelpCht.chm,Attributes=8192,FileSize=336410,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1208305288,HashPart2=-612818263,HashPart3=1839325732,HashPart4=380833433,,)
MSI (s) (28:F8) [12:08:45:183]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:183]: Source for file 'SAVHelpCht.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:199]: Executing op: FileCopy(SourceName=SAVHEL~3.CHM|SAVHelpDeu.chm,SourceCabKey=SAVHelpDeu.chm,DestName=SAVHelpDeu.chm,Attributes=8192,FileSize=328498,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=467790353,HashPart2=225288528,HashPart3=-329565745,HashPart4=-1866898155,,)
MSI (s) (28:F8) [12:08:45:199]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:199]: Source for file 'SAVHelpDeu.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:199]: Executing op: FileCopy(SourceName=SAVHEL~8.CHM|SavHelpEng.chm,SourceCabKey=SavHelpEng.chm,DestName=SavHelpEng.chm,Attributes=8192,FileSize=304856,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-58577952,HashPart2=-1754722703,HashPart3=1875168507,HashPart4=349898754,,)
MSI (s) (28:F8) [12:08:45:199]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:199]: Source for file 'SavHelpEng.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:199]: Executing op: FileCopy(SourceName=SAVHEL~4.CHM|SAVHelpEsp.chm,SourceCabKey=SAVHelpEsp.chm,DestName=SAVHelpEsp.chm,Attributes=8192,FileSize=318190,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-445411864,HashPart2=1943045887,HashPart3=2131213194,HashPart4=745528321,,)
MSI (s) (28:F8) [12:08:45:199]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:199]: Source for file 'SAVHelpEsp.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:199]: Executing op: FileCopy(SourceName=SAVHEL~5.CHM|SAVHelpFra.chm,SourceCabKey=SAVHelpFra.chm,DestName=SAVHelpFra.chm,Attributes=8192,FileSize=341587,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-359820583,HashPart2=-1433059567,HashPart3=968942044,HashPart4=-78657211,,)
MSI (s) (28:F8) [12:08:45:199]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:199]: Source for file 'SAVHelpFra.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:214]: Executing op: FileCopy(SourceName=SAVHEL~6.CHM|SAVHelpIta.chm,SourceCabKey=SAVHelpIta.chm,DestName=SAVHelpIta.chm,Attributes=8192,FileSize=330329,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-386050520,HashPart2=501722575,HashPart3=485291917,HashPart4=1341090753,,)
MSI (s) (28:F8) [12:08:45:214]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:214]: Source for file 'SAVHelpIta.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:214]: Executing op: FileCopy(SourceName=SAVHEL~7.CHM|SAVHelpJap.chm,SourceCabKey=SAVHelpJap.chm,DestName=SAVHelpJap.chm,Attributes=8192,FileSize=388696,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-810646475,HashPart2=-1327943539,HashPart3=-48323760,HashPart4=-1945953068,,)
MSI (s) (28:F8) [12:08:45:214]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:214]: Source for file 'SAVHelpJap.chm' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:214]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:214]: Executing op: SetSourceFolder(Folder=1\Common~1\Sophos\SOPHOS~1\Config\|CommonAppData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:214]: Executing op: FileCopy(SourceName=SAVICO~1.XML|SAVIConfigFile.xml,SourceCabKey=SAVIConfigFile.xml,DestName=SAVIConfigFile.xml,Attributes=8192,FileSize=20069,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-714473973,HashPart2=-1535442045,HashPart3=1258245095,HashPart4=-2146596827,,)
MSI (s) (28:F8) [12:08:45:214]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\SAVIConfigFile.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:214]: Source for file 'SAVIConfigFile.xml' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:45:214]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:214]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:214]: Executing op: FileCopy(SourceName=SavMain.exe,SourceCabKey=savmain.exe,DestName=SavMain.exe,Attributes=8192,FileSize=1659392,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:214]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:214]: Source for file 'SavMain.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:230]: Executing op: FileCopy(SourceName=SAVNEU~1.DLL|SavNeutralRes.dll,SourceCabKey=SavNeutralRes.dll,DestName=SavNeutralRes.dll,Attributes=8192,FileSize=3232856,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:230]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:230]: Source for file 'SavNeutralRes.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:230]: Executing op: FileCopy(SourceName=SAVPLU~1.DLL|SavPlugin.dll,SourceCabKey=savplugin.dll,DestName=SavPlugin.dll,Attributes=8192,FileSize=87280,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:230]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:230]: Source for file 'SavPlugin.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:230]: Executing op: FileCopy(SourceName=SAVPRO~1.EXE|SavProgress.exe,SourceCabKey=savprogress.exe,DestName=SavProgress.exe,Attributes=8192,FileSize=410992,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:230]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:230]: Source for file 'SavProgress.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:230]: Executing op: RegisterSharedComponentProvider(,,File=SavRes.dll,Component={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:230]: Executing op: RegisterSharedComponentProvider(,,File=SavRes.dll,Component={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:230]: Executing op: FileCopy(SourceName=SavRes.dll,SourceCabKey=SavRes.dll,DestName=SavRes.dll,Attributes=8192,FileSize=769376,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:230]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:230]: Executing op: FileCopy(SourceName=SAVRES~1.DLL|SavResChs.dll,SourceCabKey=SavResChs.dll,DestName=SavResChs.dll,Attributes=8192,FileSize=143352,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:230]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:230]: Source for file 'SavResChs.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:245]: Executing op: FileCopy(SourceName=SAVRES~2.DLL|SavResCht.dll,SourceCabKey=SavResCht.dll,DestName=SavResCht.dll,Attributes=8192,FileSize=142840,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:245]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:245]: Source for file 'SavResCht.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:245]: Executing op: FileCopy(SourceName=SAVRES~3.DLL|SavResDeu.dll,SourceCabKey=SavResDeu.dll,DestName=SavResDeu.dll,Attributes=8192,FileSize=203136,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:245]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:245]: Source for file 'SavResDeu.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:245]: Executing op: FileCopy(SourceName=SAVRES~4.DLL|SavResEng.dll,SourceCabKey=SavResEng.dll,DestName=SavResEng.dll,Attributes=8192,FileSize=194824,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:245]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:245]: Source for file 'SavResEng.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:245]: Executing op: FileCopy(SourceName=SAVRES~5.DLL|SavResEsp.dll,SourceCabKey=SavResEsp.dll,DestName=SavResEsp.dll,Attributes=8192,FileSize=202560,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:245]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:245]: Source for file 'SavResEsp.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:245]: Executing op: FileCopy(SourceName=SAVRES~6.DLL|SavResFra.dll,SourceCabKey=SavResFra.dll,DestName=SavResFra.dll,Attributes=8192,FileSize=214008,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:245]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:245]: Source for file 'SavResFra.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SavResIt.dll,SourceCabKey=SavResIt.dll,DestName=SavResIt.dll,Attributes=8192,FileSize=209336,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:261]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:261]: Source for file 'SavResIt.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SAVRES~7.DLL|SavResJap.dll,SourceCabKey=SavResJap.dll,DestName=SavResJap.dll,Attributes=8192,FileSize=157928,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:261]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:261]: Source for file 'SavResJap.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:261]: Executing op: RegisterSharedComponentProvider(,,File=savsecurity.dll,Component={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:261]: Executing op: RegisterSharedComponentProvider(,,File=savsecurity.dll,Component={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SAVSEC~1.DLL|SavSecurity.dll,SourceCabKey=savsecurity.dll,DestName=SavSecurity.dll,Attributes=8192,FileSize=137152,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:261]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:261]: Executing op: RegisterSharedComponentProvider(,,File=SAVService.exe,Component={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:261]: Executing op: RegisterSharedComponentProvider(,,File=SAVService.exe,Component={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SAVSER~1.EXE|SavService.exe,SourceCabKey=SAVService.exe,DestName=SavService.exe,Attributes=8192,FileSize=200064,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:261]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SAVSHE~3.DLL|SavShellExt.dll,SourceCabKey=savshellext.dll,DestName=SavShellExt.dll,Attributes=8192,FileSize=222888,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:261]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:261]: Source for file 'SavShellExt.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SAVSHE~2.DLL|SavShellExtX64.dll,SourceCabKey=SavShellExtX64.dll,DestName=SavShellExtX64.dll,Attributes=8192,FileSize=546488,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:261]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:261]: Source for file 'SavShellExtX64.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:261]: Executing op: FileCopy(SourceName=SAVTelem.exe,SourceCabKey=SAVTelem.exe,DestName=SAVTelem.exe,Attributes=8192,FileSize=54088,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:277]: Source for file 'SAVTelem.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=SAVUS~1.DLL|SAVUserContext.dll,SourceCabKey=savusercontext.dll,DestName=SAVUserContext.dll,Attributes=8192,FileSize=87792,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:277]: Source for file 'SAVUserContext.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=SCANED~1.DLL|ScanEditExports.dll,SourceCabKey=scaneditexports.dll,DestName=ScanEditExports.dll,Attributes=8192,FileSize=35352,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:277]: Source for file 'ScanEditExports.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:277]: Executing op: RegisterSharedComponentProvider(,,File=scaneditfacade.dll,Component={AE86B1D3-36AD-45E7-B7A6-301DE878C695},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:277]: Executing op: RegisterSharedComponentProvider(,,File=scaneditfacade.dll,Component={AE86B1D3-36AD-45E7-B7A6-301DE878C695},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=SCANED~2.DLL|ScanEditFacade.dll,SourceCabKey=scaneditfacade.dll,DestName=ScanEditFacade.dll,Attributes=8192,FileSize=190664,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:277]: Executing op: RegisterSharedComponentProvider(,,File=scanmanagement.dll,Component={ECB3B148-F965-49B5-A338-857D09CBC0B3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:277]: Executing op: RegisterSharedComponentProvider(,,File=scanmanagement.dll,Component={ECB3B148-F965-49B5-A338-857D09CBC0B3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=SCANMA~1.DLL|ScanManagement.dll,SourceCabKey=scanmanagement.dll,DestName=ScanManagement.dll,Attributes=8192,FileSize=296160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=scf.dat,SourceCabKey=scf.dat,DestName=scf.dat,Attributes=8192,FileSize=3265,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1162287114,HashPart2=798828652,HashPart3=614476915,HashPart4=670360116,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:277]: Source for file 'scf.dat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:277]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:277]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=scf.dat,SourceCabKey=ScfDotDat_32.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=scf.dat,Attributes=9728,FileSize=3052,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=755188754,HashPart2=-182841540,HashPart3=-224286364,HashPart4=-1540807358,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat; Won't Overwrite; Won't patch; Existing file is unversioned and unmodified - hash matches source file
MSI (s) (28:F8) [12:08:45:277]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:277]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:277]: Executing op: FileCopy(SourceName=SCS-IN~1.DAT|scs-integrity.dat,SourceCabKey=scs_integrity.dat,DestName=scs-integrity.dat,Attributes=8192,FileSize=1391,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=2097349618,HashPart2=1808505035,HashPart3=-376412528,HashPart4=-300102071,,)
MSI (s) (28:F8) [12:08:45:277]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:277]: Source for file 'scs-integrity.dat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:292]: Executing op: RegisterSharedComponentProvider(,,File=sipsmanagement.dll,Component={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:292]: Executing op: RegisterSharedComponentProvider(,,File=sipsmanagement.dll,Component={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:292]: Executing op: FileCopy(SourceName=SIPSMA~1.DLL|SIPSManagement.dll,SourceCabKey=sipsmanagement.dll,DestName=SIPSManagement.dll,Attributes=8192,FileSize=655112,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:292]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:292]: Executing op: FileCopy(SourceName=sof.dat,SourceCabKey=sof.dat,DestName=sof.dat,Attributes=8192,FileSize=2996,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1614902659,HashPart2=-1710135127,HashPart3=-368729681,HashPart4=-649737683,,)
MSI (s) (28:F8) [12:08:45:292]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:292]: Source for file 'sof.dat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:292]: Executing op: FileCopy(SourceName=SOPHOS~8.URL|Sophos Anti-Virus.URL,SourceCabKey=Sophos_Anti_Virus.URL,DestName=Sophos Anti-Virus.URL,Attributes=8192,FileSize=49,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1970428397,HashPart2=-196572636,HashPart3=528231796,HashPart4=-423115448,,)
MSI (s) (28:F8) [12:08:45:292]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:292]: Source for file 'Sophos Anti-Virus.URL' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:292]: Executing op: FileCopy(SourceName=y_9ftlzp.dll|SophosOfficeAV.dll,SourceCabKey=SophosOfficeAV.dll,DestName=SophosOfficeAV.dll,Attributes=8192,FileSize=132544,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:292]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:292]: Source for file 'SophosOfficeAV.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:292]: Executing op: FileCopy(SourceName=qznpshab.dll|SophosOfficeAVx64.dll,SourceCabKey=SophosOfficeAVx64.dll,DestName=SophosOfficeAVx64.dll,Attributes=8192,FileSize=167264,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:292]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:292]: Source for file 'SophosOfficeAVx64.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:292]: Executing op: RegisterSharedComponentProvider(,,File=sophtaineradapter.dll,Component={5E31220B-69F2-4AD7-BD59-69C7F695A17C},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:292]: Executing op: RegisterSharedComponentProvider(,,File=sophtaineradapter.dll,Component={5E31220B-69F2-4AD7-BD59-69C7F695A17C},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:292]: Executing op: FileCopy(SourceName=SOPHTA~1.DLL|SophtainerAdapter.dll,SourceCabKey=sophtaineradapter.dll,DestName=SophtainerAdapter.dll,Attributes=8192,FileSize=69120,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:308]: Executing op: FileCopy(SourceName=ssr32.exe,SourceCabKey=ssr32.exe,DestName=ssr32.exe,Attributes=8192,FileSize=150016,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.1.0.8,Language=2057,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:308]: Source for file 'ssr32.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:308]: Executing op: FileCopy(SourceName=ssr64.exe,SourceCabKey=ssr64.exe,DestName=ssr64.exe,Attributes=8192,FileSize=172904,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.1.0.8,Language=2057,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:308]: Source for file 'ssr64.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:308]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:308]: Executing op: SetSourceFolder(Folder=1\Common~1\Sophos\SOPHOS~1\Config\|CommonAppData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:45:308]: Executing op: FileCopy(SourceName=STOREB~1.XML|storebootstrap.xml,SourceCabKey=storebootstrap.xml2,DestName=storebootstrap.xml,Attributes=8192,FileSize=315,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1036855121,HashPart2=-1310717950,HashPart3=1072932941,HashPart4=-1863427859,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\storebootstrap.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:308]: Source for file 'storebootstrap.xml' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\'.
MSI (s) (28:F8) [12:08:45:308]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:45:308]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\|program files\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:45:308]: Executing op: RegisterSharedComponentProvider(,,File=swc_service.92A5750A_B99C_4D18_8E96_314353D4097A,Component={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},ComponentVersion=1.5.1539.0,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:308]: Executing op: RegisterSharedComponentProvider(,,File=swc_service.92A5750A_B99C_4D18_8E96_314353D4097A,Component={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},ComponentVersion=1.5.1539.0,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:308]: Executing op: FileCopy(SourceName=10f0iidq.exe|swc_service.exe,SourceCabKey=swc_service.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=swc_service.exe,Attributes=8192,FileSize=360040,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:308]: Executing op: FileCopy(SourceName=vbx_4n6d.dll|SWCAdapter.dll,SourceCabKey=SWCAdapter.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=SWCAdapter.dll,Attributes=8192,FileSize=328384,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:308]: Source for file 'SWCAdapter.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:308]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:308]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:308]: Executing op: FileCopy(SourceName=swi_fc.exe,SourceCabKey=swi_fc.exe.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_fc.exe,Attributes=9728,FileSize=2646352,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:308]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:308]: Source for file 'swi_fc.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (28:F8) [12:08:45:324]: Executing op: FileCopy(SourceName=rustw54y.exe|swi_filter.exe,SourceCabKey=swi_filter.exe.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_filter.exe,Attributes=9728,FileSize=475384,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:324]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:324]: Source for file 'swi_filter.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (28:F8) [12:08:45:324]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:324]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\)
MSI (s) (28:F8) [12:08:45:324]: Executing op: FileCopy(SourceName=wqcg8y7k.cat|swi_callout.cat,SourceCabKey=SwiCat64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_callout.cat,Attributes=9728,FileSize=19745,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1706504615,HashPart2=820750791,HashPart3=1564457956,HashPart4=1277375312,,)
MSI (s) (28:F8) [12:08:45:324]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:324]: Source for file 'swi_callout.cat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (28:F8) [12:08:45:324]: Executing op: FileCopy(SourceName=swi_di.exe,SourceCabKey=SwiDI64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_di.exe,Attributes=9728,FileSize=298840,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:324]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:324]: Source for file 'swi_di.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (28:F8) [12:08:45:324]: Executing op: SetCompanionParent(ParentPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\,ParentName=swi_callout.cat,,)
MSI (s) (28:F8) [12:08:45:324]: Executing op: FileCopy(SourceName=duxispho.inf|swi_callout.inf,SourceCabKey=SwiInf64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_callout.inf,Attributes=9728,FileSize=1292,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SwiCat64.11DACB83_28A7_4FA6_AF5B_C006E340C101,,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:324]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf; Overwrite; Won't patch; Existing file is unversioned and unmodified - no source file hash provided to compare (Checked using version of companion: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat)
MSI (s) (28:F8) [12:08:45:324]: Source for file 'swi_callout.inf' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (28:F8) [12:08:45:339]: Re-applying security from existing file.
MSI (s) (28:F8) [12:08:45:339]: Verifying accessibility of file: swi_callout.inf
MSI (s) (28:F8) [12:08:45:339]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:45:339]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:45:339]: File will have security applied from OpCode.
MSI (s) (28:F8) [12:08:45:339]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:339]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:339]: Executing op: FileCopy(SourceName=pc-xuy8e.exe|swi_lspdiag.exe,SourceCabKey=SwiLspDiag_32.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_lspdiag.exe,Attributes=9728,FileSize=213552,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:339]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_lspdiag.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:339]: Executing op: FileCopy(SourceName=nwpja_co.exe|swi_lspdiag_64.exe,SourceCabKey=SwiLspDiag_64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_lspdiag_64.exe,Attributes=9728,FileSize=262976,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:370]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_lspdiag_64.exe; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:370]: Executing op: RegisterSharedComponentProvider(,,File=swimanagement.dll,Component={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:370]: Executing op: RegisterSharedComponentProvider(,,File=swimanagement.dll,Component={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:370]: Executing op: FileCopy(SourceName=SWIMAN~1.DLL|SWIManagement.dll,SourceCabKey=swimanagement.dll,DestName=SWIManagement.dll,Attributes=8192,FileSize=206264,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:370]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:370]: Executing op: FileCopy(SourceName=khx7o7_6.exe|swi_service.exe,SourceCabKey=SwiService_32.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_service.exe,Attributes=9728,FileSize=3644368,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:370]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:370]: Source for file 'swi_service.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\)
MSI (s) (28:F8) [12:08:45:370]: Executing op: SetCompanionParent(ParentPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\,ParentName=swi_callout.cat,,)
MSI (s) (28:F8) [12:08:45:370]: Executing op: FileCopy(SourceName=uxfve7ft.sys|swi_callout.sys,SourceCabKey=SwiSys64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_callout.sys,Attributes=9728,FileSize=47760,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=SwiCat64.11DACB83_28A7_4FA6_AF5B_C006E340C101,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:370]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.sys; Overwrite; Won't patch; Existing file is unversioned and unmodified - no source file hash provided to compare (Checked using version of companion: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat)
MSI (s) (28:F8) [12:08:45:370]: Source for file 'swi_callout.sys' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'.
MSI (s) (28:F8) [12:08:45:370]: Re-applying security from existing file.
MSI (s) (28:F8) [12:08:45:370]: Verifying accessibility of file: swi_callout.sys
MSI (s) (28:F8) [12:08:45:370]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:45:386]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:45:386]: File will have security applied from OpCode.
MSI (s) (28:F8) [12:08:45:386]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:386]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\|program files\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:45:386]: Executing op: FileCopy(SourceName=c6aspuc4.exe|swi_update_64.exe,SourceCabKey=SwiUpdate_64.11DACB83_28A7_4FA6_AF5B_C006E340C101,DestName=swi_update_64.exe,Attributes=9728,FileSize=2121216,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=3.6.0.2087,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:386]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:386]: Source for file 'swi_update_64.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\'.
MSI (s) (28:F8) [12:08:45:386]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:386]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\|program files\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:386]: Executing op: RegisterSharedComponentProvider(,,File=systeminformation.dll,Component={719B5EDD-B014-4686-AB60-A4474B84240D},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:386]: Executing op: RegisterSharedComponentProvider(,,File=systeminformation.dll,Component={719B5EDD-B014-4686-AB60-A4474B84240D},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:386]: Executing op: FileCopy(SourceName=SYSTEM~1.DLL|SystemInformation.dll,SourceCabKey=systeminformation.dll,DestName=SystemInformation.dll,Attributes=8192,FileSize=110616,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:386]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:386]: Executing op: FileCopy(SourceName=TAMPER~1.DLL|TamperProtectionControl.dll,SourceCabKey=tamperprotectioncontrol.dll,DestName=TamperProtectionControl.dll,Attributes=8192,FileSize=136128,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:386]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:386]: Source for file 'TamperProtectionControl.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:386]: Executing op: FileCopy(SourceName=TAMPER~4.DLL|TamperProtectionControlX64.dll,SourceCabKey=TamperProtectionControlX64.dll,DestName=TamperProtectionControlX64.dll,Attributes=8192,FileSize=161120,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:386]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:386]: Source for file 'TamperProtectionControlX64.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:386]: Executing op: RegisterSharedComponentProvider(,,File=tamperprotectionmanagement.d,Component={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:386]: Executing op: RegisterSharedComponentProvider(,,File=tamperprotectionmanagement.d,Component={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:386]: Executing op: FileCopy(SourceName=TAMPER~2.DLL|TamperProtectionManagement.dll,SourceCabKey=tamperprotectionmanagement.d,DestName=TamperProtectionManagement.dll,Attributes=8192,FileSize=209336,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:386]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:386]: Executing op: FileCopy(SourceName=TAMPER~3.DLL|TamperProtectionPlugin.dll,SourceCabKey=tamperprotectionplugin.dll,DestName=TamperProtectionPlugin.dll,Attributes=8192,FileSize=206776,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:386]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:386]: Source for file 'TamperProtectionPlugin.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\'.
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=threatdetection.dll,Component={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=threatdetection.dll,Component={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=THREAT~1.DLL|ThreatDetection.dll,SourceCabKey=threatdetection.dll,DestName=ThreatDetection.dll,Attributes=8192,FileSize=531008,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=threatmanagement.dll,Component={E5EB5509-3611-458A-BE68-3477BF3D96CB},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=threatmanagement.dll,Component={E5EB5509-3611-458A-BE68-3477BF3D96CB},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=THREAT~2.DLL|ThreatManagement.dll,SourceCabKey=threatmanagement.dll,DestName=ThreatManagement.dll,Attributes=8192,FileSize=652552,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=translators.dll,Component={09FFDB10-614F-4899-82E8-85A7D8BFA32A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=translators.dll,Component={09FFDB10-614F-4899-82E8-85A7D8BFA32A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=TRANSL~1.DLL|Translators.dll,SourceCabKey=translators.dll,DestName=Translators.dll,Attributes=8192,FileSize=195904,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=vecontroller.dll,Component={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=vecontroller.dll,Component={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=VECONT~1.DLL|VEController.dll,SourceCabKey=vecontroller.dll,DestName=VEController.dll,Attributes=8192,FileSize=256712,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=virusdetection.dll,Component={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: RegisterSharedComponentProvider(,,File=virusdetection.dll,Component={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=VIRUSD~1.DLL|VirusDetection.dll,SourceCabKey=virusdetection.dll,DestName=VirusDetection.dll,Attributes=8192,FileSize=872880,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll; Won't Overwrite; Won't patch; Existing file is of an equal version
MSI (s) (28:F8) [12:08:45:402]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:45:402]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\|program files\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=tqev-0rb.dll|WCMResChs.dll,SourceCabKey=WCMResChs.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResChs.dll,Attributes=8192,FileSize=18648,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:402]: Source for file 'WCMResChs.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=abx1c0mn.dll|WCMResCht.dll,SourceCabKey=WCMResCht.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResCht.dll,Attributes=8192,FileSize=18648,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:402]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:402]: Source for file 'WCMResCht.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:402]: Executing op: FileCopy(SourceName=t98cjnmj.dll|WCMResDeu.dll,SourceCabKey=WCMResDeu.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResDeu.dll,Attributes=8192,FileSize=19160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCMResDeu.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:417]: Executing op: FileCopy(SourceName=pofhy1ao.dll|WCMResEng.dll,SourceCabKey=WCMResEng.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResEng.dll,Attributes=8192,FileSize=18136,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCMResEng.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:417]: Executing op: FileCopy(SourceName=oe33a3rv.dll|WCMResEsp.dll,SourceCabKey=WCMResEsp.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResEsp.dll,Attributes=8192,FileSize=19160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCMResEsp.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:417]: Executing op: FileCopy(SourceName=yknbbt_8.dll|WCMResFra.dll,SourceCabKey=WCMResFra.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResFra.dll,Attributes=8192,FileSize=19160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCMResFra.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:417]: Executing op: FileCopy(SourceName=WCMResIt.dll,SourceCabKey=WCMResIt.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResIt.dll,Attributes=8192,FileSize=19160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCMResIt.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:417]: Executing op: FileCopy(SourceName=ugt2y2aq.dll|WCMResJap.dll,SourceCabKey=WCMResJap.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCMResJap.dll,Attributes=8192,FileSize=19160,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCMResJap.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:417]: Executing op: FileCopy(SourceName=gl5jssdo.dll|WCPResChs.dll,SourceCabKey=WCPResChs.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResChs.dll,Attributes=8192,FileSize=87792,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:417]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:417]: Source for file 'WCPResChs.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=mbkrrgfk.dll|WCPResCht.dll,SourceCabKey=WCPResCht.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResCht.dll,Attributes=8192,FileSize=87792,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResCht.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=lz0dhlmb.dll|WCPResDeu.dll,SourceCabKey=WCPResDeu.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResDeu.dll,Attributes=8192,FileSize=88304,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResDeu.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=qmce8vpe.dll|WCPResEng.dll,SourceCabKey=WCPResEng.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResEng.dll,Attributes=8192,FileSize=87280,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResEng.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=euf7zhv5.dll|WCPResEsp.dll,SourceCabKey=WCPResEsp.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResEsp.dll,Attributes=8192,FileSize=88304,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResEsp.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=94hwbqsy.dll|WCPResFra.dll,SourceCabKey=WCPResFra.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResFra.dll,Attributes=8192,FileSize=88304,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResFra.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=WCPResIt.dll,SourceCabKey=WCPResIt.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResIt.dll,Attributes=8192,FileSize=88304,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResIt.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:433]: Executing op: FileCopy(SourceName=my8ewoes.dll|WCPResJap.dll,SourceCabKey=WCPResJap.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WCPResJap.dll,Attributes=8192,FileSize=87792,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:433]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:433]: Source for file 'WCPResJap.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:449]: Executing op: FileCopy(SourceName=gwkjhd-6.dll|WebControlMessaging.dll,SourceCabKey=WebControlMessaging_dll.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WebControlMessaging.dll,Attributes=8192,FileSize=196872,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:449]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:449]: Source for file 'WebControlMessaging.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:449]: Executing op: FileCopy(SourceName=d6gbuksk.dll|WebControlPlugin.dll,SourceCabKey=WebControlPlugin.92A5750A_B99C_4D18_8E96_314353D4097A,DestName=WebControlPlugin.dll,Attributes=8192,FileSize=312216,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.5.1539.0,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:449]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:449]: Source for file 'WebControlPlugin.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\'.
MSI (s) (28:F8) [12:08:45:449]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:45:449]: Executing op: SetSourceFolder(Folder=1\PROGRA~1\Sophos\SOPHOS~1\WSC_X64\|program files\Sophos\Sophos Anti-Virus\WSC_X64\)
MSI (s) (28:F8) [12:08:45:449]: Executing op: FileCopy(SourceName=WSCCLI~1.EXE|WSCClient.exe,SourceCabKey=WSCClientExeX64,DestName=WSCClient.exe,Attributes=8192,FileSize=287336,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=10.7.2.49,Language=1033,InstallMode=58982400,,,,,,,)
MSI (s) (28:F8) [12:08:45:449]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:45:449]: Source for file 'WSCClient.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_X64\'.
MSI (s) (28:F8) [12:08:45:449]: Executing op: CacheSizeFlush(,)
MSI (s) (28:F8) [12:08:45:449]: Executing op: ActionStart(Name=SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A,,)
MSI (s) (28:F8) [12:08:45:449]: Executing op: CustomActionSchedule(Action=SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A,ActionType=1058,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe" /Service,)
MSI (s) (28:F8) [12:08:45:512]: Executing op: ActionStart(Name=ExecXmlFile,,)
MSI (s) (28:F8) [12:08:45:512]: Executing op: CustomActionSchedule(Action=ExecXmlFile,ActionType=3073,Source=BinaryData,Target=ExecXmlFile,CustomActionData=10C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@messageFileName]messageFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll71/*/*/*/*[@parameterFileName]parameterFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll10C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@resourceFileName]resourceFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll)
MSI (s) (28:2C) [12:08:45:512]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIEF7D.tmp, Entrypoint: ExecXmlFile
MSI (s) (28:F8) [12:08:45:542]: Executing op: ActionStart(Name=RollbackRegisterEventManifest,,)
MSI (s) (28:F8) [12:08:45:542]: Executing op: CustomActionSchedule(Action=RollbackRegisterEventManifest,ActionType=3393,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" um "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man")
MSI (s) (28:F8) [12:08:45:542]: Executing op: ActionStart(Name=RegisterEventManifest,,)
MSI (s) (28:F8) [12:08:45:542]: Executing op: CustomActionSchedule(Action=RegisterEventManifest,ActionType=3073,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man")
MSI (s) (28:64) [12:08:45:558]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIEF9D.tmp, Entrypoint: CAQuietExec
MSI (s) (28:F8) [12:08:45:777]: Executing op: ActionStart(Name=RollbackUserGroups,,)
MSI (s) (28:F8) [12:08:45:777]: Executing op: CustomActionSchedule(Action=RollbackUserGroups,ActionType=1281,Source=BinaryData,Target=DeleteUserGroups,)
MSI (s) (28:F8) [12:08:45:777]: Executing op: ActionStart(Name=CreateUserGroups,,)
MSI (s) (28:F8) [12:08:45:777]: Executing op: CustomActionSchedule(Action=CreateUserGroups,ActionType=1025,Source=BinaryData,Target=CreateUserGroups,CustomActionData=C:\ProgramData\Sophos\Sophos Anti-Virus\Config)
MSI (s) (28:B4) [12:08:45:777]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF089.tmp, Entrypoint: CreateUserGroups
CustomAction CreateUserGroups returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (28:F8) [12:08:46:439]: Note: 1: 2265 2: 3: -2147287035
MSI (s) (28:F8) [12:08:46:439]: User policy value 'DisableRollback' is 0
MSI (s) (28:F8) [12:08:46:439]: Machine policy value 'DisableRollback' is 0
Action ended 12:08:46: InstallFinalize. Return value 3.
MSI (s) (28:F8) [12:08:46:455]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1253990673,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (28:F8) [12:08:46:455]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (28:F8) [12:08:46:455]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus)
MSI (s) (28:F8) [12:08:46:455]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
MSI (s) (28:F8) [12:08:46:455]: Executing op: RegisterBackupFile(File=C:\Config.Msi\2fa0a15d.rbf)
MSI (s) (28:F8) [12:08:46:455]: Executing op: RegisterBackupFile(File=C:\Config.Msi\2fa0a15e.rbf)
MSI (s) (28:F8) [12:08:46:455]: Executing op: RegisterBackupFile(File=C:\Config.Msi\2fa0a15f.rbf)
MSI (s) (28:F8) [12:08:46:455]: Executing op: ActionStart(Name=CreateUserGroups,,)
MSI (s) (28:F8) [12:08:46:455]: Executing op: ProductInfo(ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=168230914,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={B11B63E0-A3EB-478A-AF04-AAE0B577AEB2},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3)
MSI (s) (28:F8) [12:08:46:455]: Executing op: ActionStart(Name=RollbackUserGroups,,)
MSI (s) (28:F8) [12:08:46:455]: Executing op: CustomActionRollback(Action=RollbackUserGroups,ActionType=1281,Source=BinaryData,Target=DeleteUserGroups,)
MSI (s) (28:A8) [12:08:46:455]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF339.tmp, Entrypoint: DeleteUserGroups
MSI (s) (28:F8) [12:08:46:470]: Executing op: ActionStart(Name=RegisterEventManifest,,)
MSI (s) (28:F8) [12:08:46:470]: Executing op: ActionStart(Name=RollbackRegisterEventManifest,,)
MSI (s) (28:F8) [12:08:46:470]: Executing op: CustomActionRollback(Action=RollbackRegisterEventManifest,ActionType=3393,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" um "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man")
MSI (s) (28:40) [12:08:46:486]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF34A.tmp, Entrypoint: CAQuietExec
MSI (s) (28:F8) [12:08:46:627]: Executing op: ActionStart(Name=ExecXmlFile,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: ActionStart(Name=SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1], Directory: [9], Size: [6])
MSI (s) (28:F8) [12:08:46:627]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:627]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:46:627]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll,,)
MSI (s) (28:F8) [12:08:46:627]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll,,)
MSI (s) (28:F8) [12:08:46:642]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:642]: Executing op: RegisterSharedComponentProvider(,,File=virusdetection.dll,Component={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:642]: Executing op: UnregisterSharedComponentProvider(Component={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:642]: Executing op: RegisterSharedComponentProvider(,,File=vecontroller.dll,Component={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:642]: Executing op: UnregisterSharedComponentProvider(Component={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:642]: Executing op: RegisterSharedComponentProvider(,,File=translators.dll,Component={09FFDB10-614F-4899-82E8-85A7D8BFA32A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:642]: Executing op: UnregisterSharedComponentProvider(Component={09FFDB10-614F-4899-82E8-85A7D8BFA32A},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:642]: Executing op: RegisterSharedComponentProvider(,,File=threatmanagement.dll,Component={E5EB5509-3611-458A-BE68-3477BF3D96CB},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:658]: Executing op: UnregisterSharedComponentProvider(Component={E5EB5509-3611-458A-BE68-3477BF3D96CB},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:658]: Executing op: RegisterSharedComponentProvider(,,File=threatdetection.dll,Component={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:658]: Executing op: UnregisterSharedComponentProvider(Component={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:658]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll,,)
MSI (s) (28:F8) [12:08:46:658]: Executing op: RegisterSharedComponentProvider(,,File=tamperprotectionmanagement.d,Component={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:658]: Executing op: UnregisterSharedComponentProvider(Component={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:658]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll,,)
MSI (s) (28:F8) [12:08:46:658]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll,,)
MSI (s) (28:F8) [12:08:46:658]: Executing op: RegisterSharedComponentProvider(,,File=systeminformation.dll,Component={719B5EDD-B014-4686-AB60-A4474B84240D},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:658]: Executing op: UnregisterSharedComponentProvider(Component={719B5EDD-B014-4686-AB60-A4474B84240D},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:658]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:658]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe,,)
MSI (s) (28:F8) [12:08:46:658]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:658]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:658]: Executing op: FileCopy(SourceName=C:\Config.Msi\2fa0a15f.rbf,,DestName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.sys,Attributes=32800,FileSize=47760,PerTick=0,,VerifyMedia=0,ElevateFlags=3,,,,,,,InstallMode=4194308,,,,,,,)
MSI (s) (28:F8) [12:08:46:658]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.sys; Overwrite; Won't patch; REINSTALLMODE specifies all files to be overwritten
MSI (s) (28:F8) [12:08:46:658]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:658]: Verifying accessibility of file: 2fa0a15f.rbf
MSI (s) (28:F8) [12:08:46:658]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:658]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:658]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe,,)
MSI (s) (28:F8) [12:08:46:658]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:658]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:658]: Executing op: RegisterSharedComponentProvider(,,File=swimanagement.dll,Component={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:658]: Executing op: UnregisterSharedComponentProvider(Component={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:674]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:674]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileCopy(SourceName=C:\Config.Msi\2fa0a15e.rbf,,DestName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf,Attributes=32800,FileSize=1292,PerTick=0,,VerifyMedia=0,ElevateFlags=3,,,,,,,InstallMode=4194308,,,,,,,)
MSI (s) (28:F8) [12:08:46:674]: File: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf; Overwrite; Won't patch; REINSTALLMODE specifies all files to be overwritten
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Verifying accessibility of file: 2fa0a15e.rbf
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe,,)
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat,,)
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe,,)
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe,,)
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll,,)
MSI (s) (28:F8) [12:08:46:674]: Executing op: RegisterSharedComponentProvider(,,File=swc_service.92A5750A_B99C_4D18_8E96_314353D4097A,Component={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},ComponentVersion=1.5.1539.0,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:674]: Executing op: UnregisterSharedComponentProvider(Component={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:674]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\storebootstrap.xml,,)
MSI (s) (28:F8) [12:08:46:674]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:674]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe,,)
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe,,)
MSI (s) (28:F8) [12:08:46:674]: Executing op: RegisterSharedComponentProvider(,,File=sophtaineradapter.dll,Component={5E31220B-69F2-4AD7-BD59-69C7F695A17C},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:674]: Executing op: UnregisterSharedComponentProvider(Component={5E31220B-69F2-4AD7-BD59-69C7F695A17C},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:674]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: RegisterSharedComponentProvider(,,File=sipsmanagement.dll,Component={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:689]: Executing op: UnregisterSharedComponentProvider(Component={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:689]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: RegisterSharedComponentProvider(,,File=scanmanagement.dll,Component={ECB3B148-F965-49B5-A338-857D09CBC0B3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:689]: Executing op: UnregisterSharedComponentProvider(Component={ECB3B148-F965-49B5-A338-857D09CBC0B3},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:689]: Executing op: RegisterSharedComponentProvider(,,File=scaneditfacade.dll,Component={AE86B1D3-36AD-45E7-B7A6-301DE878C695},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:689]: Executing op: UnregisterSharedComponentProvider(Component={AE86B1D3-36AD-45E7-B7A6-301DE878C695},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll,,)
MSI (s) (28:F8) [12:08:46:689]: Executing op: RegisterSharedComponentProvider(,,File=SAVService.exe,Component={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:689]: Executing op: UnregisterSharedComponentProvider(Component={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:689]: Executing op: RegisterSharedComponentProvider(,,File=savsecurity.dll,Component={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:689]: Executing op: UnregisterSharedComponentProvider(Component={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:689]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: RegisterSharedComponentProvider(,,File=SavRes.dll,Component={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:705]: Executing op: UnregisterSharedComponentProvider(Component={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\SAVIConfigFile.xml,,)
MSI (s) (28:F8) [12:08:46:705]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:705]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm,,)
MSI (s) (28:F8) [12:08:46:705]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: RegisterSharedComponentProvider(,,File=SAVAdminService.exe,Component={FE613E3D-0469-40F8-9A0F-635D16097928},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:720]: Executing op: UnregisterSharedComponentProvider(Component={FE613E3D-0469-40F8-9A0F-635D16097928},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:720]: Executing op: RegisterSharedComponentProvider(,,File=savadapter.dll,Component={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:720]: Executing op: UnregisterSharedComponentProvider(Component={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\Quarantine.xml,,)
MSI (s) (28:F8) [12:08:46:720]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:720]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem,,)
MSI (s) (28:F8) [12:08:46:720]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt,,)
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl,,)
MSI (s) (28:F8) [12:08:46:736]: Executing op: RegisterSharedComponentProvider(,,File=persistance.dll,Component={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:736]: Executing op: UnregisterSharedComponentProvider(Component={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll,,)
MSI (s) (28:F8) [12:08:46:736]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll,,)
MSI (s) (28:F8) [12:08:46:736]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll,,)
MSI (s) (28:F8) [12:08:46:736]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest,,)
MSI (s) (28:F8) [12:08:46:736]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest,,)
MSI (s) (28:F8) [12:08:46:736]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,,)
MSI (s) (28:F8) [12:08:46:736]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: RegisterSharedComponentProvider(,,File=logging.dll,Component={823855BF-3AC5-4C0C-87E6-AD864B361AAF},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:736]: Executing op: UnregisterSharedComponentProvider(Component={823855BF-3AC5-4C0C-87E6-AD864B361AAF},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:736]: Executing op: RegisterSharedComponentProvider(,,File=localisation.dll,Component={FBF7F8C3-003B-40EB-B316-260E7D5DD274},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:736]: Executing op: UnregisterSharedComponentProvider(Component={FBF7F8C3-003B-40EB-B316-260E7D5DD274},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:736]: Executing op: RegisterSharedComponentProvider(,,File=legacyconsumers.dll,Component={63B09FF1-4A74-4963-B2D9-182293950F88},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:736]: Executing op: UnregisterSharedComponentProvider(Component={63B09FF1-4A74-4963-B2D9-182293950F88},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:736]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\)
MSI (s) (28:F8) [12:08:46:736]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat,,)
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat,,)
MSI (s) (28:F8) [12:08:46:752]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat,,)
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man,,)
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll,,)
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=icprocessors.dll,Component={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=icmanagement.dll,Component={59C347AA-B20B-4146-B11B-E570BFDF7D81},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={59C347AA-B20B-4146-B11B-E570BFDF7D81},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=icadapter.dll,Component={C45AAE65-B109-4933-AA74-817CFBE6233A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={C45AAE65-B109-4933-AA74-817CFBE6233A},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=fsdecomposer.dll,Component={A4BACF9D-BF67-4909-AC27-8627DEA42367},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={A4BACF9D-BF67-4909-AC27-8627DEA42367},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe,,)
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=filterprocessors.dll,Component={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,,)
MSI (s) (28:F8) [12:08:46:752]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=eeconsumer.dll,Component={65937A4F-1784-4285-8C24-D06DA20D3AF0},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={65937A4F-1784-4285-8C24-D06DA20D3AF0},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: RegisterSharedComponentProvider(,,File=driveprocessor.dll,Component={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:752]: Executing op: UnregisterSharedComponentProvider(Component={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:752]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:752]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\difxapi.dll,,)
MSI (s) (28:F8) [12:08:46:752]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:767]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:767]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll,,)
MSI (s) (28:F8) [12:08:46:767]: Executing op: RegisterSharedComponentProvider(,,File=detectionfeedback.dll,Component={3276B786-D941-4ABD-810D-5AE5E3106F02},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:767]: Executing op: UnregisterSharedComponentProvider(Component={3276B786-D941-4ABD-810D-5AE5E3106F02},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:767]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll,,)
MSI (s) (28:F8) [12:08:46:767]: Executing op: RegisterSharedComponentProvider(,,File=dcmanagement.dll,Component={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:767]: Executing op: UnregisterSharedComponentProvider(Component={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:767]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll,,)
MSI (s) (28:F8) [12:08:46:767]: Executing op: RegisterSharedComponentProvider(,,File=datacontrolmanagement.dll,Component={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:767]: Executing op: UnregisterSharedComponentProvider(Component={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:767]: Executing op: RegisterSharedComponentProvider(,,File=configuration.dll,Component={BFCC0446-6C34-413E-9611-520B993B04B1},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:767]: Executing op: UnregisterSharedComponentProvider(Component={BFCC0446-6C34-413E-9611-520B993B04B1},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:767]: Executing op: RegisterSharedComponentProvider(,,File=componentmanager.dll,Component={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:767]: Executing op: UnregisterSharedComponentProvider(Component={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:767]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll,,)
MSI (s) (28:F8) [12:08:46:767]: Executing op: RegisterSharedComponentProvider(,,File=bpaif.dll,Component={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},ComponentVersion=2.5.0.99,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:767]: Executing op: UnregisterSharedComponentProvider(Component={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:767]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:767]: Executing op: FileRemove(,FileName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\bootstrap.xml,,)
MSI (s) (28:F8) [12:08:46:767]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:783]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:783]: Executing op: RegisterSharedComponentProvider(,,File=bhomanagement.dll,Component={3BF07D0A-37CC-4FA8-81DA-D351E301276A},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:783]: Executing op: UnregisterSharedComponentProvider(Component={3BF07D0A-37CC-4FA8-81DA-D351E301276A},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:783]: Executing op: RegisterSharedComponentProvider(,,File=backgroundscanning.dll,Component={D36CD500-4FBE-4943-90EC-D7646AA41519},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:783]: Executing op: UnregisterSharedComponentProvider(Component={D36CD500-4FBE-4943-90EC-D7646AA41519},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:783]: Executing op: FileRemove(,FileName=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: RegisterSharedComponentProvider(,,File=authorisedlists.dll,Component={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:783]: Executing op: UnregisterSharedComponentProvider(Component={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:783]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\)
MSI (s) (28:F8) [12:08:46:783]: Executing op: RegisterSharedComponentProvider(,,File=atl90.dll,Component={341B1BFF-FEAD-4104-A29F-E9363B7517BF},ComponentVersion=9.0.30729.6161,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:783]: Executing op: UnregisterSharedComponentProvider(Component={341B1BFF-FEAD-4104-A29F-E9363B7517BF},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:783]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F8) [12:08:46:783]: Executing op: RegisterSharedComponentProvider(,,File=ApplicationManagement.dll,Component={F5D90A95-0F03-41CF-BEA3-247569C57BD3},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:783]: Executing op: UnregisterSharedComponentProvider(Component={F5D90A95-0F03-41CF-BEA3-247569C57BD3},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:783]: Executing op: RegisterSharedComponentProvider(,,File=AppFeedManager.dll,Component={52411750-073E-47D7-BB97-8B404AF42B76},ComponentVersion=10.7.2.49,ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductVersion=10.7.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)
MSI (s) (28:F8) [12:08:46:783]: Executing op: UnregisterSharedComponentProvider(Component={52411750-073E-47D7-BB97-8B404AF42B76},ProductCode={65323B2D-83D4-470D-A209-D769DB30BBDB})
MSI (s) (28:F8) [12:08:46:783]: Executing op: ActionStart(Name=StartDriverServices,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: ActionStart(Name=InstallClassFilterAMD64Win7,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: ActionStart(Name=InstallDriverFilesAMD64Win7,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: ActionStart(Name=InstallBootDriverAMD64Win7,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: ActionStart(Name=RestoreExcludedProcesses,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: ActionStart(Name=RollbackDriverFiles64Vista,,)
MSI (s) (28:F8) [12:08:46:783]: Executing op: CustomActionRollback(Action=RollbackDriverFiles64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF",)
MSI (s) (28:F8) [12:08:46:814]: Executing op: ActionStart(Name=RollbackBootDriver64Vista,,)
MSI (s) (28:F8) [12:08:46:814]: Executing op: CustomActionRollback(Action=RollbackBootDriver64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF",)
MSI (s) (28:F8) [12:08:46:830]: Executing op: ActionStart(Name=RollbackClassFilter64Vista,,)
MSI (s) (28:F8) [12:08:46:830]: Executing op: CustomActionRollback(Action=RollbackClassFilter64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SDCFILTER.INF",)
MSI (s) (28:F8) [12:08:46:845]: Executing op: ActionStart(Name=RegisterBufferOverflowProtection,,)
MSI (s) (28:F8) [12:08:46:845]: Executing op: ActionStart(Name=CopyOtherFiles,,)
MSI (s) (28:F8) [12:08:46:845]: Executing op: ActionStart(Name=UpdateDesktopMessaging,,)
MSI (s) (28:F8) [12:08:46:845]: Executing op: ActionStart(Name=RollbackUpdateDesktopMessaging,,)
MSI (s) (28:F8) [12:08:46:861]: Executing op: CustomActionRollback(Action=RollbackUpdateDesktopMessaging,ActionType=1281,Source=BinaryData,Target=UpdateDesktopMessaging,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:1C) [12:08:46:861]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF4D1.tmp, Entrypoint: UpdateDesktopMessaging
MSI (s) (28:F8) [12:08:46:861]: Executing op: ActionStart(Name=UpdateSavAdapterDll,,)
MSI (s) (28:F8) [12:08:46:861]: Executing op: ActionStart(Name=RollbackUpdateSavAdapterDll,,)
MSI (s) (28:F8) [12:08:46:861]: Executing op: CustomActionRollback(Action=RollbackUpdateSavAdapterDll,ActionType=1281,Source=BinaryData,Target=RollbackUpdateSavAdapterDll,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:C8) [12:08:46:877]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF4D2.tmp, Entrypoint: RollbackUpdateSavAdapterDll
MSI (s) (28:F8) [12:08:46:877]: Executing op: ActionStart(Name=RollbackOtherFiles,,)
MSI (s) (28:F8) [12:08:46:877]: Executing op: CustomActionRollback(Action=RollbackOtherFiles,ActionType=1281,Source=BinaryData,Target=DeleteOtherFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:D8) [12:08:46:877]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF4E3.tmp, Entrypoint: DeleteOtherFiles
MSI (s) (28:F8) [12:08:46:908]: Executing op: ActionStart(Name=RollbackForceDeleteUserPlugin,,)
MSI (s) (28:F8) [12:08:46:908]: Executing op: CustomActionRollback(Action=RollbackForceDeleteUserPlugin,ActionType=1281,Source=BinaryData,Target=ForceDeleteUserPlugin,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:0C) [12:08:46:908]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF503.tmp, Entrypoint: ForceDeleteUserPlugin
MSI (s) (28:F8) [12:08:46:924]: Executing op: ActionStart(Name=RollbackForceDeleteFiles,,)
MSI (s) (28:F8) [12:08:46:924]: Executing op: CustomActionRollback(Action=RollbackForceDeleteFiles,ActionType=1281,Source=BinaryData,Target=ForceDeleteFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:F4) [12:08:46:924]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF514.tmp, Entrypoint: ForceDeleteFiles
MSI (s) (28:F8) [12:08:46:939]: Executing op: ActionStart(Name=DeleteHIPSConfig,,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: ActionStart(Name=DeleteBDLs,,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: ActionStart(Name=DeleteIDEs,,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Tamper Protection\logs\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Device Control\logs\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Data Control\logs\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\logs\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\,Foreign=0,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:939]: Executing op: ActionStart(Name=RemoveFiles,Description=Removing files,Template=File: [1], Directory: [9])
MSI (s) (28:F8) [12:08:46:939]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\)
MSI (s) (28:F8) [12:08:46:939]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\)
MSI (s) (28:F8) [12:08:46:939]: Executing op: FileCopy(SourceName=C:\Config.Msi\2fa0a15d.rbf,,DestName=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,Attributes=40992,FileSize=126126,PerTick=0,,VerifyMedia=0,ElevateFlags=3,,,,,,,InstallMode=4194308,,,,,,,)
MSI (s) (28:F8) [12:08:46:939]: File: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml; To be installed; Won't patch; No existing file
MSI (s) (28:F8) [12:08:46:955]: Verifying accessibility of file: 2fa0a15d.rbf
MSI (s) (28:F8) [12:08:46:955]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:46:955]: Executing op: ActionStart(Name=CheckUninstallDrivers,,)
MSI (s) (28:F8) [12:08:46:955]: Executing op: ActionStart(Name=Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A,,)
MSI (s) (28:F8) [12:08:46:955]: Executing op: ActionStart(Name=RemoveRegistryValues,Description=Removing system registry values,Template=Key: [1], Name: [2])
MSI (s) (28:F8) [12:08:46:955]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\SAVI,,BinaryType=0,,)
MSI (s) (28:F8) [12:08:46:955]: Executing op: RegRemoveKey()
MSI (s) (28:F8) [12:08:46:955]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Sophos\SAVI 3: 2
MSI (s) (28:F8) [12:08:46:955]: Executing op: ActionStart(Name=RemoveODBC,Description=Removing ODBC components,)
MSI (s) (28:F8) [12:08:46:955]: Executing op: ActionStart(Name=DeleteServices,Description=Deleting services,Template=Service: [1])
MSI (s) (28:F8) [12:08:46:955]: Executing op: ServiceInstall(Name=SAVService,DisplayName=Sophos Anti-Virus,ImagePath="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe",ServiceType=16,StartType=2,ErrorControl=1,LoadOrderGroup=PlugPlay,Dependencies=RPCSS[~][~],TagId=0,StartName=NT AUTHORITY\LocalService,Password=**********,Description=Performs threat scanning and cleanup functions.,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:955]: Executing op: ServiceInstall(Name=SAVAdminService,DisplayName=Sophos Anti-Virus status reporter,ImagePath="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe",ServiceType=16,StartType=2,ErrorControl=1,,Dependencies=[~][~],TagId=0,StartName=LocalSystem,Password=**********,Description=Provides information to Windows Security Center on whether Sophos Anti-Virus is up to date and whether on-access scanning is enabled.,SecurityDescriptor=BinaryData,)
MSI (s) (28:F8) [12:08:46:970]: Executing op: ServiceControl(,Name=SAVAdminService,Action=1,Wait=1,)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ActionStart(Name=WaitForSAVService,,)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ActionStart(Name=DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101,,)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ActionStart(Name=DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101,,)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1])
MSI (s) (28:F8) [12:08:48:013]: Executing op: ActionStart(Name=ExecSecureObjectsRollback,,)
MSI (s) (28:F8) [12:08:48:013]: Executing op: CustomActionRollback(Action=ExecSecureObjectsRollback,ActionType=3329,Source=BinaryData,Target=ExecSecureObjectsRollback,CustomActionData=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\CreateFolderD:AI(A;;FA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;OICIIO;GA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;ID;FA;;;BA)(A;OICIIOID;GA;;;BA)(A;ID;FA;;;SY)(A;OICIIOID;GA;;;SY)(A;ID;0x1200a9;;;WD)(A;OICIIOID;GXGR;;;WD)0)
MSI (s) (28:E8) [12:08:48:013]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF94B.tmp, Entrypoint: ExecSecureObjectsRollback
MSI (s) (28:F8) [12:08:48:013]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={8B4CB61B-B986-4851-A3A8-8A29B744166F},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={266D54B1-B706-4CCD-9C0A-01C33A70F79B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={759C3654-CC88-4826-A930-E0BFB04EBD6B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={BDE220A0-D203-449C-8A3F-648E1C889744},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={B9056343-C8F6-454A-AAF5-DBA44FC0E1F5},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={A154E863-F3EA-44EA-B782-B241DECCC60B},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={62922683-34EB-46E1-8AF4-E9D59E61833E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={606B5C5C-66C9-490B-BBC3-77BFF00880E5},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: Executing op: ComponentRegister(ComponentId={3630E612-875A-427A-8A2A-2708A9B24393},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:013]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={26BAD5C1-B5B8-4E0A-888F-A4AD4B1095AE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\difxapi.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\difxapi.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={533F61E5-9143-4664-8DD0-02E1DACF312D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={A871FD4C-242A-4F0A-B4AC-74BE34EC1BA0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.cat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={DBD323D5-758C-4D26-BD2E-E46EB73EAC11},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={15A3052C-E1D6-4ADE-9DF2-DAAF479F9A7B},KeyPath=02:\Software\Sophos\SAVService\SAVUI\plugins\WebControlPlugin.WebControlUIPlugin,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={B9CA91A9-8C87-4CCA-AA1A-73DFA321CE92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={3570C981-DCAC-4D6C-AEB0-8D4943972259},KeyPath=02:\Software\Sophos\Web Intelligence\WebControlAvailable,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={AEF7CD44-576B-4841-A0B4-58CEF190AFC5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={6C6EA6F0-CE05-4D37-8F3F-A957850E1AC6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={56B38697-86C5-4537-92A0-F2E6CEF972B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={8BD71FEA-7E62-46B4-BBB2-19D4D3706BEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={2E247D31-0A06-4AF5-ACE4-018BA1A73978},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={60BD5635-B25C-450A-9E36-EA84EDB18BDA},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={C5B8B969-E83E-41E3-820E-9E47E219644E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={CA6E867B-7D76-4BBE-B278-04AFA8C84F9E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={08A57BC6-9561-4F83-B710-A130F47DBA83},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={63138B11-92E8-4415-8064-1B9BC3A17F93},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={AE660058-42CE-44E1-8D2E-BD62AD69EE1E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={5C56F239-F279-4B01-879F-8729A44D44A0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={B43C5DBE-50BB-429B-B447-4EB82AD8554D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={5282C6CF-9946-4B05-B59F-6638E098E3DC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={01CC3BCC-55E1-4B1A-906A-FB7CE1A4629B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={524153EC-3AC1-4F92-B7F5-18415FD243CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={2B97F024-FE76-40AC-9D67-FF52C6A46570},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={F4BF2F3A-652E-4CBA-8B19-B7EE4E251C29},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={F21CB2A2-E3F4-4AF7-AC06-A1A66ACA0735},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={8A03894B-68DA-452F-A18A-712256FA8A85},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={262EB741-DEA1-43F2-BA2D-9DE0661F9C8C},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={189F69DA-324A-4F9A-9CDE-EF79A930D2AD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={E9D16629-7181-425B-83DC-0FDF61D63E11},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={11B3AA50-1BDE-42AF-A841-1C249A848A31},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={FCEAE5B9-2AE7-47F8-91A5-D21203F761F0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: Executing op: ComponentRegister(ComponentId={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={09FFDB10-614F-4899-82E8-85A7D8BFA32A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={E5EB5509-3611-458A-BE68-3477BF3D96CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={9BB8ADD9-6613-46AC-9BD3-24B31A9F1594},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={E54C4F8D-A952-4E5C-B973-76D109A0E0EC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={719B5EDD-B014-4686-AB60-A4474B84240D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={5E31220B-69F2-4AD7-BD59-69C7F695A17C},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={ECB3B148-F965-49B5-A338-857D09CBC0B3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={AE86B1D3-36AD-45E7-B7A6-301DE878C695},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={57056C41-556E-4FFA-A53F-31BB318C2243},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={B9937941-AA62-41C9-BCE7-3DBE63781A79},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={ECE39B6C-338A-465E-A941-158F7D2E5795},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={05AEBC59-942F-43EE-929D-21174A215441},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={9221364E-2674-41A1-B3AF-A7BEBBE7567D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={9315FDA5-16DD-4475-84D6-277B8FD87283},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={7B2E98BC-F11A-4210-A219-05880ABC3333},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={823855BF-3AC5-4C0C-87E6-AD864B361AAF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={FBF7F8C3-003B-40EB-B316-260E7D5DD274},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={63B09FF1-4A74-4963-B2D9-182293950F88},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={9BC4D741-ADF6-496E-9DA7-8ADEDFF50252},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:044]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:044]: Executing op: ComponentRegister(ComponentId={E25426F9-3251-4E63-A4A4-06BA9A25ABDD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={59C347AA-B20B-4146-B11B-E570BFDF7D81},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={C45AAE65-B109-4933-AA74-817CFBE6233A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={A4BACF9D-BF67-4909-AC27-8627DEA42367},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={65937A4F-1784-4285-8C24-D06DA20D3AF0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={2BDF5C8A-E036-4C5F-9275-9927CA13F3C6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={B1C9846E-5F65-40D5-BA10-79055269A722},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={BFCC0446-6C34-413E-9611-520B993B04B1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={D36CD500-4FBE-4943-90EC-D7646AA41519},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={3BF07D0A-37CC-4FA8-81DA-D351E301276A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={F85BB204-89AC-441C-8589-F6F0D7F329B4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={3276B786-D941-4ABD-810D-5AE5E3106F02},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={DC99F7C0-7CFB-413C-8E6F-D16EE6F7AB8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={F5D90A95-0F03-41CF-BEA3-247569C57BD3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={52411750-073E-47D7-BB97-8B404AF42B76},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={7ED7F039-CC97-4CF5-8CCB-8CB15DF14759},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={FE613E3D-0469-40F8-9A0F-635D16097928},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={A94755DD-6057-4746-8C39-B06D97E39D54},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={0A8056D0-75A3-466F-95CE-FDE62CFF9C1A},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={39F322E9-713E-417C-8380-2A8CBEB5E46C},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:060]: Executing op: ComponentRegister(ComponentId={3D564A97-4F0A-44FD-97D1-CBF283B05453},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:060]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={BC39E663-65CB-43D3-880E-BAB2744A9597},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={238C4CC5-16A9-4A25-B94F-C07F9692D5E2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={A5486A6B-FF88-41D8-82F3-B46ED9697255},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={C9B04594-F409-4FA4-B2BC-086361DBC58D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={8F31C598-9FCF-46DD-92CE-BF02EAAF7CC8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={36E7E558-86C8-4D1B-8CA8-2EEF33963A1E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={341B1BFF-FEAD-4104-A29F-E9363B7517BF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={F74F470D-4B17-4901-9B74-60A3838B7457},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={C8CFF022-47AD-4EBF-A615-683844308F40},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={691C4A89-DB0D-4C7C-B684-ACAA9F794FAD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={F403AD90-FEC7-4036-9C1A-BB012A8E790E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={FAEE7082-8088-4157-B163-68605546E3D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={CB2061C6-BCA4-431E-8768-637BA7B6A021},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={494298F4-4204-4E18-BA16-8152108CE3DD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={274E0945-DD13-4FB3-8FED-A4865A87E518},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={7D755E63-DF4E-4F44-A3CC-D43CA33ABC53},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={F2814579-3850-4A1C-9312-5F0644872616},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={9D8FDDD5-6302-4133-A040-27AE6FCA4A50},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={09743465-1197-4046-87F7-3F24D3FD7CEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={F6C47B05-6049-4F2B-94C5-28C6F9CC00AB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={A54E5967-C145-461E-9452-F701F47D3DE2},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={B4C73573-F81E-4459-80C7-FBC3FA74C1D5},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={4BCA7B9E-D378-4830-B7EE-62B8EDD570C5},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={556C7464-36A2-464B-9250-2F924DA27FA7},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={9D161347-EFC6-46A9-9AEC-97722B0C8636},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={29262C23-36F0-4117-9406-A551A1CF11E4},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={A46E98B3-190F-4296-871A-431FB198DB58},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={175C5C85-0E0E-44BF-8F48-CD96A4EBBA5B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={E05D9609-9A70-4DEF-A8D3-5B884BEA1139},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={72649A5C-570A-467A-96A8-D77FAB4A16ED},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={6368E4D7-C225-4D2B-AA09-75E27732DDD4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={9EED603A-240C-44CD-9136-F3703168D6A8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={C5E5F1CE-2724-447B-A7E2-3B4B4BE9E801},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:075]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:075]: Executing op: ComponentRegister(ComponentId={B46DA52C-6057-4314-B5BE-670483AB08D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={1601B2AC-3E23-4EA6-861E-17F52F42AAA4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={C0E2EF20-B6D0-44A7-88AD-DAFAA4A325BF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={E3FAD286-FF50-4A29-93F2-FA93F9E5E897},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={49A894EE-FF4F-4862-B9B8-A4EBBEA0A77E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={B763A398-206E-43BF-9810-E482FC158A74},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={A891B002-2209-413D-896C-A999F157D57A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={3CFF4AE8-C6ED-41A6-9AC0-6E0B51B84C41},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={CD46A165-DB78-470B-B062-D973ED80944B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={D2BB3772-EC58-4939-8333-E89A6E780F18},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={68FF2A0F-9051-42F8-9394-384797B1AAD2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={484E3E44-1A83-4137-BAA1-B984E5636086},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0).
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={F4E436FD-FE28-4278-86D5-E3412859F5E5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={A153DC07-D119-4900-B5D1-F671EC25C7EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={177335D9-9D47-4E12-A841-7884DB0B65FE},KeyPath=C:\ProgramData\Sophos\Sophos Tamper Protection\logs\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={B7EF36A2-B450-43CD-9919-427EAE165995},KeyPath=C:\ProgramData\Sophos\Sophos Device Control\logs\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={63284722-D09A-447D-861D-CFEBE89D28F4},KeyPath=C:\ProgramData\Sophos\Sophos Data Control\logs\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={6EE91E7E-1391-4C83-838D-8EE0407A2C5E},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={4AEE9519-9D9B-44CE-9852-434F0BB544E3},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={BC7402A1-8EC2-4834-BDFF-7D991375467D},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={A4D31E85-0B09-4E42-96C3-DE5DE60EB97F},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\logs\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={034A5FFF-0A1F-4035-920F-73803E07C209},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={CCFFD125-B6F4-4E85-B42F-EEDE0E647001},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={CCC8000A-8A29-4FFE-8FE8-185FFE19444C},,State=-7,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0)
MSI (s) (28:F8) [12:08:48:091]: Executing op: ActionStart(Name=RunErrorScript,,)
MSI (s) (28:F8) [12:08:48:091]: Executing op: CustomActionRollback(Action=RunErrorScript,ActionType=1345,Source=BinaryData,Target=RunErrorScripts,CustomActionData="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49")
MSI (s) (28:CC) [12:08:48:107]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF99A.tmp, Entrypoint: RunErrorScripts
MSI (s) (28:F8) [12:08:48:107]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,)
MSI (s) (28:F8) [12:08:48:107]: Executing op: ActionStart(Name=RestoreMovedFiles,,)
MSI (s) (28:F8) [12:08:48:107]: Executing op: CustomActionRollback(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\)
MSI (s) (28:28) [12:08:48:122]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF9AB.tmp, Entrypoint: RestoreMovedFiles
MSI (s) (28:F8) [12:08:48:122]: Executing op: ActionStart(Name=SetUpdateFailed,,)
MSI (s) (28:F8) [12:08:48:122]: Executing op: CustomActionRollback(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,)
MSI (s) (28:24) [12:08:48:138]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF9BB.tmp, Entrypoint: SetUpdateFailed
MSI (s) (28:F8) [12:08:48:153]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (28:F8) [12:08:48:153]: Error in rollback skipped. Return: 5
MSI (s) (28:F8) [12:08:48:153]: Note: 1: 2318 2:
MSI (s) (28:F8) [12:08:48:153]: No System Restore sequence number for this installation.
MSI (s) (28:F8) [12:08:48:153]: Unlocking Server
MSI (s) (28:F8) [12:08:48:169]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 12:08:48: INSTALL. Return value 3.
Property(S): DiskPrompt = [1]
Property(S): CONFIG = C:\ProgramData\Sophos\Sophos Anti-Virus\Config\
Property(S): INFECTED = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\
Property(S): LOW = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\
Property(S): LOGS = C:\ProgramData\Sophos\Sophos Anti-Virus\logs\
Property(S): SAFESTORE = C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\
Property(S): TEMP = C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\
Property(S): CACHE = C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\
Property(S): LOGS1 = C:\ProgramData\Sophos\Sophos Data Control\logs\
Property(S): LOGS2 = C:\ProgramData\Sophos\Sophos Device Control\logs\
Property(S): LOGS3 = C:\ProgramData\Sophos\Sophos Tamper Protection\logs\
Property(S): INSTALLDIR = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): MsiAMD64 = 6
Property(S): Microsoft.VC90.ATL = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\
Property(S): Microsoft.VC90.CRT = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\
Property(S): INSTALLDIR_WIN32 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): INSTALLDIR_X64 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): VersionNT64 = 603
Property(S): BootDriverStartup = 0
Property(S): CheckSNMPDLLPresence = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): ConfigureSAV = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""0"
Property(S): CopyOtherFiles = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"
Property(S): CopySAVSyncFile = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"
Property(S): CreateSavAdapterDllRegistryEntry = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): CreateUserGroups = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): DeleteBDLs = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DeleteDriverKeys = 0
Property(S): DeleteHIPSConfig = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DeleteIDEs = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DeleteNonEngineFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DeleteOtherFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): DisablePUADetection = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): DisableSxlLookups = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): DisableWebProtection = C:\ProgramData\Sophos\Sophos Anti-Virus\Config
Property(S): ForceDeleteFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): ForceDeleteUserPlugin = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): ALLUSERS = 2
Property(S): System64Folder = C:\Windows\SysWOW64\
Property(S): InstallBootDriverVista = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\wxp_i386\SOPHOSBOOTDRIVER.INF
Property(S): InstallBootDriverWin7 = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_i386\SOPHOSBOOTDRIVER.INF
Property(S): SystemFolder = C:\Windows\SysWOW64\
Property(S): InstallClassFilterVista = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\wxp_i386\sdcfilter.inf
Property(S): InstallClassFilterWin7 = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\win7_i386\sdcfilter.inf
Property(S): InstallDeviceControl = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"
Property(S): InstallDriverFilesVista = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\wlh_i386\SAVONACCESSDRIV.INF
Property(S): InstallDriverFilesWin7 = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\win7_i386\SAVONACCESSDRIV.INF
Property(S): InstallKMSDriver = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\kms\wxp_i386\skmscan.inf
Property(S): InstallKMSDriverWin7 = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\kms\win7_i386\skmscan.inf
Property(S): InstallUnsignedBootDriver = "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"
Property(S): InstallUnsignedDrivers = "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"
Property(S): MoveLockedFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\|
Property(S): RegisterBufferOverflowProtection = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RemoveFilesOnUpgrade = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RemoveSAVI = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RestoreFirstInstallTime = 0
Property(S): RestoreMovedFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackBootDriverVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF
Property(S): RollbackClassFilterVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf
Property(S): RollbackDriverFilesVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF
Property(S): RollbackForceDeleteFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackForceDeleteUserPlugin = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackKMSDriverVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\skmscan.inf
Property(S): RollbackOtherFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackSavi = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackUpdateSavAdapterDll = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): RollbackUpdateDesktopMessaging = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): UpdateDesktopMessaging = ;10.7.2.49;
Property(S): RunAfterScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"
Property(S): RunErrorScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"
Property(S): RunPreLaunchScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"
Property(S): SetAdminGroupDescription = SophosAdministrators may run Sophos Anti-Virus with complete access
Property(S): ALLUSERSPROFILE = C:\ProgramData\
Property(S): SetFolderPermissions = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): UPDATEDRIVERS = 0
Property(S): TARGETDIR = C:\
Property(S): SetOnAccessGroupDescription = Contains accounts used by Sophos Anti-Virus when it performs threat scanning and cleanup functions
Property(S): SetPowerGroupDescription = SophosPowerUsers may run Sophos Anti-Virus with the access that SophosUsers have, plus greater access to cleanup
Property(S): RollBackInstallDeviceControl = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): StartDriverServices = WIN7_AMD64
Property(S): UninstallBootDriverOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF
Property(S): UninstallBootDriver = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF
Property(S): UninstallClassFilterVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf
Property(S): UninstallDeviceControl = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"
Property(S): UninstallDriverFilesOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF
Property(S): UninstallDriverFilesVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF
Property(S): UninstallKMSDriverOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF
Property(S): UninstallKMSDriver = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF
Property(S): UnregisterBufferOverflowProtection = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): UpdateSXLServerList = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"
Property(S): UpdateSAVI = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"
Property(S): SetUserGroupDescription = SophosUsers may run Sophos Anti-Virus with limited access to scanning configuration and cleanup
Property(S): UpdateSavAdapterDll = ;10.7.2.49;
Property(S): USERPROFILE = C:\Users\Default\
Property(S): EventType = BEGIN_SYSTEM_CHANGE
Property(S): SetupSspUserAccount = NT SERVICE\SAVService
Property(S): SetupSspUserAccountRollback = NT SERVICE\SAVService
Property(S): AddSIPSSubmitterUserAccount = NT SERVICE\SAVService
Property(S): AddSIPSSubmitterUserAccountRollback = NT SERVICE\SAVService
Property(S): ARPINSTALLLOCATION = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): SAVSERVICEUSER = NT SERVICE\SavService
Property(S): ExecSecureObjects = C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\CreateFolderNT SERVICE\SavService268435456MACHINE\SOFTWARE\Sophos\SAVService\TelemetryRegistryNT SERVICE\SavService268435456MACHINE\SOFTWARE\Sophos\SAVService\ThreatLifetimeRegistryNT SERVICE\SavService268435456
Property(S): ExecSecureObjectsRollback = C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\CreateFolderD:AI(A;;FA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;OICIIO;GA;;;S-1-5-80-625182504-1059196970-3383703783-1486613422-1586951596)(A;ID;FA;;;BA)(A;OICIIOID;GA;;;BA)(A;ID;FA;;;SY)(A;OICIIOID;GA;;;SY)(A;ID;0x1200a9;;;WD)(A;OICIIOID;GXGR;;;WD)0
Property(S): RegisterEventManifest = "wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"
Property(S): RollbackRegisterEventManifest = "wevtutil.exe" um "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"
Property(S): ExecXmlFile = 10C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@messageFileName]messageFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll71/*/*/*/*[@parameterFileName]parameterFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll10C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man71/*/*/*/*[@resourceFileName]resourceFileNameC:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): CommonFiles64Folder = C:\Program Files (x86)\Common Files\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): FavoritesFolder = C:\Windows\SysWOW64\config\systemprofile\Favorites\
Property(S): FontsFolder = C:\Windows\Fonts\
Property(S): GlobalAssemblyCache = C:\
Property(S): LocalAppDataFolder = C:\Windows\SysWOW64\config\systemprofile\AppData\Local\
Property(S): PrimaryVolumePath = C:\
Property(S): ProgramFiles64Folder = C:\Program Files (x86)\
Property(S): SendToFolder = C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): System16Folder = C:\
Property(S): TempFolder = C:\Windows\TEMP\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): WindowsFolder = C:\Windows\
Property(S): WindowsVolume = C:\
Property(S): RESOURCES = C:\ProgramData\Sophos\Sophos Anti-Virus\
Property(S): NEW_DIRECTORY3 = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
Property(S): RES = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\
Property(S): NEW_DIRECTORY1 = C:\ProgramData\Sophos\
Property(S): SOPHOS_DATA_CONTROL = C:\ProgramData\Sophos\Sophos Data Control\
Property(S): SOPHOS_DEVICE_CONTROL = C:\ProgramData\Sophos\Sophos Device Control\
Property(S): SOPHOS_TAMPER_PROTECTION = C:\ProgramData\Sophos\Sophos Tamper Protection\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): SOPHOS_ANTI_VIRUS = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\
Property(S): SOPHOS = C:\Program Files (x86)\Sophos\
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): NEW_DIRECTORY2 = C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): newfolder2 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\
Property(S): newfolder1 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
Property(S): VersionNT = 603
Property(S): AdminUser = 1
Property(S): Manufacturer = Sophos Limited
Property(S): ProductCode = {65323B2D-83D4-470D-A209-D769DB30BBDB}
Property(S): ProductLanguage = 1033
Property(S): ProductName = Sophos Anti-Virus
Property(S): ProductVersion = 10.7.2.49
Property(S): UpgradeCode = {597B239E-3032-491A-A322-817737925E8A}
Property(S): _IsMaintenance = Change
Property(S): _IsSetupTypeMin = Typical
Property(S): AFTERREBOOT = 0
Property(S): AgreeToLicense = No
Property(S): ApplicationUsers = AllUsers
Property(S): APPLYCLASSICCONFIG = 0
Property(S): ARPCOMMENTS = Protects your computer and network from threats
Property(S): ARPCONTACT = Sophos Technical Support
Property(S): ARPHELPLINK = http://www.sophos.com/support
Property(S): ARPHELPTELEPHONE =
Property(S): ARPNOMODIFY = 1
Property(S): ARPNOREPAIR = 1
Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe
Property(S): ARPURLINFOABOUT = http://www.sophos.com
Property(S): ARPURLUPDATEINFO = www.sophos.com/.../updates
Property(S): BOOTDRIVERSIGNED = 1
Property(S): CHECKFORCOMPETITORS = 1
Property(S): CHECKFORSCF = 1
Property(S): CLASSFILTERPRESENT = 0
Property(S): CopyBDLs = 0
Property(S): CopyIDEs = 0
Property(S): DATACONTROL = 1
Property(S): DefaultUIFont = Tahoma8
Property(S): DEVICECONTROL = 1
Property(S): DialogCaption = Sophos Installer
Property(S): DISABLEONACCESS = 0
Property(S): Display_IsBitmapDlg = 1
Property(S): DisplayNameCustom = Custom
Property(S): DisplayNameMinimal = Minimal
Property(S): DisplayNameTypical = Typical
Property(S): DRIVERVERSION = WIN7_AMD64
Property(S): FIRST_INSTALL_DATE = 0
Property(S): IDEONLY = 0
Property(S): InstallChoice = AR
Property(S): INSTALLLEVEL = 100
Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1]
Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1]
Property(S): IS_PROGMSG_XML_COSTING = Costing XML files...
Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s...
Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes...
Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s...
Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes...
Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s...
Property(S): IS_SQLSERVER_AUTHENTICATION = 0
Property(S): IS_SQLSERVER_USERNAME = sa
Property(S): ISReleaseFlags = SAV
Property(S): ISVROOT_PORT_NO = 0
Property(S): MAJORUPGRADE = 0
Property(S): MANAGED = 1
Property(S): MSIRESTARTMANAGERCONTROL = Disable
Property(S): NEEDREBOOT = 0
Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@
Property(S): PRODUCTTYPE = 0
Property(S): PROCESSOR_NX_ENABLED = 1
Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s
Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools...
Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s
Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories...
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension
Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions...
Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories...
Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool
Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools...
Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d
Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s
Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories...
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension
Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions...
Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools...
Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes...
Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions...
Property(S): ProgressType0 = install
Property(S): ProgressType1 = Installing
Property(S): ProgressType2 = installed
Property(S): ProgressType3 = installs
Property(S): RebootYesNo = Yes
Property(S): Registration = No
Property(S): ReinstallModeText = omus
Property(S): SAVIONLY = 0
Property(S): SCRIPTDIR = [SOURCEDIR]
Property(S): SequenceNumber = 0
Property(S): SetupType = Typical
Property(S): UITYPE = full
Property(S): UNINSTALLBOOTDRIVERS = 1
Property(S): UNINSTALLCLASSFILTER = 1
Property(S): UNINSTALLDRIVERS = 1
Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus.
Property(S): UNINSTALLKMSDRIVERS = 1
Property(S): UPDATEBOOTDRIVERS = 1
Property(S): UPDATECLASSFILTER = 1
Property(S): VIRUSDATAUPDATE = 0
Property(S): SecureCustomProperties = EXCLUDEDPROCESSES;INSTALLINGVERSION;MAJORUPGRADE;WEBCONTROL
Property(S): WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\
Property(S): SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll
Property(S): SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll
Property(S): SWCSERVICEFILEEXISTS.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\
Property(S): SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
Property(S): SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\
Property(S): DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe
Property(S): DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat
Property(S): CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe
Property(S): CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_fc.exe
Property(S): CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\scf.dat
Property(S): SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = swi_service
Property(S): SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /registerService
Property(S): SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe" -r "C:\Windows\TEMP\SwiRebootRequired.txt" /u "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf"
Property(S): SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_di.exe" -r "C:\Windows\TEMP\SwiRebootRequired.txt" "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_callout.inf"
Property(S): SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = swi_filter
Property(S): SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe" -i
Property(S): REBOOTREQUIREDFILE.11DACB83_28A7_4FA6_AF5B_C006E340C101 = SwiRebootRequired.txt
Property(S): MsiLogFileLocation = C:\Windows\TEMP\Sophos Anti-Virus Major Install Log_170530_110825.txt
Property(S): PackageCode = {B11B63E0-A3EB-478A-AF04-AAE0B577AEB2}
Property(S): ProductState = -1
Property(S): PackagecodeChanging = 1
Property(S): REBOOT = ReallySuppress
Property(S): UPDATEKMSDRIVERS = 1
Property(S): RECOVERYMODE = 0
Property(S): WEBCONTROL = 1
Property(S): CURRENTDIRECTORY = C:\Windows\system32
Property(S): CLIENTUILEVEL = 3
Property(S): MSICLIENTUSESEXTERNALUI = 1
Property(S): CLIENTPROCESSID = 5124
Property(S): MsiSystemRebootPending = 1
Property(S): VersionDatabase = 200
Property(S): VersionMsi = 5.00
Property(S): WindowsBuild = 9600
Property(S): ServicePackLevel = 0
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 2
Property(S): RemoteAdminTS = 1
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): AppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\
Property(S): NetHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Windows\system32\config\systemprofile\Documents\
Property(S): PrintHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): MyPicturesFolder = C:\Windows\system32\config\systemprofile\Pictures\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): Msix64 = 6
Property(S): Intel = 6
Property(S): PhysicalMemory = 3069
Property(S): VirtualMemory = 2337
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = SYSTEM
Property(S): UserSID = S-1-5-18
Property(S): UserLanguageID = 2057
Property(S): ComputerName = SGMACCP84004DC
Property(S): SystemLanguageID = 2057
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 23
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 12:08:48
Property(S): Date = 30/05/2017
Property(S): MsiNetAssemblySupport = 4.0.30319.33440
Property(S): MsiWin32AssemblySupport = 6.3.9600.17415
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): USERNAME = Windows User
Property(S): DATABASE = C:\Windows\Installer\2fa0a15a.msi
Property(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi
Property(S): UILevel = 2
Property(S): ACTION = INSTALL
Property(S): ROOTDRIVE = C:\
Property(S): CostingComplete = 1
Property(S): OutOfDiskSpace = 0
Property(S): OutOfNoRbDiskSpace = 0
Property(S): PrimaryVolumeSpaceAvailable = 0
Property(S): PrimaryVolumeSpaceRequired = 0
Property(S): PrimaryVolumeSpaceRemaining = 0
Property(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\
Property(S): SourcedirProduct = {65323B2D-83D4-470D-A209-D769DB30BBDB}
Property(S): ProductToBeRegistered = 1
MSI (s) (28:F8) [12:08:48:231]: Note: 1: 1708
MSI (s) (28:F8) [12:08:48:231]: Product: Sophos Anti-Virus -- Installation operation failed.
MSI (s) (28:F8) [12:08:48:231]: Windows Installer installed the product. Product Name: Sophos Anti-Virus. Product Version: 10.7.2.49. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1603.
MSI (s) (28:F8) [12:08:48:231]: Deferring clean up of packages/files, if any exist
MSI (s) (28:F8) [12:08:48:231]: MainEngineThread is returning 1603
MSI (s) (28:58) [12:08:48:231]: No System Restore sequence number for this installation.
=== Logging stopped: 30/05/2017 12:08:48 ===
MSI (s) (28:58) [12:08:48:247]: User policy value 'DisableRollback' is 0
MSI (s) (28:58) [12:08:48:247]: Machine policy value 'DisableRollback' is 0
MSI (s) (28:58) [12:08:48:247]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (28:58) [12:08:48:247]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (28:58) [12:08:48:247]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (28:58) [12:08:48:247]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (28:58) [12:08:48:247]: Destroying RemoteAPI object.
MSI (s) (28:20) [12:08:48:247]: Custom Action Manager thread ending.
MSI (c) (04:D0) [12:08:48:247]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (04:D0) [12:08:48:247]: MainEngineThread is returning 1603
=== Verbose logging stopped: 30/05/2017 12:08:48 ===
2017-05-30 12:08:48 ERROR: Installation failed
2017-05-30 12:08:48 Info: SetupPlugin: Unable to open Application registry key to get Install Path.
2017-05-30 12:08:48 ERROR: Failed to get current install location to register with tamper protection. Error 0x80070002
Hello Tom,
guess it's trying to create the Sophos Groups - and naturally fails (details should be in the Sophos Anti-Virus Major CustomActions Log with label CreateUserGroups). Are there any of the Sophos Groups in AD? Is Sophos already installed on a writable DC (in this case they should already exist)? If not all groups are there please create the missing ones as domain local groups.
Christian
Hello Tom,
guess it's trying to create the Sophos Groups - and naturally fails (details should be in the Sophos Anti-Virus Major CustomActions Log with label CreateUserGroups). Are there any of the Sophos Groups in AD? Is Sophos already installed on a writable DC (in this case they should already exist)? If not all groups are there please create the missing ones as domain local groups.
Christian
