Failed to install SAVXP : The MSI has failed (Sophos Anti Virus not installed)

Question

Hello, 
 One of our server have an issue, Sophos Anti Virus component on this server not installed after automatic update. On this server, installed PureMessage for Exchange. So, PureMessage update failed too. On SEC, i tried to push update but still failed to install Sophos Anti Virus component. This is the log 
 Sophos Anti-Virus Major CustomAction Log: 
 2016-01-20 11:24:57 ExtractClassicConfig: Action started 2016-01-20 11:24:57 ExtractClassicConfig: Action succeeded 2016-01-20 11:24:57 PreInstallChecks: Action started 2016-01-20 11:24:57 PreInstallChecks: Action succeeded 2016-01-20 11:24:57 SetBootDriverStartupProperty: Action started 2016-01-20 11:24:57 SetBootDriverStartupProperty: Boot driver: not installed. 2016-01-20 11:24:57 SetBootDriverStartupProperty: Action succeeded 2016-01-20 11:24:57 SetClassFilterPresentProperty: Action started 2016-01-20 11:24:57 SetClassFilterPresentProperty: Setting class filter present property to: 0 2016-01-20 11:24:57 SetClassFilterPresentProperty: Action succeeded 2016-01-20 11:24:58 SetDriverProperty: Action started 2016-01-20 11:24:58 SetDriverProperty: PROCESSOR_ARCHITECTURE environment variable is: AMD64 2016-01-20 11:24:58 SetDriverProperty: Action succeeded 2016-01-20 11:24:58 SetProcessorProperties: Action started 2016-01-20 11:24:58 SetProcessorProperties: Action succeeded 2016-01-20 11:24:58 SetRestoreExcludedProcessesProperty: Action started 2016-01-20 11:24:58 SetRestoreExcludedProcessesProperty: SetRestoreExcludedProcessesProperty 2016-01-20 11:24:58 SetRestoreExcludedProcessesProperty: PROCESSOR_ARCHITECTURE environment variable is: AMD64 2016-01-20 11:24:58 SetRestoreExcludedProcessesProperty: Action succeeded 2016-01-20 11:25:04 CheckRegForNullDACLs: Action started 2016-01-20 11:25:04 CheckRegForNullDACLs: Action succeeded 2016-01-20 11:25:05 WaitForSAVService: Action started 2016-01-20 11:25:05 WaitForSAVService: WaitForSAVService: Walking system processes... 2016-01-20 11:25:05 WaitForSAVService: WaitForSAVService: Finished walking system processes. 2016-01-20 11:25:05 WaitForSAVService: Action succeeded 2016-01-20 11:25:05 CheckUninstallDrivers: Action started 2016-01-20 11:25:05 CheckUninstallDrivers: IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess control. Returning false. 2016-01-20 11:25:05 CheckUninstallDrivers: IsServiceInstalled: Unable to get a handle to requested service SAVOnAccess filter. Returning false. 2016-01-20 11:25:05 CheckUninstallDrivers: Action succeeded 2016-01-20 11:25:05 DeleteIDEs: Action started 2016-01-20 11:25:05 DeleteIDEs: Action succeeded 2016-01-20 11:25:05 DeleteBDLs: Action started 2016-01-20 11:25:05 DeleteBDLs: Action succeeded 2016-01-20 11:25:05 DeleteHIPSConfig: Action started 2016-01-20 11:25:05 DeleteHIPSConfig: Action succeeded 2016-01-20 11:25:05 UpdateSavAdapterDll: Action started 2016-01-20 11:25:15 UpdateSavAdapterDll: Action succeeded 2016-01-20 11:25:15 CopyOtherFiles: Action started 2016-01-20 11:25:15 CopyOtherFiles: CopyOtherFiles custom action - Copying other driver files 2016-01-20 11:25:15 CopyOtherFiles: Copying class filter source: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\classfilterdrivers\wnet_amd64\SDCFILTER.INF, target: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ 2016-01-20 11:25:15 CopyOtherFiles: Copying boot driver source: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinLH_AMD64\SOPHOSBOOTDRIVER.INF, target: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ 2016-01-20 11:25:15 CopyOtherFiles: Copying kms source: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\wxp_i386\SKMSCAN.INF, target: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ 2016-01-20 11:25:15 CopyOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll does not exist, no further action. 2016-01-20 11:25:15 CopyOtherFiles: PROCESSOR_ARCHITECTURE environment variable is: AMD64 2016-01-20 11:25:15 CopyOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll does not exist, no further action. 2016-01-20 11:25:15 CopyOtherFiles: Copying boot tasks source: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinLH_AMD64\SophosBootTasks.exe, target: C:\Windows\system32\ 2016-01-20 11:25:15 CopyOtherFiles: Action succeeded 2016-01-20 11:25:15 RegisterBufferOverflowProtection: Action started 2016-01-20 11:25:15 RegisterBufferOverflowProtection: BopsUnregister: could not get short path to DLL. It will not be unregistered. 2016-01-20 11:25:15 RegisterBufferOverflowProtection: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action. 2016-01-20 11:25:15 RegisterBufferOverflowProtection: PROCESSOR_ARCHITECTURE environment variable is: AMD64 2016-01-20 11:25:15 RegisterBufferOverflowProtection: Action succeeded 2016-01-20 11:25:15 RestoreExcludedProcesses: Action started 2016-01-20 11:25:15 RestoreExcludedProcesses: RestoreExcludedProcesses 2016-01-20 11:25:15 RestoreExcludedProcesses: Empty excluded processes property. Nothing to be done. 2016-01-20 11:25:15 RestoreExcludedProcesses: Action succeeded 2016-01-20 11:25:15 RollbackUpdateSavAdapterDll: Action started 2016-01-20 11:25:15 RollbackUpdateSavAdapterDll: Action succeeded 2016-01-20 11:25:15 DeleteOtherFiles: Action started 2016-01-20 11:25:15 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Veex.dll with error: Access is denied. . 2016-01-20 11:25:15 Error deleting file: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\OSDP.dll with error: Access is denied. . 2016-01-20 11:25:15 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll detoured exists, proceeding to rename it & mark for delete. 2016-01-20 11:25:15 DeleteOtherFiles: PROCESSOR_ARCHITECTURE environment variable is: AMD64 2016-01-20 11:25:15 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll detoured exists, proceeding to rename it & mark for delete. 2016-01-20 11:25:15 DeleteOtherFiles: GetRidOfExistingDetoured - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\detoured.dll does not exist, no further action. 2016-01-20 11:25:15 DeleteOtherFiles: Deleting config file folder 2016-01-20 11:25:15 DeleteOtherFiles: Failed to delete config folder, 2 2016-01-20 11:25:15 DeleteOtherFiles: Action succeeded 2016-01-20 11:25:15 ForceDeleteFiles: Action started 2016-01-20 11:25:15 ForceDeleteFiles: Error deleting DesktopMessaging registry key. Returned error was: The system cannot find the file specified. 
 2016-01-20 11:25:15 ForceDeleteFiles: Action succeeded 2016-01-20 11:25:15 RunErrorScripts: Action started 2016-01-20 11:25:15 RunErrorScripts: Action succeeded 2016-01-20 11:25:15 RestoreMovedFiles: Action started 2016-01-20 11:25:15 RestoreMovedFiles: Action succeeded 2016-01-20 11:25:15 SetUpdateFailed: Action started 2016-01-20 11:25:15 SetUpdateFailed: Unable to create an instance of ComponentManager - SystemInformation cannot be informed of end of update 2016-01-20 11:25:15 SetUpdateFailed: Action succeeded 
 
 Sophos Anti-Virus Major Install Log: 
 2016-01-20 11:24:55 Info: Logging started: installing/upgrading Sophos Anti-Virus 2016-01-20 11:24:55 Info: InstallFromPath is: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ 2016-01-20 11:24:55 Info: InstallToPath is: 2016-01-20 11:24:55 Info: SAV is not installed. Installing to {InstallToPath} 2016-01-20 11:24:55 INFO: Checking the validity of the VDL manifest file. 2016-01-20 11:24:56 INFO: The manifest file has been successfully validated. 2016-01-20 11:24:56 Info: Managed install 2016-01-20 11:24:56 Info: MSXML version has changed. Full update required 2016-01-20 11:24:56 Info: Performing major update of Sophos Anti-Virus using msi. 2016-01-20 11:24:56 Info: Update is signalled. 2016-01-20 11:24:56 UpdateVersionInfo(), SAU can't supply version info - using msi version 2016-01-20 11:24:56 Info: PutSetupOptionsToRegistry 2016-01-20 11:24:56 Info: Install MSXML 2016-01-20 11:24:56 Info: Check boot driver and kms driver 2016-01-20 11:24:56 Info: no existing installation of Sophos Anti-Virus was found 2016-01-20 11:24:56 Info: Restart required for Data Control (clean managed full install) 2016-01-20 11:24:56 Info: Transform file returned: 2016-01-20 11:24:56 Info: SAV Setup plugin: running MsiInstallProduct (C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi, INSTALLDIR="" REBOOT=ReallySuppress UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1) === Verbose logging started: 1/20/2016 11:24:56 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (E0:14) [11:24:56:746]: Resetting cached policy values MSI (c) (E0:14) [11:24:56:746]: Machine policy value 'Debug' is 0 MSI (c) (E0:14) [11:24:56:746]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi ******* Action: ******* CommandLine: ********** MSI (c) (E0:14) [11:24:56:748]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (E0:14) [11:24:56:748]: Grabbed execution mutex. MSI (c) (E0:14) [11:24:56:853]: Cloaking enabled. MSI (c) (E0:14) [11:24:56:853]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (E0:14) [11:24:56:858]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (E0:88) [11:24:56:867]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi MSI (s) (E0:88) [11:24:56:867]: Grabbed execution mutex. MSI (s) (E0:CC) [11:24:56:869]: Resetting cached policy values MSI (s) (E0:CC) [11:24:56:869]: Machine policy value 'Debug' is 0 MSI (s) (E0:CC) [11:24:56:869]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi ******* Action: ******* CommandLine: ********** MSI (s) (E0:CC) [11:24:56:870]: Machine policy value 'DisableUserInstalls' is 0 MSI (s) (E0:CC) [11:24:56:884]: SRSetRestorePoint skipped for this transaction. MSI (s) (E0:CC) [11:24:56:887]: File will have security applied from OpCode. MSI (s) (E0:CC) [11:24:56:893]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi' against software restriction policy MSI (s) (E0:CC) [11:24:56:893]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi has a digital signature MSI (s) (E0:CC) [11:24:56:894]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi is permitted to run because the user token authorizes execution (system or service token). MSI (s) (E0:CC) [11:24:56:894]: End dialog not enabled MSI (s) (E0:CC) [11:24:56:894]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi MSI (s) (E0:CC) [11:24:56:894]: Package we're running from ==> C:\Windows\Installer\147e2a57.msi MSI (s) (E0:CC) [11:24:56:905]: APPCOMPAT: Compatibility mode property overrides found. MSI (s) (E0:CC) [11:24:56:905]: APPCOMPAT: looking for appcompat database entry with ProductCode '{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}'. MSI (s) (E0:CC) [11:24:56:905]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (E0:CC) [11:24:56:908]: MSCOREE not loaded loading copy from system32 MSI (s) (E0:CC) [11:24:56:911]: Machine policy value 'TransformsSecure' is 1 MSI (s) (E0:CC) [11:24:56:911]: Machine policy value 'DisablePatch' is 0 MSI (s) (E0:CC) [11:24:56:911]: Machine policy value 'AllowLockdownPatch' is 0 MSI (s) (E0:CC) [11:24:56:911]: Machine policy value 'DisableLUAPatching' is 0 MSI (s) (E0:CC) [11:24:56:911]: Machine policy value 'DisableFlyWeightPatching' is 0 MSI (s) (E0:CC) [11:24:56:912]: APPCOMPAT: looking for appcompat database entry with ProductCode '{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}'. MSI (s) (E0:CC) [11:24:56:912]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (E0:CC) [11:24:56:912]: Transforms are not secure. MSI (s) (E0:CC) [11:24:56:912]: Note: 1: 2205 2: 3: Control MSI (s) (E0:CC) [11:24:56:912]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos Anti-Virus Major Install Log_160120_042456.txt'. MSI (s) (E0:CC) [11:24:56:913]: Command Line: INSTALLDIR= REBOOT=ReallySuppress UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1 CURRENTDIRECTORY=C:\Windows\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=13536 MSI (s) (E0:CC) [11:24:56:913]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{CE9959FF-BAE0-4FE8-8837-F68062C881F0}'. MSI (s) (E0:CC) [11:24:56:913]: Product Code passed to Engine.Initialize: '' MSI (s) (E0:CC) [11:24:56:913]: Product Code from property table before transforms: '{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}' MSI (s) (E0:CC) [11:24:56:913]: Product Code from property table after transforms: '{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}' MSI (s) (E0:CC) [11:24:56:913]: Product not registered: beginning first-time install MSI (s) (E0:CC) [11:24:56:913]: Product {D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4} is not managed. MSI (s) (E0:CC) [11:24:56:913]: MSI_LUA: Credential prompt not required, user is an admin MSI (s) (E0:CC) [11:24:56:913]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'. MSI (s) (E0:CC) [11:24:56:913]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (s) (E0:CC) [11:24:56:913]: User policy value 'SearchOrder' is 'nmu' MSI (s) (E0:CC) [11:24:56:913]: Adding new sources is allowed. MSI (s) (E0:CC) [11:24:56:913]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'. MSI (s) (E0:CC) [11:24:56:914]: Package name extracted from package path: 'Sophos Anti-Virus.msi' MSI (s) (E0:CC) [11:24:56:914]: Package to be registered: 'Sophos Anti-Virus.msi' MSI (s) (E0:CC) [11:24:56:916]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (s) (E0:CC) [11:24:56:916]: Machine policy value 'DisableMsi' is 1 MSI (s) (E0:CC) [11:24:56:916]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (E0:CC) [11:24:56:916]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (E0:CC) [11:24:56:916]: Product installation will be elevated because user is admin and product is being installed per-machine. MSI (s) (E0:CC) [11:24:56:916]: Running product '{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}' with elevated privileges: Product is assigned. MSI (s) (E0:CC) [11:24:56:916]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'. MSI (s) (E0:CC) [11:24:56:916]: PROPERTY CHANGE: Modifying UPDATECLASSFILTER property. Its current value is '0'. Its new value: '1'. MSI (s) (E0:CC) [11:24:56:916]: PROPERTY CHANGE: Adding UPDATEKMSDRIVERS property. Its value is '1'. MSI (s) (E0:CC) [11:24:56:916]: PROPERTY CHANGE: Modifying DATACONTROL property. Its current value is '0'. Its new value: '1'. MSI (s) (E0:CC) [11:24:56:916]: PROPERTY CHANGE: Modifying DEVICECONTROL property. Its current value is '0'. Its new value: '1'. MSI (s) (E0:CC) [11:24:56:916]: PROPERTY CHANGE: Adding WEBCONTROL property. Its value is '1'. MSI (s) (E0:CC) [11:24:56:916]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Windows\system32'. MSI (s) (E0:CC) [11:24:56:916]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'. MSI (s) (E0:CC) [11:24:56:916]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'. MSI (s) (E0:CC) [11:24:56:916]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '13536'. MSI (s) (E0:CC) [11:24:56:916]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0 MSI (s) (E0:CC) [11:24:56:916]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality. MSI (s) (E0:CC) [11:24:56:918]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'. MSI (s) (E0:CC) [11:24:56:918]: TRANSFORMS property is now: MSI (s) (E0:CC) [11:24:56:918]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'. MSI (s) (E0:CC) [11:24:56:920]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming MSI (s) (E0:CC) [11:24:56:921]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites MSI (s) (E0:CC) [11:24:56:922]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (s) (E0:CC) [11:24:56:923]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents MSI (s) (E0:CC) [11:24:56:924]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (s) (E0:CC) [11:24:56:925]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent MSI (s) (E0:CC) [11:24:56:926]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo MSI (s) (E0:CC) [11:24:56:927]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates MSI (s) (E0:CC) [11:24:56:927]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (s) (E0:CC) [11:24:56:928]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local MSI (s) (E0:CC) [11:24:56:929]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures MSI (s) (E0:CC) [11:24:56:931]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (E0:CC) [11:24:56:931]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (E0:CC) [11:24:56:932]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (s) (E0:CC) [11:24:56:933]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (s) (E0:CC) [11:24:56:934]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (s) (E0:CC) [11:24:56:936]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (E0:CC) [11:24:56:937]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (E0:CC) [11:24:56:938]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (s) (E0:CC) [11:24:56:939]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu MSI (s) (E0:CC) [11:24:56:939]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop MSI (s) (E0:CC) [11:24:56:940]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (s) (E0:CC) [11:24:56:941]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts MSI (s) (E0:CC) [11:24:56:941]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (s) (E0:CC) [11:24:56:945]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (s) (E0:CC) [11:24:56:945]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (s) (E0:CC) [11:24:56:945]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (s) (E0:CC) [11:24:56:945]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (E0:CC) [11:24:56:945]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Windows User'. MSI (s) (E0:CC) [11:24:56:945]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (E0:CC) [11:24:56:945]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\147e2a57.msi'. MSI (s) (E0:CC) [11:24:56:945]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi'. MSI (s) (E0:CC) [11:24:56:945]: Machine policy value 'MsiDisableEmbeddedUI' is 0 MSI (s) (E0:CC) [11:24:56:945]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI MSI (s) (E0:CC) [11:24:56:945]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install MSI (s) (E0:CC) [11:24:56:946]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (E0:CC) [11:24:56:946]: Machine policy value 'DisableRollback' is 0 MSI (s) (E0:CC) [11:24:56:946]: User policy value 'DisableRollback' is 0 MSI (s) (E0:CC) [11:24:56:946]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. === Logging started: 1/20/2016 11:24:56 === MSI (s) (E0:CC) [11:24:56:947]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'. MSI (s) (E0:CC) [11:24:56:947]: Doing action: INSTALL Action start 11:24:56: INSTALL. MSI (s) (E0:CC) [11:24:56:948]: Running ExecuteSequence MSI (s) (E0:CC) [11:24:56:949]: Doing action: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C MSI (s) (E0:CC) [11:24:56:949]: PROPERTY CHANGE: Adding SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\Windows\SysWOW64\'. Action start 11:24:56: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C. MSI (s) (E0:CC) [11:24:56:950]: Doing action: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA Action ended 11:24:56: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C. Return value 1. MSI (s) (E0:CC) [11:24:56:950]: PROPERTY CHANGE: Adding SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\Windows\SysWOW64\'. Action start 11:24:56: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA. MSI (s) (E0:CC) [11:24:56:951]: Doing action: AppSearch Action ended 11:24:56: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA. Return value 1. Action start 11:24:56: AppSearch. MSI (s) (E0:CC) [11:24:56:952]: Note: 1: 2262 2: Signature 3: -2147287038 MSI (s) (E0:CC) [11:24:56:952]: Doing action: LaunchConditions Action ended 11:24:56: AppSearch. Return value 1. Action start 11:24:56: LaunchConditions. MSI (s) (E0:CC) [11:24:56:953]: Skipping action: CheckUserIsSophosAdmin (condition is false) MSI (s) (E0:CC) [11:24:56:953]: Skipping action: TP_CheckRemoveAllowed (condition is false) MSI (s) (E0:CC) [11:24:56:953]: Doing action: FindRelatedProducts Action ended 11:24:56: LaunchConditions. Return value 1. MSI (s) (E0:CC) [11:24:56:954]: Note: 1: 2205 2: 3: Upgrade MSI (s) (E0:CC) [11:24:56:954]: Note: 1: 2228 2: 3: Upgrade 4: SELECT `UpgradeCode`,`VersionMin`,`VersionMax`,`Language`,`Attributes`,`ActionProperty` FROM `Upgrade` Action start 11:24:56: FindRelatedProducts. MSI (s) (E0:CC) [11:24:56:954]: Skipping action: CCPSearch (condition is false) MSI (s) (E0:CC) [11:24:56:954]: Skipping action: RMCCPSearch (condition is false) MSI (s) (E0:CC) [11:24:56:954]: Doing action: ValidateProductID Action ended 11:24:56: FindRelatedProducts. Return value 0. Action start 11:24:56: ValidateProductID. MSI (s) (E0:CC) [11:24:56:955]: Doing action: setUserProfileNT Action ended 11:24:56: ValidateProductID. Return value 1. MSI (s) (E0:CC) [11:24:56:955]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Users\Default'. Action start 11:24:56: setUserProfileNT. MSI (s) (E0:CC) [11:24:56:955]: Skipping action: SetAllUsersProfileNT (condition is false) MSI (s) (E0:CC) [11:24:56:955]: Doing action: setAllUsersProfile2K Action ended 11:24:56: setUserProfileNT. Return value 1. MSI (s) (E0:CC) [11:24:56:956]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\ProgramData'. Action start 11:24:56: setAllUsersProfile2K. MSI (s) (E0:CC) [11:24:56:956]: Doing action: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA Action ended 11:24:56: setAllUsersProfile2K. Return value 1. MSI (s) (E0:CC) [11:24:56:957]: PROPERTY CHANGE: Adding WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\Windows\'. Action start 11:24:56: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA. MSI (s) (E0:CC) [11:24:56:957]: Doing action: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C Action ended 11:24:56: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA. Return value 1. MSI (s) (E0:CC) [11:24:56:958]: PROPERTY CHANGE: Adding WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\Windows\'. Action start 11:24:56: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C. MSI (s) (E0:CC) [11:24:56:958]: Doing action: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 Action ended 11:24:56: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C. Return value 1. MSI (s) (E0:CC) [11:24:56:958]: PROPERTY CHANGE: Adding WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\Windows\'. Action start 11:24:56: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207. MSI (s) (E0:CC) [11:24:56:959]: Doing action: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC Action ended 11:24:56: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207. Return value 1. MSI (s) (E0:CC) [11:24:56:959]: PROPERTY CHANGE: Adding WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\Windows\'. Action start 11:24:56: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC. MSI (s) (E0:CC) [11:24:56:959]: Doing action: CostInitialize Action ended 11:24:56: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC. Return value 1. MSI (s) (E0:CC) [11:24:56:960]: Machine policy value 'MaxPatchCacheSize' is 10 MSI (s) (E0:CC) [11:24:56:962]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'G:\'. MSI (s) (E0:CC) [11:24:56:963]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'. MSI (s) (E0:CC) [11:24:56:964]: Note: 1: 2205 2: 3: Patch MSI (s) (E0:CC) [11:24:56:964]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (E0:CC) [11:24:56:964]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (E0:CC) [11:24:56:964]: Note: 1: 2205 2: 3: __MsiPatchFileList MSI (s) (E0:CC) [11:24:56:964]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (E0:CC) [11:24:56:964]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId` MSI (s) (E0:CC) [11:24:56:964]: Note: 1: 2205 2: 3: Patch Action start 11:24:56: CostInitialize. MSI (s) (E0:CC) [11:24:56:964]: Doing action: FileCost Action ended 11:24:56: CostInitialize. Return value 1. MSI (s) (E0:CC) [11:24:56:969]: Note: 1: 2262 2: Extension 3: -2147287038 Action start 11:24:56: FileCost. MSI (s) (E0:CC) [11:24:56:969]: Doing action: SetMFC71 Action ended 11:24:56: FileCost. Return value 1. Action start 11:24:56: SetMFC71. MSI (s) (E0:CC) [11:24:56:969]: Doing action: IsolateComponents Action ended 11:24:56: SetMFC71. Return value 1. Action start 11:24:56: IsolateComponents. MSI (s) (E0:CC) [11:24:56:970]: Doing action: CostFinalize Action ended 11:24:56: IsolateComponents. Return value 0. MSI (s) (E0:CC) [11:24:56:970]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'. MSI (s) (E0:CC) [11:24:56:970]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'. MSI (s) (E0:CC) [11:24:56:970]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'. MSI (s) (E0:CC) [11:24:56:970]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'. MSI (s) (E0:CC) [11:24:56:970]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'. MSI (s) (E0:CC) [11:24:56:970]: Note: 1: 2205 2: 3: Patch MSI (s) (E0:CC) [11:24:56:971]: Note: 1: 2205 2: 3: Condition MSI (s) (E0:CC) [11:24:56:971]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'G:\'. MSI (s) (E0:CC) [11:24:56:971]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\Windows\winsxs\'. MSI (s) (E0:CC) [11:24:56:971]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\Windows\winsxs\Policies\'. MSI (s) (E0:CC) [11:24:56:971]: PROPERTY CHANGE: Adding policydir.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\Windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\'. MSI (s) (E0:CC) [11:24:56:971]: PROPERTY CHANGE: Adding payload_ul.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\Windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f47e1bd6f6571810\'. MSI (s) (E0:CC) [11:24:56:971]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\Windows\winsxs\'. MSI (s) (E0:CC) [11:24:56:971]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\Windows\winsxs\Policies\'. MSI (s) (E0:CC) [11:24:56:971]: PROPERTY CHANGE: Adding policydir.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\Windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\'. MSI (s) (E0:CC) [11:24:56:971]: PROPERTY CHANGE: Adding payload_ul.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\Windows\winsxs\x86_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f0efb442f8a0f46c\'. MSI (s) (E0:CC) [11:24:56:971]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\Windows\winsxs\'. MSI (s) (E0:CC) [11:24:56:971]: PROPERTY CHANGE: Adding policydir_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'. MSI (s) (E0:CC) [11:24:56:971]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\Windows\winsxs\Policies\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding policydir.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding WinSxsManifests.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\Windows\winsxs\Manifests\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding payload_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\Windows\winsxs\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding policydir_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\Windows\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\Windows\winsxs\Policies\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding policydir.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\Windows\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding WinSxsManifests.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\Windows\winsxs\Manifests\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\Windows\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding payload_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\Windows\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_51ca66a2bbe76806\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding newfolder1 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding newfolder2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding NEW_DIRECTORY2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\'. MSI (s) (E0:CC) [11:24:56:972]: PROPERTY CHANGE: Adding System16Folder property. Its value is 'G:\'. MSI (s) (E0:CC) [11:24:56:973]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1). MSI (s) (E0:CC) [11:24:56:973]: PROPERTY CHANGE: Modifying SendToFolder property. Its current value is 'C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\'. Its new value: 'C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\'. MSI (s) (E0:CC) [11:24:56:973]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:24:56:973]: PROPERTY CHANGE: Modifying ProgramFiles64Folder property. Its current value is 'C:\Program Files\'. Its new value: 'C:\Program Files (x86)\'. MSI (s) (E0:CC) [11:24:56:973]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'G:\'. MSI (s) (E0:CC) [11:24:56:973]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\config\systemprofile\AppData\Local\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1). MSI (s) (E0:CC) [11:24:56:973]: PROPERTY CHANGE: Modifying LocalAppDataFolder property. Its current value is 'C:\Windows\system32\config\systemprofile\AppData\Local\'. Its new value: 'C:\Windows\SysWOW64\config\systemprofile\AppData\Local\'. MSI (s) (E0:CC) [11:24:56:973]: PROPERTY CHANGE: Adding GlobalAssemblyCache property. Its value is 'G:\'. MSI (s) (E0:CC) [11:24:56:973]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\config\systemprofile\Favorites\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1). MSI (s) (E0:CC) [11:24:56:973]: PROPERTY CHANGE: Modifying FavoritesFolder property. Its current value is 'C:\Windows\system32\config\systemprofile\Favorites\'. Its new value: 'C:\Windows\SysWOW64\config\systemprofile\Favorites\'. MSI (s) (E0:CC) [11:24:56:973]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\Common Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:24:56:973]: PROPERTY CHANGE: Modifying CommonFiles64Folder property. Its current value is 'C:\Program Files\Common Files\'. Its new value: 'C:\Program Files (x86)\Common Files\'. MSI (s) (E0:CC) [11:24:56:973]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Users\Default'. Its new value: 'C:\Users\Default\'. MSI (s) (E0:CC) [11:24:56:973]: PROPERTY CHANGE: Modifying ALLUSERSPROFILE property. Its current value is 'C:\ProgramData'. Its new value: 'C:\ProgramData\'. MSI (s) (E0:CC) [11:24:56:974]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1). MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Modifying System64Folder property. Its current value is 'C:\Windows\system32\'. Its new value: 'C:\Windows\SysWOW64\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding SOPHOS property. Its value is 'C:\Program Files (x86)\Sophos\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding SOPHOS_ANTI_VIRUS property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding INSTALLDIR_X64 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding INSTALLDIR_WIN32 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding INSTALLDIR_IA64 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding NEW_DIRECTORY1 property. Its value is 'C:\ProgramData\Sophos\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding SOPHOS_TAMPER_PROTECTION property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding LOGS3 property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\logs\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding SOPHOS_DEVICE_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding LOGS2 property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\logs\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding SOPHOS_DATA_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding LOGS1 property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\logs\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding RESOURCES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding RES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding NEW_DIRECTORY3 property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding CACHE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding TEMP property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding LOGS property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\logs\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding INFECTED property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding CONFIG property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config\'. MSI (s) (E0:CC) [11:24:56:974]: PROPERTY CHANGE: Adding CISCO_SYSTEMS property. Its value is 'C:\Program Files (x86)\Common Files\Cisco Systems\'. MSI (s) (E0:CC) [11:24:56:975]: PROPERTY CHANGE: Adding CISCOTRUSTAGENT property. Its value is 'C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\'. MSI (s) (E0:CC) [11:24:56:975]: PROPERTY CHANGE: Adding PLUGINS property. Its value is 'C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\'. MSI (s) (E0:CC) [11:24:56:975]: PROPERTY CHANGE: Adding INSTALL property. Its value is 'C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\'. MSI (s) (E0:CC) [11:24:56:975]: Target path resolution complete. Dumping Directory table... MSI (s) (E0:CC) [11:24:56:975]: Note: target paths subject to change (via custom actions or browsing) MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: TARGETDIR , Object: G:\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\Windows\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\Windows\winsxs\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\Windows\winsxs\Policies\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: policydir.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\Windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: payload_ul.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\Windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f47e1bd6f6571810\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\Windows\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\Windows\winsxs\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\Windows\winsxs\Policies\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: policydir.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\Windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: payload_ul.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\Windows\winsxs\x86_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f0efb442f8a0f46c\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Windows\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WinSxsDirectory.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Windows\winsxs\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: policydir_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WinSxsPolicies.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Windows\winsxs\Policies\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: policydir.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WinSxsManifests.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Windows\winsxs\Manifests\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: payload_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Windows\SysWOW64\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Windows\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WinSxsDirectory.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Windows\winsxs\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: policydir_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Windows\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WinSxsPolicies.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Windows\winsxs\Policies\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: policydir.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Windows\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WinSxsManifests.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Windows\winsxs\Manifests\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Windows\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: payload_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Windows\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_51ca66a2bbe76806\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Windows\SysWOW64\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: ProgramMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: newfolder1 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: newfolder2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: StartMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WindowsVolume , Object: C:\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WindowsFolder , Object: C:\Windows\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: TemplateFolder , Object: C:\ProgramData\Microsoft\Windows\Templates\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: TempFolder , Object: C:\Windows\TEMP\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: System16Folder , Object: G:\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: StartupFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: SendToFolder , Object: C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: ProgramFiles64Folder , Object: C:\Program Files (x86)\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: PrimaryVolumePath , Object: G:\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: LocalAppDataFolder , Object: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: GlobalAssemblyCache , Object: G:\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: FontsFolder , Object: C:\Windows\Fonts\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: FavoritesFolder , Object: C:\Windows\SysWOW64\config\systemprofile\Favorites\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: DesktopFolder , Object: C:\Users\Public\Desktop\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: CommonFiles64Folder , Object: C:\Program Files (x86)\Common Files\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: AdminToolsFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: USERPROFILE , Object: C:\Users\Default\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: ALLUSERSPROFILE , Object: C:\ProgramData\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: System64Folder , Object: C:\Windows\SysWOW64\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: SystemFolder , Object: C:\Windows\SysWOW64\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files (x86)\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: SOPHOS , Object: C:\Program Files (x86)\Sophos\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: SOPHOS_ANTI_VIRUS , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: INSTALLDIR_X64 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: INSTALLDIR_WIN32 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: INSTALLDIR_IA64 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: LOGS3 , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\logs\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\Sophos Device Control\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: LOGS2 , Object: C:\ProgramData\Sophos\Sophos Device Control\logs\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\Sophos Data Control\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: LOGS1 , Object: C:\ProgramData\Sophos\Sophos Data Control\logs\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: RESOURCES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: RES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: CACHE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: TEMP , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: LOGS , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\logs\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: INFECTED , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: CONFIG , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: CommonFilesFolder , Object: C:\Program Files (x86)\Common Files\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: CISCO_SYSTEMS , Object: C:\Program Files (x86)\Common Files\Cisco Systems\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: CISCOTRUSTAGENT , Object: C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: PLUGINS , Object: C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\ MSI (s) (E0:CC) [11:24:56:975]: Dir (target): Key: INSTALL , Object: C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\ MSI (s) (E0:CC) [11:24:56:978]: skipping installation of assembly component: {B32777BF-8BCF-31D4-A891-BCFB51C54D25} since the assembly already exists MSI (s) (E0:CC) [11:24:56:978]: skipping installation of assembly component: {7702D6A3-846B-3E30-B087-73600535BE47} since the assembly already exists MSI (s) (E0:CC) [11:24:56:979]: skipping installation of assembly component: {9DA4DC8A-9731-3F0E-8BD5-FC17CA6848AD} since the assembly already exists MSI (s) (E0:CC) [11:24:56:979]: skipping installation of assembly component: {A75F2217-AD54-3EA6-AE14-F255F8660531} since the assembly already exists Action start 11:24:56: CostFinalize. MSI (s) (E0:CC) [11:24:56:983]: Doing action: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 11:24:56: CostFinalize. Return value 1. MSI (s) (E0:CC) [11:24:56:984]: PROPERTY CHANGE: Modifying SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\'. Action start 11:24:56: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (E0:CC) [11:24:56:984]: Doing action: ResolveSource Action ended 11:24:56: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. MSI (s) (E0:CC) [11:24:56:984]: Resolving source. MSI (s) (E0:CC) [11:24:56:984]: Resolving source to launched-from source. MSI (s) (E0:CC) [11:24:56:984]: Setting launched-from source as last-used. MSI (s) (E0:CC) [11:24:56:984]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\'. MSI (s) (E0:CC) [11:24:56:984]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\'. MSI (s) (E0:CC) [11:24:56:984]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}'. MSI (s) (E0:CC) [11:24:56:984]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ MSI (s) (E0:CC) [11:24:56:984]: SOURCEDIR product ==> {D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4} MSI (s) (E0:CC) [11:24:56:985]: SECREPAIR: CryptAcquireContext succeeded MSI (s) (E0:CC) [11:24:56:985]: Determining source type MSI (s) (E0:CC) [11:24:56:986]: Source type from package 'Sophos Anti-Virus.msi': 0 MSI (s) (E0:CC) [11:24:56:986]: SECREPAIR: Hash Database: C:\Windows\Installer\SourceHash{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4} MSI (s) (E0:CC) [11:24:56:987]: Note: 1: 2262 2: SourceHash 3: -2147287038 MSI (s) (E0:CC) [11:24:56:989]: SECREPAIR: New Hash Database creation complete. Action start 11:24:56: ResolveSource. MSI (s) (E0:CC) [11:24:57:741]: Source path resolution complete. Dumping Directory table... MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: TARGETDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ , LongSubPath: , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ , LongSubPath: Windows\winsxs\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: policydir.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\dlpCRTx86\ , LongSubPath: Windows\winsxs\Policies\dlpCRTx86\ , ShortSubPath: Windows\winsxs\Policies\q6krynxr\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: payload_ul.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ulpCRTx86\ , LongSubPath: Windows\winsxs\ulpCRTx86\ , ShortSubPath: Windows\winsxs\01ll_b-5\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ , LongSubPath: Windows\winsxs\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: policydir.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\dlpATLx86\ , LongSubPath: Windows\winsxs\Policies\dlpATLx86\ , ShortSubPath: Windows\winsxs\Policies\atmex81e\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: payload_ul.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ulpATLx86\ , LongSubPath: Windows\winsxs\ulpATLx86\ , ShortSubPath: Windows\winsxs\kx-fp5sw\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WinSxsDirectory.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ , LongSubPath: Windows\winsxs\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: policydir_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , LongSubPath: Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , ShortSubPath: Windows\winsxs\wof83_qs\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WinSxsPolicies.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: policydir.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , LongSubPath: Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , ShortSubPath: Windows\winsxs\Policies\kqdemndt\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WinSxsManifests.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Manifests\ , LongSubPath: Windows\winsxs\Manifests\ , ShortSubPath: Windows\winsxs\e72hoa3e\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\dlCRTx86\ , LongSubPath: Windows\winsxs\dlCRTx86\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: payload_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ulCRTx86\ , LongSubPath: Windows\winsxs\ulCRTx86\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\system32\ , LongSubPath: Windows\system32\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WinSxsDirectory.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ , LongSubPath: Windows\winsxs\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: policydir_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ , LongSubPath: Windows\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ , ShortSubPath: Windows\winsxs\imvtabx-\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WinSxsPolicies.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: policydir.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ , LongSubPath: Windows\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ , ShortSubPath: Windows\winsxs\Policies\pxd_ylb3\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WinSxsManifests.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Manifests\ , LongSubPath: Windows\winsxs\Manifests\ , ShortSubPath: Windows\winsxs\7ivp-it9\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\dlATLx86\ , LongSubPath: Windows\winsxs\dlATLx86\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: payload_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ulATLx86\ , LongSubPath: Windows\winsxs\ulATLx86\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\system32\ , LongSubPath: Windows\system32\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: ProgramMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\ , LongSubPath: Programs\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: newfolder1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\Sophos\ , LongSubPath: Programs\Sophos\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: newfolder2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\Sophos\Sophos Endpoint Security and Control\ , LongSubPath: Programs\Sophos\Sophos Endpoint Security and Control\ , ShortSubPath: Programs\Sophos\SOPHOS~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: StartMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Start Menu\ , LongSubPath: Start Menu\ , ShortSubPath: STARTM~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Start Menu\Sophos\ , LongSubPath: Start Menu\Sophos\ , ShortSubPath: STARTM~1\Sophos\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WindowsVolume , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinRoot\ , LongSubPath: WinRoot\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WindowsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: TemplateFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ShellNew\ , LongSubPath: ShellNew\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: TempFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Temp\ , LongSubPath: Temp\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: System16Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System\ , LongSubPath: System\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: StartupFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\StartUp\ , LongSubPath: StartUp\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: SendToFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\SendTo\ , LongSubPath: SendTo\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: ProgramFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Program Files 64\ , LongSubPath: Program Files 64\ , ShortSubPath: Prog64~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: PrimaryVolumePath , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\PrimaryVolumePath\ , LongSubPath: PrimaryVolumePath\ , ShortSubPath: Primar~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: LocalAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\LocalAppData\ , LongSubPath: LocalAppData\ , ShortSubPath: LocalA~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: GlobalAssemblyCache , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\GlobalAssemblyCache\ , LongSubPath: GlobalAssemblyCache\ , ShortSubPath: Global~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: FontsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Fonts\ , LongSubPath: Fonts\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: FavoritesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Favorites\ , LongSubPath: Favorites\ , ShortSubPath: FAVORI~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: DesktopFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Desktop\ , LongSubPath: Desktop\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: CommonFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common64\ , LongSubPath: Common64\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: AdminToolsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\AdminTools\ , LongSubPath: AdminTools\ , ShortSubPath: Admint~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: USERPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\UserProfile\ , LongSubPath: UserProfile\ , ShortSubPath: USERPR~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: ALLUSERSPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\All Users\ , LongSubPath: All Users\ , ShortSubPath: ALLUSE~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: System64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System64\ , LongSubPath: System64\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: SystemFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System32\ , LongSubPath: System32\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: ProgramFilesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\ , LongSubPath: program files\ , ShortSubPath: PROGRA~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: SOPHOS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\ , LongSubPath: program files\Sophos\ , ShortSubPath: PROGRA~1\Sophos\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: SOPHOS_ANTI_VIRUS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: INSTALLDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Control\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: INSTALLDIR_X64 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_X64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_X64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\WSC_X64\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: INSTALLDIR_WIN32 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\jwgiamqy\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: INSTALLDIR_IA64 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_IA64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_IA64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\WSC_IA64\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: CommonAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\ , LongSubPath: CommonAppData\ , ShortSubPath: Common~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\ , LongSubPath: CommonAppData\Sophos\ , ShortSubPath: Common~1\Sophos\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Tamper Protection\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: LOGS3 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Tamper Protection\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\logs\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Device Control\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: LOGS2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Device Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\logs\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Data Control\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: LOGS1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Data Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\logs\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: RESOURCES , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: RES , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: CACHE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Cache\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: TEMP , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Temp\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: LOGS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\logs\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: INFECTED , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: CONFIG , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Config\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Config\ MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: CommonFilesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common\ , LongSubPath: Common\ , ShortSubPath: MSI (s) (E0:CC) [11:24:57:741]: Dir (source): Key: CISCO_SYSTEMS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common\Cisco Systems\ , LongSubPath: Common\Cisco Systems\ , ShortSubPath: Common\CISCOS~1\ MSI (s) (E0:CC) [11:24:57:742]: Dir (source): Key: CISCOTRUSTAGENT , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common\Cisco Systems\CiscoTrustAgent\ , LongSubPath: Common\Cisco Systems\CiscoTrustAgent\ , ShortSubPath: Common\CISCOS~1\CISCOT~1\ MSI (s) (E0:CC) [11:24:57:742]: Dir (source): Key: PLUGINS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common\Cisco Systems\CiscoTrustAgent\Plugins\ , LongSubPath: Common\Cisco Systems\CiscoTrustAgent\Plugins\ , ShortSubPath: Common\CISCOS~1\CISCOT~1\Plugins\ MSI (s) (E0:CC) [11:24:57:742]: Dir (source): Key: INSTALL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common\Cisco Systems\CiscoTrustAgent\Plugins\Install\ , LongSubPath: Common\Cisco Systems\CiscoTrustAgent\Plugins\Install\ , ShortSubPath: Common\CISCOS~1\CISCOT~1\Plugins\Install\ MSI (s) (E0:CC) [11:24:57:742]: Doing action: SetInstallDir Action ended 11:24:57: ResolveSource. Return value 1. Action start 11:24:57: SetInstallDir. MSI (s) (E0:CC) [11:24:57:743]: Skipping action: UninstallDowngradeCheck (condition is false) MSI (s) (E0:CC) [11:24:57:743]: Doing action: SetScriptProperty Action ended 11:24:57: SetInstallDir. Return value 1. MSI (s) (E0:CC) [11:24:57:744]: PROPERTY CHANGE: Adding RunPreLaunchScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.3.15"'. Action start 11:24:57: SetScriptProperty. MSI (s) (E0:CC) [11:24:57:744]: Skipping action: CheckForSophosClientFirewall (condition is false) MSI (s) (E0:CC) [11:24:57:744]: Doing action: ISInitAllUsers Action ended 11:24:57: SetScriptProperty. Return value 1. MSI (s) (E0:CC) [11:24:57:745]: PROPERTY CHANGE: Modifying ALLUSERS property. Its current value is '1'. Its new value: '2'. Action start 11:24:57: ISInitAllUsers. MSI (s) (E0:CC) [11:24:57:745]: Doing action: SetODBCFolders Action ended 11:24:57: ISInitAllUsers. Return value 1. MSI (s) (E0:CC) [11:24:57:746]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (E0:CC) [11:24:57:746]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCDriver`, `Component` WHERE `ODBCDriver`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2) MSI (s) (E0:CC) [11:24:57:746]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (E0:CC) [11:24:57:746]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCTranslator`, `Component` WHERE `ODBCTranslator`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2) Action start 11:24:57: SetODBCFolders. MSI (s) (E0:CC) [11:24:57:746]: Doing action: MigrateFeatureStates Action ended 11:24:57: SetODBCFolders. Return value 0. Action start 11:24:57: MigrateFeatureStates. MSI (s) (E0:CC) [11:24:57:747]: Doing action: InstallValidate Action ended 11:24:57: MigrateFeatureStates. Return value 0. MSI (s) (E0:CC) [11:24:57:747]: Note: 1: 2205 2: 3: Dialog MSI (s) (E0:CC) [11:24:57:747]: Feature: SAVService; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Feature: MainComponents; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Feature: ConfigFiles; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Feature: Resources; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Feature: EngineFiles; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Feature: ServiceComponents; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SAVService; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SAVPosturePlugin.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: ConfigFilesNoReplace; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: ConfigFilesReplace; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: AllOtherFiles2; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: AllOtherFiles1; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: AllOtherFiles3; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: AllOtherFiles8; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: AllOtherFiles5; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: AllOtherFiles6; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: AllOtherFiles7; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: ControlSAVAdminService; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: ControlSAVService; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SophosCleanupService.exe; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: sav32cli.exe; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: AllOtherFiles4; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SAVHelpChs.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SAVHelpCht.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SAVHelpDeu.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SAVHelpEsp.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SAVHelpFra.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SAVHelpIta.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SAVHelpJap.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SCF.dat; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SOF.dat; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SavHelpEng.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SavShellExtia64; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:747]: Component: SavShellExtx64; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: Shortcut_de; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:747]: Component: Shortcut_es; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:747]: Component: Shortcut_fr; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:747]: Component: Shortcut_it; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:747]: Component: Shortcut_ja; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:747]: Component: Shortcut_zh_cn; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:747]: Component: Shortcut_zh_tw; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:747]: Component: Shortcuts; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: Categories.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SavNeutralRes.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SavRes.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SavResChs.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SavResCht.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SavResDeu.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SavResEng.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SavResEsp.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SavResFra.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SavResIt.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SavResJap.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: BackgroundScanClient.exe; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SavAdapter.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: WSCClientI64; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:747]: Component: WSCClientW32; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:747]: Component: WSCClientX64; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: SAVAdminService; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: AllOtherFiles; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: AuthorisedLists.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: DCManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: DataControlManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: DataControlPlugin.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:747]: Component: DetectionFeedback.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: DeviceControlPlugin.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: BHOManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: BackgroundScanning.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: ComponentManager.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: Configuration.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: DesktopMessaging.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: DriveProcessor.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: EEConsumer.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: FSDecomposer.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: FilterProcessors.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: ICAdapter.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: ICManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: ICProcessors.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: LegacyConsumers.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: Localisation.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: Logging.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: Persistance.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SAVControl.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SavPlugin.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SIPSManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SWIManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SavMain.exe; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SavProgress.exe; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SavShellExt.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: ScanEditExports.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: ScanEditFacade.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: ScanManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SavSecurity.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SophtainerAdapter.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SystemInformation.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: TamperProtectionControl.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: TamperProtectionManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: TamperProtectionPlugin.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: ThreatDetection.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: ThreatManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: Translators.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: VirusDetection.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: uplevel.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: nosxs.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: downlevel_payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: downlevel_manifest.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: uplevel.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: nosxs.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: downlevel_payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: downlevel_manifest.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: uplevel.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: downlevel_manifest.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: uplevel.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: downlevel_manifest.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: swc_service_exe.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SWCAdapter_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCPResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCPResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCPResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCPResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCPResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCPResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCPResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCPResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WebControlMessaging_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCMResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCMResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCMResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCMResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCMResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCMResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCMResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WCMResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: WebControlMessaging_dll_reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SwiCallout64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: SwiDi.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: Difx_dll_64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SwiComponent32OnlyNotWFP_SwiUpdate32.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: SwiComponent64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: SwiCallout_cat.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: Swi_di.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: Difx_dll.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: SwiProxy.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: SwiProxyChild.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __uplevel.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __uplevel.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __uplevel.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_33890336620765; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __uplevel.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __Shortcuts65; Installed: Null; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: __Shortcut_de65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __Shortcuts66; Installed: Null; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: __Shortcuts67; Installed: Null; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: __SavMain.exe65; Installed: Null; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: __Shortcut_es65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __Shortcut_fr65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __Shortcut_it65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __Shortcut_ja65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __Shortcut_zh_cn65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __Shortcut_zh_tw65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __nosxs.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __downlevel_payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __downlevel_manifest.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __nosxs.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __downlevel_payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __downlevel_manifest.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __downlevel_manifest.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_33890336620765; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __downlevel_manifest.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC65; Installed: Null; Request: Local; Action: Null MSI (s) (E0:CC) [11:24:57:748]: Component: __WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: __SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: __WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: __WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: __SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C10165; Installed: Null; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: __SAVService65; Installed: Null; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: __DataControlManagement.dll65; Installed: Null; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Component: __DCManagement.dll65; Installed: Null; Request: Local; Action: Local MSI (s) (E0:CC) [11:24:57:748]: Note: 1: 2205 2: 3: BindImage MSI (s) (E0:CC) [11:24:57:748]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (E0:CC) [11:24:57:748]: Note: 1: 2205 2: 3: SelfReg MSI (s) (E0:CC) [11:24:57:748]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (E0:CC) [11:24:57:748]: Note: 1: 2205 2: 3: Font Action start 11:24:57: InstallValidate. MSI (s) (E0:CC) [11:24:57:749]: Note: 1: 2205 2: 3: _RemoveFilePath MSI (s) (E0:CC) [11:24:57:768]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (E0:CC) [11:24:57:768]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (E0:CC) [11:24:57:768]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (E0:CC) [11:24:57:769]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (E0:CC) [11:24:57:769]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (E0:CC) [11:24:57:770]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (E0:CC) [11:24:57:770]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (E0:CC) [11:24:57:771]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (E0:CC) [11:24:57:771]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'. MSI (s) (E0:CC) [11:24:57:771]: Note: 1: 2205 2: 3: BindImage MSI (s) (E0:CC) [11:24:57:771]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (E0:CC) [11:24:57:771]: Note: 1: 2205 2: 3: SelfReg MSI (s) (E0:CC) [11:24:57:771]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (E0:CC) [11:24:57:771]: Note: 1: 2205 2: 3: Font MSI (s) (E0:CC) [11:24:57:771]: Note: 1: 2727 2: MSI (s) (E0:CC) [11:24:57:773]: Note: 1: 2727 2: MSI (s) (E0:CC) [11:24:57:773]: Doing action: SetARPINSTALLLOCATION Action ended 11:24:57: InstallValidate. Return value 1. MSI (s) (E0:CC) [11:24:57:774]: PROPERTY CHANGE: Adding ARPINSTALLLOCATION property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:57: SetARPINSTALLLOCATION. MSI (s) (E0:CC) [11:24:57:774]: Doing action: RemoveExistingProducts Action ended 11:24:57: SetARPINSTALLLOCATION. Return value 1. MSI (s) (E0:CC) [11:24:57:774]: Note: 1: 2205 2: 3: Upgrade MSI (s) (E0:CC) [11:24:57:774]: Note: 1: 2228 2: 3: Upgrade 4: SELECT `Attributes`, `ActionProperty`, `Remove` FROM `Upgrade` Action start 11:24:57: RemoveExistingProducts. MSI (s) (E0:CC) [11:24:57:774]: Doing action: InstallInitialize Action ended 11:24:57: RemoveExistingProducts. Return value 0. MSI (s) (E0:CC) [11:24:57:775]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (E0:CC) [11:24:57:775]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (E0:CC) [11:24:57:775]: BeginTransaction: Locking Server MSI (s) (E0:CC) [11:24:57:775]: SRSetRestorePoint skipped for this transaction. MSI (s) (E0:CC) [11:24:57:775]: Server not locked: locking for product {D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4} Action start 11:24:57: InstallInitialize. MSI (s) (E0:CC) [11:24:57:786]: Doing action: SetUpdateFailed Action ended 11:24:57: InstallInitialize. Return value 1. MSI (s) (E0:CC) [11:24:57:787]: Note: 1: 2205 2: 3: MsiPatchCertificate MSI (s) (E0:CC) [11:24:57:787]: LUA patching is disabled: missing MsiPatchCertificate table Action start 11:24:57: SetUpdateFailed. MSI (s) (E0:CC) [11:24:57:790]: Doing action: SetRestoreMovedFiles Action ended 11:24:57: SetUpdateFailed. Return value 1. MSI (s) (E0:CC) [11:24:57:790]: PROPERTY CHANGE: Adding RestoreMovedFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:57: SetRestoreMovedFiles. MSI (s) (E0:CC) [11:24:57:791]: Doing action: RestoreMovedFiles Action ended 11:24:57: SetRestoreMovedFiles. Return value 1. Action start 11:24:57: RestoreMovedFiles. MSI (s) (E0:CC) [11:24:57:793]: Doing action: CheckRegForNullDACLs Action ended 11:24:57: RestoreMovedFiles. Return value 1. Action start 11:24:57: CheckRegForNullDACLs. MSI (s) (E0:CC) [11:24:57:796]: Doing action: SetErrorScriptProperty Action ended 11:24:57: CheckRegForNullDACLs. Return value 1. MSI (s) (E0:CC) [11:24:57:796]: PROPERTY CHANGE: Adding RunErrorScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.3.15"'. Action start 11:24:57: SetErrorScriptProperty. MSI (s) (E0:CC) [11:24:57:797]: Doing action: RunErrorScript Action ended 11:24:57: SetErrorScriptProperty. Return value 1. Action start 11:24:57: RunErrorScript. MSI (s) (E0:CC) [11:24:57:799]: Doing action: ExtractClassicConfig Action ended 11:24:57: RunErrorScript. Return value 1. MSI (s) (E0:3C) [11:24:57:801]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2DF0.tmp, Entrypoint: ExtractClassicConfig MSI (s) (E0:44) [11:24:57:801]: Generating random cookie. MSI (s) (E0:44) [11:24:57:803]: Created Custom Action Server with PID 19016 (0x4A48). MSI (s) (E0:D0) [11:24:57:848]: Running as a service. MSI (s) (E0:D0) [11:24:57:850]: Hello, I'm your 32bit Elevated Non-remapped custom action server. Action start 11:24:57: ExtractClassicConfig. MSI (s) (E0:CC) [11:24:57:861]: Doing action: PreInstallChecks Action ended 11:24:57: ExtractClassicConfig. Return value 1. MSI (s) (E0:EC) [11:24:57:864]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2E30.tmp, Entrypoint: PreInstallChecks Action start 11:24:57: PreInstallChecks. MSI (s) (E0:CC) [11:24:57:873]: Skipping action: SetUpdateBegin (condition is false) MSI (s) (E0:CC) [11:24:57:873]: Doing action: SetBootDriverStartupProperty Action ended 11:24:57: PreInstallChecks. Return value 1. MSI (s) (E0:B8) [11:24:57:877]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2E31.tmp, Entrypoint: SetBootDriverStartupProperty Action start 11:24:57: SetBootDriverStartupProperty. MSI (s) (E0:CC) [11:24:57:892]: Skipping action: CloseSavMainWindow (condition is false) MSI (s) (E0:CC) [11:24:57:892]: Skipping action: SxsInstallCA (condition is false) MSI (s) (E0:CC) [11:24:57:892]: Doing action: AllocateRegistrySpace Action ended 11:24:57: SetBootDriverStartupProperty. Return value 1. Action start 11:24:57: AllocateRegistrySpace. MSI (s) (E0:CC) [11:24:57:892]: Doing action: ProcessComponents Action ended 11:24:57: AllocateRegistrySpace. Return value 1. Action start 11:24:57: ProcessComponents. MSI (s) (E0:CC) [11:24:57:908]: Doing action: UnpublishComponents Action ended 11:24:57: ProcessComponents. Return value 1. MSI (s) (E0:CC) [11:24:57:909]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (E0:CC) [11:24:57:909]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND (`Feature`.`Action` = 0 OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2))) Action start 11:24:57: UnpublishComponents. MSI (s) (E0:CC) [11:24:57:909]: Doing action: MsiUnpublishAssemblies Action ended 11:24:57: UnpublishComponents. Return value 0. Action start 11:24:57: MsiUnpublishAssemblies. MSI (s) (E0:CC) [11:24:57:909]: Doing action: UnpublishFeatures Action ended 11:24:57: MsiUnpublishAssemblies. Return value 1. Action start 11:24:57: UnpublishFeatures. MSI (s) (E0:CC) [11:24:57:910]: Skipping action: RollbackDisableServices (condition is false) MSI (s) (E0:CC) [11:24:57:910]: Skipping action: DisableServices (condition is false) MSI (s) (E0:CC) [11:24:57:910]: Doing action: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:24:57: UnpublishFeatures. Return value 1. MSI (s) (E0:C8) [11:24:57:911]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2E61.tmp, Entrypoint: SwcDisableSwcServiceStart Action start 11:24:57: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:24:57:914]: Skipping action: SwiServiceUnregister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:914]: Skipping action: SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:914]: Doing action: StopServices Action ended 11:24:57: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 11:24:57: StopServices. MSI (s) (E0:CC) [11:24:57:915]: Skipping action: DeleteSwiFc.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:915]: Skipping action: DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:915]: Skipping action: DeleteScfDotDat.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:915]: Skipping action: DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:915]: Skipping action: SwiCalloutUninstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:915]: Skipping action: SwiFilterUninstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:915]: Skipping action: SwiFilterUninstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:915]: Skipping action: SwiCalloutUninstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:915]: Skipping action: ForceStopSAVService (condition is false) MSI (s) (E0:CC) [11:24:57:915]: Doing action: WaitForSAVService Action ended 11:24:57: StopServices. Return value 1. Action start 11:24:57: WaitForSAVService. MSI (s) (E0:CC) [11:24:57:918]: Doing action: DeleteServices Action ended 11:24:57: WaitForSAVService. Return value 1. Action start 11:24:57: DeleteServices. MSI (s) (E0:CC) [11:24:57:919]: Skipping action: RemoveSophosCleanupService (condition is false) MSI (s) (E0:CC) [11:24:57:919]: Doing action: UnregisterComPlus Action ended 11:24:57: DeleteServices. Return value 1. MSI (s) (E0:CC) [11:24:57:919]: Note: 1: 2205 2: 3: Complus MSI (s) (E0:CC) [11:24:57:919]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND `Action` = 0 Action start 11:24:57: UnregisterComPlus. MSI (s) (E0:CC) [11:24:57:919]: Doing action: SelfUnregModules Action ended 11:24:57: UnregisterComPlus. Return value 0. MSI (s) (E0:CC) [11:24:57:920]: Note: 1: 2205 2: 3: SelfReg MSI (s) (E0:CC) [11:24:57:920]: Note: 1: 2228 2: 3: SelfReg 4: Select `File`.`FileName`,`Component`.`Directory_`,`Component`.`Installed`, `File`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `File`, `Component` Where `SelfReg`.`File_` = `File`.`File` And `File`.`Component_` = `Component`.`Component` And `Component`.`Action` = 0 Action start 11:24:57: SelfUnregModules. MSI (s) (E0:CC) [11:24:57:920]: Doing action: UnregisterTypeLibraries Action ended 11:24:57: SelfUnregModules. Return value 1. Action start 11:24:57: UnregisterTypeLibraries. MSI (s) (E0:CC) [11:24:57:920]: Doing action: RemoveODBC Action ended 11:24:57: UnregisterTypeLibraries. Return value 1. MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2205 2: 3: ODBCDataSource MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ? MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2205 2: 3: ODBCDataSource MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ? MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ? MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ? MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ? MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ? MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2711 2: ODBCDriverManager Action start 11:24:57: RemoveODBC. MSI (s) (E0:CC) [11:24:57:921]: Note: 1: 2711 2: ODBCDriverManager64 MSI (s) (E0:CC) [11:24:57:921]: Doing action: UnregisterFonts Action ended 11:24:57: RemoveODBC. Return value 1. MSI (s) (E0:CC) [11:24:57:922]: Note: 1: 2205 2: 3: Font MSI (s) (E0:CC) [11:24:57:922]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Installed`From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And `FileAction`.`Action` = 0 ORDER BY `FileAction`.`Directory_` Action start 11:24:57: UnregisterFonts. MSI (s) (E0:CC) [11:24:57:922]: Skipping action: UninstallSecurityCenter (condition is false) MSI (s) (E0:CC) [11:24:57:922]: Doing action: RemoveRegistryValues Action ended 11:24:57: UnregisterFonts. Return value 1. Action start 11:24:57: RemoveRegistryValues. MSI (s) (E0:CC) [11:24:57:935]: Skipping action: SwcPauseForUnload.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (E0:CC) [11:24:57:935]: Doing action: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:24:57: RemoveRegistryValues. Return value 1. Action start 11:24:57: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:24:57:935]: Skipping action: SwcDeleteReg.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (E0:CC) [11:24:57:935]: Skipping action: SwcService_unreg_rb.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (E0:CC) [11:24:57:935]: Skipping action: SwcService_unregister.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (E0:CC) [11:24:57:935]: Skipping action: Swc_postcleanup.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (E0:CC) [11:24:57:935]: Doing action: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:24:57: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 11:24:57: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:24:57:937]: Doing action: UnregisterClassInfo Action ended 11:24:57: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 11:24:57: UnregisterClassInfo. MSI (s) (E0:CC) [11:24:57:938]: Doing action: UnregisterExtensionInfo Action ended 11:24:57: UnregisterClassInfo. Return value 1. MSI (s) (E0:CC) [11:24:57:938]: Note: 1: 2262 2: Extension 3: -2147287038 Action start 11:24:57: UnregisterExtensionInfo. MSI (s) (E0:CC) [11:24:57:938]: Doing action: UnregisterProgIdInfo Action ended 11:24:57: UnregisterExtensionInfo. Return value 1. MSI (s) (E0:CC) [11:24:57:939]: Note: 1: 2262 2: Extension 3: -2147287038 Action start 11:24:57: UnregisterProgIdInfo. MSI (s) (E0:CC) [11:24:57:939]: Doing action: UnregisterMIMEInfo Action ended 11:24:57: UnregisterProgIdInfo. Return value 1. MSI (s) (E0:CC) [11:24:57:939]: Note: 1: 2205 2: 3: MIME MSI (s) (E0:CC) [11:24:57:939]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2))) Action start 11:24:57: UnregisterMIMEInfo. MSI (s) (E0:CC) [11:24:57:939]: Doing action: RemoveIniValues Action ended 11:24:57: UnregisterMIMEInfo. Return value 0. MSI (s) (E0:CC) [11:24:57:940]: Note: 1: 2205 2: 3: IniFile MSI (s) (E0:CC) [11:24:57:940]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND `Component`.`Action`=0 ORDER BY `FileName`,`Section` Action start 11:24:57: RemoveIniValues. MSI (s) (E0:CC) [11:24:57:940]: Doing action: RemoveShortcuts Action ended 11:24:57: RemoveIniValues. Return value 1. Action start 11:24:57: RemoveShortcuts. MSI (s) (E0:CC) [11:24:57:941]: Doing action: RemoveEnvironmentStrings Action ended 11:24:57: RemoveShortcuts. Return value 1. MSI (s) (E0:CC) [11:24:57:941]: Note: 1: 2205 2: 3: Environment MSI (s) (E0:CC) [11:24:57:941]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 0) Action start 11:24:57: RemoveEnvironmentStrings. MSI (s) (E0:CC) [11:24:57:941]: Skipping action: RevealMSXML4 (condition is false) MSI (s) (E0:CC) [11:24:57:941]: Doing action: SetRemoveSAVIProperty Action ended 11:24:57: RemoveEnvironmentStrings. Return value 1. MSI (s) (E0:CC) [11:24:57:941]: PROPERTY CHANGE: Modifying RemoveSAVI property. Its current value is 'INSTALLDIR'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:57: SetRemoveSAVIProperty. MSI (s) (E0:CC) [11:24:57:942]: Skipping action: RemoveSAVI (condition is false) MSI (s) (E0:CC) [11:24:57:942]: Doing action: SetUninstallDriverFilesOnUpdateProperty Action ended 11:24:57: SetRemoveSAVIProperty. Return value 1. MSI (s) (E0:CC) [11:24:57:942]: PROPERTY CHANGE: Adding UninstallDriverFilesOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'. Action start 11:24:57: SetUninstallDriverFilesOnUpdateProperty. MSI (s) (E0:CC) [11:24:57:942]: Doing action: SetUninstallBootDriverProperty Action ended 11:24:57: SetUninstallDriverFilesOnUpdateProperty. Return value 1. MSI (s) (E0:CC) [11:24:57:942]: PROPERTY CHANGE: Adding UninstallBootDriver property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'. Action start 11:24:57: SetUninstallBootDriverProperty. MSI (s) (E0:CC) [11:24:57:943]: Doing action: SetUninstallBootDriverOnUpdateProperty Action ended 11:24:57: SetUninstallBootDriverProperty. Return value 1. MSI (s) (E0:CC) [11:24:57:943]: PROPERTY CHANGE: Adding UninstallBootDriverOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'. Action start 11:24:57: SetUninstallBootDriverOnUpdateProperty. MSI (s) (E0:CC) [11:24:57:943]: Doing action: SetUninstallKMSDriverProperty Action ended 11:24:57: SetUninstallBootDriverOnUpdateProperty. Return value 1. MSI (s) (E0:CC) [11:24:57:944]: PROPERTY CHANGE: Adding UninstallKMSDriver property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF'. Action start 11:24:57: SetUninstallKMSDriverProperty. MSI (s) (E0:CC) [11:24:57:944]: Doing action: SetUninstallKMSDriverOnUpdateProperty Action ended 11:24:57: SetUninstallKMSDriverProperty. Return value 1. MSI (s) (E0:CC) [11:24:57:944]: PROPERTY CHANGE: Adding UninstallKMSDriverOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF'. Action start 11:24:57: SetUninstallKMSDriverOnUpdateProperty. MSI (s) (E0:CC) [11:24:57:944]: Doing action: SetUninstallDriverFilesVistaProperty Action ended 11:24:57: SetUninstallKMSDriverOnUpdateProperty. Return value 1. MSI (s) (E0:CC) [11:24:57:945]: PROPERTY CHANGE: Adding UninstallDriverFilesVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'. Action start 11:24:57: SetUninstallDriverFilesVistaProperty. MSI (s) (E0:CC) [11:24:57:945]: Doing action: SetUninstallClassFilterVistaProperty Action ended 11:24:57: SetUninstallDriverFilesVistaProperty. Return value 1. MSI (s) (E0:CC) [11:24:57:945]: PROPERTY CHANGE: Adding UninstallClassFilterVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf'. Action start 11:24:57: SetUninstallClassFilterVistaProperty. MSI (s) (E0:CC) [11:24:57:946]: Doing action: SetClassFilterPresentProperty Action ended 11:24:57: SetUninstallClassFilterVistaProperty. Return value 1. MSI (s) (E0:48) [11:24:57:948]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2E81.tmp, Entrypoint: SetClassFilterPresentProperty Action start 11:24:57: SetClassFilterPresentProperty. MSI (s) (E0:CC) [11:24:57:956]: Doing action: CheckUninstallDrivers Action ended 11:24:57: SetClassFilterPresentProperty. Return value 1. Action start 11:24:57: CheckUninstallDrivers. MSI (s) (E0:CC) [11:24:57:960]: Skipping action: UninstallDriverFilesOnUpdate (condition is false) MSI (s) (E0:CC) [11:24:57:960]: Skipping action: UninstallDriverFiles64OnUpdate (condition is false) MSI (s) (E0:CC) [11:24:57:960]: Skipping action: UninstallDriverFiles (condition is false) MSI (s) (E0:CC) [11:24:57:960]: Skipping action: UninstallDriverFiles64 (condition is false) MSI (s) (E0:CC) [11:24:57:960]: Skipping action: UninstallDriverFilesVista (condition is false) MSI (s) (E0:CC) [11:24:57:960]: Skipping action: UninstallDriverFiles64Vista (condition is false) MSI (s) (E0:CC) [11:24:57:960]: Skipping action: UninstallBootDriverOnUpdate (condition is false) MSI (s) (E0:CC) [11:24:57:960]: Skipping action: UninstallBootDriverOnUpdate64 (condition is false) MSI (s) (E0:CC) [11:24:57:960]: Skipping action: UninstallBootDriver (condition is false) MSI (s) (E0:CC) [11:24:57:960]: Skipping action: UninstallBootDriver64 (condition is false) MSI (s) (E0:CC) [11:24:57:960]: Skipping action: UninstallClassFilterCleanReg (condition is false) MSI (s) (E0:CC) [11:24:57:961]: Skipping action: UninstallClassFilter64 (condition is false) MSI (s) (E0:CC) [11:24:57:961]: Skipping action: UninstallClassFilter64Vista (condition is false) MSI (s) (E0:CC) [11:24:57:961]: Skipping action: UninstallClassFilter (condition is false) MSI (s) (E0:CC) [11:24:57:961]: Skipping action: UninstallClassFilterVista (condition is false) MSI (s) (E0:CC) [11:24:57:961]: Skipping action: UninstallKMSDriver (condition is false) MSI (s) (E0:CC) [11:24:57:961]: Skipping action: UninstallKMSDriverOnUpdate (condition is false) MSI (s) (E0:CC) [11:24:57:961]: Skipping action: UnregisterSavShellExtIA64 (condition is false) MSI (s) (E0:CC) [11:24:57:961]: Skipping action: UnregisterSavShellExtX64 (condition is false) MSI (s) (E0:CC) [11:24:57:961]: Doing action: SetUninstallDeviceControlProperty Action ended 11:24:57: CheckUninstallDrivers. Return value 1. MSI (s) (E0:CC) [11:24:57:961]: PROPERTY CHANGE: Adding UninstallDeviceControl property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'. Action start 11:24:57: SetUninstallDeviceControlProperty. MSI (s) (E0:CC) [11:24:57:962]: Skipping action: UninstallDeviceControl (condition is false) MSI (s) (E0:CC) [11:24:57:962]: Doing action: SetDeleteDriverKeysProperty Action ended 11:24:57: SetUninstallDeviceControlProperty. Return value 1. MSI (s) (E0:CC) [11:24:57:963]: PROPERTY CHANGE: Adding DeleteDriverKeys property. Its value is '0'. Action start 11:24:57: SetDeleteDriverKeysProperty. MSI (s) (E0:CC) [11:24:57:963]: Skipping action: DeleteDriverKeys (condition is false) MSI (s) (E0:CC) [11:24:57:963]: Skipping action: DeleteSKMScanDriverKeys (condition is false) MSI (s) (E0:CC) [11:24:57:963]: Skipping action: DeleteSDCFilterDriverKeys (condition is false) MSI (s) (E0:CC) [11:24:57:963]: Skipping action: DeleteSDCFilterDriverFiles (condition is false) MSI (s) (E0:CC) [11:24:57:963]: Doing action: SetUnregisterBufferOverflowProtection Action ended 11:24:57: SetDeleteDriverKeysProperty. Return value 1. MSI (s) (E0:CC) [11:24:57:964]: PROPERTY CHANGE: Adding UnregisterBufferOverflowProtection property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:57: SetUnregisterBufferOverflowProtection. MSI (s) (E0:CC) [11:24:57:965]: Skipping action: UnregisterBufferOverflowProtection (condition is false) MSI (s) (E0:CC) [11:24:57:965]: Doing action: SetDeleteNonEngineFilesProperty Action ended 11:24:57: SetUnregisterBufferOverflowProtection. Return value 1. MSI (s) (E0:CC) [11:24:57:965]: PROPERTY CHANGE: Adding DeleteNonEngineFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:57: SetDeleteNonEngineFilesProperty. MSI (s) (E0:CC) [11:24:57:966]: Skipping action: DeleteNonEngineFiles (condition is false) MSI (s) (E0:CC) [11:24:57:966]: Doing action: SetDeleteOtherFilesProperty Action ended 11:24:57: SetDeleteNonEngineFilesProperty. Return value 1. MSI (s) (E0:CC) [11:24:57:967]: PROPERTY CHANGE: Adding DeleteOtherFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:57: SetDeleteOtherFilesProperty. MSI (s) (E0:CC) [11:24:57:967]: Skipping action: DeleteOtherFiles (condition is false) MSI (s) (E0:CC) [11:24:57:967]: Skipping action: CreateRebootTestFile (condition is false) MSI (s) (E0:CC) [11:24:57:967]: Skipping action: CheckCTAInstalled (condition is false) MSI (s) (E0:CC) [11:24:57:967]: Doing action: RemoveDuplicateFiles Action ended 11:24:57: SetDeleteOtherFilesProperty. Return value 1. Action start 11:24:57: RemoveDuplicateFiles. MSI (s) (E0:CC) [11:24:57:968]: Skipping action: SwiUpdateCleanup.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:968]: Skipping action: SwiUpdateCleanup.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:968]: Skipping action: Win8Cleanup.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:968]: Skipping action: SwiUpdateCleanup64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:968]: Skipping action: SwiUpdateCleanup64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:24:57:968]: Doing action: RemoveFiles Action ended 11:24:57: RemoveDuplicateFiles. Return value 1. Action start 11:24:57: RemoveFiles. MSI (s) (E0:CC) [11:24:57:970]: Doing action: RemoveFolders Action ended 11:24:57: RemoveFiles. Return value 1. Action start 11:24:57: RemoveFolders. MSI (s) (E0:CC) [11:24:57:970]: Doing action: CreateFolders Action ended 11:24:57: RemoveFolders. Return value 1. Action start 11:24:57: CreateFolders. MSI (s) (E0:CC) [11:24:57:974]: Doing action: SetDeleteIDEsProperty Action ended 11:24:57: CreateFolders. Return value 1. MSI (s) (E0:CC) [11:24:57:974]: PROPERTY CHANGE: Modifying DeleteIDEs property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:57: SetDeleteIDEsProperty. MSI (s) (E0:CC) [11:24:57:975]: Doing action: DeleteIDEs Action ended 11:24:57: SetDeleteIDEsProperty. Return value 1. Action start 11:24:57: DeleteIDEs. MSI (s) (E0:CC) [11:24:57:978]: Doing action: SetDeleteBDLsProperty Action ended 11:24:57: DeleteIDEs. Return value 1. MSI (s) (E0:CC) [11:24:57:978]: PROPERTY CHANGE: Modifying DeleteBDLs property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:57: SetDeleteBDLsProperty. MSI (s) (E0:CC) [11:24:57:978]: Doing action: DeleteBDLs Action ended 11:24:57: SetDeleteBDLsProperty. Return value 1. Action start 11:24:57: DeleteBDLs. MSI (s) (E0:CC) [11:24:57:981]: Doing action: SetDeleteHIPSConfigProperty Action ended 11:24:57: DeleteBDLs. Return value 1. MSI (s) (E0:CC) [11:24:57:982]: PROPERTY CHANGE: Adding DeleteHIPSConfig property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:57: SetDeleteHIPSConfigProperty. MSI (s) (E0:CC) [11:24:57:982]: Doing action: DeleteHIPSConfig Action ended 11:24:57: SetDeleteHIPSConfigProperty. Return value 1. Action start 11:24:57: DeleteHIPSConfig. MSI (s) (E0:CC) [11:24:57:985]: Doing action: SetRemoveFilesOnUpgradeProperty Action ended 11:24:57: DeleteHIPSConfig. Return value 1. MSI (s) (E0:CC) [11:24:57:985]: PROPERTY CHANGE: Adding RemoveFilesOnUpgrade property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:57: SetRemoveFilesOnUpgradeProperty. MSI (s) (E0:CC) [11:24:57:985]: Skipping action: RemoveFilesOnUpgrade (condition is false) MSI (s) (E0:CC) [11:24:57:985]: Doing action: SetRollbackForceProperty Action ended 11:24:57: SetRemoveFilesOnUpgradeProperty. Return value 1. MSI (s) (E0:CC) [11:24:57:986]: PROPERTY CHANGE: Adding RollbackForceDeleteFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:57: SetRollbackForceProperty. MSI (s) (E0:CC) [11:24:57:986]: Doing action: RollbackForceDeleteFiles Action ended 11:24:57: SetRollbackForceProperty. Return value 1. Action start 11:24:57: RollbackForceDeleteFiles. MSI (s) (E0:CC) [11:24:57:989]: Doing action: SetRollbackOtherFilesProperty Action ended 11:24:57: RollbackForceDeleteFiles. Return value 1. MSI (s) (E0:CC) [11:24:57:990]: PROPERTY CHANGE: Modifying RollbackOtherFiles property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:57: SetRollbackOtherFilesProperty. MSI (s) (E0:CC) [11:24:57:990]: Doing action: RollbackOtherFiles Action ended 11:24:57: SetRollbackOtherFilesProperty. Return value 1. Action start 11:24:57: RollbackOtherFiles. MSI (s) (E0:CC) [11:24:57:993]: Doing action: SetRollbackUpdateSavAdapterDllProperty Action ended 11:24:57: RollbackOtherFiles. Return value 1. MSI (s) (E0:CC) [11:24:57:993]: PROPERTY CHANGE: Adding RollbackUpdateSavAdapterDll property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:57: SetRollbackUpdateSavAdapterDllProperty. MSI (s) (E0:CC) [11:24:57:994]: Doing action: RollbackUpdateSavAdapterDll Action ended 11:24:57: SetRollbackUpdateSavAdapterDllProperty. Return value 1. Action start 11:24:57: RollbackUpdateSavAdapterDll. MSI (s) (E0:CC) [11:24:57:997]: Doing action: SetUpdateSavAdapterDllProperty Action ended 11:24:57: RollbackUpdateSavAdapterDll. Return value 1. MSI (s) (E0:CC) [11:24:57:998]: PROPERTY CHANGE: Adding UpdateSavAdapterDll property. Its value is ';10.3.15;'. Action start 11:24:57: SetUpdateSavAdapterDllProperty. MSI (s) (E0:CC) [11:24:57:998]: Doing action: UpdateSavAdapterDll Action ended 11:24:57: SetUpdateSavAdapterDllProperty. Return value 1. Action start 11:24:57: UpdateSavAdapterDll. MSI (s) (E0:CC) [11:24:58:002]: Doing action: SetInitialDriverProperty Action ended 11:24:58: UpdateSavAdapterDll. Return value 1. Action start 11:24:58: SetInitialDriverProperty. MSI (s) (E0:CC) [11:24:58:002]: Doing action: SetInstallDriverProperty Action ended 11:24:58: SetInitialDriverProperty. Return value 1. MSI (s) (E0:5C) [11:24:58:005]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2EC0.tmp, Entrypoint: SetDriverProperty MSI (s) (E0!0C) [11:24:58:013]: PROPERTY CHANGE: Modifying DRIVERVERSION property. Its current value is '0'. Its new value: 'VISTA_AMD64'. MSI (s) (E0!0C) [11:24:58:013]: PROPERTY CHANGE: Modifying BOOTDRIVERSIGNED property. Its current value is '0'. Its new value: '1'. Action start 11:24:58: SetInstallDriverProperty. MSI (s) (E0:CC) [11:24:58:016]: Doing action: SetProcessorProperties Action ended 11:24:58: SetInstallDriverProperty. Return value 1. MSI (s) (E0:68) [11:24:58:019]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2ED1.tmp, Entrypoint: SetProcessorProperties MSI (s) (E0!24) [11:24:58:026]: PROPERTY CHANGE: Modifying PROCESSOR_NX_ENABLED property. Its current value is '0'. Its new value: '1'. Action start 11:24:58: SetProcessorProperties. MSI (s) (E0:CC) [11:24:58:028]: Doing action: SetCopyOtherFilesProperty Action ended 11:24:58: SetProcessorProperties. Return value 1. MSI (s) (E0:CC) [11:24:58:029]: PROPERTY CHANGE: Adding CopyOtherFiles property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""VISTA_AMD64"'. Action start 11:24:58: SetCopyOtherFilesProperty. MSI (s) (E0:CC) [11:24:58:030]: Doing action: CopyOtherFiles Action ended 11:24:58: SetCopyOtherFilesProperty. Return value 1. Action start 11:24:58: CopyOtherFiles. MSI (s) (E0:CC) [11:24:58:035]: Doing action: SetRegisterBufferOverflowProtection Action ended 11:24:58: CopyOtherFiles. Return value 1. MSI (s) (E0:CC) [11:24:58:036]: PROPERTY CHANGE: Adding RegisterBufferOverflowProtection property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:24:58: SetRegisterBufferOverflowProtection. MSI (s) (E0:CC) [11:24:58:037]: Doing action: RegisterBufferOverflowProtection Action ended 11:24:58: SetRegisterBufferOverflowProtection. Return value 1. Action start 11:24:58: RegisterBufferOverflowProtection. MSI (s) (E0:CC) [11:24:58:042]: Skipping action: RollbackClassFilter (condition is false) MSI (s) (E0:CC) [11:24:58:042]: Skipping action: RollbackClassFilter64 (condition is false) MSI (s) (E0:CC) [11:24:58:042]: Doing action: RollbackClassFilter64Vista Action ended 11:24:58: RegisterBufferOverflowProtection. Return value 1. Action start 11:24:58: RollbackClassFilter64Vista. MSI (s) (E0:CC) [11:24:58:044]: Skipping action: RollbackDriverFiles (condition is false) MSI (s) (E0:CC) [11:24:58:044]: Skipping action: RollbackBootDriver (condition is false) MSI (s) (E0:CC) [11:24:58:044]: Doing action: SetRestoreExcludedProcessesProperty Action ended 11:24:58: RollbackClassFilter64Vista. Return value 1. MSI (s) (E0:14) [11:24:58:048]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2EE1.tmp, Entrypoint: SetRestoreExcludedProcessesProperty Action start 11:24:58: SetRestoreExcludedProcessesProperty. MSI (s) (E0:CC) [11:24:58:058]: Skipping action: RollbackDriverFiles64 (condition is false) MSI (s) (E0:CC) [11:24:58:058]: Skipping action: RollbackBootDriver64 (condition is false) MSI (s) (E0:CC) [11:24:58:058]: Skipping action: RollbackKMSDriver (condition is false) MSI (s) (E0:CC) [11:24:58:058]: Doing action: SetRollbackDriverFilesVistaProperty Action ended 11:24:58: SetRestoreExcludedProcessesProperty. Return value 1. MSI (s) (E0:CC) [11:24:58:059]: PROPERTY CHANGE: Adding RollbackDriverFilesVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'. Action start 11:24:58: SetRollbackDriverFilesVistaProperty. MSI (s) (E0:CC) [11:24:58:059]: Doing action: SetRollbackBootDriverVistaProperty Action ended 11:24:58: SetRollbackDriverFilesVistaProperty. Return value 1. MSI (s) (E0:CC) [11:24:58:060]: PROPERTY CHANGE: Adding RollbackBootDriverVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'. Action start 11:24:58: SetRollbackBootDriverVistaProperty. MSI (s) (E0:CC) [11:24:58:061]: Doing action: SetRollbackClassFilterVistaProperty Action ended 11:24:58: SetRollbackBootDriverVistaProperty. Return value 1. MSI (s) (E0:CC) [11:24:58:062]: PROPERTY CHANGE: Adding RollbackClassFilterVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf'. Action start 11:24:58: SetRollbackClassFilterVistaProperty. MSI (s) (E0:CC) [11:24:58:062]: Doing action: SetRollbackKMSDriverVistaProperty Action ended 11:24:58: SetRollbackClassFilterVistaProperty. Return value 1. MSI (s) (E0:CC) [11:24:58:063]: PROPERTY CHANGE: Adding RollbackKMSDriverVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\skmscan.inf'. Action start 11:24:58: SetRollbackKMSDriverVistaProperty. MSI (s) (E0:CC) [11:24:58:063]: Skipping action: RollbackBootDriverVista (condition is false) MSI (s) (E0:CC) [11:24:58:063]: Skipping action: RollbackDriverFilesVista (condition is false) MSI (s) (E0:CC) [11:24:58:063]: Skipping action: RollbackClassFilterVista (condition is false) MSI (s) (E0:CC) [11:24:58:063]: Doing action: RollbackBootDriver64Vista Action ended 11:24:58: SetRollbackKMSDriverVistaProperty. Return value 1. Action start 11:24:58: RollbackBootDriver64Vista. MSI (s) (E0:CC) [11:24:58:066]: Doing action: RollbackDriverFiles64Vista Action ended 11:24:58: RollbackBootDriver64Vista. Return value 1. Action start 11:24:58: RollbackDriverFiles64Vista. MSI (s) (E0:CC) [11:24:58:068]: Doing action: RestoreExcludedProcesses Action ended 11:24:58: RollbackDriverFiles64Vista. Return value 1. Action start 11:24:58: RestoreExcludedProcesses. MSI (s) (E0:CC) [11:24:58:074]: Skipping action: RollbackKMSDriverVista (condition is false) MSI (s) (E0:CC) [11:24:58:074]: Skipping action: InstallDriverFiles2K (condition is false) MSI (s) (E0:CC) [11:24:58:074]: Skipping action: InstallBootDriver2K (condition is false) MSI (s) (E0:CC) [11:24:58:074]: Skipping action: InstallDriverFilesXP (condition is false) MSI (s) (E0:CC) [11:24:58:074]: Skipping action: InstallBootDriverXP (condition is false) MSI (s) (E0:CC) [11:24:58:074]: Doing action: SetInstallDriverFilesVistaProperty Action ended 11:24:58: RestoreExcludedProcesses. Return value 1. MSI (s) (E0:CC) [11:24:58:075]: PROPERTY CHANGE: Adding InstallDriverFilesVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinLH_i386\SAVONACCESSDRIV.INF'. Action start 11:24:58: SetInstallDriverFilesVistaProperty. MSI (s) (E0:CC) [11:24:58:075]: Skipping action: InstallDriverFilesVista (condition is false) MSI (s) (E0:CC) [11:24:58:075]: Doing action: SetInstallDriverFilesW8Property Action ended 11:24:58: SetInstallDriverFilesVistaProperty. Return value 1. MSI (s) (E0:CC) [11:24:58:076]: PROPERTY CHANGE: Adding InstallDriverFilesW8 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Win8_i386\SAVONACCESSDRIV.INF'. Action start 11:24:58: SetInstallDriverFilesW8Property. MSI (s) (E0:CC) [11:24:58:077]: Skipping action: InstallDriverFilesW8 (condition is false) MSI (s) (E0:CC) [11:24:58:077]: Doing action: SetInstallClassFilterVistaProperty Action ended 11:24:58: SetInstallDriverFilesW8Property. Return value 1. MSI (s) (E0:CC) [11:24:58:077]: PROPERTY CHANGE: Adding InstallClassFilterVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ClassFilterDrivers\wxp_i386\sdcfilter.inf'. Action start 11:24:58: SetInstallClassFilterVistaProperty. MSI (s) (E0:CC) [11:24:58:078]: Skipping action: InstallClassFilterVista (condition is false) MSI (s) (E0:CC) [11:24:58:078]: Doing action: SetInstallBootDriverVistaProperty Action ended 11:24:58: SetInstallClassFilterVistaProperty. Return value 1. MSI (s) (E0:CC) [11:24:58:079]: PROPERTY CHANGE: Adding InstallBootDriverVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinLH_i386\SOPHOSBOOTDRIVER.INF'. Action start 11:24:58: SetInstallBootDriverVistaProperty. MSI (s) (E0:CC) [11:24:58:079]: Skipping action: InstallBootDriverVista (condition is false) MSI (s) (E0:CC) [11:24:58:079]: Skipping action: InstallBootDriverAMD64 (condition is false) MSI (s) (E0:CC) [11:24:58:079]: Skipping action: InstallDriverFilesAMD64 (condition is false) MSI (s) (E0:CC) [11:24:58:079]: Skipping action: InstallDriverFilesIA64 (condition is false) MSI (s) (E0:CC) [11:24:58:080]: Skipping action: InstallBootDriverIA64 (condition is false) MSI (s) (E0:CC) [11:24:58:080]: Doing action: InstallBootDriverAMD64Vista Action ended 11:24:58: SetInstallBootDriverVistaProperty. Return value 1. Action start 11:24:58: InstallBootDriverAMD64Vista. MSI (s) (E0:CC) [11:24:58:082]: Doing action: InstallDriverFilesAMD64Vista Action ended 11:24:58: InstallBootDriverAMD64Vista. Return value 1. Action start 11:24:58: InstallDriverFilesAMD64Vista. MSI (s) (E0:CC) [11:24:58:084]: Skipping action: InstallDriverFilesAMD64W8 (condition is false) MSI (s) (E0:CC) [11:24:58:084]: Skipping action: InstallDriverFilesIA64Vista (condition is false) MSI (s) (E0:CC) [11:24:58:084]: Skipping action: InstallBootDriverIA64Vista (condition is false) MSI (s) (E0:CC) [11:24:58:084]: Doing action: SetInstallUnsignedBootDriver Action ended 11:24:58: InstallDriverFilesAMD64Vista. Return value 1. MSI (s) (E0:CC) [11:24:58:085]: PROPERTY CHANGE: Adding InstallUnsignedBootDriver property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""VISTA_AMD64"'. Action start 11:24:58: SetInstallUnsignedBootDriver. MSI (s) (E0:CC) [11:24:58:085]: Doing action: SetInstallUnsignedDrivers Action ended 11:24:58: SetInstallUnsignedBootDriver. Return value 1. MSI (s) (E0:CC) [11:24:58:086]: PROPERTY CHANGE: Adding InstallUnsignedDrivers property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""VISTA_AMD64"'. Action start 11:24:58: SetInstallUnsignedDrivers. MSI (s) (E0:CC) [11:24:58:087]: Skipping action: InstallUnsignedBootDriver (condition is false) MSI (s) (E0:CC) [11:24:58:087]: Skipping action: InstallUnsignedDrivers (condition is false) MSI (s) (E0:CC) [11:24:58:087]: Skipping action: InstallUnsignedBootDriverAMD64 (condition is false) MSI (s) (E0:CC) [11:24:58:087]: Skipping action: InstallUnsignedDriversAMD64 (condition is false) MSI (s) (E0:CC) [11:24:58:087]: Skipping action: InstallUnsignedBootDriverIA64 (condition is false) MSI (s) (E0:CC) [11:24:58:087]: Skipping action: InstallUnsignedDriversIA64 (condition is false) MSI (s) (E0:CC) [11:24:58:087]: Skipping action: InstallClassFilter2K (condition is false) MSI (s) (E0:CC) [11:24:58:087]: Skipping action: InstallClassFilterXP (condition is false) MSI (s) (E0:CC) [11:24:58:087]: Skipping action: InstallClassFilterIA64 (condition is false) MSI (s) (E0:CC) [11:24:58:087]: Skipping action: InstallClassFilterIA64Vista (condition is false) MSI (s) (E0:CC) [11:24:58:087]: Skipping action: InstallClassFilterAMD64 (condition is false) MSI (s) (E0:CC) [11:24:58:087]: Doing action: InstallClassFilterAMD64Vista Action ended 11:24:58: SetInstallUnsignedDrivers. Return value 1. Action start 11:24:58: InstallClassFilterAMD64Vista. MSI (s) (E0:CC) [11:24:58:089]: Doing action: SetInstallKMSDriverProperty Action ended 11:24:58: InstallClassFilterAMD64Vista. Return value 1. MSI (s) (E0:CC) [11:24:58:090]: PROPERTY CHANGE: Adding InstallKMSDriver property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\wxp_i386\skmscan.inf'. Action start 11:24:58: SetInstallKMSDriverProperty. MSI (s) (E0:CC) [11:24:58:091]: Skipping action: InstallKMSDriver (condition is false) MSI (s) (E0:CC) [11:24:58:091]: Doing action: SetInstallKMSDriver2KProperty Action ended 11:24:58: SetInstallKMSDriverProperty. Return value 1. MSI (s) (E0:CC) [11:24:58:092]: PROPERTY CHANGE: Adding InstallKMSDriver2K property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\w2k_i386\skmscan.inf'. Action start 11:24:58: SetInstallKMSDriver2KProperty. MSI (s) (E0:CC) [11:24:58:092]: Skipping action: InstallKMSDriver2K (condition is false) MSI (s) (E0:CC) [11:24:58:092]: Doing action: SetStartDriverServicesProperty Action ended 11:24:58: SetInstallKMSDriver2KProperty. Return value 1. MSI (s) (E0:CC) [11:24:58:093]: PROPERTY CHANGE: Adding StartDriverServices property. Its value is 'VISTA_AMD64'. Action start 11:24:58: SetStartDriverServicesProperty. MSI (s) (E0:CC) [11:24:58:094]: Doing action: StartDriverServices Action ended 11:24:58: SetStartDriverServicesProperty. Return value 1. Action start 11:24:58: StartDriverServices. MSI (s) (E0:CC) [11:24:58:101]: Doing action: SetMoveLockedFiles Action ended 11:24:58: StartDriverServices. Return value 1. MSI (s) (E0:CC) [11:24:58:102]: PROPERTY CHANGE: Adding MoveLockedFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\|'. Action start 11:24:58: SetMoveLockedFiles. MSI (s) (E0:CC) [11:24:58:102]: Skipping action: MoveLockedFiles (condition is false) MSI (s) (E0:CC) [11:24:58:102]: Doing action: MoveFiles Action ended 11:24:58: SetMoveLockedFiles. Return value 1. Action start 11:24:58: MoveFiles. MSI (s) (E0:CC) [11:24:58:104]: Doing action: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:24:58: MoveFiles. Return value 1. MSI (s) (E0:70) [11:24:58:107]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2F21.tmp, Entrypoint: SwcDeleteSAUPluginRegistry Action start 11:24:58: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:24:58:110]: Doing action: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:24:58: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (E0:1C) [11:24:58:114]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2F31.tmp, Entrypoint: SwcDeleteRMSPluginRegistry Action start 11:24:58: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:24:58:118]: Doing action: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:24:58: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (E0:B0) [11:24:58:121]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI2F32.tmp, Entrypoint: SwcPauseForUnhook Action start 11:24:58: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:25:03:127]: Doing action: InstallFiles Action ended 11:25:03: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 11:25:03: InstallFiles. MSI (s) (E0:CC) [11:25:03:136]: Note: 1: 2205 2: 3: Patch MSI (s) (E0:CC) [11:25:03:136]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence` MSI (s) (E0:CC) [11:25:03:136]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (E0:CC) [11:25:03:136]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ? MSI (s) (E0:CC) [11:25:03:138]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (E0:CC) [11:25:03:138]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (E0:CC) [11:25:03:138]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (E0:CC) [11:25:03:174]: Note: 1: 2205 2: 3: Patch MSI (s) (E0:CC) [11:25:03:174]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (E0:CC) [11:25:03:178]: Note: 1: 2205 2: 3: Patch MSI (s) (E0:CC) [11:25:03:178]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (E0:CC) [11:25:03:183]: Skipping action: SwcService_unreg_nc.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (E0:CC) [11:25:03:183]: Doing action: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:25:03: InstallFiles. Return value 1. Action start 11:25:03: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:25:03:186]: Doing action: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:25:03: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 11:25:03: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:25:03:188]: Skipping action: SwcDeleteRegExceptId.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (E0:CC) [11:25:03:188]: Doing action: PatchFiles Action ended 11:25:03: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (E0:CC) [11:25:03:189]: Note: 1: 2205 2: 3: Patch MSI (s) (E0:CC) [11:25:03:189]: Note: 1: 2228 2: 3: Patch 4: SELECT `File`,`FileName`,`FileSize`,`Directory_`,`PatchSize`,`File`.`Attributes`,`Patch`.`Attributes`,`Patch`.`Sequence`,`Component`.`Component`,`Component`.`ComponentId` FROM `File`,`Component`,`Patch` WHERE `Patch`.`#_MsiActive`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` Action start 11:25:03: PatchFiles. MSI (s) (E0:CC) [11:25:03:189]: Doing action: DuplicateFiles Action ended 11:25:03: PatchFiles. Return value 0. Action start 11:25:03: DuplicateFiles. MSI (s) (E0:CC) [11:25:03:190]: Skipping action: DeleteUserGroups (condition is false) MSI (s) (E0:CC) [11:25:03:190]: Doing action: RollbackUserGroups Action ended 11:25:03: DuplicateFiles. Return value 1. Action start 11:25:03: RollbackUserGroups. MSI (s) (E0:CC) [11:25:03:196]: Doing action: SetUserGroupsProperty Action ended 11:25:03: RollbackUserGroups. Return value 1. MSI (s) (E0:CC) [11:25:03:197]: PROPERTY CHANGE: Adding CreateUserGroups property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'. Action start 11:25:03: SetUserGroupsProperty. MSI (s) (E0:CC) [11:25:03:197]: Doing action: CreateUserGroups Action ended 11:25:03: SetUserGroupsProperty. Return value 1. Action start 11:25:03: CreateUserGroups. MSI (s) (E0:CC) [11:25:03:203]: Doing action: AddDomainGroups Action ended 11:25:03: CreateUserGroups. Return value 1. Action start 11:25:03: AddDomainGroups. MSI (s) (E0:CC) [11:25:03:210]: Doing action: BindImage Action ended 11:25:03: AddDomainGroups. Return value 1. Action start 11:25:03: BindImage. MSI (s) (E0:CC) [11:25:03:211]: Doing action: CreateShortcuts Action ended 11:25:03: BindImage. Return value 1. Action start 11:25:03: CreateShortcuts. MSI (s) (E0:CC) [11:25:03:216]: Doing action: RegisterClassInfo Action ended 11:25:03: CreateShortcuts. Return value 1. Action start 11:25:03: RegisterClassInfo. MSI (s) (E0:CC) [11:25:03:218]: Doing action: RegisterExtensionInfo Action ended 11:25:03: RegisterClassInfo. Return value 1. MSI (s) (E0:CC) [11:25:03:219]: Note: 1: 2262 2: Extension 3: -2147287038 Action start 11:25:03: RegisterExtensionInfo. MSI (s) (E0:CC) [11:25:03:220]: Doing action: RegisterProgIdInfo Action ended 11:25:03: RegisterExtensionInfo. Return value 1. MSI (s) (E0:CC) [11:25:03:221]: Note: 1: 2262 2: Extension 3: -2147287038 Action start 11:25:03: RegisterProgIdInfo. MSI (s) (E0:CC) [11:25:03:221]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (E0:CC) [11:25:03:222]: Doing action: RegisterMIMEInfo Action ended 11:25:03: RegisterProgIdInfo. Return value 1. MSI (s) (E0:CC) [11:25:03:223]: Note: 1: 2205 2: 3: MIME MSI (s) (E0:CC) [11:25:03:223]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))) Action start 11:25:03: RegisterMIMEInfo. MSI (s) (E0:CC) [11:25:03:224]: Doing action: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:25:03: RegisterMIMEInfo. Return value 0. Action start 11:25:03: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:25:03:226]: Doing action: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:25:03: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (E0:CC) [11:25:03:227]: PROPERTY CHANGE: Adding SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll'. Action start 11:25:03: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:25:03:227]: Doing action: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:25:03: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 11:25:03: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:25:03:230]: Doing action: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:25:03: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (E0:CC) [11:25:03:231]: PROPERTY CHANGE: Adding SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll'. Action start 11:25:03: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:25:03:232]: Doing action: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:25:03: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 11:25:03: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:25:03:234]: Doing action: WriteRegistryValues Action ended 11:25:03: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 11:25:03: WriteRegistryValues. MSI (s) (E0:CC) [11:25:04:388]: Doing action: SetSAVAdminUpdateBegin Action ended 11:25:04: WriteRegistryValues. Return value 1. Action start 11:25:04: SetSAVAdminUpdateBegin. MSI (s) (E0:CC) [11:25:04:393]: Doing action: SetRollBackSaviProperty Action ended 11:25:04: SetSAVAdminUpdateBegin. Return value 1. MSI (s) (E0:CC) [11:25:04:393]: PROPERTY CHANGE: Modifying RollbackSavi property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:25:04: SetRollBackSaviProperty. MSI (s) (E0:CC) [11:25:04:394]: Doing action: RollbackSavi Action ended 11:25:04: SetRollBackSaviProperty. Return value 1. Action start 11:25:04: RollbackSavi. MSI (s) (E0:CC) [11:25:04:399]: Doing action: SetUpdateSaviProperty Action ended 11:25:04: RollbackSavi. Return value 1. MSI (s) (E0:CC) [11:25:04:399]: PROPERTY CHANGE: Modifying UpdateSAVI property. Its current value is '0'. Its new value: '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"'. Action start 11:25:04: SetUpdateSaviProperty. MSI (s) (E0:CC) [11:25:04:400]: Doing action: UpdateSAVI Action ended 11:25:04: SetUpdateSaviProperty. Return value 1. Action start 11:25:04: UpdateSAVI. MSI (s) (E0:CC) [11:25:04:406]: Doing action: SetSetFolderPermissions Action ended 11:25:04: UpdateSAVI. Return value 1. MSI (s) (E0:CC) [11:25:04:406]: PROPERTY CHANGE: Adding SetFolderPermissions property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:25:04: SetSetFolderPermissions. MSI (s) (E0:CC) [11:25:04:406]: Doing action: SetFolderPermissions Action ended 11:25:04: SetSetFolderPermissions. Return value 1. Action start 11:25:04: SetFolderPermissions. MSI (s) (E0:CC) [11:25:04:412]: Doing action: WriteIniValues Action ended 11:25:04: SetFolderPermissions. Return value 1. MSI (s) (E0:CC) [11:25:04:413]: Note: 1: 2205 2: 3: IniFile MSI (s) (E0:CC) [11:25:04:413]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND (`Component`.`Action`=1 OR `Component`.`Action`=2) ORDER BY `FileName`,`Section` Action start 11:25:04: WriteIniValues. MSI (s) (E0:CC) [11:25:04:413]: Doing action: WriteEnvironmentStrings Action ended 11:25:04: WriteIniValues. Return value 1. MSI (s) (E0:CC) [11:25:04:413]: Note: 1: 2205 2: 3: Environment MSI (s) (E0:CC) [11:25:04:413]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) Action start 11:25:04: WriteEnvironmentStrings. MSI (s) (E0:CC) [11:25:04:414]: Doing action: RegisterFonts Action ended 11:25:04: WriteEnvironmentStrings. Return value 1. MSI (s) (E0:CC) [11:25:04:414]: Note: 1: 2205 2: 3: Font MSI (s) (E0:CC) [11:25:04:414]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Action` From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 Or `FileAction`.`Action` = 2) ORDER BY `FileAction`.`Directory_` Action start 11:25:04: RegisterFonts. MSI (s) (E0:CC) [11:25:04:414]: Doing action: InstallODBC Action ended 11:25:04: RegisterFonts. Return value 1. MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2711 2: ODBCDriverManager MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2711 2: ODBCDriverManager64 MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ? MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ? MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ? MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ? MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2205 2: 3: ODBCDataSource MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ? MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2205 2: 3: ODBCDataSource MSI (s) (E0:CC) [11:25:04:415]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ? Action start 11:25:04: InstallODBC. MSI (s) (E0:CC) [11:25:04:415]: Doing action: RegisterTypeLibraries Action ended 11:25:04: InstallODBC. Return value 0. Action start 11:25:04: RegisterTypeLibraries. MSI (s) (E0:CC) [11:25:04:417]: Doing action: RegisterComPlus Action ended 11:25:04: RegisterTypeLibraries. Return value 1. MSI (s) (E0:CC) [11:25:04:417]: Note: 1: 2205 2: 3: Complus MSI (s) (E0:CC) [11:25:04:417]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Action` = 1 OR `Action` = 2) Action start 11:25:04: RegisterComPlus. MSI (s) (E0:CC) [11:25:04:417]: Doing action: SelfRegModules Action ended 11:25:04: RegisterComPlus. Return value 0. MSI (s) (E0:CC) [11:25:04:418]: Note: 1: 2205 2: 3: SelfReg MSI (s) (E0:CC) [11:25:04:418]: Note: 1: 2228 2: 3: SelfReg 4: Select `FileAction`.`FileName`,`FileAction`.`Directory_`,`FileAction`.`Action`, `FileAction`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `FileAction` Where `SelfReg`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 OR `FileAction`.`Action` = 2) Action start 11:25:04: SelfRegModules. MSI (s) (E0:CC) [11:25:04:418]: Doing action: InstallServices Action ended 11:25:04: SelfRegModules. Return value 1. Action start 11:25:04: InstallServices. MSI (s) (E0:CC) [11:25:04:419]: Doing action: SetServiceXP Action ended 11:25:04: InstallServices. Return value 1. Action start 11:25:04: SetServiceXP. MSI (s) (E0:CC) [11:25:04:425]: Doing action: SetServiceSecurity Action ended 11:25:04: SetServiceXP. Return value 1. Action start 11:25:04: SetServiceSecurity. MSI (s) (E0:CC) [11:25:04:431]: Doing action: SetServiceRecoveryActions Action ended 11:25:04: SetServiceSecurity. Return value 1. Action start 11:25:04: SetServiceRecoveryActions. MSI (s) (E0:CC) [11:25:04:436]: Doing action: SetRollbackInstallDeviceControlProperty Action ended 11:25:04: SetServiceRecoveryActions. Return value 1. MSI (s) (E0:CC) [11:25:04:437]: PROPERTY CHANGE: Adding RollBackInstallDeviceControl property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:25:04: SetRollbackInstallDeviceControlProperty. MSI (s) (E0:CC) [11:25:04:437]: Doing action: RollbackInstallDeviceControl Action ended 11:25:04: SetRollbackInstallDeviceControlProperty. Return value 1. Action start 11:25:04: RollbackInstallDeviceControl. MSI (s) (E0:CC) [11:25:04:444]: Doing action: SetInstallDeviceControlProperty Action ended 11:25:04: RollbackInstallDeviceControl. Return value 1. MSI (s) (E0:CC) [11:25:04:445]: PROPERTY CHANGE: Adding InstallDeviceControl property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"'. Action start 11:25:04: SetInstallDeviceControlProperty. MSI (s) (E0:CC) [11:25:04:445]: Doing action: InstallDeviceControl Action ended 11:25:04: SetInstallDeviceControlProperty. Return value 1. Action start 11:25:04: InstallDeviceControl. MSI (s) (E0:CC) [11:25:04:451]: Doing action: SetAdminGroupDescription Action ended 11:25:04: InstallDeviceControl. Return value 1. Action start 11:25:04: SetAdminGroupDescription. MSI (s) (E0:CC) [11:25:04:458]: Doing action: SetPowerGroupDescription Action ended 11:25:04: SetAdminGroupDescription. Return value 1. Action start 11:25:04: SetPowerGroupDescription. MSI (s) (E0:CC) [11:25:04:465]: Doing action: SetUserGroupDescription Action ended 11:25:04: SetPowerGroupDescription. Return value 1. Action start 11:25:04: SetUserGroupDescription. MSI (s) (E0:CC) [11:25:04:471]: Doing action: SetOnAccessGroupDescription Action ended 11:25:04: SetUserGroupDescription. Return value 1. Action start 11:25:04: SetOnAccessGroupDescription. MSI (s) (E0:CC) [11:25:04:477]: Skipping action: DisableOnAccess (condition is false) MSI (s) (E0:CC) [11:25:04:477]: Doing action: DisablePUADetection_setprop Action ended 11:25:04: SetOnAccessGroupDescription. Return value 1. MSI (s) (E0:CC) [11:25:04:478]: PROPERTY CHANGE: Adding DisablePUADetection property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'. Action start 11:25:04: DisablePUADetection_setprop. MSI (s) (E0:CC) [11:25:04:478]: Doing action: DisablePUADetection Action ended 11:25:04: DisablePUADetection_setprop. Return value 1. Action start 11:25:04: DisablePUADetection. MSI (s) (E0:CC) [11:25:04:485]: Doing action: DeleteExpiredCaches Action ended 11:25:04: DisablePUADetection. Return value 1. Action start 11:25:04: DeleteExpiredCaches. MSI (s) (E0:CC) [11:25:04:492]: Doing action: EnableJournals Action ended 11:25:04: DeleteExpiredCaches. Return value 1. Action start 11:25:04: EnableJournals. MSI (s) (E0:CC) [11:25:04:498]: Doing action: DisableWebProtection_setprop Action ended 11:25:04: EnableJournals. Return value 1. MSI (s) (E0:CC) [11:25:04:499]: PROPERTY CHANGE: Adding DisableWebProtection property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'. Action start 11:25:04: DisableWebProtection_setprop. MSI (s) (E0:CC) [11:25:04:500]: Doing action: DisableWebProtection Action ended 11:25:04: DisableWebProtection_setprop. Return value 1. Action start 11:25:04: DisableWebProtection. MSI (s) (E0:CC) [11:25:04:507]: Doing action: DisableSxlLookups_setprop Action ended 11:25:04: DisableWebProtection. Return value 1. MSI (s) (E0:CC) [11:25:04:508]: PROPERTY CHANGE: Adding DisableSxlLookups property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'. Action start 11:25:04: DisableSxlLookups_setprop. MSI (s) (E0:CC) [11:25:04:508]: Doing action: DisableSxlLookups Action ended 11:25:04: DisableSxlLookups_setprop. Return value 1. Action start 11:25:04: DisableSxlLookups. MSI (s) (E0:CC) [11:25:04:515]: Doing action: CheckSNMPDLLPresence_setprop Action ended 11:25:04: DisableSxlLookups. Return value 1. MSI (s) (E0:CC) [11:25:04:516]: PROPERTY CHANGE: Adding CheckSNMPDLLPresence property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'. Action start 11:25:04: CheckSNMPDLLPresence_setprop. MSI (s) (E0:CC) [11:25:04:517]: Doing action: CheckSNMPDLLPresence Action ended 11:25:04: CheckSNMPDLLPresence_setprop. Return value 1. Action start 11:25:04: CheckSNMPDLLPresence. MSI (s) (E0:CC) [11:25:04:524]: Doing action: SetUpdateSXLServerList Action ended 11:25:04: CheckSNMPDLLPresence. Return value 1. MSI (s) (E0:CC) [11:25:04:525]: PROPERTY CHANGE: Adding UpdateSXLServerList property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'. Action start 11:25:04: SetUpdateSXLServerList. MSI (s) (E0:CC) [11:25:04:525]: Doing action: UpdateSXLServerList Action ended 11:25:04: SetUpdateSXLServerList. Return value 1. Action start 11:25:04: UpdateSXLServerList. MSI (s) (E0:CC) [11:25:04:533]: Doing action: GenerateSavMachineId Action ended 11:25:04: UpdateSXLServerList. Return value 1. Action start 11:25:04: GenerateSavMachineId. MSI (s) (E0:CC) [11:25:04:540]: Doing action: RegisterUser Action ended 11:25:04: GenerateSavMachineId. Return value 1. Action start 11:25:04: RegisterUser. MSI (s) (E0:CC) [11:25:04:541]: Doing action: RegisterProduct Action ended 11:25:04: RegisterUser. Return value 1. Action start 11:25:04: RegisterProduct. MSI (s) (E0:CC) [11:25:04:544]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'. MSI (s) (E0:CC) [11:25:04:544]: Doing action: PublishComponents Action ended 11:25:04: RegisterProduct. Return value 1. MSI (s) (E0:CC) [11:25:04:545]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (E0:CC) [11:25:04:545]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))) Action start 11:25:04: PublishComponents. MSI (s) (E0:CC) [11:25:04:545]: Doing action: MsiPublishAssemblies Action ended 11:25:04: PublishComponents. Return value 0. Action start 11:25:04: MsiPublishAssemblies. MSI (s) (E0:CC) [11:25:04:566]: Doing action: PublishFeatures Action ended 11:25:04: MsiPublishAssemblies. Return value 1. Action start 11:25:04: PublishFeatures. MSI (s) (E0:CC) [11:25:04:571]: Doing action: PublishProduct Action ended 11:25:04: PublishFeatures. Return value 1. Action start 11:25:04: PublishProduct. MSI (s) (E0:CC) [11:25:04:575]: Doing action: RollbackRegisterSavShellExtX64 Action ended 11:25:04: PublishProduct. Return value 1. Action start 11:25:04: RollbackRegisterSavShellExtX64. MSI (s) (E0:CC) [11:25:04:576]: Skipping action: RollbackRegisterSavShellExtIA64 (condition is false) MSI (s) (E0:CC) [11:25:04:576]: Doing action: RegisterSavShellExtX64 Action ended 11:25:04: RollbackRegisterSavShellExtX64. Return value 1. Action start 11:25:04: RegisterSavShellExtX64. MSI (s) (E0:CC) [11:25:04:578]: Skipping action: RegisterSavShellExtIA64 (condition is false) MSI (s) (E0:CC) [11:25:04:578]: Doing action: RollbackInstallSecurityCenter Action ended 11:25:04: RegisterSavShellExtX64. Return value 1. Action start 11:25:04: RollbackInstallSecurityCenter. MSI (s) (E0:CC) [11:25:04:584]: Doing action: SetRestoreFirstInstallTimeProperty Action ended 11:25:04: RollbackInstallSecurityCenter. Return value 1. MSI (s) (E0:CC) [11:25:04:584]: PROPERTY CHANGE: Adding RestoreFirstInstallTime property. Its value is '0'. Action start 11:25:04: SetRestoreFirstInstallTimeProperty. MSI (s) (E0:CC) [11:25:04:585]: Skipping action: RestoreFirstInstallTime (condition is false) MSI (s) (E0:CC) [11:25:04:585]: Doing action: SetSAVAdminUpdateComplete Action ended 11:25:04: SetRestoreFirstInstallTimeProperty. Return value 1. Action start 11:25:04: SetSAVAdminUpdateComplete. MSI (s) (E0:CC) [11:25:04:591]: Doing action: RunPreLaunchScript Action ended 11:25:04: SetSAVAdminUpdateComplete. Return value 1. Action start 11:25:04: RunPreLaunchScript. MSI (s) (E0:CC) [11:25:04:598]: Doing action: RegisterDCIfEnabled Action ended 11:25:04: RunPreLaunchScript. Return value 1. Action start 11:25:04: RegisterDCIfEnabled. MSI (s) (E0:CC) [11:25:04:605]: Doing action: StartSAVServices Action ended 11:25:04: RegisterDCIfEnabled. Return value 1. Action start 11:25:04: StartSAVServices. MSI (s) (E0:CC) [11:25:04:612]: Skipping action: ApplyCachedPolicies (condition is false) MSI (s) (E0:CC) [11:25:04:612]: Skipping action: CopySwiFcRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:612]: Skipping action: CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:612]: Skipping action: CopySwiFcToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:612]: Skipping action: CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:612]: Skipping action: CopyScfDotDatToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:612]: Skipping action: CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:612]: Doing action: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 11:25:04: StartSAVServices. Return value 1. MSI (s) (E0:CC) [11:25:04:612]: PROPERTY CHANGE: Adding SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'swi_service'. Action start 11:25:04: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (E0:CC) [11:25:04:613]: Doing action: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 11:25:04: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. Action start 11:25:04: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (E0:CC) [11:25:04:616]: Doing action: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 11:25:04: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. MSI (s) (E0:CC) [11:25:04:617]: PROPERTY CHANGE: Adding SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /registerService'. Action start 11:25:04: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (E0:CC) [11:25:04:617]: Doing action: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 11:25:04: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. Action start 11:25:04: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (E0:CC) [11:25:04:620]: Skipping action: SwiCalloutInstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:620]: Skipping action: SwiCalloutRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:620]: Skipping action: SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:620]: Skipping action: SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:620]: Skipping action: SwiFilterRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:620]: Skipping action: SwiFilterRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:620]: Skipping action: SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:620]: Skipping action: SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:620]: Doing action: StartServices Action ended 11:25:04: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. Action start 11:25:04: StartServices. MSI (s) (E0:CC) [11:25:04:621]: Doing action: SwiUpdateInstallRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 11:25:04: StartServices. Return value 1. Action start 11:25:04: SwiUpdateInstallRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (E0:CC) [11:25:04:624]: Skipping action: SwiUpdateInstall.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:624]: Skipping action: SwiUpdateInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:624]: Doing action: SwiUpdateInstall64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 11:25:04: SwiUpdateInstallRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. MSI (s) (E0:CC) [11:25:04:625]: PROPERTY CHANGE: Adding SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe" /update'. Action start 11:25:04: SwiUpdateInstall64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (E0:CC) [11:25:04:625]: Doing action: SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 11:25:04: SwiUpdateInstall64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. Action start 11:25:04: SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (E0:CC) [11:25:04:627]: Skipping action: SwiUpdateUpgradeRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:627]: Skipping action: SwiUpdateUpgrade.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:627]: Skipping action: SwiUpdateUpgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:627]: Skipping action: SwiUpdateUpgrade64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:627]: Skipping action: SwiUpdateUpgrade64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (E0:CC) [11:25:04:627]: Doing action: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 11:25:04: SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. MSI (s) (E0:BC) [11:25:04:630]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI489D.tmp, Entrypoint: SwcEnableSwcServiceStart Action start 11:25:04: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (E0:CC) [11:25:04:635]: Doing action: BootDriverStartup Action ended 11:25:04: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 11:25:04: BootDriverStartup. MSI (s) (E0:CC) [11:25:04:640]: Doing action: SetUpdateDriversProperty Action ended 11:25:04: BootDriverStartup. Return value 1. MSI (s) (E0:CC) [11:25:04:641]: PROPERTY CHANGE: Modifying UPDATEDRIVERS property. Its current value is '1'. Its new value: '0'. Action start 11:25:04: SetUpdateDriversProperty. MSI (s) (E0:CC) [11:25:04:641]: Doing action: SetConfigureSAVProperty Action ended 11:25:04: SetUpdateDriversProperty. Return value 1. MSI (s) (E0:CC) [11:25:04:642]: PROPERTY CHANGE: Adding ConfigureSAV property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""0"'. Action start 11:25:04: SetConfigureSAVProperty. MSI (s) (E0:CC) [11:25:04:642]: Skipping action: ScheduleReboot (condition is false) MSI (s) (E0:CC) [11:25:04:642]: Doing action: ConfigureSAV Action ended 11:25:04: SetConfigureSAVProperty. Return value 1. Action start 11:25:04: ConfigureSAV. MSI (s) (E0:CC) [11:25:04:649]: Skipping action: SetUpdateFinished (condition is false) MSI (s) (E0:CC) [11:25:04:649]: Doing action: SetInstallationComplete Action ended 11:25:04: ConfigureSAV. Return value 1. Action start 11:25:04: SetInstallationComplete. MSI (s) (E0:CC) [11:25:04:656]: Doing action: SetCreateSavAdapterDllRegistryEntryProperty Action ended 11:25:04: SetInstallationComplete. Return value 1. MSI (s) (E0:CC) [11:25:04:656]: PROPERTY CHANGE: Adding CreateSavAdapterDllRegistryEntry property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:25:04: SetCreateSavAdapterDllRegistryEntryProperty. MSI (s) (E0:CC) [11:25:04:657]: Doing action: CreateSavAdapterDllRegistryEntry Action ended 11:25:04: SetCreateSavAdapterDllRegistryEntryProperty. Return value 1. Action start 11:25:04: CreateSavAdapterDllRegistryEntry. MSI (s) (E0:CC) [11:25:04:663]: Doing action: SetForceDeleteFilesProperty Action ended 11:25:04: CreateSavAdapterDllRegistryEntry. Return value 1. MSI (s) (E0:CC) [11:25:04:664]: PROPERTY CHANGE: Adding ForceDeleteFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 11:25:04: SetForceDeleteFilesProperty. MSI (s) (E0:CC) [11:25:04:664]: Skipping action: ForceDeleteFiles (condition is false) MSI (s) (E0:CC) [11:25:04:664]: Doing action: SetAfterScriptProperty Action ended 11:25:04: SetForceDeleteFilesProperty. Return value 1. MSI (s) (E0:CC) [11:25:04:665]: PROPERTY CHANGE: Adding RunAfterScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.3.15"'. Action start 11:25:04: SetAfterScriptProperty. MSI (s) (E0:CC) [11:25:04:666]: Doing action: RunAfterScript Action ended 11:25:04: SetAfterScriptProperty. Return value 1. Action start 11:25:04: RunAfterScript. MSI (s) (E0:CC) [11:25:04:673]: Doing action: SetCopySavSyncFileProperty Action ended 11:25:04: RunAfterScript. Return value 1. MSI (s) (E0:CC) [11:25:04:674]: PROPERTY CHANGE: Adding CopySAVSyncFile property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"'. Action start 11:25:04: SetCopySavSyncFileProperty. MSI (s) (E0:CC) [11:25:04:674]: Doing action: CopySAVSyncFile Action ended 11:25:04: SetCopySavSyncFileProperty. Return value 1. Action start 11:25:04: CopySAVSyncFile. MSI (s) (E0:CC) [11:25:04:682]: Doing action: InstallFinalize Action ended 11:25:04: CopySAVSyncFile. Return value 1. MSI (s) (E0:CC) [11:25:04:683]: Running Script: C:\Windows\Installer\MSI2DE0.tmp MSI (s) (E0:CC) [11:25:04:683]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'. MSI (s) (E0:CC) [11:25:04:684]: Machine policy value 'DisableRollback' is 0 MSI (s) (E0:CC) [11:25:04:686]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (E0:CC) [11:25:04:691]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1211390749,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1) Action start 11:25:04: InstallFinalize. MSI (s) (E0:CC) [11:25:04:691]: Executing op: ProductInfo(ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=167968783,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={CE9959FF-BAE0-4FE8-8837-F68062C881F0},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3) MSI (s) (E0:CC) [11:25:04:691]: Executing op: DialogInfo(Type=0,Argument=1033) MSI (s) (E0:CC) [11:25:04:692]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus) MSI (s) (E0:CC) [11:25:04:692]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1]) MSI (s) (E0:CC) [11:25:04:692]: Executing op: SetBaseline(Baseline=0,) MSI (s) (E0:CC) [11:25:04:692]: Executing op: SetBaseline(Baseline=1,) MSI (s) (E0:CC) [11:25:04:692]: Executing op: ActionStart(Name=SetUpdateFailed,,) MSI (s) (E0:CC) [11:25:04:693]: Executing op: CustomActionSchedule(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,) MSI (s) (E0:CC) [11:25:04:696]: Executing op: ActionStart(Name=RestoreMovedFiles,,) MSI (s) (E0:CC) [11:25:04:697]: Executing op: CustomActionSchedule(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (E0:CC) [11:25:04:701]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,) MSI (s) (E0:CC) [11:25:04:701]: Executing op: CustomActionSchedule(Action=CheckRegForNullDACLs,ActionType=1025,Source=BinaryData,Target=CheckRegForNullDACLs,) MSI (s) (E0:04) [11:25:04:704]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI48ED.tmp, Entrypoint: CheckRegForNullDACLs MSI (s) (E0:CC) [11:25:04:716]: Executing op: ActionStart(Name=RunErrorScript,,) MSI (s) (E0:CC) [11:25:04:716]: Executing op: CustomActionSchedule(Action=RunErrorScript,ActionType=1345,Source=BinaryData,Target=RunErrorScripts,CustomActionData="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.3.15") MSI (s) (E0:CC) [11:25:04:720]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,) MSI (s) (E0:CC) [11:25:04:720]: Executing op: ProgressTotal(Total=143,Type=1,ByteEquivalent=24000) MSI (s) (E0:CC) [11:25:04:721]: Executing op: ComponentRegister(ComponentId={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:723]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:724]: Executing op: ComponentRegister(ComponentId={A074188E-B992-457A-A6FB-B674A1D71791},KeyPath=C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:725]: Executing op: ComponentRegister(ComponentId={A074188E-B992-457A-A6FB-B674A1D71791},KeyPath=C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\,State=3,ProductKey={00000000-0000-0000-0000-000000000000},Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:726]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:728]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:729]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:730]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:731]: Executing op: ComponentRegister(ComponentId={CCFFD125-B6F4-4E85-B42F-EEDE0E647001},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:733]: Executing op: ComponentRegister(ComponentId={A4D31E85-0B09-4E42-96C3-DE5DE60EB97F},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:736]: Executing op: ComponentRegister(ComponentId={4AEE9519-9D9B-44CE-9852-434F0BB544E3},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:739]: Executing op: ComponentRegister(ComponentId={6EE91E7E-1391-4C83-838D-8EE0407A2C5E},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:742]: Executing op: ComponentRegister(ComponentId={63284722-D09A-447D-861D-CFEBE89D28F4},KeyPath=C:\ProgramData\Sophos\Sophos Data Control\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:744]: Executing op: ComponentRegister(ComponentId={B7EF36A2-B450-43CD-9919-427EAE165995},KeyPath=C:\ProgramData\Sophos\Sophos Device Control\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:746]: Executing op: ComponentRegister(ComponentId={177335D9-9D47-4E12-A841-7884DB0B65FE},KeyPath=C:\ProgramData\Sophos\Sophos Tamper Protection\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:749]: Executing op: ComponentRegister(ComponentId={A153DC07-D119-4900-B5D1-F671EC25C7EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:751]: Executing op: ComponentRegister(ComponentId={F4E436FD-FE28-4278-86D5-E3412859F5E5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:754]: Executing op: ComponentRegister(ComponentId={484E3E44-1A83-4137-BAA1-B984E5636086},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:755]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:756]: Executing op: ComponentRegister(ComponentId={3CFF4AE8-C6ED-41A6-9AC0-6E0B51B84C41},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:757]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:758]: Executing op: ComponentRegister(ComponentId={A891B002-2209-413D-896C-A999F157D57A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:760]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:760]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:762]: Executing op: ComponentRegister(ComponentId={B763A398-206E-43BF-9810-E482FC158A74},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:763]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:764]: Executing op: ComponentRegister(ComponentId={49A894EE-FF4F-4862-B9B8-A4EBBEA0A77E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:765]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:766]: Executing op: ComponentRegister(ComponentId={E3FAD286-FF50-4A29-93F2-FA93F9E5E897},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:767]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:767]: Executing op: ComponentRegister(ComponentId={C0E2EF20-B6D0-44A7-88AD-DAFAA4A325BF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:769]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:770]: Executing op: ComponentRegister(ComponentId={1601B2AC-3E23-4EA6-861E-17F52F42AAA4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:771]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:772]: Executing op: ComponentRegister(ComponentId={B46DA52C-6057-4314-B5BE-670483AB08D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:773]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:774]: Executing op: ComponentRegister(ComponentId={C5E5F1CE-2724-447B-A7E2-3B4B4BE9E801},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:776]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:777]: Executing op: ComponentRegister(ComponentId={9EED603A-240C-44CD-9136-F3703168D6A8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:778]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:779]: Executing op: ComponentRegister(ComponentId={6368E4D7-C225-4D2B-AA09-75E27732DDD4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:780]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:781]: Executing op: ComponentRegister(ComponentId={72649A5C-570A-467A-96A8-D77FAB4A16ED},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:782]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:783]: Executing op: ComponentRegister(ComponentId={3DC39C8C-9C6B-4557-8C13-FCD20DCE5506},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:785]: Executing op: ComponentRegister(ComponentId={E05D9609-9A70-4DEF-A8D3-5B884BEA1139},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:786]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:787]: Executing op: ComponentRegister(ComponentId={A46E98B3-190F-4296-871A-431FB198DB58},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:789]: Executing op: ComponentRegister(ComponentId={29262C23-36F0-4117-9406-A551A1CF11E4},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:791]: Executing op: ComponentRegister(ComponentId={9D161347-EFC6-46A9-9AEC-97722B0C8636},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:794]: Executing op: ComponentRegister(ComponentId={556C7464-36A2-464B-9250-2F924DA27FA7},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:796]: Executing op: ComponentRegister(ComponentId={4BCA7B9E-D378-4830-B7EE-62B8EDD570C5},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:798]: Executing op: ComponentRegister(ComponentId={B4C73573-F81E-4459-80C7-FBC3FA74C1D5},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:800]: Executing op: ComponentRegister(ComponentId={A54E5967-C145-461E-9452-F701F47D3DE2},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:802]: Executing op: ComponentRegister(ComponentId={F6C47B05-6049-4F2B-94C5-28C6F9CC00AB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:803]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:804]: Executing op: ComponentRegister(ComponentId={09743465-1197-4046-87F7-3F24D3FD7CEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:805]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:806]: Executing op: ComponentRegister(ComponentId={9D8FDDD5-6302-4133-A040-27AE6FCA4A50},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:807]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:808]: Executing op: ComponentRegister(ComponentId={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:809]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:810]: Executing op: ComponentRegister(ComponentId={F2814579-3850-4A1C-9312-5F0644872616},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:811]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:812]: Executing op: ComponentRegister(ComponentId={7D755E63-DF4E-4F44-A3CC-D43CA33ABC53},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:813]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:814]: Executing op: ComponentRegister(ComponentId={274E0945-DD13-4FB3-8FED-A4865A87E518},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:815]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:816]: Executing op: ComponentRegister(ComponentId={494298F4-4204-4E18-BA16-8152108CE3DD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:817]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:818]: Executing op: ComponentRegister(ComponentId={CB2061C6-BCA4-431E-8768-637BA7B6A021},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:819]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:820]: Executing op: ComponentRegister(ComponentId={FAEE7082-8088-4157-B163-68605546E3D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:821]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:822]: Executing op: ComponentRegister(ComponentId={F403AD90-FEC7-4036-9C1A-BB012A8E790E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:823]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:823]: Executing op: ComponentRegister(ComponentId={691C4A89-DB0D-4C7C-B684-ACAA9F794FAD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:824]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:825]: Executing op: ComponentRegister(ComponentId={C8CFF022-47AD-4EBF-A615-683844308F40},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:826]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:826]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:828]: Executing op: ComponentRegister(ComponentId={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:829]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:830]: Executing op: ComponentRegister(ComponentId={E20E745B-4391-4D1D-ABAD-A54342783573},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:832]: Executing op: ComponentRegister(ComponentId={0A8056D0-75A3-466F-95CE-FDE62CFF9C1A},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:834]: Executing op: ComponentRegister(ComponentId={A94755DD-6057-4746-8C39-B06D97E39D54},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:835]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:835]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:837]: Executing op: ComponentRegister(ComponentId={FE613E3D-0469-40F8-9A0F-635D16097928},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:838]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:839]: Executing op: ComponentRegister(ComponentId={7ED7F039-CC97-4CF5-8CCB-8CB15DF14759},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:841]: Executing op: ComponentRegister(ComponentId={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:842]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:843]: Executing op: ComponentRegister(ComponentId={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:844]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:845]: Executing op: ComponentRegister(ComponentId={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:846]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:846]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:847]: Executing op: ComponentRegister(ComponentId={DC99F7C0-7CFB-413C-8E6F-D16EE6F7AB8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:848]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:849]: Executing op: ComponentRegister(ComponentId={3276B786-D941-4ABD-810D-5AE5E3106F02},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:851]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:851]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:852]: Executing op: ComponentRegister(ComponentId={F85BB204-89AC-441C-8589-F6F0D7F329B4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:853]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:854]: Executing op: ComponentRegister(ComponentId={3BF07D0A-37CC-4FA8-81DA-D351E301276A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:855]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:856]: Executing op: ComponentRegister(ComponentId={D36CD500-4FBE-4943-90EC-D7646AA41519},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:857]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:858]: Executing op: ComponentRegister(ComponentId={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:859]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:859]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:861]: Executing op: ComponentRegister(ComponentId={BFCC0446-6C34-413E-9611-520B993B04B1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:862]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:862]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:864]: Executing op: ComponentRegister(ComponentId={B1C9846E-5F65-40D5-BA10-79055269A722},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:865]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:866]: Executing op: ComponentRegister(ComponentId={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:867]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:867]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:869]: Executing op: ComponentRegister(ComponentId={65937A4F-1784-4285-8C24-D06DA20D3AF0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:870]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:870]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:872]: Executing op: ComponentRegister(ComponentId={A4BACF9D-BF67-4909-AC27-8627DEA42367},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:873]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:874]: Executing op: ComponentRegister(ComponentId={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:876]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:877]: Executing op: ComponentRegister(ComponentId={C45AAE65-B109-4933-AA74-817CFBE6233A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:878]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:878]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:880]: Executing op: ComponentRegister(ComponentId={59C347AA-B20B-4146-B11B-E570BFDF7D81},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:882]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:883]: Executing op: ComponentRegister(ComponentId={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:884]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:885]: Executing op: ComponentRegister(ComponentId={63B09FF1-4A74-4963-B2D9-182293950F88},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:887]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:887]: Executing op: ComponentRegister(ComponentId={FBF7F8C3-003B-40EB-B316-260E7D5DD274},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:889]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:890]: Executing op: ComponentRegister(ComponentId={823855BF-3AC5-4C0C-87E6-AD864B361AAF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:891]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:892]: Executing op: ComponentRegister(ComponentId={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:893]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:894]: Executing op: ComponentRegister(ComponentId={7B2E98BC-F11A-4210-A219-05880ABC3333},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:895]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:895]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:897]: Executing op: ComponentRegister(ComponentId={9315FDA5-16DD-4475-84D6-277B8FD87283},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:898]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:899]: Executing op: ComponentRegister(ComponentId={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:900]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:900]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:902]: Executing op: ComponentRegister(ComponentId={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:903]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:903]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:905]: Executing op: ComponentRegister(ComponentId={9221364E-2674-41A1-B3AF-A7BEBBE7567D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:906]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:907]: Executing op: ComponentRegister(ComponentId={05AEBC59-942F-43EE-929D-21174A215441},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:908]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:908]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:910]: Executing op: ComponentRegister(ComponentId={ECE39B6C-338A-465E-A941-158F7D2E5795},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:911]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:912]: Executing op: ComponentRegister(ComponentId={57056C41-556E-4FFA-A53F-31BB318C2243},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:913]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:914]: Executing op: ComponentRegister(ComponentId={AE86B1D3-36AD-45E7-B7A6-301DE878C695},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:915]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:916]: Executing op: ComponentRegister(ComponentId={ECB3B148-F965-49B5-A338-857D09CBC0B3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:917]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:917]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:919]: Executing op: ComponentRegister(ComponentId={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:919]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:920]: Executing op: ComponentRegister(ComponentId={5E31220B-69F2-4AD7-BD59-69C7F695A17C},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:922]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:922]: Executing op: ComponentRegister(ComponentId={719B5EDD-B014-4686-AB60-A4474B84240D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:923]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:924]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:925]: Executing op: ComponentRegister(ComponentId={E54C4F8D-A952-4E5C-B973-76D109A0E0EC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:926]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:926]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:928]: Executing op: ComponentRegister(ComponentId={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:929]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:929]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:931]: Executing op: ComponentRegister(ComponentId={9BB8ADD9-6613-46AC-9BD3-24B31A9F1594},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:932]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:932]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:934]: Executing op: ComponentRegister(ComponentId={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:935]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:935]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:936]: Executing op: ComponentRegister(ComponentId={E5EB5509-3611-458A-BE68-3477BF3D96CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:938]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:939]: Executing op: ComponentRegister(ComponentId={09FFDB10-614F-4899-82E8-85A7D8BFA32A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:940]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:941]: Executing op: ComponentRegister(ComponentId={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (E0:CC) [11:25:04:942]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:942]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:944]: Executing op: ComponentRegister(ComponentId={A75F2217-AD54-3EA6-AE14-F255F8660531},KeyPath=>atl90.dll\Microsoft.VC90.ATL,version="9.0.30729.4148",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32",State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:946]: Executing op: ComponentRegister(ComponentId={C67C900E-80CE-3536-86BD-054EDD1DAC1A},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:948]: Executing op: ComponentRegister(ComponentId={AD82707A-1779-38E5-9823-C666D7C05797},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:950]: Executing op: ComponentRegister(ComponentId={7FECCC4B-0F85-3B72-9777-1C67C2255FC3},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:951]: Executing op: ComponentRegister(ComponentId={9DA4DC8A-9731-3F0E-8BD5-FC17CA6848AD},KeyPath=>msvcr90.dll\Microsoft.VC90.CRT,version="9.0.30729.4148",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32",State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:953]: Executing op: ComponentRegister(ComponentId={94FFFECA-D770-3C5F-8789-08E50656D6FB},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:955]: Executing op: ComponentRegister(ComponentId={3A5E8EFF-FFE9-3BFB-9CE1-0B7A43C49371},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:956]: Executing op: ComponentRegister(ComponentId={61D3B8F0-B470-35F2-8B55-7FCCDC8CF36F},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:958]: Executing op: ComponentRegister(ComponentId={7702D6A3-846B-3E30-B087-73600535BE47},KeyPath=>\policy.9.0.Microsoft.VC90.ATL,version="9.0.30729.4148",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32-policy",State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:960]: Executing op: ComponentRegister(ComponentId={6CC6BCCC-2A1A-3088-B7A4-6AD4B8B1412B},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:961]: Executing op: ComponentRegister(ComponentId={B32777BF-8BCF-31D4-A891-BCFB51C54D25},KeyPath=>\policy.9.0.Microsoft.VC90.CRT,version="9.0.30729.4148",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32-policy",State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:963]: Executing op: ComponentRegister(ComponentId={323EE0C1-78E6-36EC-B680-EEC94730EE91},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:964]: Executing op: ComponentRegister(ComponentId={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:965]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:967]: Executing op: ComponentRegister(ComponentId={F21CB2A2-E3F4-4AF7-AC06-A1A66ACA0735},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:968]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:969]: Executing op: ComponentRegister(ComponentId={F4BF2F3A-652E-4CBA-8B19-B7EE4E251C29},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:969]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:970]: Executing op: ComponentRegister(ComponentId={2B97F024-FE76-40AC-9D67-FF52C6A46570},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:971]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:972]: Executing op: ComponentRegister(ComponentId={524153EC-3AC1-4F92-B7F5-18415FD243CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:973]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:974]: Executing op: ComponentRegister(ComponentId={01CC3BCC-55E1-4B1A-906A-FB7CE1A4629B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:975]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:976]: Executing op: ComponentRegister(ComponentId={5282C6CF-9946-4B05-B59F-6638E098E3DC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:977]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:978]: Executing op: ComponentRegister(ComponentId={B43C5DBE-50BB-429B-B447-4EB82AD8554D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:979]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:980]: Executing op: ComponentRegister(ComponentId={5C56F239-F279-4B01-879F-8729A44D44A0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:981]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:982]: Executing op: ComponentRegister(ComponentId={AE660058-42CE-44E1-8D2E-BD62AD69EE1E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:983]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:984]: Executing op: ComponentRegister(ComponentId={63138B11-92E8-4415-8064-1B9BC3A17F93},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:984]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:985]: Executing op: ComponentRegister(ComponentId={08A57BC6-9561-4F83-B710-A130F47DBA83},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:986]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:987]: Executing op: ComponentRegister(ComponentId={CA6E867B-7D76-4BBE-B278-04AFA8C84F9E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:988]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:989]: Executing op: ComponentRegister(ComponentId={C5B8B969-E83E-41E3-820E-9E47E219644E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:990]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:991]: Executing op: ComponentRegister(ComponentId={60BD5635-B25C-450A-9E36-EA84EDB18BDA},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:992]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:993]: Executing op: ComponentRegister(ComponentId={2E247D31-0A06-4AF5-ACE4-018BA1A73978},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:994]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:995]: Executing op: ComponentRegister(ComponentId={8BD71FEA-7E62-46B4-BBB2-19D4D3706BEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:996]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:997]: Executing op: ComponentRegister(ComponentId={56B38697-86C5-4537-92A0-F2E6CEF972B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:04:998]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:04:999]: Executing op: ComponentRegister(ComponentId={6C6EA6F0-CE05-4D37-8F3F-A957850E1AC6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:000]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:05:001]: Executing op: ComponentRegister(ComponentId={AEF7CD44-576B-4841-A0B4-58CEF190AFC5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:002]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:05:003]: Executing op: ComponentRegister(ComponentId={3570C981-DCAC-4D6C-AEB0-8D4943972259},KeyPath=02:\Software\Sophos\Web Intelligence\WebControlAvailable,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:005]: Executing op: ComponentRegister(ComponentId={B9CA91A9-8C87-4CCA-AA1A-73DFA321CE92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:008]: Executing op: ComponentRegister(ComponentId={15A3052C-E1D6-4ADE-9DF2-DAAF479F9A7B},KeyPath=02:\Software\Sophos\SAVService\SAVUI\plugins\WebControlPlugin.WebControlUIPlugin,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:010]: Executing op: ComponentRegister(ComponentId={DBD323D5-758C-4D26-BD2E-E46EB73EAC11},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:012]: Executing op: ComponentRegister(ComponentId={A871FD4C-242A-4F0A-B4AC-74BE34EC1BA0},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:014]: Executing op: ComponentRegister(ComponentId={533F61E5-9143-4664-8DD0-02E1DACF312D},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:016]: Executing op: ComponentRegister(ComponentId={26BAD5C1-B5B8-4E0A-888F-A4AD4B1095AE},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:018]: Executing op: ComponentRegister(ComponentId={3630E612-875A-427A-8A2A-2708A9B24393},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:020]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:05:021]: Executing op: ComponentRegister(ComponentId={606B5C5C-66C9-490B-BBC3-77BFF00880E5},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:023]: Executing op: ComponentRegister(ComponentId={62922683-34EB-46E1-8AF4-E9D59E61833E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:024]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:05:025]: Executing op: ComponentRegister(ComponentId={A154E863-F3EA-44EA-B782-B241DECCC60B},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:027]: Executing op: ComponentRegister(ComponentId={B9056343-C8F6-454A-AAF5-DBA44FC0E1F5},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:029]: Executing op: ComponentRegister(ComponentId={BDE220A0-D203-449C-8A3F-648E1C889744},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:031]: Executing op: ComponentRegister(ComponentId={759C3654-CC88-4826-A930-E0BFB04EBD6B},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:033]: Executing op: ComponentRegister(ComponentId={266D54B1-B706-4CCD-9C0A-01C33A70F79B},,State=-7,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:05:034]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1]) MSI (s) (E0:CC) [11:25:05:035]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000) MSI (s) (E0:CC) [11:25:05:035]: Executing op: ServiceControl(,Name=Sophos Web Control Service,Action=2,Wait=1,) MSI (s) (E0:CC) [11:25:05:035]: Executing op: ActionStart(Name=WaitForSAVService,,) MSI (s) (E0:CC) [11:25:05:036]: Executing op: CustomActionSchedule(Action=WaitForSAVService,ActionType=1025,Source=BinaryData,Target=WaitForSAVService,) MSI (s) (E0:BC) [11:25:05:038]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI4A35.tmp, Entrypoint: WaitForSAVService MSI (s) (E0:CC) [11:25:05:051]: Executing op: ActionStart(Name=DeleteServices,Description=Deleting services,Template=Service: [1]) MSI (s) (E0:CC) [11:25:05:051]: Executing op: ProgressTotal(Total=2,Type=1,ByteEquivalent=1300000) MSI (s) (E0:CC) [11:25:05:052]: Executing op: ServiceControl(,Name=SAVAdminService,Action=8,Wait=1,) MSI (s) (E0:CC) [11:25:05:052]: Executing op: ServiceControl(,Name=SAVService,Action=8,Wait=1,) MSI (s) (E0:CC) [11:25:05:052]: Executing op: ActionStart(Name=RemoveODBC,Description=Removing ODBC components,) MSI (s) (E0:CC) [11:25:05:052]: Executing op: ODBCDriverManager(,BinaryType=0) MSI (s) (E0:CC) [11:25:05:052]: Executing op: ODBCDriverManager(,BinaryType=1) MSI (s) (E0:CC) [11:25:05:052]: Executing op: ActionStart(Name=RemoveRegistryValues,Description=Removing system registry values,Template=Key: [1], Name: [2]) MSI (s) (E0:CC) [11:25:05:053]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200) MSI (s) (E0:CC) [11:25:05:053]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\SAVI,,BinaryType=0,,) MSI (s) (E0:CC) [11:25:05:053]: Executing op: RegRemoveKey() MSI (s) (E0:CC) [11:25:05:054]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Sophos\SAVI 3: 2 MSI (s) (E0:CC) [11:25:05:054]: Executing op: ActionStart(Name=Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A,,) MSI (s) (E0:CC) [11:25:05:054]: Executing op: CustomActionSchedule(Action=Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A,ActionType=1089,Source=BinaryData,Target=SwcPostUpgradeTasks,) MSI (s) (E0:14) [11:25:05:056]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI4A55.tmp, Entrypoint: SwcPostUpgradeTasks MSI (s) (E0:CC) [11:25:05:063]: Executing op: ActionStart(Name=CheckUninstallDrivers,,) MSI (s) (E0:CC) [11:25:05:064]: Executing op: CustomActionSchedule(Action=CheckUninstallDrivers,ActionType=1025,Source=BinaryData,Target=CheckUninstallDrivers,) MSI (s) (E0:A4) [11:25:05:067]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI4A56.tmp, Entrypoint: CheckUninstallDrivers MSI (s) (E0:CC) [11:25:05:075]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1]) MSI (s) (E0:CC) [11:25:05:076]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:081]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:082]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\logs\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:083]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:085]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:086]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Data Control\logs\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:089]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Device Control\logs\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:092]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Tamper Protection\logs\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:095]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:095]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:096]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:096]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:098]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:099]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:099]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,,) MSI (s) (E0:CC) [11:25:05:100]: Executing op: ActionStart(Name=DeleteIDEs,,) MSI (s) (E0:CC) [11:25:05:101]: Executing op: CustomActionSchedule(Action=DeleteIDEs,ActionType=1025,Source=BinaryData,Target=DeleteIDEs,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (E0:D4) [11:25:05:104]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI4A86.tmp, Entrypoint: DeleteIDEs MSI (s) (E0:CC) [11:25:05:113]: Executing op: ActionStart(Name=DeleteBDLs,,) MSI (s) (E0:CC) [11:25:05:113]: Executing op: CustomActionSchedule(Action=DeleteBDLs,ActionType=1025,Source=BinaryData,Target=DeleteBDLs,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (E0:48) [11:25:05:116]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI4A87.tmp, Entrypoint: DeleteBDLs MSI (s) (E0:CC) [11:25:05:124]: Executing op: ActionStart(Name=DeleteHIPSConfig,,) MSI (s) (E0:CC) [11:25:05:125]: Executing op: CustomActionSchedule(Action=DeleteHIPSConfig,ActionType=1025,Source=BinaryData,Target=DeleteHIPSConfig,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (E0:30) [11:25:05:128]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI4A98.tmp, Entrypoint: DeleteHIPSConfig MSI (s) (E0:CC) [11:25:05:136]: Executing op: ActionStart(Name=RollbackForceDeleteFiles,,) MSI (s) (E0:CC) [11:25:05:137]: Executing op: CustomActionSchedule(Action=RollbackForceDeleteFiles,ActionType=1281,Source=BinaryData,Target=ForceDeleteFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (E0:CC) [11:25:05:140]: Executing op: ActionStart(Name=RollbackOtherFiles,,) MSI (s) (E0:CC) [11:25:05:141]: Executing op: CustomActionSchedule(Action=RollbackOtherFiles,ActionType=1281,Source=BinaryData,Target=DeleteOtherFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (E0:CC) [11:25:05:144]: Executing op: ActionStart(Name=RollbackUpdateSavAdapterDll,,) MSI (s) (E0:CC) [11:25:05:145]: Executing op: CustomActionSchedule(Action=RollbackUpdateSavAdapterDll,ActionType=1281,Source=BinaryData,Target=RollbackUpdateSavAdapterDll,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (E0:CC) [11:25:05:149]: Executing op: ActionStart(Name=UpdateSavAdapterDll,,) MSI (s) (E0:CC) [11:25:05:150]: Executing op: CustomActionSchedule(Action=UpdateSavAdapterDll,ActionType=1025,Source=BinaryData,Target=UpdateSavAdapterDll,CustomActionData=;10.3.15;) MSI (s) (E0:FC) [11:25:05:154]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI4AB8.tmp, Entrypoint: UpdateSavAdapterDll MSI (s) (E0:CC) [11:25:15:162]: Executing op: ActionStart(Name=CopyOtherFiles,,) MSI (s) (E0:CC) [11:25:15:163]: Executing op: CustomActionSchedule(Action=CopyOtherFiles,ActionType=1025,Source=BinaryData,Target=CopyOtherFiles,CustomActionData="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""VISTA_AMD64") MSI (s) (E0:70) [11:25:15:167]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI71D8.tmp, Entrypoint: CopyOtherFiles MSI (s) (E0:CC) [11:25:15:188]: Executing op: ActionStart(Name=RegisterBufferOverflowProtection,,) MSI (s) (E0:CC) [11:25:15:189]: Executing op: CustomActionSchedule(Action=RegisterBufferOverflowProtection,ActionType=1025,Source=BinaryData,Target=RegisterBufferOverflowProtection,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (E0:04) [11:25:15:192]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI71E9.tmp, Entrypoint: RegisterBufferOverflowProtection MSI (s) (E0:CC) [11:25:15:204]: Executing op: ActionStart(Name=RollbackClassFilter64Vista,,) MSI (s) (E0:CC) [11:25:15:204]: Executing op: CustomActionSchedule(Action=RollbackClassFilter64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SDCFILTER.INF",) MSI (s) (E0:CC) [11:25:15:204]: Executing op: ActionStart(Name=RollbackBootDriver64Vista,,) MSI (s) (E0:CC) [11:25:15:205]: Executing op: CustomActionSchedule(Action=RollbackBootDriver64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF",) MSI (s) (E0:CC) [11:25:15:205]: Executing op: ActionStart(Name=RollbackDriverFiles64Vista,,) MSI (s) (E0:CC) [11:25:15:205]: Executing op: CustomActionSchedule(Action=RollbackDriverFiles64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF",) MSI (s) (E0:CC) [11:25:15:205]: Executing op: ActionStart(Name=RestoreExcludedProcesses,,) MSI (s) (E0:CC) [11:25:15:206]: Executing op: CustomActionSchedule(Action=RestoreExcludedProcesses,ActionType=1025,Source=BinaryData,Target=RestoreExcludedProcesses,) MSI (s) (E0:64) [11:25:15:210]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI71F9.tmp, Entrypoint: RestoreExcludedProcesses MSI (s) (E0:CC) [11:25:15:219]: Executing op: ActionStart(Name=InstallBootDriverAMD64Vista,,) MSI (s) (E0:CC) [11:25:15:220]: Executing op: CustomActionSchedule(Action=InstallBootDriverAMD64Vista,ActionType=1058,Source=C:\Windows\SysWOW64\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhi "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinLH_AMD64\SOPHOSBOOTDRIVER.INF",) MSI (s) (E0:CC) [11:25:15:324]: Executing op: ActionStart(Name=InstallDriverFilesAMD64Vista,,) MSI (s) (E0:CC) [11:25:15:325]: Executing op: CustomActionSchedule(Action=InstallDriverFilesAMD64Vista,ActionType=1058,Source=C:\Windows\SysWOW64\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhi "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinLH_AMD64\SAVONACCESSDRIV.INF",) MSI (s) (E0:CC) [11:25:15:425]: Note: 1: 1722 2: InstallDriverFilesAMD64Vista 3: C:\Windows\SysWOW64\ 4: "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhi "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinLH_AMD64\SAVONACCESSDRIV.INF" CustomAction InstallDriverFilesAMD64Vista returned actual error code -1076 (note this may not be 100% accurate if translation happened inside sandbox) MSI (s) (E0:CC) [11:25:15:426]: Product: Sophos Anti-Virus -- Error 1722.There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action InstallDriverFilesAMD64Vista, location: C:\Windows\SysWOW64\, command: "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhi "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinLH_AMD64\SAVONACCESSDRIV.INF" 
 MSI (s) (E0:CC) [11:25:15:438]: User policy value 'DisableRollback' is 0 MSI (s) (E0:CC) [11:25:15:438]: Machine policy value 'DisableRollback' is 0 Action ended 11:25:15: InstallFinalize. Return value 3. MSI (s) (E0:CC) [11:25:15:444]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1211390755,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1) MSI (s) (E0:CC) [11:25:15:444]: Executing op: DialogInfo(Type=0,Argument=1033) MSI (s) (E0:CC) [11:25:15:445]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus) MSI (s) (E0:CC) [11:25:15:445]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1]) MSI (s) (E0:CC) [11:25:15:446]: Executing op: ActionStart(Name=InstallDriverFilesAMD64Vista,,) MSI (s) (E0:CC) [11:25:15:446]: Executing op: ProductInfo(ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=167968783,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={CE9959FF-BAE0-4FE8-8837-F68062C881F0},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3) MSI (s) (E0:CC) [11:25:15:447]: Executing op: ActionStart(Name=InstallBootDriverAMD64Vista,,) MSI (s) (E0:CC) [11:25:15:447]: Executing op: ActionStart(Name=RestoreExcludedProcesses,,) MSI (s) (E0:CC) [11:25:15:447]: Executing op: ActionStart(Name=RollbackDriverFiles64Vista,,) MSI (s) (E0:CC) [11:25:15:447]: Executing op: CustomActionRollback(Action=RollbackDriverFiles64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF",) MSI (s) (E0:CC) [11:25:15:515]: Executing op: ActionStart(Name=RollbackBootDriver64Vista,,) MSI (s) (E0:CC) [11:25:15:515]: Executing op: CustomActionRollback(Action=RollbackBootDriver64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF",) MSI (s) (E0:CC) [11:25:15:585]: Executing op: ActionStart(Name=RollbackClassFilter64Vista,,) MSI (s) (E0:CC) [11:25:15:586]: Executing op: CustomActionRollback(Action=RollbackClassFilter64Vista,ActionType=1314,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SDCFILTER.INF",) MSI (s) (E0:CC) [11:25:15:653]: Executing op: ActionStart(Name=RegisterBufferOverflowProtection,,) MSI (s) (E0:CC) [11:25:15:653]: Executing op: ActionStart(Name=CopyOtherFiles,,) MSI (s) (E0:CC) [11:25:15:653]: Executing op: ActionStart(Name=UpdateSavAdapterDll,,) MSI (s) (E0:CC) [11:25:15:653]: Executing op: ActionStart(Name=RollbackUpdateSavAdapterDll,,) MSI (s) (E0:CC) [11:25:15:654]: Executing op: CustomActionRollback(Action=RollbackUpdateSavAdapterDll,ActionType=1281,Source=BinaryData,Target=RollbackUpdateSavAdapterDll,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (E0:DC) [11:25:15:656]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI73BF.tmp, Entrypoint: RollbackUpdateSavAdapterDll MSI (s) (E0:CC) [11:25:15:668]: Executing op: ActionStart(Name=RollbackOtherFiles,,) MSI (s) (E0:CC) [11:25:15:669]: Executing op: CustomActionRollback(Action=RollbackOtherFiles,ActionType=1281,Source=BinaryData,Target=DeleteOtherFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (E0:D4) [11:25:15:672]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI73CF.tmp, Entrypoint: DeleteOtherFiles MSI (s) (E0:CC) [11:25:15:703]: Executing op: ActionStart(Name=RollbackForceDeleteFiles,,) MSI (s) (E0:CC) [11:25:15:704]: Executing op: CustomActionRollback(Action=RollbackForceDeleteFiles,ActionType=1281,Source=BinaryData,Target=ForceDeleteFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (E0:D0) [11:25:15:707]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI73F0.tmp, Entrypoint: ForceDeleteFiles MSI (s) (E0:CC) [11:25:15:719]: Executing op: ActionStart(Name=DeleteHIPSConfig,,) MSI (s) (E0:CC) [11:25:15:720]: Executing op: ActionStart(Name=DeleteBDLs,,) MSI (s) (E0:CC) [11:25:15:720]: Executing op: ActionStart(Name=DeleteIDEs,,) MSI (s) (E0:CC) [11:25:15:721]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1]) MSI (s) (E0:CC) [11:25:15:721]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,SecurityDescriptor=BinaryData,) MSI (s) (E0:CC) [11:25:15:722]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,SecurityDescriptor=BinaryData,) MSI (s) (E0:CC) [11:25:15:722]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0,SecurityDescriptor=BinaryData,) MSI (s) (E0:CC) [11:25:15:723]: Executing op: FolderRemove(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,Foreign=0) MSI (s) (E0:CC) [11:25:15:724]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:724]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:724]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,SecurityDescriptor=BinaryData,) MSI (s) (E0:CC) [11:25:15:725]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,SecurityDescriptor=BinaryData,) MSI (s) (E0:CC) [11:25:15:726]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,Foreign=0,SecurityDescriptor=BinaryData,) MSI (s) (E0:CC) [11:25:15:727]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Tamper Protection\logs\,Foreign=0) MSI (s) (E0:CC) [11:25:15:727]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:727]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:728]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:728]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Device Control\logs\,Foreign=0) MSI (s) (E0:CC) [11:25:15:728]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:729]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:729]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:729]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Data Control\logs\,Foreign=0) MSI (s) (E0:CC) [11:25:15:730]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:730]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:730]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:731]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\,Foreign=0) MSI (s) (E0:CC) [11:25:15:731]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:731]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:732]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\,Foreign=0) MSI (s) (E0:CC) [11:25:15:732]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:732]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:733]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\logs\,Foreign=0,SecurityDescriptor=BinaryData,) MSI (s) (E0:CC) [11:25:15:733]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\,Foreign=0) MSI (s) (E0:CC) [11:25:15:734]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:734]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:734]: Executing op: FolderRemove(Folder=C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\,Foreign=0) MSI (s) (E0:CC) [11:25:15:735]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:735]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:736]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:736]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:738]: Executing op: ActionStart(Name=CheckUninstallDrivers,,) MSI (s) (E0:CC) [11:25:15:738]: Executing op: ActionStart(Name=Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A,,) MSI (s) (E0:CC) [11:25:15:739]: Executing op: ActionStart(Name=RemoveRegistryValues,Description=Removing system registry values,Template=Key: [1], Name: [2]) MSI (s) (E0:CC) [11:25:15:739]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\SAVI,,BinaryType=0,,) MSI (s) (E0:CC) [11:25:15:740]: Executing op: RegRemoveKey() MSI (s) (E0:CC) [11:25:15:740]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Sophos\SAVI 3: 2 MSI (s) (E0:CC) [11:25:15:741]: Executing op: ActionStart(Name=RemoveODBC,Description=Removing ODBC components,) MSI (s) (E0:CC) [11:25:15:741]: Executing op: ActionStart(Name=DeleteServices,Description=Deleting services,Template=Service: [1]) MSI (s) (E0:CC) [11:25:15:742]: Executing op: ActionStart(Name=WaitForSAVService,,) MSI (s) (E0:CC) [11:25:15:743]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1]) MSI (s) (E0:CC) [11:25:15:744]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,) MSI (s) (E0:CC) [11:25:15:744]: Executing op: ComponentUnregister(ComponentId={266D54B1-B706-4CCD-9C0A-01C33A70F79B},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:745]: Executing op: ComponentUnregister(ComponentId={759C3654-CC88-4826-A930-E0BFB04EBD6B},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:746]: Executing op: ComponentUnregister(ComponentId={BDE220A0-D203-449C-8A3F-648E1C889744},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:746]: Executing op: ComponentUnregister(ComponentId={B9056343-C8F6-454A-AAF5-DBA44FC0E1F5},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:747]: Executing op: ComponentUnregister(ComponentId={A154E863-F3EA-44EA-B782-B241DECCC60B},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:747]: Executing op: ComponentUnregister(ComponentId={62922683-34EB-46E1-8AF4-E9D59E61833E},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:748]: Executing op: ComponentUnregister(ComponentId={606B5C5C-66C9-490B-BBC3-77BFF00880E5},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:748]: Executing op: ComponentUnregister(ComponentId={3630E612-875A-427A-8A2A-2708A9B24393},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:749]: Executing op: ComponentUnregister(ComponentId={26BAD5C1-B5B8-4E0A-888F-A4AD4B1095AE},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:749]: Executing op: ComponentUnregister(ComponentId={533F61E5-9143-4664-8DD0-02E1DACF312D},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:750]: Executing op: ComponentUnregister(ComponentId={A871FD4C-242A-4F0A-B4AC-74BE34EC1BA0},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:750]: Executing op: ComponentUnregister(ComponentId={DBD323D5-758C-4D26-BD2E-E46EB73EAC11},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:751]: Executing op: ComponentUnregister(ComponentId={15A3052C-E1D6-4ADE-9DF2-DAAF479F9A7B},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:752]: Executing op: ComponentUnregister(ComponentId={B9CA91A9-8C87-4CCA-AA1A-73DFA321CE92},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:752]: Executing op: ComponentUnregister(ComponentId={3570C981-DCAC-4D6C-AEB0-8D4943972259},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:753]: Executing op: ComponentUnregister(ComponentId={AEF7CD44-576B-4841-A0B4-58CEF190AFC5},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:754]: Executing op: ComponentUnregister(ComponentId={6C6EA6F0-CE05-4D37-8F3F-A957850E1AC6},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:754]: Executing op: ComponentUnregister(ComponentId={56B38697-86C5-4537-92A0-F2E6CEF972B7},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:755]: Executing op: ComponentUnregister(ComponentId={8BD71FEA-7E62-46B4-BBB2-19D4D3706BEE},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:755]: Executing op: ComponentUnregister(ComponentId={2E247D31-0A06-4AF5-ACE4-018BA1A73978},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:756]: Executing op: ComponentUnregister(ComponentId={60BD5635-B25C-450A-9E36-EA84EDB18BDA},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:756]: Executing op: ComponentUnregister(ComponentId={C5B8B969-E83E-41E3-820E-9E47E219644E},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:757]: Executing op: ComponentUnregister(ComponentId={CA6E867B-7D76-4BBE-B278-04AFA8C84F9E},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:758]: Executing op: ComponentUnregister(ComponentId={08A57BC6-9561-4F83-B710-A130F47DBA83},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:758]: Executing op: ComponentUnregister(ComponentId={63138B11-92E8-4415-8064-1B9BC3A17F93},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:759]: Executing op: ComponentUnregister(ComponentId={AE660058-42CE-44E1-8D2E-BD62AD69EE1E},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:760]: Executing op: ComponentUnregister(ComponentId={5C56F239-F279-4B01-879F-8729A44D44A0},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:760]: Executing op: ComponentUnregister(ComponentId={B43C5DBE-50BB-429B-B447-4EB82AD8554D},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:761]: Executing op: ComponentUnregister(ComponentId={5282C6CF-9946-4B05-B59F-6638E098E3DC},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:761]: Executing op: ComponentUnregister(ComponentId={01CC3BCC-55E1-4B1A-906A-FB7CE1A4629B},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:762]: Executing op: ComponentUnregister(ComponentId={524153EC-3AC1-4F92-B7F5-18415FD243CB},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:762]: Executing op: ComponentUnregister(ComponentId={2B97F024-FE76-40AC-9D67-FF52C6A46570},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:763]: Executing op: ComponentUnregister(ComponentId={F4BF2F3A-652E-4CBA-8B19-B7EE4E251C29},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:763]: Executing op: ComponentUnregister(ComponentId={F21CB2A2-E3F4-4AF7-AC06-A1A66ACA0735},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:764]: Executing op: ComponentUnregister(ComponentId={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:765]: Executing op: ComponentUnregister(ComponentId={323EE0C1-78E6-36EC-B680-EEC94730EE91},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:765]: Executing op: ComponentUnregister(ComponentId={B32777BF-8BCF-31D4-A891-BCFB51C54D25},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,PreviouslyPinned=1) MSI (s) (E0:CC) [11:25:15:766]: Executing op: ComponentUnregister(ComponentId={6CC6BCCC-2A1A-3088-B7A4-6AD4B8B1412B},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:767]: Executing op: ComponentUnregister(ComponentId={7702D6A3-846B-3E30-B087-73600535BE47},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,PreviouslyPinned=1) MSI (s) (E0:CC) [11:25:15:768]: Executing op: ComponentUnregister(ComponentId={61D3B8F0-B470-35F2-8B55-7FCCDC8CF36F},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:768]: Executing op: ComponentUnregister(ComponentId={3A5E8EFF-FFE9-3BFB-9CE1-0B7A43C49371},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:769]: Executing op: ComponentUnregister(ComponentId={94FFFECA-D770-3C5F-8789-08E50656D6FB},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:769]: Executing op: ComponentUnregister(ComponentId={9DA4DC8A-9731-3F0E-8BD5-FC17CA6848AD},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,PreviouslyPinned=1) MSI (s) (E0:CC) [11:25:15:771]: Executing op: ComponentUnregister(ComponentId={7FECCC4B-0F85-3B72-9777-1C67C2255FC3},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:771]: Executing op: ComponentUnregister(ComponentId={AD82707A-1779-38E5-9823-C666D7C05797},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:771]: Executing op: ComponentUnregister(ComponentId={C67C900E-80CE-3536-86BD-054EDD1DAC1A},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:772]: Executing op: ComponentUnregister(ComponentId={A75F2217-AD54-3EA6-AE14-F255F8660531},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,PreviouslyPinned=1) MSI (s) (E0:CC) [11:25:15:773]: Executing op: ComponentUnregister(ComponentId={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:773]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:774]: Executing op: ComponentUnregister(ComponentId={09FFDB10-614F-4899-82E8-85A7D8BFA32A},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:774]: Executing op: ComponentUnregister(ComponentId={E5EB5509-3611-458A-BE68-3477BF3D96CB},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:775]: Executing op: ComponentUnregister(ComponentId={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:775]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:775]: Executing op: ComponentUnregister(ComponentId={9BB8ADD9-6613-46AC-9BD3-24B31A9F1594},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:775]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:776]: Executing op: ComponentUnregister(ComponentId={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:776]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:776]: Executing op: ComponentUnregister(ComponentId={E54C4F8D-A952-4E5C-B973-76D109A0E0EC},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:776]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:777]: Executing op: ComponentUnregister(ComponentId={719B5EDD-B014-4686-AB60-A4474B84240D},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:777]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:777]: Executing op: ComponentUnregister(ComponentId={5E31220B-69F2-4AD7-BD59-69C7F695A17C},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:778]: Executing op: ComponentUnregister(ComponentId={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:778]: Executing op: ComponentUnregister(ComponentId={ECB3B148-F965-49B5-A338-857D09CBC0B3},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:778]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:779]: Executing op: ComponentUnregister(ComponentId={AE86B1D3-36AD-45E7-B7A6-301DE878C695},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:779]: Executing op: ComponentUnregister(ComponentId={57056C41-556E-4FFA-A53F-31BB318C2243},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:780]: Executing op: ComponentUnregister(ComponentId={ECE39B6C-338A-465E-A941-158F7D2E5795},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:780]: Executing op: ComponentUnregister(ComponentId={05AEBC59-942F-43EE-929D-21174A215441},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:780]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:781]: Executing op: ComponentUnregister(ComponentId={9221364E-2674-41A1-B3AF-A7BEBBE7567D},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:781]: Executing op: ComponentUnregister(ComponentId={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:781]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:782]: Executing op: ComponentUnregister(ComponentId={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:782]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:782]: Executing op: ComponentUnregister(ComponentId={9315FDA5-16DD-4475-84D6-277B8FD87283},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:783]: Executing op: ComponentUnregister(ComponentId={7B2E98BC-F11A-4210-A219-05880ABC3333},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:783]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:783]: Executing op: ComponentUnregister(ComponentId={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:784]: Executing op: ComponentUnregister(ComponentId={823855BF-3AC5-4C0C-87E6-AD864B361AAF},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:784]: Executing op: ComponentUnregister(ComponentId={FBF7F8C3-003B-40EB-B316-260E7D5DD274},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:785]: Executing op: ComponentUnregister(ComponentId={63B09FF1-4A74-4963-B2D9-182293950F88},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:785]: Executing op: ComponentUnregister(ComponentId={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:786]: Executing op: ComponentUnregister(ComponentId={59C347AA-B20B-4146-B11B-E570BFDF7D81},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:786]: Executing op: ComponentUnregister(ComponentId={C45AAE65-B109-4933-AA74-817CFBE6233A},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:786]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:787]: Executing op: ComponentUnregister(ComponentId={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:787]: Executing op: ComponentUnregister(ComponentId={A4BACF9D-BF67-4909-AC27-8627DEA42367},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:788]: Executing op: ComponentUnregister(ComponentId={65937A4F-1784-4285-8C24-D06DA20D3AF0},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:788]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:788]: Executing op: ComponentUnregister(ComponentId={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:789]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:789]: Executing op: ComponentUnregister(ComponentId={B1C9846E-5F65-40D5-BA10-79055269A722},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:789]: Executing op: ComponentUnregister(ComponentId={BFCC0446-6C34-413E-9611-520B993B04B1},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:790]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:790]: Executing op: ComponentUnregister(ComponentId={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:790]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:791]: Executing op: ComponentUnregister(ComponentId={D36CD500-4FBE-4943-90EC-D7646AA41519},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:791]: Executing op: ComponentUnregister(ComponentId={3BF07D0A-37CC-4FA8-81DA-D351E301276A},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:792]: Executing op: ComponentUnregister(ComponentId={F85BB204-89AC-441C-8589-F6F0D7F329B4},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:792]: Executing op: ComponentUnregister(ComponentId={3276B786-D941-4ABD-810D-5AE5E3106F02},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:792]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:793]: Executing op: ComponentUnregister(ComponentId={DC99F7C0-7CFB-413C-8E6F-D16EE6F7AB8E},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:793]: Executing op: ComponentUnregister(ComponentId={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:793]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:794]: Executing op: ComponentUnregister(ComponentId={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:794]: Executing op: ComponentUnregister(ComponentId={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:795]: Executing op: ComponentUnregister(ComponentId={7ED7F039-CC97-4CF5-8CCB-8CB15DF14759},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:795]: Executing op: ComponentUnregister(ComponentId={FE613E3D-0469-40F8-9A0F-635D16097928},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:796]: Executing op: ComponentUnregister(ComponentId={A94755DD-6057-4746-8C39-B06D97E39D54},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:796]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:796]: Executing op: ComponentUnregister(ComponentId={0A8056D0-75A3-466F-95CE-FDE62CFF9C1A},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:797]: Executing op: ComponentUnregister(ComponentId={E20E745B-4391-4D1D-ABAD-A54342783573},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:797]: Executing op: ComponentUnregister(ComponentId={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:798]: Executing op: ComponentUnregister(ComponentId={C8CFF022-47AD-4EBF-A615-683844308F40},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:798]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:798]: Executing op: ComponentUnregister(ComponentId={691C4A89-DB0D-4C7C-B684-ACAA9F794FAD},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:799]: Executing op: ComponentUnregister(ComponentId={F403AD90-FEC7-4036-9C1A-BB012A8E790E},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:800]: Executing op: ComponentUnregister(ComponentId={FAEE7082-8088-4157-B163-68605546E3D1},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:800]: Executing op: ComponentUnregister(ComponentId={CB2061C6-BCA4-431E-8768-637BA7B6A021},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:801]: Executing op: ComponentUnregister(ComponentId={494298F4-4204-4E18-BA16-8152108CE3DD},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:801]: Executing op: ComponentUnregister(ComponentId={274E0945-DD13-4FB3-8FED-A4865A87E518},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:801]: Executing op: ComponentUnregister(ComponentId={7D755E63-DF4E-4F44-A3CC-D43CA33ABC53},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:802]: Executing op: ComponentUnregister(ComponentId={F2814579-3850-4A1C-9312-5F0644872616},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:802]: Executing op: ComponentUnregister(ComponentId={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:803]: Executing op: ComponentUnregister(ComponentId={9D8FDDD5-6302-4133-A040-27AE6FCA4A50},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:803]: Executing op: ComponentUnregister(ComponentId={09743465-1197-4046-87F7-3F24D3FD7CEE},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:803]: Executing op: ComponentUnregister(ComponentId={F6C47B05-6049-4F2B-94C5-28C6F9CC00AB},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:804]: Executing op: ComponentUnregister(ComponentId={A54E5967-C145-461E-9452-F701F47D3DE2},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:804]: Executing op: ComponentUnregister(ComponentId={B4C73573-F81E-4459-80C7-FBC3FA74C1D5},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:805]: Executing op: ComponentUnregister(ComponentId={4BCA7B9E-D378-4830-B7EE-62B8EDD570C5},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:805]: Executing op: ComponentUnregister(ComponentId={556C7464-36A2-464B-9250-2F924DA27FA7},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:805]: Executing op: ComponentUnregister(ComponentId={9D161347-EFC6-46A9-9AEC-97722B0C8636},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:806]: Executing op: ComponentUnregister(ComponentId={29262C23-36F0-4117-9406-A551A1CF11E4},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:806]: Executing op: ComponentUnregister(ComponentId={A46E98B3-190F-4296-871A-431FB198DB58},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:807]: Executing op: ComponentUnregister(ComponentId={E05D9609-9A70-4DEF-A8D3-5B884BEA1139},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:807]: Executing op: ComponentUnregister(ComponentId={3DC39C8C-9C6B-4557-8C13-FCD20DCE5506},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:808]: Executing op: ComponentUnregister(ComponentId={72649A5C-570A-467A-96A8-D77FAB4A16ED},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:808]: Executing op: ComponentUnregister(ComponentId={6368E4D7-C225-4D2B-AA09-75E27732DDD4},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:808]: Executing op: ComponentUnregister(ComponentId={9EED603A-240C-44CD-9136-F3703168D6A8},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:809]: Executing op: ComponentUnregister(ComponentId={C5E5F1CE-2724-447B-A7E2-3B4B4BE9E801},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:809]: Executing op: ComponentUnregister(ComponentId={B46DA52C-6057-4314-B5BE-670483AB08D1},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:810]: Executing op: ComponentUnregister(ComponentId={1601B2AC-3E23-4EA6-861E-17F52F42AAA4},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:810]: Executing op: ComponentUnregister(ComponentId={C0E2EF20-B6D0-44A7-88AD-DAFAA4A325BF},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:810]: Executing op: ComponentUnregister(ComponentId={E3FAD286-FF50-4A29-93F2-FA93F9E5E897},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:811]: Executing op: ComponentUnregister(ComponentId={49A894EE-FF4F-4862-B9B8-A4EBBEA0A77E},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:811]: Executing op: ComponentUnregister(ComponentId={B763A398-206E-43BF-9810-E482FC158A74},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:812]: Executing op: ComponentUnregister(ComponentId={A891B002-2209-413D-896C-A999F157D57A},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:812]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (E0:CC) [11:25:15:813]: Executing op: ComponentUnregister(ComponentId={3CFF4AE8-C6ED-41A6-9AC0-6E0B51B84C41},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:813]: Executing op: ComponentUnregister(ComponentId={484E3E44-1A83-4137-BAA1-B984E5636086},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:813]: Executing op: ComponentUnregister(ComponentId={F4E436FD-FE28-4278-86D5-E3412859F5E5},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:814]: Executing op: ComponentUnregister(ComponentId={A153DC07-D119-4900-B5D1-F671EC25C7EB},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:814]: Executing op: ComponentUnregister(ComponentId={177335D9-9D47-4E12-A841-7884DB0B65FE},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:815]: Executing op: ComponentUnregister(ComponentId={B7EF36A2-B450-43CD-9919-427EAE165995},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:815]: Executing op: ComponentUnregister(ComponentId={63284722-D09A-447D-861D-CFEBE89D28F4},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:816]: Executing op: ComponentUnregister(ComponentId={6EE91E7E-1391-4C83-838D-8EE0407A2C5E},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:816]: Executing op: ComponentUnregister(ComponentId={4AEE9519-9D9B-44CE-9852-434F0BB544E3},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:816]: Executing op: ComponentUnregister(ComponentId={A4D31E85-0B09-4E42-96C3-DE5DE60EB97F},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:817]: Executing op: ComponentUnregister(ComponentId={CCFFD125-B6F4-4E85-B42F-EEDE0E647001},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:817]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:15:818]: Executing op: ComponentUnregister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:818]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:15:819]: Executing op: ComponentUnregister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:819]: Executing op: ComponentRegister(ComponentId={A074188E-B992-457A-A6FB-B674A1D71791},KeyPath=C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\,State=3,ProductKey={00000000-0000-0000-0000-000000000000},,SharedDllRefCount=0,BinaryType=0) MSI (s) (E0:CC) [11:25:15:820]: Executing op: ComponentUnregister(ComponentId={A074188E-B992-457A-A6FB-B674A1D71791},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:820]: Executing op: ComponentUnregister(ComponentId={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},ProductKey={D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4},BinaryType=0,) MSI (s) (E0:CC) [11:25:15:821]: Executing op: ActionStart(Name=RunErrorScript,,) MSI (s) (E0:CC) [11:25:15:822]: Executing op: CustomActionRollback(Action=RunErrorScript,ActionType=1345,Source=BinaryData,Target=RunErrorScripts,CustomActionData="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.3.15") MSI (s) (E0:E0) [11:25:15:824]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI746E.tmp, Entrypoint: RunErrorScripts MSI (s) (E0:CC) [11:25:15:834]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,) MSI (s) (E0:CC) [11:25:15:834]: Executing op: ActionStart(Name=RestoreMovedFiles,,) MSI (s) (E0:CC) [11:25:15:835]: Executing op: CustomActionRollback(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (E0:64) [11:25:15:838]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI747E.tmp, Entrypoint: RestoreMovedFiles MSI (s) (E0:CC) [11:25:15:846]: Executing op: ActionStart(Name=SetUpdateFailed,,) MSI (s) (E0:CC) [11:25:15:847]: Executing op: CustomActionRollback(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,) MSI (s) (E0:8C) [11:25:15:850]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI748F.tmp, Entrypoint: SetUpdateFailed MSI (s) (E0:CC) [11:25:15:861]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0) MSI (s) (E0:CC) [11:25:15:861]: Error in rollback skipped. Return: 5 MSI (s) (E0:CC) [11:25:15:868]: Note: 1: 2318 2: MSI (s) (E0:CC) [11:25:15:869]: No System Restore sequence number for this installation. MSI (s) (E0:CC) [11:25:15:869]: Unlocking Server MSI (s) (E0:CC) [11:25:15:870]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'. Action ended 11:25:15: INSTALL. Return value 3. Property(S): DiskPrompt = [1] Property(S): INSTALL = C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\ Property(S): CONFIG = C:\ProgramData\Sophos\Sophos Anti-Virus\Config\ Property(S): INFECTED = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\ Property(S): LOGS = C:\ProgramData\Sophos\Sophos Anti-Virus\logs\ Property(S): TEMP = C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ Property(S): CACHE = C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\ Property(S): LOGS1 = C:\ProgramData\Sophos\Sophos Data Control\logs\ Property(S): LOGS2 = C:\ProgramData\Sophos\Sophos Device Control\logs\ Property(S): LOGS3 = C:\ProgramData\Sophos\Sophos Tamper Protection\logs\ Property(S): INSTALLDIR = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): MsiAMD64 = 6 Property(S): INSTALLDIR_IA64 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): INSTALLDIR_WIN32 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): INSTALLDIR_X64 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): VersionNT64 = 601 Property(S): BootDriverStartup = 0 Property(S): CheckSNMPDLLPresence = C:\ProgramData\Sophos\Sophos Anti-Virus\Config Property(S): ConfigureSAV = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""0" Property(S): CopyOtherFiles = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""VISTA_AMD64" Property(S): CopySAVSyncFile = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\" Property(S): CreateSavAdapterDllRegistryEntry = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): CreateUserGroups = C:\ProgramData\Sophos\Sophos Anti-Virus\Config Property(S): DeleteBDLs = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): DeleteDriverKeys = 0 Property(S): DeleteHIPSConfig = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): DeleteIDEs = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): DeleteNonEngineFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): DeleteOtherFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): DisablePUADetection = C:\ProgramData\Sophos\Sophos Anti-Virus\Config Property(S): DisableSxlLookups = C:\ProgramData\Sophos\Sophos Anti-Virus\Config Property(S): DisableWebProtection = C:\ProgramData\Sophos\Sophos Anti-Virus\Config Property(S): ForceDeleteFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): ALLUSERS = 2 Property(S): SystemFolder = C:\Windows\SysWOW64\ Property(S): System64Folder = C:\Windows\SysWOW64\ Property(S): InstallBootDriverVista = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinLH_i386\SOPHOSBOOTDRIVER.INF Property(S): InstallClassFilterVista = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ClassFilterDrivers\wxp_i386\sdcfilter.inf Property(S): InstallDeviceControl = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\" Property(S): InstallDriverFilesVista = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinLH_i386\SAVONACCESSDRIV.INF Property(S): InstallDriverFilesW8 = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Win8_i386\SAVONACCESSDRIV.INF Property(S): InstallKMSDriver = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\wxp_i386\skmscan.inf Property(S): InstallKMSDriver2K = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\w2k_i386\skmscan.inf Property(S): InstallUnsignedBootDriver = "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""VISTA_AMD64" Property(S): InstallUnsignedDrivers = "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""VISTA_AMD64" Property(S): MoveLockedFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\| Property(S): RegisterBufferOverflowProtection = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RemoveFilesOnUpgrade = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RemoveSAVI = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RestoreFirstInstallTime = 0 Property(S): RestoreMovedFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackBootDriverVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF Property(S): RollbackClassFilterVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf Property(S): RollbackDriverFilesVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF Property(S): RollbackForceDeleteFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackKMSDriverVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\skmscan.inf Property(S): RollbackOtherFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackSavi = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackUpdateSavAdapterDll = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RunAfterScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.3.15" Property(S): RunErrorScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.3.15" Property(S): RunPreLaunchScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.3.15" Property(S): SetAdminGroupDescription = SophosAdministrators may run Sophos Anti-Virus with complete access Property(S): ALLUSERSPROFILE = C:\ProgramData\ Property(S): SetFolderPermissions = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): UPDATEDRIVERS = 0 Property(S): TARGETDIR = G:\ Property(S): SetOnAccessGroupDescription = Contains accounts used by Sophos Anti-Virus when it performs threat scanning and cleanup functions Property(S): SetPowerGroupDescription = SophosPowerUsers may run Sophos Anti-Virus with the access that SophosUsers have, plus greater access to cleanup Property(S): RollBackInstallDeviceControl = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): StartDriverServices = VISTA_AMD64 Property(S): UninstallBootDriverOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF Property(S): UninstallBootDriver = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF Property(S): UninstallClassFilterVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf Property(S): UninstallDeviceControl = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config" Property(S): UninstallDriverFilesOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF Property(S): UninstallDriverFilesVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF Property(S): UninstallKMSDriverOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF Property(S): UninstallKMSDriver = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF Property(S): UnregisterBufferOverflowProtection = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): UpdateSXLServerList = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config" Property(S): UpdateSAVI = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\" Property(S): SetUserGroupDescription = SophosUsers may run Sophos Anti-Virus with limited access to scanning configuration and cleanup Property(S): UpdateSavAdapterDll = ;10.3.15; Property(S): USERPROFILE = C:\Users\Default\ Property(S): EventType = BEGIN_SYSTEM_CHANGE Property(S): ARPINSTALLLOCATION = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ Property(S): CommonFiles64Folder = C:\Program Files (x86)\Common Files\ Property(S): DesktopFolder = C:\Users\Public\Desktop\ Property(S): FavoritesFolder = C:\Windows\SysWOW64\config\systemprofile\Favorites\ Property(S): FontsFolder = C:\Windows\Fonts\ Property(S): GlobalAssemblyCache = G:\ Property(S): LocalAppDataFolder = C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ Property(S): PrimaryVolumePath = G:\ Property(S): ProgramFiles64Folder = C:\Program Files (x86)\ Property(S): SendToFolder = C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\ Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ Property(S): System16Folder = G:\ Property(S): TempFolder = C:\Windows\TEMP\ Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\ Property(S): WindowsFolder = C:\Windows\ Property(S): WindowsVolume = C:\ Property(S): PLUGINS = C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\ Property(S): CISCOTRUSTAGENT = C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\ Property(S): CISCO_SYSTEMS = C:\Program Files (x86)\Common Files\Cisco Systems\ Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\ Property(S): RESOURCES = C:\ProgramData\Sophos\Sophos Anti-Virus\ Property(S): NEW_DIRECTORY3 = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\ Property(S): RES = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\ Property(S): NEW_DIRECTORY1 = C:\ProgramData\Sophos\ Property(S): SOPHOS_DATA_CONTROL = C:\ProgramData\Sophos\Sophos Data Control\ Property(S): SOPHOS_DEVICE_CONTROL = C:\ProgramData\Sophos\Sophos Device Control\ Property(S): SOPHOS_TAMPER_PROTECTION = C:\ProgramData\Sophos\Sophos Tamper Protection\ Property(S): CommonAppDataFolder = C:\ProgramData\ Property(S): SOPHOS_ANTI_VIRUS = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): SOPHOS = C:\Program Files (x86)\Sophos\ Property(S): ProgramFilesFolder = C:\Program Files (x86)\ Property(S): NEW_DIRECTORY2 = C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\ Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\ Property(S): newfolder2 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\ Property(S): newfolder1 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\ Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ Property(S): VersionNT = 601 Property(S): AdminUser = 1 Property(S): Manufacturer = Sophos Limited Property(S): ProductCode = {D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4} Property(S): ProductLanguage = 1033 Property(S): ProductName = Sophos Anti-Virus Property(S): ProductVersion = 10.3.15 Property(S): UpgradeCode = {597B239E-3032-491A-A322-817737925E8A} Property(S): _IsMaintenance = Change Property(S): _IsSetupTypeMin = Typical Property(S): AFTERREBOOT = 0 Property(S): AgreeToLicense = No Property(S): ApplicationUsers = AllUsers Property(S): APPLYCLASSICCONFIG = 0 Property(S): ARPCOMMENTS = Protects your computer and network from threats Property(S): ARPCONTACT = Sophos Technical Support Property(S): ARPHELPLINK = http://www.sophos.com/support Property(S): ARPHELPTELEPHONE = Property(S): ARPNOMODIFY = 1 Property(S): ARPNOREPAIR = 1 Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe Property(S): ARPURLINFOABOUT = http://www.sophos.com Property(S): ARPURLUPDATEINFO = www.sophos.com/.../updates Property(S): BOOTDRIVERSIGNED = 1 Property(S): CHECKFORCOMPETITORS = 1 Property(S): CHECKFORSCF = 1 Property(S): CLASSFILTERPRESENT = 0 Property(S): CopyBDLs = 0 Property(S): CopyIDEs = 0 Property(S): DATACONTROL = 1 Property(S): DefaultUIFont = Tahoma8 Property(S): DEVICECONTROL = 1 Property(S): DialogCaption = Sophos Installer Property(S): DISABLEONACCESS = 0 Property(S): Display_IsBitmapDlg = 1 Property(S): DisplayNameCustom = Custom Property(S): DisplayNameMinimal = Minimal Property(S): DisplayNameTypical = Typical Property(S): DRIVERVERSION = VISTA_AMD64 Property(S): FIRST_INSTALL_DATE = 0 Property(S): IDEONLY = 0 Property(S): InstallChoice = AR Property(S): INSTALLLEVEL = 100 Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1] Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1] Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1] Property(S): IS_PROGMSG_XML_COSTING = Costing XML files... Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s... Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes... Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s... Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes... Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s... Property(S): IS_SQLSERVER_AUTHENTICATION = 0 Property(S): IS_SQLSERVER_USERNAME = sa Property(S): ISReleaseFlags = SAV Property(S): ISVROOT_PORT_NO = 0 Property(S): MAJORUPGRADE = 0 Property(S): MANAGED = 1 Property(S): MSIRESTARTMANAGERCONTROL = Disable Property(S): NEEDREBOOT = 0 Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@ Property(S): PROCESSOR_NX_ENABLED = 1 Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools... Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories... Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions... Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories... Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories... Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools... Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories... Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions... Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools... Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes... Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions... Property(S): ProgressType0 = install Property(S): ProgressType1 = Installing Property(S): ProgressType2 = installed Property(S): ProgressType3 = installs Property(S): RebootYesNo = Yes Property(S): Registration = No Property(S): ReinstallModeText = omus Property(S): SAVIONLY = 0 Property(S): SCRIPTDIR = [SOURCEDIR] Property(S): SequenceNumber = 0 Property(S): SetupType = Typical Property(S): UNINSTALLBOOTDRIVERS = 1 Property(S): UNINSTALLCLASSFILTER = 1 Property(S): UNINSTALLDRIVERS = 1 Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus. Property(S): UNINSTALLKMSDRIVERS = 1 Property(S): UPDATEBOOTDRIVERS = 1 Property(S): UPDATECLASSFILTER = 1 Property(S): VIRUSDATAUPDATE = 0 Property(S): SecureCustomProperties = EXCLUDEDPROCESSES;INSTALLINGVERSION;MAJORUPGRADE;WEBCONTROL Property(S): WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\Windows\ Property(S): SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\Windows\SysWOW64\ Property(S): WinSxsDirectory.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\Windows\winsxs\ Property(S): payload_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\Windows\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_51ca66a2bbe76806\ Property(S): payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\Windows\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\ Property(S): WinSxsManifests.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\Windows\winsxs\Manifests\ Property(S): WinSxsPolicies.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\Windows\winsxs\Policies\ Property(S): policydir.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\Windows\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ Property(S): policydir_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\Windows\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ Property(S): SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\Windows\SysWOW64\ Property(S): WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\Windows\ Property(S): WinSxsDirectory.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\Windows\winsxs\ Property(S): payload_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\ Property(S): payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\ Property(S): WinSxsManifests.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\Windows\winsxs\Manifests\ Property(S): WinSxsPolicies.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\Windows\winsxs\Policies\ Property(S): policydir.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ Property(S): policydir_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ Property(S): WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\Windows\winsxs\ Property(S): payload_ul.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\Windows\winsxs\x86_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f0efb442f8a0f46c\ Property(S): WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\Windows\winsxs\Policies\ Property(S): policydir.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\Windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\ Property(S): WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\Windows\ Property(S): WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\Windows\winsxs\ Property(S): payload_ul.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\Windows\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f47e1bd6f6571810\ Property(S): WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\Windows\winsxs\Policies\ Property(S): policydir.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\Windows\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\ Property(S): WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\Windows\ Property(S): WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\ Property(S): SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll Property(S): SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll Property(S): SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\ Property(S): SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\ Property(S): SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = swi_service Property(S): SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /registerService Property(S): SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe" /update Property(S): REBOOTREQUIREDFILE.11DACB83_28A7_4FA6_AF5B_C006E340C101 = SwiRebootRequired.txt Property(S): MsiLogFileLocation = C:\Windows\TEMP\Sophos Anti-Virus Major Install Log_160120_042456.txt Property(S): PackageCode = {CE9959FF-BAE0-4FE8-8837-F68062C881F0} Property(S): ProductState = -1 Property(S): PackagecodeChanging = 1 Property(S): REBOOT = ReallySuppress Property(S): UPDATEKMSDRIVERS = 1 Property(S): WEBCONTROL = 1 Property(S): CURRENTDIRECTORY = C:\Windows\system32 Property(S): CLIENTUILEVEL = 3 Property(S): MSICLIENTUSESEXTERNALUI = 1 Property(S): CLIENTPROCESSID = 13536 Property(S): MsiSystemRebootPending = 1 Property(S): VersionDatabase = 200 Property(S): VersionMsi = 5.00 Property(S): WindowsBuild = 7601 Property(S): ServicePackLevel = 1 Property(S): ServicePackLevelMinor = 0 Property(S): MsiNTProductType = 3 Property(S): MsiNTSuiteEnterprise = 1 Property(S): RemoteAdminTS = 1 Property(S): AppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\ Property(S): NetHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\ Property(S): PersonalFolder = C:\Windows\system32\config\systemprofile\Documents\ Property(S): PrintHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\ Property(S): RecentFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\ Property(S): MyPicturesFolder = C:\Windows\system32\config\systemprofile\Pictures\ Property(S): GPTSupport = 1 Property(S): OLEAdvtSupport = 1 Property(S): ShellAdvtSupport = 1 Property(S): Msix64 = 6 Property(S): Intel = 6 Property(S): PhysicalMemory = 32755 Property(S): VirtualMemory = 38631 Property(S): MsiTrueAdminUser = 1 Property(S): LogonUser = SYSTEM Property(S): UserSID = S-1-5-18 Property(S): UserLanguageID = 1033 Property(S): ComputerName = SAKURA Property(S): SystemLanguageID = 1033 Property(S): ScreenX = 1024 Property(S): ScreenY = 768 Property(S): CaptionHeight = 19 Property(S): BorderTop = 1 Property(S): BorderSide = 1 Property(S): TextHeight = 16 Property(S): TextInternalLeading = 3 Property(S): ColorBits = 32 Property(S): TTCSupport = 1 Property(S): Time = 11:25:15 Property(S): Date = 1/20/2016 Property(S): MsiNetAssemblySupport = 2.0.50727.4927 Property(S): MsiWin32AssemblySupport = 6.1.7601.17514 Property(S): RedirectedDllSupport = 2 Property(S): MsiRunningElevated = 1 Property(S): Privileged = 1 Property(S): USERNAME = Windows User Property(S): DATABASE = C:\Windows\Installer\147e2a57.msi Property(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi Property(S): UILevel = 2 Property(S): ACTION = INSTALL Property(S): ROOTDRIVE = G:\ Property(S): CostingComplete = 1 Property(S): OutOfDiskSpace = 0 Property(S): OutOfNoRbDiskSpace = 0 Property(S): PrimaryVolumeSpaceAvailable = 0 Property(S): PrimaryVolumeSpaceRequired = 0 Property(S): PrimaryVolumeSpaceRemaining = 0 Property(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ Property(S): SourcedirProduct = {D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4} Property(S): ProductToBeRegistered = 1 MSI (s) (E0:CC) [11:25:15:915]: Note: 1: 1708 MSI (s) (E0:CC) [11:25:15:915]: Product: Sophos Anti-Virus -- Installation operation failed. 
 MSI (s) (E0:CC) [11:25:15:916]: Windows Installer installed the product. Product Name: Sophos Anti-Virus. Product Version: 10.3.15. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1603. 
 MSI (s) (E0:CC) [11:25:15:920]: Deferring clean up of packages/files, if any exist MSI (s) (E0:CC) [11:25:15:920]: MainEngineThread is returning 1603 MSI (s) (E0:88) [11:25:15:921]: No System Restore sequence number for this installation. === Logging stopped: 1/20/2016 11:25:15 === MSI (s) (E0:88) [11:25:15:922]: User policy value 'DisableRollback' is 0 MSI (s) (E0:88) [11:25:15:922]: Machine policy value 'DisableRollback' is 0 MSI (s) (E0:88) [11:25:15:922]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (E0:88) [11:25:15:922]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (E0:88) [11:25:15:922]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (E0:88) [11:25:15:923]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (s) (E0:88) [11:25:15:923]: Restoring environment variables MSI (s) (E0:88) [11:25:15:924]: Destroying RemoteAPI object. MSI (s) (E0:44) [11:25:15:924]: Custom Action Manager thread ending. MSI (c) (E0:14) [11:25:15:925]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (E0:14) [11:25:15:925]: MainEngineThread is returning 1603 === Verbose logging stopped: 1/20/2016 11:25:15 === 
 2016-01-20 11:25:15 ERROR: Installation failed