ProductSetup::ProductSetup: Begin product setup ProductSetup::InstUninstEntry: Begin install ProductSetup::InstUninstEntry: Show gui: false ProductSetup::InstUninstEntry: Existing product code: ProductSetup::InstUninstEntry: Install from: C:\ProgramData\Sophos\AutoUpdate\cache\ntp ProductSetup::InstUninstEntry: Install to: === Verbose logging started: 28.07.2017 10:08:50 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (78:38) [10:08:50:282]: Cloaking enabled. MSI (c) (78:38) [10:08:50:282]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (78:38) [10:08:50:282]: End dialog not enabled MSI (c) (78:38) [10:08:50:282]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi MSI (c) (78:38) [10:08:50:282]: Package we're running from ==> C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi MSI (c) (78:38) [10:08:50:282]: Machine policy value 'DisableUserInstalls' is 0 MSI (c) (78:38) [10:08:50:282]: APPCOMPAT: Compatibility mode property overrides found. MSI (c) (78:38) [10:08:50:282]: APPCOMPAT: looking for appcompat database entry with ProductCode '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'. MSI (c) (78:38) [10:08:50:282]: APPCOMPAT: no matching ProductCode found in database. MSI (c) (78:38) [10:08:50:282]: MSCOREE not loaded loading copy from system32 MSI (c) (78:38) [10:08:50:282]: APPCOMPAT: looking for appcompat database entry with ProductCode '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'. MSI (c) (78:38) [10:08:50:282]: APPCOMPAT: no matching ProductCode found in database. MSI (c) (78:38) [10:08:50:282]: Transforms are not secure. MSI (c) (78:38) [10:08:50:282]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos Network Threat Protection Install Log 20170728 100850.txt'. MSI (c) (78:38) [10:08:50:282]: No Command Line. MSI (c) (78:38) [10:08:50:282]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{B1DE62EA-C23B-42DE-A241-33A0818A4746}'. MSI (c) (78:38) [10:08:50:282]: Product Code passed to Engine.Initialize: '(none)' MSI (c) (78:38) [10:08:50:282]: Product Code from property table before transforms: '{66967E5F-43E8-4402-87A4-04685EE5C2CB}' MSI (c) (78:38) [10:08:50:282]: Product Code from property table after transforms: '{66967E5F-43E8-4402-87A4-04685EE5C2CB}' MSI (c) (78:38) [10:08:50:282]: Product not registered: beginning first-time install MSI (c) (78:38) [10:08:50:282]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'. MSI (c) (78:38) [10:08:50:282]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 MSI (c) (78:38) [10:08:50:282]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (c) (78:38) [10:08:50:282]: User policy value 'SearchOrder' is 'nmu' MSI (c) (78:38) [10:08:50:282]: Adding new sources is allowed. MSI (c) (78:38) [10:08:50:282]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'. MSI (c) (78:38) [10:08:50:282]: Package name extracted from package path: 'Sophos Network Threat Protection.msi' MSI (c) (78:38) [10:08:50:282]: Package to be registered: 'Sophos Network Threat Protection.msi' MSI (c) (78:38) [10:08:50:282]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (c) (78:38) [10:08:50:282]: TRANSFORMS property is now: MSI (c) (78:38) [10:08:50:282]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '405'. MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (c) (78:38) [10:08:50:282]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts MSI (c) (78:38) [10:08:50:282]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (c) (78:38) [10:08:50:282]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (c) (78:38) [10:08:50:282]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (c) (78:38) [10:08:50:282]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (c) (78:38) [10:08:50:282]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (78:38) [10:08:50:282]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Admin1'. MSI (c) (78:38) [10:08:50:282]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (78:38) [10:08:50:282]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is '***'. MSI (c) (78:38) [10:08:50:282]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi'. MSI (c) (78:38) [10:08:50:282]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi'. MSI (c) (78:38) [10:08:50:282]: Machine policy value 'MsiDisableEmbeddedUI' is 0 MSI (c) (78:38) [10:08:50:282]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI MSI (c) (78:38) [10:08:50:282]: EEUI - Disabling MsiEmbeddedUI in quiet mode === Logging started: 28.07.2017 10:08:50 === MSI (c) (78:38) [10:08:50:282]: Machine policy value 'DisableRollback' is 0 MSI (c) (78:38) [10:08:50:282]: User policy value 'DisableRollback' is 0 MSI (c) (78:38) [10:08:50:282]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. MSI (c) (78:38) [10:08:50:282]: Creating MSIHANDLE (5) of type 790537 for thread 4408 MSI (c) (78:38) [10:08:50:282]: MsiOpenPackageEx is returning 0 MSI (c) (78:38) [10:08:50:282]: Closing MSIHANDLE (5) of type 790537 for thread 4408 === Verbose logging stopped: 28.07.2017 10:08:50 === setup::MsiInstaller::install: New version: {66967E5F-43E8-4402-87A4-04685EE5C2CB}, version: 1.2.2.50 setup::MsiInstaller::install: Performing clean install setup::MsiInstaller::cleanInstall: Running clean install setup::MsiInstaller::installOrUpgrade: Executing: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi INSTALLDIR="" REBOOT=ReallySuppress INSTALLINGVERSION="1.2.2.50" === Verbose logging started: 28.07.2017 10:08:50 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (78:E8) [10:08:50:298]: Resetting cached policy values MSI (c) (78:E8) [10:08:50:298]: Machine policy value 'Debug' is 0 MSI (c) (78:E8) [10:08:50:298]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (c) (78:E8) [10:08:50:298]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (78:E8) [10:08:50:298]: Grabbed execution mutex. MSI (c) (78:E8) [10:08:50:298]: Cloaking enabled. MSI (c) (78:E8) [10:08:50:298]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (78:E8) [10:08:50:298]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (28:04) [10:08:50:298]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi MSI (s) (28:04) [10:08:50:298]: Grabbed execution mutex. MSI (s) (28:0C) [10:08:50:298]: Resetting cached policy values MSI (s) (28:0C) [10:08:50:298]: Machine policy value 'Debug' is 0 MSI (s) (28:0C) [10:08:50:298]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (s) (28:0C) [10:08:50:298]: Machine policy value 'DisableUserInstalls' is 0 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 000021090B0070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 000021090B0070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 00002109210000000000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 00002109210000000000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 000021092B0070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 000021092B0070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 00002109610070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 00002109610070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 00002109810070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 00002109810070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 00002109A10070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 00002109A10070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 00002109B10070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 00002109B10070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 00002109C20070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 00002109C20070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 00002109E60070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 00002109E60070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 00002109F10001400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 00002109F10001400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 00002109F10070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 00002109F10070400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 00002109F10090400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 00002109F10090400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 00002109F100C0400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 00002109F100C0400000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 00004109500200000000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 00004109500200000000000000F01FEC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 08B75083C2AA95330A84CFA6F5799279 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 08B75083C2AA95330A84CFA6F5799279 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 09AB59D18F4FCE748A2844C1993DC0E1 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 09AB59D18F4FCE748A2844C1993DC0E1 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 1D5E3C0FEDA1E123187686FED06E995A MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 1D5E3C0FEDA1E123187686FED06E995A MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 1F764691F11C67F458B88521DA8CB349 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 1F764691F11C67F458B88521DA8CB349 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 21BEA019951A9A24D9DFB49FD2503016 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 21BEA019951A9A24D9DFB49FD2503016 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 21EE4A31AE32173319EEFE3BD6FDFFE3 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 21EE4A31AE32173319EEFE3BD6FDFFE3 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 22BEFC8F7E2A1793E9ADB411DEFE1C58 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 22BEFC8F7E2A1793E9ADB411DEFE1C58 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 30D2C60D96840F23F977B7929CEB5BFF MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 30D2C60D96840F23F977B7929CEB5BFF MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 3854B63D408EB604D9659F971382C6B5 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 3854B63D408EB604D9659F971382C6B5 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 3FB95CD427D08EC3FBFEE1F8FA86E90B MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 3FB95CD427D08EC3FBFEE1F8FA86E90B MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 47CA2FBBC0273BC32819E543302923AF MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 47CA2FBBC0273BC32819E543302923AF MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 4EA42A62D9304AC4784BF2238110130F MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 4EA42A62D9304AC4784BF2238110130F MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 57A9A69ED7937274295EEFB83971CFDC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 57A9A69ED7937274295EEFB83971CFDC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 61B6D0901DD628A429E4E9D27AF71DEF MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 61B6D0901DD628A429E4E9D27AF71DEF MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 672733BDCC47E58429C1A44A8575BEA2 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 672733BDCC47E58429C1A44A8575BEA2 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 68AB67CA7DA7FFFFB744CAF070E41400 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 68AB67CA7DA7FFFFB744CAF070E41400 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 6E815EB96CCE9A53884E7857C57002F0 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 6E815EB96CCE9A53884E7857C57002F0 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 8879B88730F7B2A4288543540C72C833 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 8879B88730F7B2A4288543540C72C833 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 8A2A82A8BCBC13A4C8CE268022B9246B MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 8A2A82A8BCBC13A4C8CE268022B9246B MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 8D4E9E6ACF6866840A6C7297DA1414C7 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 8D4E9E6ACF6866840A6C7297DA1414C7 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 94100920C8BB8E24994957376565E0A9 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 94100920C8BB8E24994957376565E0A9 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 978E7601B1CB3FD44B83C4051CE4FA45 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 978E7601B1CB3FD44B83C4051CE4FA45 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 9B1ACBFAC6946EA489EAE31AFC6FC545 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 9B1ACBFAC6946EA489EAE31AFC6FC545 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: 9DD86837A9CCF7F47B80990F69EDBAD6 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: 9DD86837A9CCF7F47B80990F69EDBAD6 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: A089CE062ADB6BC44A720BA745894BAC MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: A089CE062ADB6BC44A720BA745894BAC MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: A419E7B35D3992A429BBFAC8F3664C13 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: A419E7B35D3992A429BBFAC8F3664C13 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: AA46F29656F4F513B8633C1D5ACCF8EF MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: AA46F29656F4F513B8633C1D5ACCF8EF MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: B031C88397004B640A5DCDD27D8AA9B7 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: B031C88397004B640A5DCDD27D8AA9B7 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: C10212553AFE75449B5176C691B89EAE MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: C10212553AFE75449B5176C691B89EAE MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: c1c4f01781cc94c4c8fb1542c0981a2a MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: c1c4f01781cc94c4c8fb1542c0981a2a MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: C72D3C9BA27D84F40A4AE87185127953 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: C72D3C9BA27D84F40A4AE87185127953 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: C7C0050360226CD37929699EA54066D9 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: C7C0050360226CD37929699EA54066D9 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: CA4ECB96275917232ABF4932DB3AA634 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: CA4ECB96275917232ABF4932DB3AA634 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: CED965E39C1564D44BAE79A8C729BC6B MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: CED965E39C1564D44BAE79A8C729BC6B MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: D20352A90C039D93DBF6126ECE614057 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: D20352A90C039D93DBF6126ECE614057 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: D5001DEF8CBC5D542A88FF7CBB031412 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: D5001DEF8CBC5D542A88FF7CBB031412 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: D7314F9862C648A4DB8BE2A5B47BE100 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: D7314F9862C648A4DB8BE2A5B47BE100 MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: D75B3901316A3F7409FCF05D5CCDFF6E MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: D75B3901316A3F7409FCF05D5CCDFF6E MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: D9B7D62F10E9392429FEA0AC1D9BACBE MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: D9B7D62F10E9392429FEA0AC1D9BACBE MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: EC88DC6B167C5C141A846D13D3C704BE MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: EC88DC6B167C5C141A846D13D3C704BE MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: EF066349F2EB3FE4FB6137912063688F MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: EF066349F2EB3FE4FB6137912063688F MSI (s) (28:0C) [10:08:50:298]: Setting cached product context: machine assigned for product: F60730A4A66673047777F5728467D401 MSI (s) (28:0C) [10:08:50:298]: Using cached product context: machine assigned for product: F60730A4A66673047777F5728467D401 MSI (s) (28:0C) [10:08:50:298]: SRSetRestorePoint skipped for this transaction. MSI (s) (28:0C) [10:08:50:298]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 MSI (s) (28:0C) [10:08:50:298]: File will have security applied from OpCode. MSI (s) (28:0C) [10:08:50:298]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi' against software restriction policy MSI (s) (28:0C) [10:08:50:298]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi has a digital signature MSI (s) (28:0C) [10:08:50:298]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi is permitted to run because the user token authorizes execution (system or service token). MSI (s) (28:0C) [10:08:50:298]: End dialog not enabled MSI (s) (28:0C) [10:08:50:298]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi MSI (s) (28:0C) [10:08:50:298]: Package we're running from ==> C:\Windows\Installer\a9dabc.msi MSI (s) (28:0C) [10:08:50:298]: APPCOMPAT: Compatibility mode property overrides found. MSI (s) (28:0C) [10:08:50:298]: APPCOMPAT: looking for appcompat database entry with ProductCode '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'. MSI (s) (28:0C) [10:08:50:298]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (28:0C) [10:08:50:298]: MSCOREE not loaded loading copy from system32 MSI (s) (28:0C) [10:08:50:313]: Machine policy value 'TransformsSecure' is 0 MSI (s) (28:0C) [10:08:50:313]: User policy value 'TransformsAtSource' is 0 MSI (s) (28:0C) [10:08:50:313]: Machine policy value 'DisablePatch' is 0 MSI (s) (28:0C) [10:08:50:313]: Machine policy value 'AllowLockdownPatch' is 0 MSI (s) (28:0C) [10:08:50:313]: Machine policy value 'DisableLUAPatching' is 0 MSI (s) (28:0C) [10:08:50:313]: Machine policy value 'DisableFlyWeightPatching' is 0 MSI (s) (28:0C) [10:08:50:313]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active MSI (s) (28:0C) [10:08:50:313]: Looking for storage transform: 1031 MSI (s) (28:0C) [10:08:50:313]: Validating transform '1031' with validation bits 0x2 MSI (s) (28:0C) [10:08:50:313]: Transform '1031' is valid. MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2205 2: 3: Patch MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: _Tables 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: _Columns 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: Media 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: File 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: TRANSFORM: 'PatchPackage' table is missing or empty. No pre-transform fixup necessary. MSI (s) (28:0C) [10:08:50:313]: TRANSFORM: Applying regular transform to database. MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: _Tables 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: _Columns 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: _Validation 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: AdminExecuteSequence 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: AdminUISequence 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: AdvtExecuteSequence 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: AppId 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: Binary 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: Component 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: Directory 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: CreateFolder 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: CustomAction 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: EventManifest 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: File 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: Feature 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: FeatureComponents 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: Icon 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: InstallExecuteSequence 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: InstallUISequence 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: LockPermissions 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: Media 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: MsiDriverPackages 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: MsiFileHash 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: MsiServiceConfig 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: Registry 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: RemoveRegistry 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: SecureObjects 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: ServiceConfig 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: ServiceControl 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: TypeLib 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: Upgrade 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: XmlFile 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: ModuleSignature 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: ModuleComponents 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: #_PatchCache 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: #_BaselineData 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: #_BaselineFile 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: #_BaselineCost 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: _MsiPatchTransformView 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: APPCOMPAT: looking for appcompat database entry with ProductCode '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'. MSI (s) (28:0C) [10:08:50:313]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (28:0C) [10:08:50:313]: Transforms are not secure. MSI (s) (28:0C) [10:08:50:313]: Transforming table Property. MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2205 2: 3: Control MSI (s) (28:0C) [10:08:50:313]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos Network Threat Protection Install Log 20170728 100850.txt'. MSI (s) (28:0C) [10:08:50:313]: Command Line: INSTALLDIR= REBOOT=ReallySuppress INSTALLINGVERSION=1.2.2.50 CURRENTDIRECTORY=C:\Windows\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=8056 MSI (s) (28:0C) [10:08:50:313]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{B1DE62EA-C23B-42DE-A241-33A0818A4746}'. MSI (s) (28:0C) [10:08:50:313]: Product Code passed to Engine.Initialize: '' MSI (s) (28:0C) [10:08:50:313]: Product Code from property table before transforms: '{66967E5F-43E8-4402-87A4-04685EE5C2CB}' MSI (s) (28:0C) [10:08:50:313]: Product Code from property table after transforms: '{66967E5F-43E8-4402-87A4-04685EE5C2CB}' MSI (s) (28:0C) [10:08:50:313]: Product not registered: beginning first-time install MSI (s) (28:0C) [10:08:50:313]: Product {66967E5F-43E8-4402-87A4-04685EE5C2CB} is not managed. MSI (s) (28:0C) [10:08:50:313]: MSI_LUA: Credential prompt not required, user is an admin MSI (s) (28:0C) [10:08:50:313]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'. MSI (s) (28:0C) [10:08:50:313]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (s) (28:0C) [10:08:50:313]: User policy value 'SearchOrder' is 'nmu' MSI (s) (28:0C) [10:08:50:313]: Adding new sources is allowed. MSI (s) (28:0C) [10:08:50:313]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'. MSI (s) (28:0C) [10:08:50:313]: Package name extracted from package path: 'Sophos Network Threat Protection.msi' MSI (s) (28:0C) [10:08:50:313]: Package to be registered: 'Sophos Network Threat Protection.msi' MSI (s) (28:0C) [10:08:50:313]: Transforming table Error. MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (s) (28:0C) [10:08:50:313]: Machine policy value 'DisableMsi' is 0 MSI (s) (28:0C) [10:08:50:313]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (28:0C) [10:08:50:313]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (28:0C) [10:08:50:313]: Product installation will be elevated because user is admin and product is being installed per-machine. MSI (s) (28:0C) [10:08:50:313]: Running product '{66967E5F-43E8-4402-87A4-04685EE5C2CB}' with elevated privileges: Product is assigned. MSI (s) (28:0C) [10:08:50:313]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'. MSI (s) (28:0C) [10:08:50:313]: PROPERTY CHANGE: Adding INSTALLINGVERSION property. Its value is '1.2.2.50'. MSI (s) (28:0C) [10:08:50:313]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Windows\system32'. MSI (s) (28:0C) [10:08:50:313]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'. MSI (s) (28:0C) [10:08:50:313]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'. MSI (s) (28:0C) [10:08:50:313]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '8056'. MSI (s) (28:0C) [10:08:50:313]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0 MSI (s) (28:0C) [10:08:50:313]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality. MSI (s) (28:0C) [10:08:50:313]: TRANSFORMS property is now: MSI (s) (28:0C) [10:08:50:313]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '405'. MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (s) (28:0C) [10:08:50:313]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts MSI (s) (28:0C) [10:08:50:313]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (s) (28:0C) [10:08:50:329]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (s) (28:0C) [10:08:50:329]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Admin1'. MSI (s) (28:0C) [10:08:50:329]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is '***'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\a9dabc.msi'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi'. MSI (s) (28:0C) [10:08:50:329]: Machine policy value 'MsiDisableEmbeddedUI' is 0 MSI (s) (28:0C) [10:08:50:329]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI MSI (s) (28:0C) [10:08:50:329]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (28:0C) [10:08:50:329]: Machine policy value 'DisableRollback' is 0 MSI (s) (28:0C) [10:08:50:329]: User policy value 'DisableRollback' is 0 MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. === Protokollierung gestartet: 28.07.2017 10:08:50 === MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'. MSI (s) (28:0C) [10:08:50:329]: Doing action: INSTALL MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ActionText Aktion gestartet um 10:08:50: INSTALL. MSI (s) (28:0C) [10:08:50:329]: Running ExecuteSequence MSI (s) (28:0C) [10:08:50:329]: Doing action: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ActionText MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA property. Its value is 'C:\Windows\system32\'. Aktion gestartet um 10:08:50: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA. MSI (s) (28:0C) [10:08:50:329]: Doing action: FindRelatedProducts MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA. Rückgabewert 1. Aktion gestartet um 10:08:50: FindRelatedProducts. MSI (s) (28:0C) [10:08:50:329]: Doing action: LaunchConditions MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: FindRelatedProducts. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:329]: Transforming table LaunchCondition. Aktion gestartet um 10:08:50: LaunchConditions. MSI (s) (28:0C) [10:08:50:329]: Doing action: ValidateProductID MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: LaunchConditions. Rückgabewert 1. Aktion gestartet um 10:08:50: ValidateProductID. MSI (s) (28:0C) [10:08:50:329]: Skipping action: TamperProtectionCheckRemove (condition is false) MSI (s) (28:0C) [10:08:50:329]: Doing action: CostInitialize MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: ValidateProductID. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:329]: Machine policy value 'MaxPatchCacheSize' is 10 MSI (s) (28:0C) [10:08:50:329]: Baseline: Sorting baselines for {66967E5F-43E8-4402-87A4-04685EE5C2CB}. MSI (s) (28:0C) [10:08:50:329]: Baseline: New baseline 1.2.2 from transaction. MSI (s) (28:0C) [10:08:50:329]: Baseline: Sorted order Native: Order 0. MSI (s) (28:0C) [10:08:50:329]: Baseline Data Table: MSI (s) (28:0C) [10:08:50:329]: ProductCode: {66967E5F-43E8-4402-87A4-04685EE5C2CB} Version: 1.2.2 Attributes: 0 PatchId: Native BaselineId: -2147483648 Order: 0 MSI (s) (28:0C) [10:08:50:329]: Baseline File Table: MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'. MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Patch MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: __MsiPatchFileList MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId` MSI (s) (28:0C) [10:08:50:329]: Delta compression fallback method for this product transaction is 'MSI 2.0 legacy obsolescence' MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Patch Aktion gestartet um 10:08:50: CostInitialize. MSI (s) (28:0C) [10:08:50:329]: Doing action: FileCost MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: CostInitialize. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: MsiAssembly MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Class MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Extension Aktion gestartet um 10:08:50: FileCost. MSI (s) (28:0C) [10:08:50:329]: Doing action: CostFinalize MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: FileCost. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'. MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Patch MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Condition MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 property. Its value is 'C:\'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding Sophos property. Its value is 'C:\Program Files\Sophos\'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding gui property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\gui\'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding bin property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding plugins property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding SophosAppData property. Its value is 'C:\ProgramData\Sophos\'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding ProductData property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding Logs property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding Config property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\'. MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding Status property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\'. MSI (s) (28:0C) [10:08:50:329]: Target path resolution complete. Dumping Directory table... MSI (s) (28:0C) [10:08:50:329]: Note: target paths subject to change (via custom actions or browsing) MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: TARGETDIR , Object: C:\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: WindowsFolder , Object: C:\Windows\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 , Object: C:\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: SystemFolder , Object: C:\Windows\system32\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA , Object: C:\Windows\system32\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: Sophos , Object: C:\Program Files\Sophos\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files\Sophos\Sophos Network Threat Protection\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: gui , Object: C:\Program Files\Sophos\Sophos Network Threat Protection\gui\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: bin , Object: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: plugins , Object: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: SophosAppData , Object: C:\ProgramData\Sophos\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: ProductData , Object: C:\ProgramData\Sophos\Sophos Network Threat Protection\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: Logs , Object: C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: Config , Object: C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\ MSI (s) (28:0C) [10:08:50:329]: Dir (target): Key: Status , Object: C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\ MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'. MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: MsiAssembly MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ? Aktion gestartet um 10:08:50: CostFinalize. MSI (s) (28:0C) [10:08:50:329]: Doing action: MigrateFeatureStates MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: CostFinalize. Rückgabewert 1. Aktion gestartet um 10:08:50: MigrateFeatureStates. MSI (s) (28:0C) [10:08:50:329]: Doing action: InstallValidate MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: MigrateFeatureStates. Rückgabewert 0. MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Dialog MSI (s) (28:0C) [10:08:50:329]: Feature: AllComponents; Installed: Absent; Request: Local; Action: Local MSI (s) (28:0C) [10:08:50:329]: Component: ProductDataFolder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: ConfigDataFolder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: StatusFolder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: LogsDataFolder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: Driver; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: navl.dll; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: ip.plg; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: ipv6.plg; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: tcp.plg; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: http.plg; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: udp.plg; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: portmap.plg; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: ProductInformation; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: Service; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: NTPAdapter; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: SspInterface; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: RemoveObsoleteAutoUpdateRegistration; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: C_CENTRAL_msvcr120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: C_CENTRAL_msvcp120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: C_CENTRAL_vccorlib120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (28:0C) [10:08:50:329]: Component: __ProductInformation65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (28:0C) [10:08:50:329]: Component: __Service65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: BindImage MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ProgId MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: SelfReg MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Extension MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Font MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Shortcut MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Class Aktion gestartet um 10:08:50: InstallValidate. MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: _RemoveFilePath MSI (s) (28:0C) [10:08:50:329]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'. MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: BindImage MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ProgId MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: SelfReg MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Extension MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Font MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Shortcut MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: Class MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2727 2: MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2727 2: MSI (s) (28:0C) [10:08:50:329]: Doing action: RemoveExistingProducts MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: InstallValidate. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:329]: Transforming table Error. Aktion gestartet um 10:08:50: RemoveExistingProducts. MSI (s) (28:0C) [10:08:50:329]: Transforming table Error. MSI (s) (28:0C) [10:08:50:329]: Transforming table Error. MSI (s) (28:0C) [10:08:50:329]: Transforming table Error. MSI (s) (28:0C) [10:08:50:329]: Doing action: InstallInitialize MSI (s) (28:0C) [10:08:50:329]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: RemoveExistingProducts. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:329]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (28:0C) [10:08:50:329]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (28:0C) [10:08:50:329]: BeginTransaction: Locking Server MSI (s) (28:0C) [10:08:50:329]: Transforming table Property. MSI (s) (28:0C) [10:08:50:329]: SRSetRestorePoint skipped for this transaction. MSI (s) (28:0C) [10:08:50:329]: Server not locked: locking for product {66967E5F-43E8-4402-87A4-04685EE5C2CB} Aktion gestartet um 10:08:50: InstallInitialize. MSI (s) (28:0C) [10:08:50:641]: Doing action: ProcessComponents MSI (s) (28:0C) [10:08:50:641]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: InstallInitialize. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:641]: Note: 1: 2205 2: 3: MsiPatchCertificate MSI (s) (28:0C) [10:08:50:641]: LUA patching is disabled: missing MsiPatchCertificate table MSI (s) (28:0C) [10:08:50:641]: Resolving source. MSI (s) (28:0C) [10:08:50:641]: Resolving source to launched-from source. MSI (s) (28:0C) [10:08:50:641]: Setting launched-from source as last-used. MSI (s) (28:0C) [10:08:50:641]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\'. MSI (s) (28:0C) [10:08:50:641]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\'. MSI (s) (28:0C) [10:08:50:641]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'. MSI (s) (28:0C) [10:08:50:641]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\cache\ntp\ MSI (s) (28:0C) [10:08:50:641]: SOURCEDIR product ==> {66967E5F-43E8-4402-87A4-04685EE5C2CB} MSI (s) (28:0C) [10:08:50:641]: SECREPAIR: CryptAcquireContext succeeded MSI (s) (28:0C) [10:08:50:641]: Determining source type MSI (s) (28:0C) [10:08:50:641]: Source type from package 'Sophos Network Threat Protection.msi': 0 MSI (s) (28:0C) [10:08:50:641]: SECREPAIR: Hash Database: C:\Windows\Installer\SourceHash{66967E5F-43E8-4402-87A4-04685EE5C2CB} MSI (s) (28:0C) [10:08:50:641]: Note: 1: 2262 2: SourceHash 3: -2147287038 MSI (s) (28:0C) [10:08:50:672]: SECREPAIR: New Hash Database creation complete. MSI (s) (28:0C) [10:08:50:688]: SECREPAIR: Hash Value for the file:Sophos Network Threat Protection.msi is: G98lTN1lt2YJe2RpHnOLQvD6twwGwiJFmJYzH4rnHwA= MSI (s) (28:0C) [10:08:50:688]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\Sntp.sys is: qPorQHhCStFcM5xGaCY0m80eHENHmfUE0ukeWoW+RJw= MSI (s) (28:0C) [10:08:50:688]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\navl.dll is: S8T35D8QjtCTbH028O0UxgPhr5uIcM5OtSCXPzbbyug= MSI (s) (28:0C) [10:08:50:688]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\plugins\ip.plg is: CWqKhUs1HRWTV022JNzIXLROKFi4WFVjhz5qJlVAFmg= MSI (s) (28:0C) [10:08:50:688]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\plugins\ipv6.plg is: dlYSsFdhU02Mzdve29U6z0al8fBM0cPEoqAEOMLriYQ= MSI (s) (28:0C) [10:08:50:688]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\plugins\tcp.plg is: xX/2tPqNG8P6CgRGYE77cEk5DS8vkpTHDIpuFklz15g= MSI (s) (28:0C) [10:08:50:688]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\plugins\http.plg is: glnMd2AKWi/H0sxpwIJQThnjUhah5xtq1K1Nd2SWCuQ= MSI (s) (28:0C) [10:08:50:688]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\plugins\udp.plg is: J5plWfXTWU8+RpoUHq7tHcJqXARqA/lFwDUrjNiDj+A= MSI (s) (28:0C) [10:08:50:688]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\plugins\portmap.plg is: h8M6QDI8eu8VkcesmQ1Pz/TLpzaekmZ47A5daF1zU/A= MSI (s) (28:0C) [10:08:50:703]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\SntpService.exe is: DnIck/pOcI2DTcI8Dj/N40w8ldfkUZMHhiUomymEv/w= MSI (s) (28:0C) [10:08:50:703]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll is: 3Vorqa6nJgKYJf3KqzvheW/uHkJ0gtBRsgN9Bx4HgUQ= MSI (s) (28:0C) [10:08:50:703]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\BPAIF.dll is: NZfao4bufvSEV5cmgiT+irVp41O9N8xUykPhSatP8Iw= MSI (s) (28:0C) [10:08:50:703]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\Sntp.inf is: Mea3o+Nd1s2g5aM3rSd1XUB3bUnXzO/w5xp5QWejdjw= MSI (s) (28:0C) [10:08:50:703]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\Sntp.cat is: NY1bfTgpQoAcsp+sJPgAHOKmzg4n9arEyn7wNDpLblQ= MSI (s) (28:0C) [10:08:50:703]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\bin\Sntp.man is: TOO+D3ZF4iQ/WFWVeotXZ4YmAe/zKQg0mzSb2t2fcQA= MSI (s) (28:0C) [10:08:50:703]: SECREPAIR: Hash Value for the file:System\msvcr120.dll is: huObWZWvDgQvzaqF/irv18ndx61l5jJ71ecFi8OrYVw= MSI (s) (28:0C) [10:08:50:719]: SECREPAIR: Hash Value for the file:System\msvcp120.dll is: h8QsoVVHPk5xhX0DSXyMvCj6j/fyyNcuih85txB49gA= MSI (s) (28:0C) [10:08:50:719]: SECREPAIR: Hash Value for the file:System\vccorlib120.dll is: nJ1OQhxV9+9ORV51tYpmOUKMzXXHblcX9Eiv5MIcUrA= MSI (s) (28:0C) [10:08:50:719]: Transforming table Property. Aktion gestartet um 10:08:50: ProcessComponents. MSI (s) (28:0C) [10:08:50:734]: Source path resolution complete. Dumping Directory table... MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: TARGETDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\ , LongSubPath: , ShortSubPath: MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: WindowsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\ , LongSubPath: , ShortSubPath: MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\ , LongSubPath: , ShortSubPath: MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: SystemFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\System\ , LongSubPath: System\ , ShortSubPath: Sys\ MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\System\ , LongSubPath: System\ , ShortSubPath: Sys\ MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: ProgramFilesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\ , LongSubPath: , ShortSubPath: MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: Sophos , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\ , LongSubPath: Sophos\ , ShortSubPath: MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: INSTALLDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\ , LongSubPath: Sophos\Sophos Network Threat Protection\ , ShortSubPath: Sophos\_tph7qnj\ MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: gui , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\gui\ , LongSubPath: Sophos\Sophos Network Threat Protection\gui\ , ShortSubPath: Sophos\_tph7qnj\gui\ MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: bin , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\ , LongSubPath: Sophos\Sophos Network Threat Protection\bin\ , ShortSubPath: Sophos\_tph7qnj\bin\ MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: plugins , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\plugins\ , LongSubPath: Sophos\Sophos Network Threat Protection\bin\plugins\ , ShortSubPath: Sophos\_tph7qnj\bin\plugins\ MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: CommonAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\ , LongSubPath: , ShortSubPath: MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: SophosAppData , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\ , LongSubPath: Sophos\ , ShortSubPath: MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: ProductData , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\ , LongSubPath: Sophos\Sophos Network Threat Protection\ , ShortSubPath: Sophos\hv6uh-kp\ MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: Logs , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\Logs\ , LongSubPath: Sophos\Sophos Network Threat Protection\Logs\ , ShortSubPath: Sophos\hv6uh-kp\Logs\ MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: Config , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\Config\ , LongSubPath: Sophos\Sophos Network Threat Protection\Config\ , ShortSubPath: Sophos\hv6uh-kp\Config\ MSI (s) (28:0C) [10:08:50:734]: Dir (source): Key: Status , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\Config\Status\ , LongSubPath: Sophos\Sophos Network Threat Protection\Config\Status\ , ShortSubPath: Sophos\hv6uh-kp\Config\Status\ MSI (s) (28:0C) [10:08:50:734]: Note: 1: 2205 2: 3: ActionText MSI (s) (28:0C) [10:08:50:734]: Note: 1: 2205 2: 3: ActionText MSI (s) (28:0C) [10:08:50:734]: Note: 1: 2205 2: 3: ActionText MSI (s) (28:0C) [10:08:50:734]: Doing action: UnpublishFeatures MSI (s) (28:0C) [10:08:50:734]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: ProcessComponents. Rückgabewert 1. Aktion gestartet um 10:08:50: UnpublishFeatures. MSI (s) (28:0C) [10:08:50:734]: Doing action: SchedSecureObjectsRollback MSI (s) (28:0C) [10:08:50:734]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: UnpublishFeatures. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:734]: Creating MSIHANDLE (92) of type 790542 for thread 4108 MSI (s) (28:24) [10:08:50:734]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF53E.tmp, Entrypoint: SchedSecureObjectsRollback MSI (s) (28:D8) [10:08:50:734]: Generating random cookie. MSI (s) (28:D8) [10:08:50:750]: Created Custom Action Server with PID 5264 (0x1490). MSI (s) (28:90) [10:08:50:766]: Running as a service. MSI (s) (28:90) [10:08:50:766]: Hello, I'm your 32bit Elevated Non-remapped custom action server. MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (93) of type 790541 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (94) of type 790540 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (95) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (96) of type 790531 for thread 3096 Aktion gestartet um 10:08:50: SchedSecureObjectsRollback. MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (96) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (95) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (97) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (98) of type 790531 for thread 3096 SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070002 - continuing MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (98) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (97) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (99) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (100) of type 790531 for thread 3096 SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070003 - continuing MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (100) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (99) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (101) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (102) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (102) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Transforming table ServiceInstall. MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (103) of type 790540 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (104) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (105) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (106) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (106) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (104) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (105) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (103) of type 790540 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (107) of type 790531 for thread 3096 SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070003 - continuing MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (107) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (101) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (108) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (109) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (109) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Transforming table ServiceInstall. MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (110) of type 790540 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (111) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (112) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (113) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (113) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (111) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (112) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (110) of type 790540 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Creating MSIHANDLE (114) of type 790531 for thread 3096 SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070424 - continuing MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (114) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (108) of type 790531 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (93) of type 790541 for thread 3096 MSI (s) (28!18) [10:08:50:766]: Closing MSIHANDLE (94) of type 790540 for thread 3096 MSI (s) (28:24) [10:08:50:766]: Closing MSIHANDLE (92) of type 790542 for thread 4108 SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070424 - continuing MSI (s) (28:0C) [10:08:50:766]: Doing action: SetUnregisterManagementAdapterRollback MSI (s) (28:0C) [10:08:50:766]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: SchedSecureObjectsRollback. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:766]: PROPERTY CHANGE: Adding UnregisterManagementAdapterRollback property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll'. Aktion gestartet um 10:08:50: SetUnregisterManagementAdapterRollback. MSI (s) (28:0C) [10:08:50:766]: Skipping action: UnregisterManagementAdapterRollback (condition is false) MSI (s) (28:0C) [10:08:50:766]: Skipping action: UnregisterManagementAdapter (condition is false) MSI (s) (28:0C) [10:08:50:766]: Doing action: StopServices MSI (s) (28:0C) [10:08:50:766]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: SetUnregisterManagementAdapterRollback. Rückgabewert 1. Aktion gestartet um 10:08:50: StopServices. MSI (s) (28:0C) [10:08:50:766]: Skipping action: CleanUpSsspUserAccount.SetProperty (condition is false) MSI (s) (28:0C) [10:08:50:766]: Skipping action: CleanUpSsspUserAccountRollback.SetProperty (condition is false) MSI (s) (28:0C) [10:08:50:766]: Skipping action: CleanUpSsspUserAccountRollback (condition is false) MSI (s) (28:0C) [10:08:50:766]: Skipping action: CleanUpSsspUserAccount (condition is false) MSI (s) (28:0C) [10:08:50:766]: Skipping action: RemoveSIPSSubmitterUserAccount.SetProperty (condition is false) MSI (s) (28:0C) [10:08:50:766]: Skipping action: RemoveSIPSSubmitterUserAccountRollback.SetProperty (condition is false) MSI (s) (28:0C) [10:08:50:766]: Skipping action: RemoveSIPSSubmitterUserAccountRollback (condition is false) MSI (s) (28:0C) [10:08:50:766]: Skipping action: RemoveSIPSSubmitterUserAccount (condition is false) MSI (s) (28:0C) [10:08:50:766]: Doing action: DeleteServices MSI (s) (28:0C) [10:08:50:766]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: StopServices. Rückgabewert 1. Aktion gestartet um 10:08:50: DeleteServices. MSI (s) (28:0C) [10:08:50:766]: Doing action: UnregisterTypeLibraries MSI (s) (28:0C) [10:08:50:766]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: DeleteServices. Rückgabewert 1. Aktion gestartet um 10:08:50: UnregisterTypeLibraries. MSI (s) (28:0C) [10:08:50:766]: Doing action: RemoveRegistryValues MSI (s) (28:0C) [10:08:50:766]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: UnregisterTypeLibraries. Rückgabewert 1. Aktion gestartet um 10:08:50: RemoveRegistryValues. MSI (s) (28:0C) [10:08:50:766]: Doing action: ConfigureEventManifestUnregister MSI (s) (28:0C) [10:08:50:766]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: RemoveRegistryValues. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:766]: Creating MSIHANDLE (115) of type 790542 for thread 4108 MSI (s) (28:D8) [10:08:50:766]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF55F.tmp, Entrypoint: ConfigureEventManifestUnregister MSI (s) (28!34) [10:08:50:781]: Creating MSIHANDLE (116) of type 790541 for thread 4916 MSI (s) (28!34) [10:08:50:781]: Creating MSIHANDLE (117) of type 790531 for thread 4916 MSI (s) (28!34) [10:08:50:781]: Closing MSIHANDLE (117) of type 790531 for thread 4916 MSI (s) (28!34) [10:08:50:781]: Creating MSIHANDLE (118) of type 790540 for thread 4916 MSI (s) (28!34) [10:08:50:781]: Creating MSIHANDLE (119) of type 790531 for thread 4916 MSI (s) (28!34) [10:08:50:781]: Closing MSIHANDLE (119) of type 790531 for thread 4916 MSI (s) (28!34) [10:08:50:781]: Closing MSIHANDLE (116) of type 790541 for thread 4916 MSI (s) (28!34) [10:08:50:781]: Closing MSIHANDLE (118) of type 790540 for thread 4916 MSI (s) (28:D8) [10:08:50:781]: Closing MSIHANDLE (115) of type 790542 for thread 4108 Aktion gestartet um 10:08:50: ConfigureEventManifestUnregister. MSI (s) (28:0C) [10:08:50:781]: Skipping action: RemoveLogFiles.Property (condition is false) MSI (s) (28:0C) [10:08:50:781]: Skipping action: RemoveLogFiles (condition is false) MSI (s) (28:0C) [10:08:50:781]: Skipping action: RemovePolicyFile.Property (condition is false) MSI (s) (28:0C) [10:08:50:781]: Skipping action: RemovePolicyFile (condition is false) MSI (s) (28:0C) [10:08:50:781]: Skipping action: RemoveStatusFile.Property (condition is false) MSI (s) (28:0C) [10:08:50:781]: Skipping action: RemoveStatusFile (condition is false) MSI (s) (28:0C) [10:08:50:781]: Doing action: RemoveFiles MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: ConfigureEventManifestUnregister. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2205 2: 3: RemoveFile MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2205 2: 3: RemoveFile Aktion gestartet um 10:08:50: RemoveFiles. MSI (s) (28:0C) [10:08:50:781]: Doing action: RemoveFolders MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: RemoveFiles. Rückgabewert 0. Aktion gestartet um 10:08:50: RemoveFolders. MSI (s) (28:0C) [10:08:50:781]: Doing action: CreateFolders MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: RemoveFolders. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:781]: Using well known SID for System MSI (s) (28:0C) [10:08:50:781]: Finished allocating new user SID MSI (s) (28:0C) [10:08:50:781]: Using well known SID for Administrators MSI (s) (28:0C) [10:08:50:781]: Finished allocating new user SID Aktion gestartet um 10:08:50: CreateFolders. MSI (s) (28:0C) [10:08:50:781]: Doing action: InstallFiles MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: CreateFolders. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'Sntp.sys' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'navl.dll' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'ip.plg' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'ipv6.plg' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'tcp.plg' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'http.plg' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'udp.plg' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'portmap.plg' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'SntpService.exe' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'NTPAdapter.dll' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'BPAIF.dll' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'Sntp.inf' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'Sntp.cat' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'Sntp.man' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'F_CENTRAL_msvcr120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'F_CENTRAL_msvcp120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA' has no eligible binary patches MSI (s) (28:0C) [10:08:50:781]: The file represented by File table key 'F_CENTRAL_vccorlib120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA' has no eligible binary patches Aktion gestartet um 10:08:50: InstallFiles. MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2205 2: 3: Patch MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence` MSI (s) (28:0C) [10:08:50:781]: Transforming table Error. MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2205 2: 3: MsiSFCBypass MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2228 2: 3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ? MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ? MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (28:0C) [10:08:50:781]: Transforming table Property. MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2205 2: 3: Patch MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (28:0C) [10:08:50:781]: Using cached product context: machine assigned for product: 21EE4A31AE32173319EEFE3BD6FDFFE3 MSI (s) (28:0C) [10:08:50:781]: Using cached product context: machine assigned for product: 21EE4A31AE32173319EEFE3BD6FDFFE3 MSI (s) (28:0C) [10:08:50:781]: Using cached product context: machine assigned for product: 21EE4A31AE32173319EEFE3BD6FDFFE3 MSI (s) (28:0C) [10:08:50:781]: Using cached product context: machine assigned for product: 21EE4A31AE32173319EEFE3BD6FDFFE3 MSI (s) (28:0C) [10:08:50:781]: Using cached product context: machine assigned for product: 21EE4A31AE32173319EEFE3BD6FDFFE3 MSI (s) (28:0C) [10:08:50:781]: Using cached product context: machine assigned for product: 21EE4A31AE32173319EEFE3BD6FDFFE3 MSI (s) (28:0C) [10:08:50:781]: Transforming table Property. MSI (s) (28:0C) [10:08:50:781]: Using cached product context: machine assigned for product: 68AB67CA7DA7FFFFB744CAF070E41400 MSI (s) (28:0C) [10:08:50:781]: Using cached product context: machine assigned for product: 68AB67CA7DA7FFFFB744CAF070E41400 MSI (s) (28:0C) [10:08:50:781]: Using cached product context: machine assigned for product: 68AB67CA7DA7FFFFB744CAF070E41400 MSI (s) (28:0C) [10:08:50:781]: Using cached product context: machine assigned for product: 68AB67CA7DA7FFFFB744CAF070E41400 MSI (s) (28:0C) [10:08:50:781]: Using cached product context: machine assigned for product: 68AB67CA7DA7FFFFB744CAF070E41400 MSI (s) (28:0C) [10:08:50:781]: Using cached product context: machine assigned for product: 68AB67CA7DA7FFFFB744CAF070E41400 MSI (s) (28:0C) [10:08:50:781]: Transforming table Property. MSI (s) (28:0C) [10:08:50:781]: Note: 1: 2203 2: 3: 0 MSI (s) (28:0C) [10:08:50:797]: Transforming table Property. MSI (s) (28:0C) [10:08:50:797]: Note: 1: 2205 2: 3: Patch MSI (s) (28:0C) [10:08:50:797]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (28:0C) [10:08:50:797]: Transforming table Property. MSI (s) (28:0C) [10:08:50:797]: Transforming table Property. MSI (s) (28:0C) [10:08:50:797]: Note: 1: 2203 2: 3: 0 MSI (s) (28:0C) [10:08:50:797]: Transforming table Property. MSI (s) (28:0C) [10:08:50:797]: Note: 1: 2205 2: 3: Patch MSI (s) (28:0C) [10:08:50:797]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (28:0C) [10:08:50:797]: Transforming table Property. MSI (s) (28:0C) [10:08:50:797]: Transforming table Property. MSI (s) (28:0C) [10:08:50:797]: Note: 1: 2203 2: 3: 0 MSI (s) (28:0C) [10:08:50:797]: Skipping action: FixupDIFxAppRegistry (condition is false) MSI (s) (28:0C) [10:08:50:797]: Doing action: MsiProcessDrivers MSI (s) (28:0C) [10:08:50:797]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: InstallFiles. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:797]: Creating MSIHANDLE (120) of type 790542 for thread 4108 MSI (s) (28:04) [10:08:50:797]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF57F.tmp, Entrypoint: ProcessDriverPackages MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (121) of type 790531 for thread 7216 Aktion gestartet um 10:08:50: MsiProcessDrivers. MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (121) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (122) of type 790541 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (123) of type 790540 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (124) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (125) of type 790531 for thread 7216 DIFXAPP: ENTER: ProcessDriverPackages() MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (125) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (126) of type 790531 for thread 7216 DIFXAPP: INFO: 'Component' is 'Driver' MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (126) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (127) of type 790541 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (128) of type 790540 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (129) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (129) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (128) of type 790540 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (127) of type 790541 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (130) of type 790531 for thread 7216 DIFXAPP: INFO: Component state 0x2 -> 0x3 MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (130) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (131) of type 790531 for thread 7216 DIFXAPP: INFO: 'ComponentId' is {76F354A6-97D5-4872-9781-2F2642A4F18A} MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (131) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (132) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (133) of type 790531 for thread 7216 DIFXAPP: INFO: 'Flags' is 21 MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (133) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (134) of type 790531 for thread 7216 DIFXAPP: INFO: component path is C:\Program Files\Sophos\Sophos Network Threat Protection\bin\ MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (134) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (135) of type 790531 for thread 7216 DIFXAPP: INFO: user SID of user performing the install is 'S-1-5-18'. MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (135) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: PROPERTY CHANGE: Adding MsiRollbackInstall property. Its value is '2.12{76F354A6-97D5-4872-9781-2F2642A4F18A}212Sophos Network Threat ProtectionSophos Limited'. MSI (s) (28!30) [10:08:50:797]: Doing action: MsiRollbackInstall MSI (s) (28!30) [10:08:50:797]: Note: 1: 2205 2: 3: ActionText DIFXAPP: INFO: creating HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\DIFxApp\Components\{76F354A6-97D5-4872-9781-2F2642A4F18A} (User's SID: 'S-1-5-18') ... Aktion gestartet um 10:08:50: MsiRollbackInstall. MSI (s) (28!30) [10:08:50:797]: PROPERTY CHANGE: Adding MsiInstallDrivers property. Its value is '2.12{76F354A6-97D5-4872-9781-2F2642A4F18A}C:\Program Files\Sophos\Sophos Network Threat Protection\bin\212Sophos Network Threat ProtectionSophos Limited'. MSI (s) (28!30) [10:08:50:797]: Doing action: MsiInstallDrivers MSI (s) (28!30) [10:08:50:797]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: MsiRollbackInstall. Rückgabewert 1. Aktion gestartet um 10:08:50: MsiInstallDrivers. MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (132) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (124) of type 790531 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (123) of type 790540 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (122) of type 790541 for thread 7216 MSI (s) (28!30) [10:08:50:797]: Creating MSIHANDLE (136) of type 790531 for thread 7216 Aktion beendet um 10:08:50: MsiInstallDrivers. Rückgabewert 1. MSI (s) (28!30) [10:08:50:797]: Closing MSIHANDLE (136) of type 790531 for thread 7216 MSI (s) (28:04) [10:08:50:797]: Closing MSIHANDLE (120) of type 790542 for thread 4108 DIFXAPP: RETURN: ProcessDriverPackages() 0 (0x0) MSI (s) (28:0C) [10:08:50:797]: Doing action: DuplicateFiles MSI (s) (28:0C) [10:08:50:797]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: MsiProcessDrivers. Rückgabewert 1. Aktion gestartet um 10:08:50: DuplicateFiles. MSI (s) (28:0C) [10:08:50:797]: Doing action: SchedXmlFile MSI (s) (28:0C) [10:08:50:797]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: DuplicateFiles. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:812]: Creating MSIHANDLE (137) of type 790542 for thread 4108 MSI (s) (28:B4) [10:08:50:812]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF58F.tmp, Entrypoint: SchedXmlFile MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (138) of type 790541 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (139) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (139) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (140) of type 790540 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (141) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (142) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (142) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (143) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (143) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (144) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (144) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (145) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (145) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (141) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (146) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (147) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (147) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (148) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (148) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (149) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (149) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (150) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (150) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (146) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (140) of type 790540 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: PROPERTY CHANGE: Adding ExecXmlFile property. Its value is '1€0€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man€7€1€/*/*/*/*[@messageFileName]€messageFileName€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys€1€0€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man€7€1€/*/*/*/*[@resourceFileName]€resourceFileName€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys'. MSI (s) (28!A8) [10:08:50:812]: Creating MSIHANDLE (151) of type 790531 for thread 1960 Aktion gestartet um 10:08:50: SchedXmlFile. MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (151) of type 790531 for thread 1960 MSI (s) (28!A8) [10:08:50:812]: Doing action: ExecXmlFile MSI (s) (28!A8) [10:08:50:812]: Note: 1: 2205 2: 3: ActionText Aktion gestartet um 10:08:50: ExecXmlFile. MSI (s) (28!A8) [10:08:50:812]: Closing MSIHANDLE (138) of type 790541 for thread 1960 MSI (s) (28:B4) [10:08:50:812]: Closing MSIHANDLE (137) of type 790542 for thread 4108 Aktion beendet um 10:08:50: ExecXmlFile. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:812]: Doing action: ConfigureEventManifestRegister MSI (s) (28:0C) [10:08:50:812]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: SchedXmlFile. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:812]: Creating MSIHANDLE (152) of type 790542 for thread 4108 MSI (s) (28:38) [10:08:50:812]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF590.tmp, Entrypoint: ConfigureEventManifestRegister MSI (s) (28!E4) [10:08:50:812]: Creating MSIHANDLE (153) of type 790541 for thread 3300 MSI (s) (28!E4) [10:08:50:812]: Creating MSIHANDLE (154) of type 790531 for thread 3300 MSI (s) (28!E4) [10:08:50:812]: Closing MSIHANDLE (154) of type 790531 for thread 3300 MSI (s) (28!E4) [10:08:50:812]: Creating MSIHANDLE (155) of type 790540 for thread 3300 MSI (s) (28!E4) [10:08:50:812]: Creating MSIHANDLE (156) of type 790531 for thread 3300 MSI (s) (28!E4) [10:08:50:812]: Creating MSIHANDLE (157) of type 790531 for thread 3300 MSI (s) (28!E4) [10:08:50:812]: Closing MSIHANDLE (157) of type 790531 for thread 3300 MSI (s) (28!E4) [10:08:50:812]: PROPERTY CHANGE: Adding RollbackRegisterEventManifest property. Its value is '"wevtutil.exe" um "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man"'. MSI (s) (28!E4) [10:08:50:812]: Creating MSIHANDLE (158) of type 790531 for thread 3300 Aktion gestartet um 10:08:50: ConfigureEventManifestRegister. MSI (s) (28!E4) [10:08:50:828]: Closing MSIHANDLE (158) of type 790531 for thread 3300 MSI (s) (28!E4) [10:08:50:828]: Doing action: RollbackRegisterEventManifest MSI (s) (28!E4) [10:08:50:828]: Note: 1: 2205 2: 3: ActionText Aktion gestartet um 10:08:50: RollbackRegisterEventManifest. MSI (s) (28!E4) [10:08:50:828]: PROPERTY CHANGE: Adding RegisterEventManifest property. Its value is '"wevtutil.exe" im "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man"'. MSI (s) (28!E4) [10:08:50:828]: Creating MSIHANDLE (159) of type 790531 for thread 3300 Aktion beendet um 10:08:50: RollbackRegisterEventManifest. Rückgabewert 1. MSI (s) (28!E4) [10:08:50:828]: Closing MSIHANDLE (159) of type 790531 for thread 3300 MSI (s) (28!E4) [10:08:50:828]: Doing action: RegisterEventManifest MSI (s) (28!E4) [10:08:50:828]: Note: 1: 2205 2: 3: ActionText Aktion gestartet um 10:08:50: RegisterEventManifest. MSI (s) (28!E4) [10:08:50:828]: Closing MSIHANDLE (156) of type 790531 for thread 3300 MSI (s) (28!E4) [10:08:50:828]: Closing MSIHANDLE (153) of type 790541 for thread 3300 MSI (s) (28!E4) [10:08:50:828]: Closing MSIHANDLE (155) of type 790540 for thread 3300 MSI (s) (28:38) [10:08:50:828]: Closing MSIHANDLE (152) of type 790542 for thread 4108 Aktion beendet um 10:08:50: RegisterEventManifest. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:828]: Doing action: WriteRegistryValues MSI (s) (28:0C) [10:08:50:828]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: ConfigureEventManifestRegister. Rückgabewert 1. Aktion gestartet um 10:08:50: WriteRegistryValues. MSI (s) (28:0C) [10:08:50:828]: Doing action: RegisterTypeLibraries MSI (s) (28:0C) [10:08:50:828]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: WriteRegistryValues. Rückgabewert 1. Aktion gestartet um 10:08:50: RegisterTypeLibraries. MSI (s) (28:0C) [10:08:50:828]: Doing action: InstallServices MSI (s) (28:0C) [10:08:50:828]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: RegisterTypeLibraries. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:828]: Transforming table ServiceInstall. Aktion gestartet um 10:08:50: InstallServices. MSI (s) (28:0C) [10:08:50:828]: Doing action: AddSIPSSubmitterUserAccount.SetProperty MSI (s) (28:0C) [10:08:50:828]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: InstallServices. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:828]: PROPERTY CHANGE: Adding AddSIPSSubmitterUserAccount property. Its value is 'NT SERVICE\SntpService'. Aktion gestartet um 10:08:50: AddSIPSSubmitterUserAccount.SetProperty. MSI (s) (28:0C) [10:08:50:828]: Doing action: AddSIPSSubmitterUserAccountRollback.SetProperty MSI (s) (28:0C) [10:08:50:828]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: AddSIPSSubmitterUserAccount.SetProperty. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:828]: PROPERTY CHANGE: Adding AddSIPSSubmitterUserAccountRollback property. Its value is 'NT SERVICE\SntpService'. Aktion gestartet um 10:08:50: AddSIPSSubmitterUserAccountRollback.SetProperty. MSI (s) (28:0C) [10:08:50:828]: Doing action: AddSIPSSubmitterUserAccountRollback MSI (s) (28:0C) [10:08:50:828]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: AddSIPSSubmitterUserAccountRollback.SetProperty. Rückgabewert 1. Aktion gestartet um 10:08:50: AddSIPSSubmitterUserAccountRollback. MSI (s) (28:0C) [10:08:50:828]: Doing action: AddSIPSSubmitterUserAccount MSI (s) (28:0C) [10:08:50:828]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: AddSIPSSubmitterUserAccountRollback. Rückgabewert 1. Aktion gestartet um 10:08:50: AddSIPSSubmitterUserAccount. MSI (s) (28:0C) [10:08:50:828]: Doing action: SchedSecureObjects MSI (s) (28:0C) [10:08:50:828]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: AddSIPSSubmitterUserAccount. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:828]: Creating MSIHANDLE (160) of type 790542 for thread 4108 MSI (s) (28:80) [10:08:50:828]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF5A1.tmp, Entrypoint: SchedSecureObjects MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (161) of type 790541 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (162) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (162) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (163) of type 790540 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (164) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (165) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (165) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (164) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (166) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (167) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (167) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (166) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (168) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (169) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (169) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (168) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (170) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (171) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (171) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Transforming table ServiceInstall. MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (172) of type 790540 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (173) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (174) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (175) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (175) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (173) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (174) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (172) of type 790540 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (176) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (176) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (170) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (177) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (178) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (178) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Transforming table ServiceInstall. MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (179) of type 790540 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (180) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (181) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (182) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (182) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (180) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (181) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (179) of type 790540 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (183) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (183) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (177) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: PROPERTY CHANGE: Adding ExecSecureObjects property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\€CreateFolder€€NT SERVICE\sntpservice€-2147483647€C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\€CreateFolder€€NT SERVICE\sntpservice€278€C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\€CreateFolder€€NT SERVICE\sntpservice€278€SntpService€ServiceInstall€€Administrators€983551€SntpService€ServiceInstall€€Everyone€-2147483632'. MSI (s) (28!F0) [10:08:50:828]: Creating MSIHANDLE (184) of type 790531 for thread 2800 Aktion gestartet um 10:08:50: SchedSecureObjects. MSI (s) (28!F0) [10:08:50:828]: Closing MSIHANDLE (184) of type 790531 for thread 2800 MSI (s) (28!F0) [10:08:50:828]: Doing action: ExecSecureObjects MSI (s) (28!F0) [10:08:50:828]: Note: 1: 2205 2: 3: ActionText Aktion gestartet um 10:08:50: ExecSecureObjects. MSI (s) (28!F0) [10:08:50:844]: Closing MSIHANDLE (161) of type 790541 for thread 2800 MSI (s) (28!F0) [10:08:50:844]: Closing MSIHANDLE (163) of type 790540 for thread 2800 MSI (s) (28:80) [10:08:50:844]: Closing MSIHANDLE (160) of type 790542 for thread 4108 Aktion beendet um 10:08:50: ExecSecureObjects. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:844]: Doing action: SchedServiceConfig MSI (s) (28:0C) [10:08:50:844]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: SchedSecureObjects. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:844]: Creating MSIHANDLE (185) of type 790542 for thread 4108 MSI (s) (28:A0) [10:08:50:844]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF5B2.tmp, Entrypoint: SchedServiceConfig MSI (s) (28!60) [10:08:50:844]: Creating MSIHANDLE (186) of type 790541 for thread 5216 MSI (s) (28!60) [10:08:50:844]: Creating MSIHANDLE (187) of type 790540 for thread 5216 MSI (s) (28!60) [10:08:50:844]: Creating MSIHANDLE (188) of type 790531 for thread 5216 MSI (s) (28!60) [10:08:50:844]: Creating MSIHANDLE (189) of type 790531 for thread 5216 MSI (s) (28!60) [10:08:50:844]: Closing MSIHANDLE (189) of type 790531 for thread 5216 MSI (s) (28!60) [10:08:50:844]: Closing MSIHANDLE (188) of type 790531 for thread 5216 MSI (s) (28!60) [10:08:50:844]: PROPERTY CHANGE: Adding RollbackServiceConfig property. Its value is 'SchedServiceConfig'. MSI (s) (28!60) [10:08:50:844]: Creating MSIHANDLE (190) of type 790531 for thread 5216 Aktion gestartet um 10:08:50: SchedServiceConfig. MSI (s) (28!60) [10:08:50:844]: Closing MSIHANDLE (190) of type 790531 for thread 5216 MSI (s) (28!60) [10:08:50:844]: Doing action: RollbackServiceConfig MSI (s) (28!60) [10:08:50:844]: Note: 1: 2205 2: 3: ActionText Aktion gestartet um 10:08:50: RollbackServiceConfig. MSI (s) (28!60) [10:08:50:844]: PROPERTY CHANGE: Adding ExecServiceConfig property. Its value is 'SchedServiceConfig€SntpService€0€restart€restart€none€1€120€€'. MSI (s) (28!60) [10:08:50:844]: Creating MSIHANDLE (191) of type 790531 for thread 5216 Aktion beendet um 10:08:50: RollbackServiceConfig. Rückgabewert 1. MSI (s) (28!60) [10:08:50:844]: Closing MSIHANDLE (191) of type 790531 for thread 5216 MSI (s) (28!60) [10:08:50:844]: Doing action: ExecServiceConfig MSI (s) (28!60) [10:08:50:844]: Note: 1: 2205 2: 3: ActionText Aktion gestartet um 10:08:50: ExecServiceConfig. MSI (s) (28!60) [10:08:50:844]: Closing MSIHANDLE (186) of type 790541 for thread 5216 MSI (s) (28!60) [10:08:50:844]: Closing MSIHANDLE (187) of type 790540 for thread 5216 MSI (s) (28:A0) [10:08:50:844]: Closing MSIHANDLE (185) of type 790542 for thread 4108 Aktion beendet um 10:08:50: ExecServiceConfig. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:844]: Doing action: SetupSspUserAccount.SetProperty MSI (s) (28:0C) [10:08:50:844]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: SchedServiceConfig. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:844]: PROPERTY CHANGE: Adding SetupSspUserAccount property. Its value is 'NT SERVICE\sntpservice'. Aktion gestartet um 10:08:50: SetupSspUserAccount.SetProperty. MSI (s) (28:0C) [10:08:50:844]: Doing action: SetupSspUserAccountRollback.SetProperty MSI (s) (28:0C) [10:08:50:844]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: SetupSspUserAccount.SetProperty. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:844]: PROPERTY CHANGE: Adding SetupSspUserAccountRollback property. Its value is 'NT SERVICE\sntpservice'. Aktion gestartet um 10:08:50: SetupSspUserAccountRollback.SetProperty. MSI (s) (28:0C) [10:08:50:844]: Doing action: SetupSspUserAccountRollback MSI (s) (28:0C) [10:08:50:844]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: SetupSspUserAccountRollback.SetProperty. Rückgabewert 1. Aktion gestartet um 10:08:50: SetupSspUserAccountRollback. MSI (s) (28:0C) [10:08:50:844]: Doing action: SetupSspUserAccount MSI (s) (28:0C) [10:08:50:844]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: SetupSspUserAccountRollback. Rückgabewert 1. Aktion gestartet um 10:08:50: SetupSspUserAccount. MSI (s) (28:0C) [10:08:50:844]: Doing action: MsiConfigureServices MSI (s) (28:0C) [10:08:50:844]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: SetupSspUserAccount. Rückgabewert 1. Aktion gestartet um 10:08:50: MsiConfigureServices. MSI (s) (28:0C) [10:08:50:844]: Note: 1: 2205 2: 3: MsiServiceConfigFailureActions MSI (s) (28:0C) [10:08:50:844]: Note: 1: 2228 2: 3: MsiServiceConfigFailureActions 4: SELECT `Name`, `Event`, `ResetPeriod`, `RebootMessage`,`Command`, `Actions`, `DelayActions`, `Action` FROM `MsiServiceConfigFailureActions`, `Component` WHERE `Component_` = `Component` AND (`Action` = 0 OR `Action` = 1 OR `Action` = 3) MSI (s) (28:0C) [10:08:50:844]: Doing action: StartServices MSI (s) (28:0C) [10:08:50:844]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: MsiConfigureServices. Rückgabewert 1. Aktion gestartet um 10:08:50: StartServices. MSI (s) (28:0C) [10:08:50:844]: Doing action: RegisterManagementAdapterRollback MSI (s) (28:0C) [10:08:50:844]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: StartServices. Rückgabewert 1. Aktion gestartet um 10:08:50: RegisterManagementAdapterRollback. MSI (s) (28:0C) [10:08:50:844]: Doing action: SetRegisterManagementAdapter MSI (s) (28:0C) [10:08:50:844]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: RegisterManagementAdapterRollback. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:844]: PROPERTY CHANGE: Adding RegisterManagementAdapter property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll'. Aktion gestartet um 10:08:50: SetRegisterManagementAdapter. MSI (s) (28:0C) [10:08:50:844]: Doing action: RegisterManagementAdapter MSI (s) (28:0C) [10:08:50:844]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: SetRegisterManagementAdapter. Rückgabewert 1. Aktion gestartet um 10:08:50: RegisterManagementAdapter. MSI (s) (28:0C) [10:08:50:859]: Doing action: RegisterUser MSI (s) (28:0C) [10:08:50:859]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: RegisterManagementAdapter. Rückgabewert 1. Aktion gestartet um 10:08:50: RegisterUser. MSI (s) (28:0C) [10:08:50:859]: Doing action: RegisterProduct MSI (s) (28:0C) [10:08:50:859]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: RegisterUser. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:859]: Transforming table Error. Aktion gestartet um 10:08:50: RegisterProduct. MSI (s) (28:0C) [10:08:50:859]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'. MSI (s) (28:0C) [10:08:50:859]: Doing action: PublishFeatures MSI (s) (28:0C) [10:08:50:859]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: RegisterProduct. Rückgabewert 1. Aktion gestartet um 10:08:50: PublishFeatures. MSI (s) (28:0C) [10:08:50:859]: Doing action: PublishProduct MSI (s) (28:0C) [10:08:50:859]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: PublishFeatures. Rückgabewert 1. Aktion gestartet um 10:08:50: PublishProduct. MSI (s) (28:0C) [10:08:50:859]: Skipping action: WixFailWhenDeferred (condition is false) MSI (s) (28:0C) [10:08:50:859]: Doing action: InstallFinalize MSI (s) (28:0C) [10:08:50:859]: Note: 1: 2205 2: 3: ActionText Aktion beendet um 10:08:50: PublishProduct. Rückgabewert 1. MSI (s) (28:0C) [10:08:50:859]: Running Script: C:\Windows\Installer\MSIF53D.tmp MSI (s) (28:0C) [10:08:50:859]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'. MSI (s) (28:0C) [10:08:50:859]: Machine policy value 'DisableRollback' is 0 MSI (s) (28:0C) [10:08:50:859]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (28:0C) [10:08:50:859]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1258049818,LangId=1031,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1) Aktion gestartet um 10:08:50: InstallFinalize. MSI (s) (28:0C) [10:08:50:859]: Executing op: ProductInfo(ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},ProductName=Sophos Network Threat Protection,PackageName=Sophos Network Threat Protection.msi,Language=1031,Version=16908290,Assignment=1,ObsoleteArg=0,ProductIcon=shield.ico,,PackageCode={B1DE62EA-C23B-42DE-A241-33A0818A4746},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3) MSI (s) (28:0C) [10:08:50:859]: Executing op: DialogInfo(Type=0,Argument=1031) MSI (s) (28:0C) [10:08:50:859]: Executing op: DialogInfo(Type=1,Argument=Sophos Network Threat Protection) MSI (s) (28:0C) [10:08:50:859]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Aktion wird rückgängig gemacht:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Sicherungsdateien werden entfernt,CleanupTemplate=Datei: [1]) MSI (s) (28:0C) [10:08:50:859]: Executing op: SetBaseline(Baseline=0,) MSI (s) (28:0C) [10:08:50:859]: Executing op: SetBaseline(Baseline=1,) MSI (s) (28:0C) [10:08:50:859]: Executing op: ActionStart(Name=ProcessComponents,Description=Komponentenregistrierung wird aktualisiert.,) MSI (s) (28:0C) [10:08:50:859]: Executing op: ProgressTotal(Total=20,Type=1,ByteEquivalent=24000) MSI (s) (28:0C) [10:08:50:859]: Executing op: ComponentRegister(ComponentId={E1E87C49-DD4A-4C77-8D42-3ACD20DBC536},KeyPath=C:\ProgramData\Sophos\Sophos Network Threat Protection\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (28:0C) [10:08:50:859]: Executing op: ComponentRegister(ComponentId={4D81D62C-8373-45B8-ABF2-0C0D6ED2DE34},KeyPath=C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (28:0C) [10:08:50:859]: Executing op: ComponentRegister(ComponentId={74F91047-4C42-457F-B531-A83EF6EC85E2},KeyPath=C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (28:0C) [10:08:50:859]: Executing op: ComponentRegister(ComponentId={F1B8B8D7-46D7-4CA9-B109-35931536EA8A},KeyPath=C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (28:0C) [10:08:50:859]: Executing op: ComponentRegister(ComponentId={76F354A6-97D5-4872-9781-2F2642A4F18A},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (28:0C) [10:08:50:859]: Executing op: ComponentRegister(ComponentId={355DC0F9-A6B5-4FCA-8121-00847E59A436},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\navl.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (28:0C) [10:08:50:859]: Executing op: ComponentRegister(ComponentId={9B222529-2B29-4547-AAEA-9C8A0423595B},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ip.plg,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ComponentRegister(ComponentId={1A0CA7AD-4F12-4887-809E-96D79A66CC7F},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ipv6.plg,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ComponentRegister(ComponentId={F27D2FBB-5E0B-4351-82CE-E72D4F1EDE71},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\tcp.plg,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ComponentRegister(ComponentId={D45EF81E-13E2-45D6-9DA9-09FD21266A06},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\http.plg,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ComponentRegister(ComponentId={710F5A00-8ECC-402C-910E-6096F350A923},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\udp.plg,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ComponentRegister(ComponentId={411E659C-FCB0-4BA0-9E87-A88C4E28174F},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\portmap.plg,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ComponentRegister(ComponentId={38879DEA-36FA-41BE-ACF3-B084CB40689B},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ComponentRegister(ComponentId={DF927ABB-6A5F-44F2-A430-137AAC79AA71},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\SntpService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ComponentRegister(ComponentId={4E691ABE-115D-4721-9F9A-3547D17077C5},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ComponentRegister(ComponentId={B9C8E32A-5EB9-4B7F-91AF-9FD883FB729C},KeyPath=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\BPAIF.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ComponentRegister(ComponentId={1B63A9FF-509B-4CD9-BA54-256A7D62B724},KeyPath=C:\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ComponentRegister(ComponentId={0835C947-D6D2-4E52-AF14-0231D04E88EA},KeyPath=C:\Windows\system32\msvcr120.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ComponentRegister(ComponentId={74260D9F-D644-423B-B2D4-0291EA4BA8BE},KeyPath=C:\Windows\system32\msvcp120.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ComponentRegister(ComponentId={63B83B20-1AB9-4F49-B0B2-4489724CA96C},KeyPath=C:\Windows\system32\vccorlib120.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (28:0C) [10:08:50:875]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200) MSI (s) (28:0C) [10:08:50:875]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,,BinaryType=0,,) MSI (s) (28:0C) [10:08:50:875]: Executing op: ProgressTick() MSI (s) (28:0C) [10:08:50:875]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200) MSI (s) (28:0C) [10:08:50:875]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,,BinaryType=0,,) MSI (s) (28:0C) [10:08:50:875]: Executing op: ProgressTick() MSI (s) (28:0C) [10:08:50:875]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200) MSI (s) (28:0C) [10:08:50:875]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,,BinaryType=0,,) MSI (s) (28:0C) [10:08:50:875]: Executing op: ProgressTick() MSI (s) (28:0C) [10:08:50:875]: Executing op: ActionStart(Name=StopServices,Description=Dienste werden beendet,Template=Dienst: [1]) MSI (s) (28:0C) [10:08:50:875]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000) MSI (s) (28:0C) [10:08:50:875]: Executing op: ServiceControl(,Name=SntpService,Action=2,Wait=1,) MSI (s) (28:0C) [10:08:50:875]: Executing op: ActionStart(Name=RemoveRegistryValues,Description=Systemregistrierungwerte werden entfernt,Template=Schlüssel: [1], Name: [2]) MSI (s) (28:0C) [10:08:50:875]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200) MSI (s) (28:0C) [10:08:50:875]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\AutoUpdate\Products\NTP,,BinaryType=0,,) MSI (s) (28:0C) [10:08:50:875]: Executing op: RegRemoveKey() MSI (s) (28:0C) [10:08:50:875]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Sophos\AutoUpdate\Products\NTP 3: 2 MSI (s) (28:0C) [10:08:50:875]: Executing op: ActionStart(Name=CreateFolders,Description=Ordner werden erstellt,Template=Ordner: [1]) MSI (s) (28:0C) [10:08:50:875]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\,Foreign=0,SecurityDescriptor=BinaryData,) MSI (s) (28:0C) [10:08:50:875]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\,Foreign=0,,) MSI (s) (28:0C) [10:08:50:890]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\,Foreign=0,,) MSI (s) (28:0C) [10:08:50:890]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\,Foreign=0,,) MSI (s) (28:0C) [10:08:50:890]: Executing op: FolderCreate(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\,Foreign=0,,) MSI (s) (28:0C) [10:08:50:890]: Executing op: FolderCreate(Folder=C:\,Foreign=0,,) MSI (s) (28:0C) [10:08:50:890]: Executing op: ActionStart(Name=InstallFiles,Description=Neue Dateien werden kopiert,Template=Datei: [1], Verzeichnis: [9], Größe: [6]) MSI (s) (28:0C) [10:08:50:890]: Executing op: ProgressTotal(Total=4043141,Type=0,ByteEquivalent=1) MSI (s) (28:0C) [10:08:50:890]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\) MSI (s) (28:0C) [10:08:50:890]: Executing op: SetSourceFolder(Folder=1\Sophos\_tph7qnj\bin\|Sophos\Sophos Network Threat Protection\bin\) MSI (s) (28:0C) [10:08:50:890]: Executing op: ChangeMedia(,MediaPrompt=Legen Sie den Datenträger ein: ,,BytesPerTick=65536,CopierType=0,,,,,,IsFirstPhysicalMedia=1) MSI (s) (28:0C) [10:08:50:890]: Executing op: FileCopy(SourceName=BPAIF.dll,SourceCabKey=BPAIF.dll,DestName=BPAIF.dll,Attributes=512,FileSize=221960,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.2.1.3,Language=2057,InstallMode=58982400,,,,,,,) MSI (s) (28:0C) [10:08:50:890]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\BPAIF.dll; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:890]: Source for file 'BPAIF.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\'. MSI (s) (28:0C) [10:08:50:890]: Executing op: SetTargetFolder(Folder=C:\Windows\system32\) MSI (s) (28:0C) [10:08:50:890]: Executing op: SetSourceFolder(Folder=1\Sys\|System\) MSI (s) (28:0C) [10:08:50:890]: Executing op: RegisterSharedComponentProvider(,,File=F_CENTRAL_msvcp120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA,Component={74260D9F-D644-423B-B2D4-0291EA4BA8BE},ComponentVersion=12.0.21005.1,ProductCode={66967E5F-43E8-4402-87A4-04685EE5C2CB},ProductVersion=1.2.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0) MSI (s) (28:0C) [10:08:50:890]: Executing op: FileCopy(SourceName=msvcp120.dll,SourceCabKey=F_CENTRAL_msvcp120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA,DestName=msvcp120.dll,Attributes=512,FileSize=455328,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=12.0.21005.1,Language=1033,InstallMode=58982400,,,,,,,) MSI (s) (28:0C) [10:08:50:890]: File: C:\Windows\system32\msvcp120.dll; Won't Overwrite; Won't patch; Existing file is of an equal version MSI (s) (28:0C) [10:08:50:890]: Executing op: RegisterSharedComponentProvider(,,File=F_CENTRAL_msvcr120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA,Component={0835C947-D6D2-4E52-AF14-0231D04E88EA},ComponentVersion=12.0.21005.1,ProductCode={66967E5F-43E8-4402-87A4-04685EE5C2CB},ProductVersion=1.2.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0) MSI (s) (28:0C) [10:08:50:906]: Executing op: FileCopy(SourceName=msvcr120.dll,SourceCabKey=F_CENTRAL_msvcr120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA,DestName=msvcr120.dll,Attributes=512,FileSize=970912,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=12.0.21005.1,Language=1033,InstallMode=58982400,,,,,,,) MSI (s) (28:0C) [10:08:50:906]: File: C:\Windows\system32\msvcr120.dll; Won't Overwrite; Won't patch; Existing file is of an equal version MSI (s) (28:0C) [10:08:50:906]: Executing op: RegisterSharedComponentProvider(,,File=F_CENTRAL_vccorlib120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA,Component={63B83B20-1AB9-4F49-B0B2-4489724CA96C},ComponentVersion=12.0.21005.1,ProductCode={66967E5F-43E8-4402-87A4-04685EE5C2CB},ProductVersion=1.2.2,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0) MSI (s) (28:0C) [10:08:50:906]: Executing op: FileCopy(SourceName=bxxe4aoo.dll|vccorlib120.dll,SourceCabKey=F_CENTRAL_vccorlib120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA,DestName=vccorlib120.dll,Attributes=512,FileSize=247984,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=12.0.21005.1,Language=1033,InstallMode=58982400,,,,,,,) MSI (s) (28:0C) [10:08:50:906]: File: C:\Windows\system32\vccorlib120.dll; Won't Overwrite; Won't patch; Existing file is of an equal version MSI (s) (28:0C) [10:08:50:906]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\) MSI (s) (28:0C) [10:08:50:906]: Executing op: SetSourceFolder(Folder=1\Sophos\_tph7qnj\bin\plugins\|Sophos\Sophos Network Threat Protection\bin\plugins\) MSI (s) (28:0C) [10:08:50:906]: Executing op: FileCopy(SourceName=http.plg,SourceCabKey=http.plg,DestName=http.plg,Attributes=512,FileSize=181624,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-294280818,HashPart2=1368135876,HashPart3=-260621852,HashPart4=2022176195,,) MSI (s) (28:0C) [10:08:50:906]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\http.plg; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:906]: Source for file 'http.plg' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\plugins\'. MSI (s) (28:0C) [10:08:50:906]: Executing op: FileCopy(SourceName=ip.plg,SourceCabKey=ip.plg,DestName=ip.plg,Attributes=512,FileSize=114104,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=926575482,HashPart2=2124610376,HashPart3=-2110278728,HashPart4=167313593,,) MSI (s) (28:0C) [10:08:50:906]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ip.plg; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:906]: Source for file 'ip.plg' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\plugins\'. MSI (s) (28:0C) [10:08:50:906]: Executing op: FileCopy(SourceName=ipv6.plg,SourceCabKey=ipv6.plg,DestName=ipv6.plg,Attributes=512,FileSize=98504,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1896414223,HashPart2=-524375297,HashPart3=228707616,HashPart4=473762160,,) MSI (s) (28:0C) [10:08:50:906]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ipv6.plg; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:906]: Source for file 'ipv6.plg' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\plugins\'. MSI (s) (28:0C) [10:08:50:906]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\) MSI (s) (28:0C) [10:08:50:906]: Executing op: SetSourceFolder(Folder=1\Sophos\_tph7qnj\bin\|Sophos\Sophos Network Threat Protection\bin\) MSI (s) (28:0C) [10:08:50:906]: Executing op: FileCopy(SourceName=navl.dll,SourceCabKey=navl.dll,DestName=navl.dll,Attributes=512,FileSize=460712,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=4.2.0.26,Language=1033,InstallMode=58982400,,,,,,,) MSI (s) (28:0C) [10:08:50:906]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\navl.dll; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:922]: Source for file 'navl.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\'. MSI (s) (28:0C) [10:08:50:922]: Executing op: FileCopy(SourceName=4tttawjz.dll|NTPAdapter.dll,SourceCabKey=NTPAdapter.dll,DestName=NTPAdapter.dll,Attributes=512,FileSize=132264,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.2.2.50,Language=1033,InstallMode=58982400,,,,,,,) MSI (s) (28:0C) [10:08:50:922]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:922]: Source for file 'NTPAdapter.dll' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\'. MSI (s) (28:0C) [10:08:50:922]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\) MSI (s) (28:0C) [10:08:50:922]: Executing op: SetSourceFolder(Folder=1\Sophos\_tph7qnj\bin\plugins\|Sophos\Sophos Network Threat Protection\bin\plugins\) MSI (s) (28:0C) [10:08:50:922]: Executing op: FileCopy(SourceName=portmap.plg,SourceCabKey=portmap.plg,DestName=portmap.plg,Attributes=512,FileSize=64232,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=705181994,HashPart2=-1197035333,HashPart3=-1778336705,HashPart4=-281195824,,) MSI (s) (28:0C) [10:08:50:922]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\portmap.plg; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:922]: Source for file 'portmap.plg' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\plugins\'. MSI (s) (28:0C) [10:08:50:922]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\) MSI (s) (28:0C) [10:08:50:922]: Executing op: SetSourceFolder(Folder=1\Sophos\_tph7qnj\bin\|Sophos\Sophos Network Threat Protection\bin\) MSI (s) (28:0C) [10:08:50:922]: Executing op: FileCopy(SourceName=Sntp.cat,SourceCabKey=Sntp.cat,DestName=Sntp.cat,Attributes=512,FileSize=19702,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=171331230,HashPart2=1623091971,HashPart3=-1122377751,HashPart4=-517725318,,) MSI (s) (28:0C) [10:08:50:922]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.cat; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:922]: Source for file 'Sntp.cat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\'. MSI (s) (28:0C) [10:08:50:922]: Executing op: FileCopy(SourceName=Sntp.inf,SourceCabKey=Sntp.inf,DestName=Sntp.inf,Attributes=512,FileSize=1669,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=540190727,HashPart2=-1778745258,HashPart3=1573664978,HashPart4=372036710,,) MSI (s) (28:0C) [10:08:50:922]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.inf; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:922]: Source for file 'Sntp.inf' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\'. MSI (s) (28:0C) [10:08:50:922]: Executing op: FileCopy(SourceName=Sntp.man,SourceCabKey=Sntp.man,DestName=Sntp.man,Attributes=512,FileSize=16378,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1118515140,HashPart2=-545138584,HashPart3=-520713038,HashPart4=1289866927,,) MSI (s) (28:0C) [10:08:50:922]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:922]: Source for file 'Sntp.man' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\'. MSI (s) (28:0C) [10:08:50:922]: Executing op: FileCopy(SourceName=Sntp.sys,SourceCabKey=Sntp.sys,DestName=Sntp.sys,Attributes=512,FileSize=102528,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.2.2.50,Language=1033,InstallMode=58982400,,,,,,,) MSI (s) (28:0C) [10:08:50:922]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:922]: Source for file 'Sntp.sys' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\'. MSI (s) (28:0C) [10:08:50:922]: Executing op: FileCopy(SourceName=yfmdjijj.exe|SntpService.exe,SourceCabKey=SntpService.exe,DestName=SntpService.exe,Attributes=512,FileSize=699592,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=1.2.2.50,Language=1033,InstallMode=58982400,,,,,,,) MSI (s) (28:0C) [10:08:50:922]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\SntpService.exe; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:922]: Source for file 'SntpService.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\'. MSI (s) (28:0C) [10:08:50:922]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\) MSI (s) (28:0C) [10:08:50:922]: Executing op: SetSourceFolder(Folder=1\Sophos\_tph7qnj\bin\plugins\|Sophos\Sophos Network Threat Protection\bin\plugins\) MSI (s) (28:0C) [10:08:50:922]: Executing op: FileCopy(SourceName=tcp.plg,SourceCabKey=tcp.plg,DestName=tcp.plg,Attributes=512,FileSize=134824,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=463217894,HashPart2=-1176912136,HashPart3=1607569269,HashPart4=366912198,,) MSI (s) (28:0C) [10:08:50:922]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\tcp.plg; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:922]: Source for file 'tcp.plg' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\plugins\'. MSI (s) (28:0C) [10:08:50:922]: Executing op: FileCopy(SourceName=udp.plg,SourceCabKey=udp.plg,DestName=udp.plg,Attributes=512,FileSize=120824,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=875750253,HashPart2=-12087685,HashPart3=-55407696,HashPart4=561607284,,) MSI (s) (28:0C) [10:08:50:922]: File: C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\udp.plg; To be installed; Won't patch; No existing file MSI (s) (28:0C) [10:08:50:922]: Source for file 'udp.plg' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos\Sophos Network Threat Protection\bin\plugins\'. MSI (s) (28:0C) [10:08:50:922]: Executing op: CacheSizeFlush(,) MSI (s) (28:0C) [10:08:50:922]: Executing op: ActionStart(Name=MsiRollbackInstall,,) MSI (s) (28:0C) [10:08:50:922]: Executing op: CustomActionSchedule(Action=MsiRollbackInstall,ActionType=3329,Source=BinaryData,Target=RollbackInstall,CustomActionData=2.12{76F354A6-97D5-4872-9781-2F2642A4F18A}212Sophos Network Threat ProtectionSophos Limited) MSI (s) (28:0C) [10:08:50:922]: Executing op: ActionStart(Name=MsiInstallDrivers,,) MSI (s) (28:0C) [10:08:50:922]: Executing op: CustomActionSchedule(Action=MsiInstallDrivers,ActionType=3073,Source=BinaryData,Target=InstallDriverPackages,CustomActionData=2.12{76F354A6-97D5-4872-9781-2F2642A4F18A}C:\Program Files\Sophos\Sophos Network Threat Protection\bin\212Sophos Network Threat ProtectionSophos Limited) MSI (s) (28:0C) [10:08:50:922]: Creating MSIHANDLE (192) of type 790536 for thread 4108 MSI (s) (28:58) [10:08:50:922]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF602.tmp, Entrypoint: InstallDriverPackages MSI (s) (28!1C) [10:08:50:937]: Creating MSIHANDLE (193) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:937]: Closing MSIHANDLE (193) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:937]: Creating MSIHANDLE (194) of type 790531 for thread 6940 DIFXAPP: ENTER: InstallDriverPackages() MSI (s) (28!1C) [10:08:50:937]: Closing MSIHANDLE (194) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:937]: Creating MSIHANDLE (195) of type 790531 for thread 6940 DIFXAPP: INFO: 'CustomActionData' property 'DIFxApp Version' is '2.1'. MSI (s) (28!1C) [10:08:50:937]: Closing MSIHANDLE (195) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:937]: Creating MSIHANDLE (196) of type 790531 for thread 6940 DIFXAPP: INFO: 'CustomActionData' property 'UI Level' is '2'. MSI (s) (28!1C) [10:08:50:937]: Closing MSIHANDLE (196) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:937]: Creating MSIHANDLE (197) of type 790531 for thread 6940 DIFXAPP: INFO: 'CustomActionData' property 'componentId' is '{76F354A6-97D5-4872-9781-2F2642A4F18A}'. MSI (s) (28!1C) [10:08:50:937]: Closing MSIHANDLE (197) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:937]: Creating MSIHANDLE (198) of type 790531 for thread 6940 DIFXAPP: INFO: 'CustomActionData' property 'componentPath' is 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\'. MSI (s) (28!1C) [10:08:50:937]: Closing MSIHANDLE (198) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:937]: Creating MSIHANDLE (199) of type 790531 for thread 6940 DIFXAPP: INFO: 'CustomActionData' property 'flags' is 0x15. MSI (s) (28!1C) [10:08:50:937]: Closing MSIHANDLE (199) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:937]: Creating MSIHANDLE (200) of type 790531 for thread 6940 DIFXAPP: INFO: 'CustomActionData' property 'installState' is '2'. MSI (s) (28!1C) [10:08:50:937]: Closing MSIHANDLE (200) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:937]: Creating MSIHANDLE (201) of type 790531 for thread 6940 DIFXAPP: INFO: 'CustomActionData' property 'ProductName' is 'Sophos Network Threat Protection'. MSI (s) (28!1C) [10:08:50:937]: Closing MSIHANDLE (201) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:937]: Creating MSIHANDLE (202) of type 790531 for thread 6940 DIFXAPP: INFO: 'CustomActionData' property 'ManufacturerName' is 'Sophos Limited'. MSI (s) (28!1C) [10:08:50:937]: Closing MSIHANDLE (202) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:937]: Creating MSIHANDLE (203) of type 790531 for thread 6940 DIFXAPP: INFO: user SID of user performing the install is 'S-1-5-18'. MSI (s) (28!1C) [10:08:50:937]: Closing MSIHANDLE (203) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:937]: Creating MSIHANDLE (204) of type 790531 for thread 6940 DIFXAPP: INFO: opening HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\DIFxApp\Components\{76F354A6-97D5-4872-9781-2F2642A4F18A} (User's SID: 'S-1-5-18') ... MSI (s) (28!1C) [10:08:50:937]: Closing MSIHANDLE (204) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:937]: Creating MSIHANDLE (205) of type 790531 for thread 6940 DIFXAPP: INFO: ENTER: DriverPackageInstallW MSI (s) (28!1C) [10:08:50:937]: Closing MSIHANDLE (205) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:984]: Creating MSIHANDLE (206) of type 790531 for thread 6940 DIFXAPP: INFO: Sntp.inf: checking signature with catalog 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\sntp.cat' ... MSI (s) (28!1C) [10:08:50:984]: Closing MSIHANDLE (206) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:984]: Creating MSIHANDLE (207) of type 790531 for thread 6940 DIFXAPP: INFO: Driver package 'Sntp.inf' is Authenticode signed. MSI (s) (28!1C) [10:08:50:984]: Closing MSIHANDLE (207) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:984]: Creating MSIHANDLE (208) of type 790531 for thread 6940 DIFXAPP: INFO: Copied 'Sntp.inf' to driver store... MSI (s) (28!1C) [10:08:50:984]: Closing MSIHANDLE (208) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:984]: Creating MSIHANDLE (209) of type 790531 for thread 6940 DIFXAPP: INFO: Copied 'sntp.cat' to driver store... MSI (s) (28!1C) [10:08:50:984]: Closing MSIHANDLE (209) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:50:984]: Creating MSIHANDLE (210) of type 790531 for thread 6940 DIFXAPP: INFO: Commiting queue... MSI (s) (28!1C) [10:08:50:984]: Closing MSIHANDLE (210) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:000]: Creating MSIHANDLE (211) of type 790531 for thread 6940 DIFXAPP: INFO: Copied file: 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\sntp.sys' -> 'C:\Windows\system32\DRVSTORE\Sntp_D6D5CF16B70BBA6AA93D5B4EE7199CBF8F5E3ABD\sntp.sys'. MSI (s) (28!1C) [10:08:51:000]: Closing MSIHANDLE (211) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:000]: Creating MSIHANDLE (212) of type 790531 for thread 6940 DIFXAPP: INFO: Installing INF file "C:\Windows\system32\DRVSTORE\Sntp_D6D5CF16B70BBA6AA93D5B4EE7199CBF8F5E3ABD\Sntp.inf" of Type 1. MSI (s) (28!1C) [10:08:51:000]: Closing MSIHANDLE (212) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:187]: Creating MSIHANDLE (213) of type 790531 for thread 6940 DIFXAPP: INFO: Installing legacy driver 'C:\Windows\system32\DRVSTORE\Sntp_D6D5CF16B70BBA6AA93D5B4EE7199CBF8F5E3ABD\Sntp.inf' MSI (s) (28!1C) [10:08:51:187]: Closing MSIHANDLE (213) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:187]: Creating MSIHANDLE (214) of type 790531 for thread 6940 DIFXAPP: INFO: Service 'sntp' was started MSI (s) (28!1C) [10:08:51:187]: Closing MSIHANDLE (214) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:187]: Creating MSIHANDLE (215) of type 790531 for thread 6940 DIFXAPP: SUCCESS:Installation completed with code 0x0. MSI (s) (28!1C) [10:08:51:187]: Closing MSIHANDLE (215) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:187]: Creating MSIHANDLE (216) of type 790531 for thread 6940 DIFXAPP: INFO: RETURN: DriverPackageInstallW (0x0) MSI (s) (28!1C) [10:08:51:187]: Closing MSIHANDLE (216) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:187]: Creating MSIHANDLE (217) of type 790531 for thread 6940 DIFXAPP: INFO: ENTER: DriverPackageGetPathW MSI (s) (28!1C) [10:08:51:187]: Closing MSIHANDLE (217) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:187]: Creating MSIHANDLE (218) of type 790531 for thread 6940 DIFXAPP: SUCCESS:Found driver store entry. MSI (s) (28!1C) [10:08:51:187]: Closing MSIHANDLE (218) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:187]: Creating MSIHANDLE (219) of type 790531 for thread 6940 DIFXAPP: INFO: RETURN: DriverPackageGetPathW (0x7A) MSI (s) (28!1C) [10:08:51:187]: Closing MSIHANDLE (219) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:187]: Creating MSIHANDLE (220) of type 790531 for thread 6940 DIFXAPP: INFO: ENTER: DriverPackageGetPathW MSI (s) (28!1C) [10:08:51:187]: Closing MSIHANDLE (220) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:187]: Creating MSIHANDLE (221) of type 790531 for thread 6940 DIFXAPP: SUCCESS:Found driver store entry. MSI (s) (28!1C) [10:08:51:187]: Closing MSIHANDLE (221) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:187]: Creating MSIHANDLE (222) of type 790531 for thread 6940 DIFXAPP: INFO: RETURN: DriverPackageGetPathW (0x0) MSI (s) (28!1C) [10:08:51:202]: Closing MSIHANDLE (222) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:202]: Creating MSIHANDLE (223) of type 790531 for thread 6940 DIFXAPP: INFO: driver store entry for 'C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.inf' is 'C:\Windows\system32\DRVSTORE\Sntp_D6D5CF16B70BBA6AA93D5B4EE7199CBF8F5E3ABD\Sntp.inf'. MSI (s) (28!1C) [10:08:51:202]: Closing MSIHANDLE (223) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:202]: Creating MSIHANDLE (224) of type 790531 for thread 6940 DIFXAPP: INFO: The component Id '{76F354A6-97D5-4872-9781-2F2642A4F18A}' is now set to point to driver store: 'C:\Windows\system32\DRVSTORE\Sntp_D6D5CF16B70BBA6AA93D5B4EE7199CBF8F5E3ABD\Sntp.inf' MSI (s) (28!1C) [10:08:51:202]: Closing MSIHANDLE (224) of type 790531 for thread 6940 MSI (s) (28!1C) [10:08:51:202]: Creating MSIHANDLE (225) of type 790531 for thread 6940 DIFXAPP: INFO: A reboot is not needed to install the component '{76F354A6-97D5-4872-9781-2F2642A4F18A}'. MSI (s) (28!1C) [10:08:51:202]: Closing MSIHANDLE (225) of type 790531 for thread 6940 MSI (s) (28:58) [10:08:51:202]: Closing MSIHANDLE (192) of type 790536 for thread 4108 MSI (s) (28:0C) [10:08:51:202]: Executing op: ActionStart(Name=ExecXmlFile,,) DIFXAPP: RETURN: InstallDriverPackages() 0 (0x0) MSI (s) (28:0C) [10:08:51:202]: Executing op: CustomActionSchedule(Action=ExecXmlFile,ActionType=3073,Source=BinaryData,Target=ExecXmlFile,CustomActionData=1€0€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man€7€1€/*/*/*/*[@messageFileName]€messageFileName€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys€1€0€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man€7€1€/*/*/*/*[@resourceFileName]€resourceFileName€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys) MSI (s) (28:0C) [10:08:51:202]: Creating MSIHANDLE (226) of type 790536 for thread 4108 MSI (s) (28:48) [10:08:51:202]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF71B.tmp, Entrypoint: ExecXmlFile MSI (s) (28:48) [10:08:51:249]: Closing MSIHANDLE (226) of type 790536 for thread 4108 MSI (s) (28:0C) [10:08:51:249]: Executing op: ActionStart(Name=RollbackRegisterEventManifest,,) MSI (s) (28:0C) [10:08:51:249]: Executing op: CustomActionSchedule(Action=RollbackRegisterEventManifest,ActionType=3393,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" um "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man") MSI (s) (28:0C) [10:08:51:249]: Executing op: ActionStart(Name=RegisterEventManifest,,) MSI (s) (28:0C) [10:08:51:249]: Executing op: CustomActionSchedule(Action=RegisterEventManifest,ActionType=3073,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" im "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man") MSI (s) (28:0C) [10:08:51:249]: Creating MSIHANDLE (227) of type 790536 for thread 4108 MSI (s) (28:B4) [10:08:51:249]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF74B.tmp, Entrypoint: CAQuietExec MSI (s) (28!A8) [10:08:51:280]: Creating MSIHANDLE (228) of type 790531 for thread 168 MSI (s) (28!A8) [10:08:51:280]: Closing MSIHANDLE (228) of type 790531 for thread 168 MSI (s) (28!A8) [10:08:51:280]: Creating MSIHANDLE (229) of type 790531 for thread 168 CAQuietExec: Error 0x8007054f: Command line returned an error. MSI (s) (28!A8) [10:08:51:280]: Closing MSIHANDLE (229) of type 790531 for thread 168 CAQuietExec: Error 0x8007054f: CAQuietExec Failed MSI (s) (28:B4) [10:08:51:280]: Closing MSIHANDLE (227) of type 790536 for thread 4108 CustomAction RegisterEventManifest returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox) MSI (s) (28:0C) [10:08:51:312]: User policy value 'DisableRollback' is 0 MSI (s) (28:0C) [10:08:51:312]: Machine policy value 'DisableRollback' is 0 Aktion beendet um 10:08:51: InstallFinalize. Rückgabewert 3. MSI (s) (28:0C) [10:08:51:312]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1258049818,LangId=1031,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1) MSI (s) (28:0C) [10:08:51:312]: Executing op: DialogInfo(Type=0,Argument=1031) MSI (s) (28:0C) [10:08:51:312]: Executing op: DialogInfo(Type=1,Argument=Sophos Network Threat Protection) MSI (s) (28:0C) [10:08:51:312]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Aktion wird rückgängig gemacht:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Sicherungsdateien werden entfernt,CleanupTemplate=Datei: [1]) MSI (s) (28:0C) [10:08:51:312]: Executing op: ActionStart(Name=RegisterEventManifest,,) MSI (s) (28:0C) [10:08:51:312]: Executing op: ProductInfo(ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},ProductName=Sophos Network Threat Protection,PackageName=Sophos Network Threat Protection.msi,Language=1031,Version=16908290,Assignment=1,ObsoleteArg=0,ProductIcon=shield.ico,,PackageCode={B1DE62EA-C23B-42DE-A241-33A0818A4746},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3) MSI (s) (28:0C) [10:08:51:312]: Executing op: ActionStart(Name=RollbackRegisterEventManifest,,) MSI (s) (28:0C) [10:08:51:312]: Executing op: CustomActionRollback(Action=RollbackRegisterEventManifest,ActionType=3393,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" um "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man") MSI (s) (28:0C) [10:08:51:312]: Creating MSIHANDLE (230) of type 790536 for thread 4108 MSI (s) (28:B4) [10:08:51:312]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF78B.tmp, Entrypoint: CAQuietExec MSI (s) (28:B4) [10:08:51:327]: Closing MSIHANDLE (230) of type 790536 for thread 4108 MSI (s) (28:0C) [10:08:51:327]: Executing op: ActionStart(Name=ExecXmlFile,,) MSI (s) (28:0C) [10:08:51:327]: Executing op: ActionStart(Name=MsiInstallDrivers,,) MSI (s) (28:0C) [10:08:51:327]: Executing op: ActionStart(Name=MsiRollbackInstall,,) MSI (s) (28:0C) [10:08:51:327]: Executing op: CustomActionRollback(Action=MsiRollbackInstall,ActionType=3329,Source=BinaryData,Target=RollbackInstall,CustomActionData=2.12{76F354A6-97D5-4872-9781-2F2642A4F18A}212Sophos Network Threat ProtectionSophos Limited) MSI (s) (28:0C) [10:08:51:343]: Creating MSIHANDLE (231) of type 790536 for thread 4108 MSI (s) (28:80) [10:08:51:343]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIF7AB.tmp, Entrypoint: RollbackInstall MSI (s) (28!68) [10:08:51:343]: Creating MSIHANDLE (232) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:343]: Closing MSIHANDLE (232) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:343]: Creating MSIHANDLE (233) of type 790531 for thread 5736 DIFXAPP: ENTER: RollbackInstall() MSI (s) (28!68) [10:08:51:343]: Closing MSIHANDLE (233) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:343]: Creating MSIHANDLE (234) of type 790531 for thread 5736 DIFXAPP: INFO: 'CustomActionData' property 'DIFxApp Version' is '2.1'. MSI (s) (28!68) [10:08:51:343]: Closing MSIHANDLE (234) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:343]: Creating MSIHANDLE (235) of type 790531 for thread 5736 DIFXAPP: INFO: 'CustomActionData' property 'componentId' is '{76F354A6-97D5-4872-9781-2F2642A4F18A}'. MSI (s) (28!68) [10:08:51:343]: Closing MSIHANDLE (235) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:343]: Creating MSIHANDLE (236) of type 790531 for thread 5736 DIFXAPP: INFO: 'CustomActionData' property 'flags' is 0x15. MSI (s) (28!68) [10:08:51:343]: Closing MSIHANDLE (236) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:343]: Creating MSIHANDLE (237) of type 790531 for thread 5736 DIFXAPP: INFO: 'CustomActionData' property 'installState' is '2'. MSI (s) (28!68) [10:08:51:343]: Closing MSIHANDLE (237) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:343]: Creating MSIHANDLE (238) of type 790531 for thread 5736 DIFXAPP: INFO: 'CustomActionData' property 'ProductName' is 'Sophos Network Threat Protection'. MSI (s) (28!68) [10:08:51:343]: Closing MSIHANDLE (238) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:343]: Creating MSIHANDLE (239) of type 790531 for thread 5736 DIFXAPP: INFO: 'CustomActionData' property 'ManufacturerName' is 'Sophos Limited'. MSI (s) (28!68) [10:08:51:343]: Closing MSIHANDLE (239) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:343]: Creating MSIHANDLE (240) of type 790531 for thread 5736 DIFXAPP: INFO: user SID of user performing the install is 'S-1-5-18'. MSI (s) (28!68) [10:08:51:343]: Closing MSIHANDLE (240) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:343]: Creating MSIHANDLE (241) of type 790531 for thread 5736 DIFXAPP: INFO: ENTER: DriverPackageUninstallW MSI (s) (28!68) [10:08:51:343]: Closing MSIHANDLE (241) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:343]: Creating MSIHANDLE (242) of type 790531 for thread 5736 DIFXAPP: INFO: Uninstalling driver package C:\Windows\system32\DRVSTORE\Sntp_D6D5CF16B70BBA6AA93D5B4EE7199CBF8F5E3ABD\Sntp.inf... MSI (s) (28!68) [10:08:51:343]: Closing MSIHANDLE (242) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:343]: Creating MSIHANDLE (243) of type 790531 for thread 5736 DIFXAPP: ERROR: Unable to revert to a previous driver store for service 'sntp'. MSI (s) (28!68) [10:08:51:343]: Closing MSIHANDLE (243) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:343]: Creating MSIHANDLE (244) of type 790531 for thread 5736 DIFXAPP: ERROR: Will attempt to uninstall the driver. MSI (s) (28!68) [10:08:51:343]: Closing MSIHANDLE (244) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:358]: Creating MSIHANDLE (245) of type 790531 for thread 5736 DIFXAPP: INFO: service 'sntp' was deleted. MSI (s) (28!68) [10:08:51:358]: Closing MSIHANDLE (245) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:358]: Creating MSIHANDLE (246) of type 790531 for thread 5736 DIFXAPP: INFO: Driver store entry 'C:\Windows\system32\DRVSTORE\Sntp_D6D5CF16B70BBA6AA93D5B4EE7199CBF8F5E3ABD\Sntp.inf' removed. MSI (s) (28!68) [10:08:51:358]: Closing MSIHANDLE (246) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:358]: Creating MSIHANDLE (247) of type 790531 for thread 5736 DIFXAPP: SUCCESS:Uninstall completed. MSI (s) (28!68) [10:08:51:358]: Closing MSIHANDLE (247) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:358]: Creating MSIHANDLE (248) of type 790531 for thread 5736 DIFXAPP: INFO: RETURN: DriverPackageUninstallW (0x0) MSI (s) (28!68) [10:08:51:358]: Closing MSIHANDLE (248) of type 790531 for thread 5736 MSI (s) (28!68) [10:08:51:358]: Creating MSIHANDLE (249) of type 790531 for thread 5736 DIFXAPP: ERROR: Rollback failed with error 0x2 MSI (s) (28!68) [10:08:51:358]: Closing MSIHANDLE (249) of type 790531 for thread 5736 DIFXAPP: RETURN: RollbackInstall() 2 (0x2) MSI (s) (28:80) [10:08:51:358]: Closing MSIHANDLE (231) of type 790536 for thread 4108 CustomAction MsiRollbackInstall returned actual error code 1603 but will be translated to success due to continue marking MSI (s) (28:0C) [10:08:51:358]: Executing op: ActionStart(Name=InstallFiles,Description=Neue Dateien werden kopiert,Template=Datei: [1], Verzeichnis: [9], Größe: [6]) MSI (s) (28:0C) [10:08:51:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\) MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\udp.plg,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\tcp.plg,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\) MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\SntpService.exe,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.inf,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.cat,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\) MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\portmap.plg,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\) MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\navl.dll,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\) MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ipv6.plg,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ip.plg,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\http.plg,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: SetTargetFolder(Folder=C:\Windows\system32\) MSI (s) (28:0C) [10:08:51:358]: Executing op: UnregisterSharedComponentProvider(Component={63B83B20-1AB9-4F49-B0B2-4489724CA96C},ProductCode={66967E5F-43E8-4402-87A4-04685EE5C2CB}) MSI (s) (28:0C) [10:08:51:358]: Executing op: UnregisterSharedComponentProvider(Component={0835C947-D6D2-4E52-AF14-0231D04E88EA},ProductCode={66967E5F-43E8-4402-87A4-04685EE5C2CB}) MSI (s) (28:0C) [10:08:51:358]: Executing op: UnregisterSharedComponentProvider(Component={74260D9F-D644-423B-B2D4-0291EA4BA8BE},ProductCode={66967E5F-43E8-4402-87A4-04685EE5C2CB}) MSI (s) (28:0C) [10:08:51:358]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\) MSI (s) (28:0C) [10:08:51:358]: Executing op: FileRemove(,FileName=C:\Program Files\Sophos\Sophos Network Threat Protection\bin\BPAIF.dll,,) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: ActionStart(Name=CreateFolders,Description=Ordner werden erstellt,Template=Ordner: [1]) MSI (s) (28:0C) [10:08:51:358]: Executing op: FolderCreate(Folder=C:\,Foreign=0,SecurityDescriptor=BinaryData,) MSI (s) (28:0C) [10:08:51:358]: Executing op: FolderRemove(Folder=C:\Program Files\Sophos\Sophos Network Threat Protection\,Foreign=0) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:358]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\,Foreign=0) MSI (s) (28:0C) [10:08:51:358]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:374]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:374]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\,Foreign=0) MSI (s) (28:0C) [10:08:51:374]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:374]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:374]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:374]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\,Foreign=0) MSI (s) (28:0C) [10:08:51:374]: Executing op: FolderRemove(Folder=C:\ProgramData\Sophos\Sophos Network Threat Protection\,Foreign=0) MSI (s) (28:0C) [10:08:51:374]: Executing op: ActionStart(Name=RemoveRegistryValues,Description=Systemregistrierungwerte werden entfernt,Template=Schlüssel: [1], Name: [2]) MSI (s) (28:0C) [10:08:51:374]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\AutoUpdate\Products\NTP,,BinaryType=0,,) MSI (s) (28:0C) [10:08:51:374]: Executing op: RegRemoveKey() MSI (s) (28:0C) [10:08:51:374]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Sophos\AutoUpdate\Products\NTP 3: 2 MSI (s) (28:0C) [10:08:51:374]: Executing op: ActionStart(Name=StopServices,Description=Dienste werden beendet,Template=Dienst: [1]) MSI (s) (28:0C) [10:08:51:374]: Executing op: ActionStart(Name=ProcessComponents,Description=Komponentenregistrierung wird aktualisiert.,) MSI (s) (28:0C) [10:08:51:374]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,SecurityDescriptor=BinaryData,BinaryType=0,,) MSI (s) (28:0C) [10:08:51:374]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,SecurityDescriptor=BinaryData,BinaryType=0,,) MSI (s) (28:0C) [10:08:51:374]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs,SecurityDescriptor=BinaryData,BinaryType=0,,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={63B83B20-1AB9-4F49-B0B2-4489724CA96C},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={74260D9F-D644-423B-B2D4-0291EA4BA8BE},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={0835C947-D6D2-4E52-AF14-0231D04E88EA},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={1B63A9FF-509B-4CD9-BA54-256A7D62B724},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={B9C8E32A-5EB9-4B7F-91AF-9FD883FB729C},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={4E691ABE-115D-4721-9F9A-3547D17077C5},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={DF927ABB-6A5F-44F2-A430-137AAC79AA71},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={38879DEA-36FA-41BE-ACF3-B084CB40689B},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={411E659C-FCB0-4BA0-9E87-A88C4E28174F},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={710F5A00-8ECC-402C-910E-6096F350A923},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={D45EF81E-13E2-45D6-9DA9-09FD21266A06},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={F27D2FBB-5E0B-4351-82CE-E72D4F1EDE71},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={1A0CA7AD-4F12-4887-809E-96D79A66CC7F},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={9B222529-2B29-4547-AAEA-9C8A0423595B},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={355DC0F9-A6B5-4FCA-8121-00847E59A436},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={76F354A6-97D5-4872-9781-2F2642A4F18A},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={F1B8B8D7-46D7-4CA9-B109-35931536EA8A},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={74F91047-4C42-457F-B531-A83EF6EC85E2},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={4D81D62C-8373-45B8-ABF2-0C0D6ED2DE34},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: ComponentUnregister(ComponentId={E1E87C49-DD4A-4C77-8D42-3ACD20DBC536},ProductKey={66967E5F-43E8-4402-87A4-04685EE5C2CB},BinaryType=0,) MSI (s) (28:0C) [10:08:51:374]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0) MSI (s) (28:0C) [10:08:51:374]: Error in rollback skipped. Return: 5 MSI (s) (28:0C) [10:08:51:374]: Note: 1: 2318 2: MSI (s) (28:0C) [10:08:51:374]: No System Restore sequence number for this installation. MSI (s) (28:0C) [10:08:51:374]: Unlocking Server MSI (s) (28:0C) [10:08:51:405]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'. Aktion beendet um 10:08:51: INSTALL. Rückgabewert 3. Property(S): UpgradeCode = {A6CF693D-C171-4DF5-AE49-223B66F65A1A} Property(S): ProductData = C:\ProgramData\Sophos\Sophos Network Threat Protection\ Property(S): Config = C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\ Property(S): Status = C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\ Property(S): Logs = C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\ Property(S): bin = C:\Program Files\Sophos\Sophos Network Threat Protection\bin\ Property(S): plugins = C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ Property(S): INSTALLDIR = C:\Program Files\Sophos\Sophos Network Threat Protection\ Property(S): TARGETDIR = C:\ Property(S): ExecSecureObjects = C:\ProgramData\Sophos\Sophos Network Threat Protection\€CreateFolder€€NT SERVICE\sntpservice€-2147483647€C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\€CreateFolder€€NT SERVICE\sntpservice€278€C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\€CreateFolder€€NT SERVICE\sntpservice€278€SntpService€ServiceInstall€€Administrators€983551€SntpService€ServiceInstall€€Everyone€-2147483632 Property(S): RegisterEventManifest = "wevtutil.exe" im "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man" Property(S): RollbackRegisterEventManifest = "wevtutil.exe" um "C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man" Property(S): ExecXmlFile = 1€0€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man€7€1€/*/*/*/*[@messageFileName]€messageFileName€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys€1€0€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.man€7€1€/*/*/*/*[@resourceFileName]€resourceFileName€C:\Program Files\Sophos\Sophos Network Threat Protection\bin\Sntp.sys Property(S): MsiInstallDrivers = 2.12{76F354A6-97D5-4872-9781-2F2642A4F18A}C:\Program Files\Sophos\Sophos Network Threat Protection\bin\212Sophos Network Threat ProtectionSophos Limited Property(S): MsiRollbackInstall = 2.12{76F354A6-97D5-4872-9781-2F2642A4F18A}212Sophos Network Threat ProtectionSophos Limited Property(S): ExecServiceConfig = SchedServiceConfig€SntpService€0€restart€restart€none€1€120€€ Property(S): RollbackServiceConfig = SchedServiceConfig Property(S): UnregisterManagementAdapterRollback = C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll Property(S): RegisterManagementAdapter = C:\Program Files\Sophos\Sophos Network Threat Protection\bin\NTPAdapter.dll Property(S): SetupSspUserAccount = NT SERVICE\sntpservice Property(S): SetupSspUserAccountRollback = NT SERVICE\sntpservice Property(S): AddSIPSSubmitterUserAccount = NT SERVICE\SntpService Property(S): AddSIPSSubmitterUserAccountRollback = NT SERVICE\SntpService Property(S): gui = C:\Program Files\Sophos\Sophos Network Threat Protection\gui\ Property(S): Sophos = C:\Program Files\Sophos\ Property(S): ProgramFilesFolder = C:\Program Files\ Property(S): SophosAppData = C:\ProgramData\Sophos\ Property(S): CommonAppDataFolder = C:\ProgramData\ Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\cache\ntp\ Property(S): REBOOT = ReallySuppress Property(S): VersionNT = 601 Property(S): ROOTDRIVE = C:\ Property(S): ALLUSERS = 1 Property(S): ARPCOMMENTS = Network threat protection Property(S): ARPCONTACT = Sophos Technical Support Property(S): ARPHELPLINK = http://www.sophos.com/support/ Property(S): ARPNOMODIFY = 1 Property(S): ARPNOREPAIR = 1 Property(S): ARPPRODUCTICON = shield.ico Property(S): ARPURLINFOABOUT = http://www.sophos.com/ Property(S): PackageCode = {B1DE62EA-C23B-42DE-A241-33A0818A4746} Property(S): ARPURLUPDATEINFO = http://www.sophos.com/support/updates Property(S): Manufacturer = Sophos Limited Property(S): ProductCode = {66967E5F-43E8-4402-87A4-04685EE5C2CB} Property(S): ProductLanguage = 1031 Property(S): ProductName = Sophos Network Threat Protection Property(S): ProductVersion = 1.2.2.50 Property(S): MSIRESTARTMANAGERCONTROL = Disable Property(S): RegisterWithAutoUpdate = {AFB2EB41-7301-4143-90D0-D19ADD7CA53D};ntp Property(S): SecureCustomProperties = WIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTED Property(S): SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA = C:\Windows\system32\ Property(S): SystemFolder = C:\Windows\system32\ Property(S): DirectoryTable100_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA = DirectoryTable Property(S): INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 = C:\ Property(S): MsiLogFileLocation = C:\Windows\TEMP\Sophos Network Threat Protection Install Log 20170728 100850.txt Property(S): ProductState = -1 Property(S): PackagecodeChanging = 1 Property(S): INSTALLINGVERSION = 1.2.2.50 Property(S): CURRENTDIRECTORY = C:\Windows\system32 Property(S): CLIENTUILEVEL = 3 Property(S): MSICLIENTUSESEXTERNALUI = 1 Property(S): CLIENTPROCESSID = 8056 Property(S): VersionDatabase = 405 Property(S): VersionMsi = 5.00 Property(S): WindowsBuild = 7601 Property(S): ServicePackLevel = 1 Property(S): ServicePackLevelMinor = 0 Property(S): MsiNTProductType = 1 Property(S): WindowsFolder = C:\Windows\ Property(S): WindowsVolume = C:\ Property(S): System16Folder = C:\Windows\system\ Property(S): RemoteAdminTS = 1 Property(S): TempFolder = C:\Windows\TEMP\ Property(S): CommonFilesFolder = C:\Program Files\Common Files\ Property(S): AppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\ Property(S): FavoritesFolder = C:\Windows\system32\config\systemprofile\Favorites\ Property(S): NetHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\ Property(S): PersonalFolder = C:\Windows\system32\config\systemprofile\Documents\ Property(S): PrintHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\ Property(S): RecentFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\ Property(S): SendToFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\ Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\ Property(S): LocalAppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Local\ Property(S): MyPicturesFolder = C:\Windows\system32\config\systemprofile\Pictures\ Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\ Property(S): DesktopFolder = C:\Users\Public\Desktop\ Property(S): FontsFolder = C:\Windows\Fonts\ Property(S): GPTSupport = 1 Property(S): OLEAdvtSupport = 1 Property(S): ShellAdvtSupport = 1 Property(S): Intel = 6 Property(S): PhysicalMemory = 3419 Property(S): VirtualMemory = 7835 Property(S): AdminUser = 1 Property(S): MsiTrueAdminUser = 1 Property(S): LogonUser = SYSTEM Property(S): UserSID = S-1-5-18 Property(S): UserLanguageID = 1031 Property(S): ComputerName = DT-******* Property(S): SystemLanguageID = 1031 Property(S): ScreenX = 1024 Property(S): ScreenY = 768 Property(S): CaptionHeight = 22 Property(S): BorderTop = 1 Property(S): BorderSide = 1 Property(S): TextHeight = 16 Property(S): TextInternalLeading = 3 Property(S): ColorBits = 32 Property(S): TTCSupport = 1 Property(S): Time = 10:08:51 Property(S): Date = 28.07.2017 Property(S): MsiNetAssemblySupport = 4.6.1099.0 Property(S): MsiWin32AssemblySupport = 6.1.7601.17514 Property(S): RedirectedDllSupport = 2 Property(S): MsiRunningElevated = 1 Property(S): Privileged = 1 Property(S): USERNAME = Admin1 Property(S): COMPANYNAME = *** Property(S): DATABASE = C:\Windows\Installer\a9dabc.msi Property(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\cache\ntp\Sophos Network Threat Protection.msi Property(S): UILevel = 2 Property(S): ACTION = INSTALL Property(S): CostingComplete = 1 Property(S): OutOfDiskSpace = 0 Property(S): OutOfNoRbDiskSpace = 0 Property(S): PrimaryVolumeSpaceAvailable = 0 Property(S): PrimaryVolumeSpaceRequired = 0 Property(S): PrimaryVolumeSpaceRemaining = 0 Property(S): INSTALLLEVEL = 1 Property(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\cache\ntp\ Property(S): SourcedirProduct = {66967E5F-43E8-4402-87A4-04685EE5C2CB} Property(S): ProductToBeRegistered = 1 MSI (s) (28:0C) [10:08:51:421]: Note: 1: 1708 MSI (s) (28:0C) [10:08:51:421]: Transforming table Error. MSI (s) (28:0C) [10:08:51:421]: Transforming table Error. MSI (s) (28:0C) [10:08:51:421]: Produkt: Sophos Network Threat Protection -- Installation fehlgeschlagen. MSI (s) (28:0C) [10:08:51:421]: Das Produkt wurde durch Windows Installer installiert. Produktname: Sophos Network Threat Protection. Produktversion: 1.2.2.50. Produktsprache: 1031. Hersteller: Sophos Limited. Erfolg- bzw. Fehlerstatus der Installation: 1603. MSI (s) (28:0C) [10:08:51:421]: Deferring clean up of packages/files, if any exist MSI (s) (28:0C) [10:08:51:421]: MainEngineThread is returning 1603 MSI (s) (28:04) [10:08:51:421]: No System Restore sequence number for this installation. === Protokollierung beendet: 28.07.2017 10:08:51 === MSI (s) (28:04) [10:08:51:421]: User policy value 'DisableRollback' is 0 MSI (s) (28:04) [10:08:51:421]: Machine policy value 'DisableRollback' is 0 MSI (s) (28:04) [10:08:51:421]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (28:04) [10:08:51:421]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (28:04) [10:08:51:421]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (28:04) [10:08:51:421]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (s) (28:04) [10:08:51:421]: Restoring environment variables MSI (s) (28:04) [10:08:51:421]: Destroying RemoteAPI object. MSI (s) (28:D8) [10:08:51:421]: Custom Action Manager thread ending. MSI (c) (78:E8) [10:08:51:421]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (78:E8) [10:08:51:421]: MainEngineThread is returning 1603 === Verbose logging stopped: 28.07.2017 10:08:51 === setup::MsiInstaller::installOrUpgrade: Install/upgrade returned 1603 `anonymous-namespace'::setResult: installation failed ProductSetup::~ProductSetup: End product setup