2017-10-25 05:41:04 Unable to delete registry value: SOFTWARE\Sophos\AutoUpdate\UpdateStatus\CrtResult, assuming it does not exist 2017-10-25 05:41:04 INFO: Unable to find the CRT directory, continuing with installation. 2017-10-25 05:41:04 PROCESSOR_ARCHITECTURE environment variable is: AMD64 2017-10-25 05:41:04 Info: Logging started: installing/upgrading Sophos Anti-Virus 2017-10-25 05:41:04 Info: InstallFromPath is: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ 2017-10-25 05:41:04 Info: InstallToPath is: 2017-10-25 05:41:04 Call to MsiGetProductInfo failed for product {9AC08E99-230B-47e8-9721-4577B7F124EA} with error code: 1608 2017-10-25 05:41:04 Detected version of SAV with product code: {65323B2D-83D4-470D-A209-D769DB30BBDB} 2017-10-25 05:41:04 Info: SAV is not installed. Installing to {InstallToPath} 2017-10-25 05:41:04 INFO: Checking the validity of the VDL manifest file. 2017-10-25 05:41:05 INFO: The manifest file has been successfully validated. 2017-10-25 05:41:05 INFO: Checking the validity of the AppFeed manifest file. 2017-10-25 05:41:05 INFO: The manifest file has been successfully validated. 2017-10-25 05:41:05 Info: Managed install (from SAU) 2017-10-25 05:41:05 Check for UI changes 2017-10-25 05:41:05 Unable to QI IProductConfig 2017-10-25 05:41:05 Info: productType: 0 2017-10-25 05:41:05 Info: Performing major update of Sophos Anti-Virus using msi. 2017-10-25 05:41:05 Info: Update is signalled. 2017-10-25 05:41:05 Call to MsiGetProductInfo failed for product {9AC08E99-230B-47e8-9721-4577B7F124EA} with error code: 1608 2017-10-25 05:41:05 Detected version of SAV with product code: {65323B2D-83D4-470D-A209-D769DB30BBDB} 2017-10-25 05:41:05 In KB2918614Workaround(). 2017-10-25 05:41:05 Leaving KB2918614Workaround(). 2017-10-25 05:41:05 Info: Added SAVService to ServicesList. 2017-10-25 05:41:05 Info: Added SAVAdminService to ServicesList. 2017-10-25 05:41:05 Info: Added Sophos Device Control Service to ServicesList. 2017-10-25 05:41:05 Info: Added SophosBootDriver to ServicesList. 2017-10-25 05:41:05 Info: Added swi_service to ServicesList. 2017-10-25 05:41:05 Info: Added swi_filter to ServicesList. 2017-10-25 05:41:05 Info: Added Sophos Web Control Service to ServicesList. 2017-10-25 05:41:05 Info: Added SAVOnAccess to ServicesList. 2017-10-25 05:41:05 Info: component SAV is not registered - skipping. 2017-10-25 05:41:05 Info: component SDC is not registered - skipping. 2017-10-25 05:41:05 Info: component SCS is not registered - skipping. 2017-10-25 05:41:05 Info: component SWI is not registered - skipping. 2017-10-25 05:41:05 Info: component SWC is not registered - skipping. 2017-10-25 05:41:05 UpdateVersionInfo(), SAU can't supply version info - using msi version 2017-10-25 05:41:05 Info: PutSetupOptionsToRegistry 2017-10-25 05:41:05 Info: Check MSXML 2017-10-25 05:41:05 Info: Check boot driver and kms driver 2017-10-25 05:41:05 Info: no existing installation of Sophos Anti-Virus was found 2017-10-25 05:41:05 Info: Restart required for Data Control (clean managed full install) 2017-10-25 05:41:05 Info: Transform file returned: 2017-10-25 05:41:05 Info: SAV Setup plugin: running MsiInstallProduct (C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi, INSTALLDIR="" REBOOT=ReallySuppress DETOUREDEXCLUDED=1 UITYPE=full PRODUCTTYPE=0 UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1) === Verbose logging started: 10/25/2017 5:41:05 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (14:C0) [05:41:05:828]: Resetting cached policy values MSI (c) (14:C0) [05:41:05:828]: Machine policy value 'Debug' is 0 MSI (c) (14:C0) [05:41:05:828]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi ******* Action: ******* CommandLine: ********** MSI (c) (14:C0) [05:41:05:829]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (14:C0) [05:41:05:829]: Grabbed execution mutex. MSI (c) (14:C0) [05:41:05:831]: Cloaking enabled. MSI (c) (14:C0) [05:41:05:831]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (14:C0) [05:41:05:834]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (18:3C) [05:41:05:837]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi MSI (s) (18:3C) [05:41:05:837]: Grabbed execution mutex. MSI (s) (18:64) [05:41:05:837]: Resetting cached policy values MSI (s) (18:64) [05:41:05:837]: Machine policy value 'Debug' is 0 MSI (s) (18:64) [05:41:05:837]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi ******* Action: ******* CommandLine: ********** MSI (s) (18:64) [05:41:05:838]: Machine policy value 'DisableUserInstalls' is 0 MSI (s) (18:64) [05:41:05:846]: SRSetRestorePoint skipped for this transaction. MSI (s) (18:64) [05:41:05:847]: End dialog not enabled MSI (s) (18:64) [05:41:05:847]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi MSI (s) (18:64) [05:41:05:847]: Package we're running from ==> C:\Windows\Installer\1adca5.msi MSI (s) (18:64) [05:41:05:853]: APPCOMPAT: Uninstall Flags override found. MSI (s) (18:64) [05:41:05:853]: APPCOMPAT: Uninstall VersionNT override found. MSI (s) (18:64) [05:41:05:853]: APPCOMPAT: Uninstall ServicePackLevel override found. MSI (s) (18:64) [05:41:05:853]: APPCOMPAT: looking for appcompat database entry with ProductCode '{65323B2D-83D4-470D-A209-D769DB30BBDB}'. MSI (s) (18:64) [05:41:05:853]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (18:64) [05:41:05:855]: MSCOREE not loaded loading copy from system32 MSI (s) (18:64) [05:41:05:856]: Machine policy value 'DisablePatch' is 0 MSI (s) (18:64) [05:41:05:857]: Machine policy value 'AllowLockdownPatch' is 0 MSI (s) (18:64) [05:41:05:857]: Machine policy value 'DisableLUAPatching' is 0 MSI (s) (18:64) [05:41:05:857]: Machine policy value 'DisableFlyWeightPatching' is 0 MSI (s) (18:64) [05:41:05:857]: APPCOMPAT: looking for appcompat database entry with ProductCode '{65323B2D-83D4-470D-A209-D769DB30BBDB}'. MSI (s) (18:64) [05:41:05:857]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (18:64) [05:41:05:857]: Transforms are not secure. MSI (s) (18:64) [05:41:05:857]: Note: 1: 2205 2: 3: Control MSI (s) (18:64) [05:41:05:857]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos Anti-Virus Major Install Log_171025_044105.txt'. MSI (s) (18:64) [05:41:05:857]: Command Line: INSTALLDIR= REBOOT=ReallySuppress DETOUREDEXCLUDED=1 UITYPE=full PRODUCTTYPE=0 UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 RECOVERYMODE=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1 CURRENTDIRECTORY=C:\Windows\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=5652 MSI (s) (18:64) [05:41:05:857]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{B11B63E0-A3EB-478A-AF04-AAE0B577AEB2}'. MSI (s) (18:64) [05:41:05:857]: Product Code passed to Engine.Initialize: '{65323B2D-83D4-470D-A209-D769DB30BBDB}' MSI (s) (18:64) [05:41:05:857]: Product Code from property table before transforms: '{65323B2D-83D4-470D-A209-D769DB30BBDB}' MSI (s) (18:64) [05:41:05:857]: Product Code from property table after transforms: '{65323B2D-83D4-470D-A209-D769DB30BBDB}' MSI (s) (18:64) [05:41:05:857]: Product registered: entering maintenance mode MSI (s) (18:64) [05:41:05:857]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine. MSI (s) (18:64) [05:41:05:857]: Product {65323B2D-83D4-470D-A209-D769DB30BBDB} is admin assigned: LocalSystem owns the publish key. MSI (s) (18:64) [05:41:05:857]: Product {65323B2D-83D4-470D-A209-D769DB30BBDB} is managed. MSI (s) (18:64) [05:41:05:857]: MSI_LUA: Credential prompt not required, user is an admin MSI (s) (18:64) [05:41:05:857]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'. MSI (s) (18:64) [05:41:05:858]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'. MSI (s) (18:64) [05:41:05:858]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 MSI (s) (18:64) [05:41:05:858]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (s) (18:64) [05:41:05:858]: Specifed source is not already in a list. MSI (s) (18:64) [05:41:05:858]: User policy value 'SearchOrder' is 'nmu' MSI (s) (18:64) [05:41:05:858]: Machine policy value 'DisableBrowse' is 0 MSI (s) (18:64) [05:41:05:858]: Machine policy value 'AllowLockdownBrowse' is 0 MSI (s) (18:64) [05:41:05:858]: Adding new sources is allowed. MSI (s) (18:64) [05:41:05:858]: Package name retrieved from configuration data: 'Sophos Anti-Virus.msi' MSI (s) (18:64) [05:41:05:859]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (s) (18:64) [05:41:05:859]: Machine policy value 'DisableMsi' is 0 MSI (s) (18:64) [05:41:05:859]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (18:64) [05:41:05:859]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (18:64) [05:41:05:859]: Product {65323B2D-83D4-470D-A209-D769DB30BBDB} is admin assigned: LocalSystem owns the publish key. MSI (s) (18:64) [05:41:05:859]: Product {65323B2D-83D4-470D-A209-D769DB30BBDB} is managed. MSI (s) (18:64) [05:41:05:859]: Running product '{65323B2D-83D4-470D-A209-D769DB30BBDB}' with elevated privileges: Product is assigned. MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'. MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Adding DETOUREDEXCLUDED property. Its value is '1'. MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Modifying UPDATECLASSFILTER property. Its current value is '0'. Its new value: '1'. MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Adding UPDATEKMSDRIVERS property. Its value is '1'. MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Adding RECOVERYMODE property. Its value is '0'. MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Modifying DATACONTROL property. Its current value is '0'. Its new value: '1'. MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Modifying DEVICECONTROL property. Its current value is '0'. Its new value: '1'. MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Adding WEBCONTROL property. Its value is '1'. MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Windows\system32'. MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'. MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'. MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '5652'. MSI (s) (18:64) [05:41:05:859]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0 MSI (s) (18:64) [05:41:05:859]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality. MSI (s) (18:64) [05:41:05:859]: TRANSFORMS property is now: MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'. MSI (s) (18:64) [05:41:05:859]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'. MSI (s) (18:64) [05:41:05:861]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming MSI (s) (18:64) [05:41:05:862]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Favorites MSI (s) (18:64) [05:41:05:863]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (s) (18:64) [05:41:05:863]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Documents MSI (s) (18:64) [05:41:05:864]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (s) (18:64) [05:41:05:865]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent MSI (s) (18:64) [05:41:05:865]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo MSI (s) (18:64) [05:41:05:866]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates MSI (s) (18:64) [05:41:05:866]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (s) (18:64) [05:41:05:866]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Local MSI (s) (18:64) [05:41:05:867]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Pictures MSI (s) (18:64) [05:41:05:868]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (18:64) [05:41:05:868]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (18:64) [05:41:05:869]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (s) (18:64) [05:41:05:869]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (s) (18:64) [05:41:05:870]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (s) (18:64) [05:41:05:871]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (18:64) [05:41:05:871]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (18:64) [05:41:05:872]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (s) (18:64) [05:41:05:873]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu MSI (s) (18:64) [05:41:05:873]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\Desktop MSI (s) (18:64) [05:41:05:874]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (s) (18:64) [05:41:05:874]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts MSI (s) (18:64) [05:41:05:874]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (s) (18:64) [05:41:05:877]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (s) (18:64) [05:41:05:877]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (s) (18:64) [05:41:05:877]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (s) (18:64) [05:41:05:877]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (18:64) [05:41:05:877]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Shipco Transport Inc'. MSI (s) (18:64) [05:41:05:877]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (18:64) [05:41:05:877]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Shipco Transport Inc.'. MSI (s) (18:64) [05:41:05:877]: PROPERTY CHANGE: Adding Installed property. Its value is '00:00:00'. MSI (s) (18:64) [05:41:05:877]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\1adca5.msi'. MSI (s) (18:64) [05:41:05:877]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi'. MSI (s) (18:64) [05:41:05:877]: Machine policy value 'MsiDisableEmbeddedUI' is 0 MSI (s) (18:64) [05:41:05:877]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI MSI (s) (18:64) [05:41:05:877]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install MSI (s) (18:64) [05:41:05:877]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (18:64) [05:41:05:877]: Machine policy value 'DisableRollback' is 0 MSI (s) (18:64) [05:41:05:878]: User policy value 'DisableRollback' is 0 MSI (s) (18:64) [05:41:05:878]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. === Logging started: 10/25/2017 5:41:05 === MSI (s) (18:64) [05:41:05:878]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'. MSI (s) (18:64) [05:41:05:878]: Doing action: INSTALL Action start 5:41:05: INSTALL. MSI (s) (18:64) [05:41:05:878]: Running ExecuteSequence MSI (s) (18:64) [05:41:05:878]: Doing action: AppSearch Action start 5:41:05: AppSearch. MSI (s) (18:64) [05:41:05:879]: Note: 1: 2262 2: Signature 3: -2147287038 MSI (s) (18:64) [05:41:05:879]: Doing action: LaunchConditions Action ended 5:41:05: AppSearch. Return value 1. Action start 5:41:05: LaunchConditions. MSI (s) (18:64) [05:41:05:880]: Skipping action: CheckUserIsSophosAdmin (condition is false) MSI (s) (18:64) [05:41:05:880]: Skipping action: TP_CheckRemoveAllowed (condition is false) MSI (s) (18:64) [05:41:05:880]: Doing action: FindRelatedProducts Action ended 5:41:05: LaunchConditions. Return value 1. MSI (s) (18:64) [05:41:05:880]: Skipping FindRelatedProducts action: not run in maintenance mode Action start 5:41:05: FindRelatedProducts. MSI (s) (18:64) [05:41:05:880]: Skipping action: CCPSearch (condition is false) MSI (s) (18:64) [05:41:05:880]: Skipping action: IsSafeToDowngrade (condition is false) MSI (s) (18:64) [05:41:05:880]: Skipping action: RMCCPSearch (condition is false) MSI (s) (18:64) [05:41:05:880]: Doing action: ValidateProductID Action ended 5:41:05: FindRelatedProducts. Return value 0. Action start 5:41:05: ValidateProductID. MSI (s) (18:64) [05:41:05:880]: Doing action: setUserProfileNT Action ended 5:41:05: ValidateProductID. Return value 1. MSI (s) (18:64) [05:41:05:881]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Users\Default'. Action start 5:41:05: setUserProfileNT. MSI (s) (18:64) [05:41:05:881]: Skipping action: SetAllUsersProfileNT (condition is false) MSI (s) (18:64) [05:41:05:881]: Doing action: setAllUsersProfile2K Action ended 5:41:05: setUserProfileNT. Return value 1. MSI (s) (18:64) [05:41:05:881]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\ProgramData'. Action start 5:41:05: setAllUsersProfile2K. MSI (s) (18:64) [05:41:05:881]: Doing action: CostInitialize Action ended 5:41:05: setAllUsersProfile2K. Return value 1. MSI (s) (18:64) [05:41:05:881]: Machine policy value 'MaxPatchCacheSize' is 10 MSI (s) (18:64) [05:41:05:882]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'D:\'. MSI (s) (18:64) [05:41:05:883]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'. MSI (s) (18:64) [05:41:05:883]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:05:883]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (18:64) [05:41:05:883]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (18:64) [05:41:05:883]: Note: 1: 2205 2: 3: __MsiPatchFileList MSI (s) (18:64) [05:41:05:883]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (18:64) [05:41:05:883]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId` MSI (s) (18:64) [05:41:05:883]: Note: 1: 2205 2: 3: Patch Action start 5:41:05: CostInitialize. MSI (s) (18:64) [05:41:05:883]: Doing action: FileCost Action ended 5:41:05: CostInitialize. Return value 1. MSI (s) (18:64) [05:41:05:883]: Note: 1: 2205 2: 3: MsiAssembly MSI (s) (18:64) [05:41:05:886]: Note: 1: 2205 2: 3: Class MSI (s) (18:64) [05:41:05:886]: Note: 1: 2205 2: 3: Extension MSI (s) (18:64) [05:41:05:886]: Note: 1: 2205 2: 3: TypeLib Action start 5:41:05: FileCost. MSI (s) (18:64) [05:41:05:886]: Skipping action: SetMFC71 (condition is false) MSI (s) (18:64) [05:41:05:886]: Doing action: IsolateComponents Action ended 5:41:05: FileCost. Return value 1. Action start 5:41:05: IsolateComponents. MSI (s) (18:64) [05:41:05:886]: Doing action: CostFinalize Action ended 5:41:05: IsolateComponents. Return value 0. MSI (s) (18:64) [05:41:05:886]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'. MSI (s) (18:64) [05:41:05:886]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'. MSI (s) (18:64) [05:41:05:886]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'. MSI (s) (18:64) [05:41:05:886]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'. MSI (s) (18:64) [05:41:05:886]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'. MSI (s) (18:64) [05:41:05:886]: Note: 1: 2205 2: 3: MsiAssembly MSI (s) (18:64) [05:41:05:886]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ? MSI (s) (18:64) [05:41:05:887]: PROPERTY CHANGE: Adding CONFIG property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'. MSI (s) (18:64) [05:41:05:887]: PROPERTY CHANGE: Adding INFECTED property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED'. MSI (s) (18:64) [05:41:05:887]: PROPERTY CHANGE: Adding LOW property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low'. MSI (s) (18:64) [05:41:05:887]: PROPERTY CHANGE: Adding LOGS property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\logs'. MSI (s) (18:64) [05:41:05:887]: PROPERTY CHANGE: Adding SAFESTORE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore'. MSI (s) (18:64) [05:41:05:887]: PROPERTY CHANGE: Adding TEMP property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Temp'. MSI (s) (18:64) [05:41:05:887]: PROPERTY CHANGE: Adding CACHE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Cache'. MSI (s) (18:64) [05:41:05:887]: PROPERTY CHANGE: Adding LOGS1 property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\logs'. MSI (s) (18:64) [05:41:05:887]: PROPERTY CHANGE: Adding LOGS2 property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\logs'. MSI (s) (18:64) [05:41:05:887]: PROPERTY CHANGE: Adding LOGS3 property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\logs'. MSI (s) (18:64) [05:41:05:887]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus'. MSI (s) (18:64) [05:41:05:888]: PROPERTY CHANGE: Adding Microsoft.VC90.ATL property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL'. MSI (s) (18:64) [05:41:05:888]: PROPERTY CHANGE: Adding Microsoft.VC90.CRT property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT'. MSI (s) (18:64) [05:41:05:888]: PROPERTY CHANGE: Adding INSTALLDIR_X64 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus'. MSI (s) (18:64) [05:41:05:891]: PROPERTY CHANGE: Adding WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control'. MSI (s) (18:64) [05:41:05:892]: PROPERTY CHANGE: Adding SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence'. MSI (s) (18:64) [05:41:05:892]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:05:892]: Note: 1: 2205 2: 3: Condition MSI (s) (18:64) [05:41:05:893]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'D:\'. MSI (s) (18:64) [05:41:05:893]: PROPERTY CHANGE: Adding newfolder1 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\'. MSI (s) (18:64) [05:41:05:893]: PROPERTY CHANGE: Adding newfolder2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\'. MSI (s) (18:64) [05:41:05:893]: PROPERTY CHANGE: Adding NEW_DIRECTORY2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\'. MSI (s) (18:64) [05:41:05:893]: PROPERTY CHANGE: Adding System16Folder property. Its value is 'D:\'. MSI (s) (18:64) [05:41:05:894]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1). MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying SendToFolder property. Its current value is 'C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\'. Its new value: 'C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\'. MSI (s) (18:64) [05:41:05:894]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying ProgramFiles64Folder property. Its current value is 'C:\Program Files\'. Its new value: 'C:\Program Files (x86)\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'D:\'. MSI (s) (18:64) [05:41:05:894]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\config\systemprofile\AppData\Local\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1). MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying LocalAppDataFolder property. Its current value is 'C:\Windows\system32\config\systemprofile\AppData\Local\'. Its new value: 'C:\Windows\SysWOW64\config\systemprofile\AppData\Local\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Adding GlobalAssemblyCache property. Its value is 'D:\'. MSI (s) (18:64) [05:41:05:894]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\config\systemprofile\Favorites\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1). MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying FavoritesFolder property. Its current value is 'C:\Windows\system32\config\systemprofile\Favorites\'. Its new value: 'C:\Windows\SysWOW64\config\systemprofile\Favorites\'. MSI (s) (18:64) [05:41:05:894]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\Common Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying CommonFiles64Folder property. Its current value is 'C:\Program Files\Common Files\'. Its new value: 'C:\Program Files (x86)\Common Files\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Users\Default'. Its new value: 'C:\Users\Default\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying ALLUSERSPROFILE property. Its current value is 'C:\ProgramData'. Its new value: 'C:\ProgramData\'. MSI (s) (18:64) [05:41:05:894]: WIN64DUALFOLDERS: 'C:\Windows\SysWOW64\' will substitute 20 characters in 'C:\Windows\system32\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1). MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying System64Folder property. Its current value is 'C:\Windows\system32\'. Its new value: 'C:\Windows\SysWOW64\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Adding SOPHOS property. Its value is 'C:\Program Files (x86)\Sophos\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Adding SOPHOS_ANTI_VIRUS property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying INSTALLDIR property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Adding SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying INSTALLDIR_X64 property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Adding INSTALLDIR_WIN32 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying Microsoft.VC90.CRT property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\'. MSI (s) (18:64) [05:41:05:894]: PROPERTY CHANGE: Modifying Microsoft.VC90.ATL property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Adding NEW_DIRECTORY1 property. Its value is 'C:\ProgramData\Sophos\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Adding SOPHOS_TAMPER_PROTECTION property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Modifying LOGS3 property. Its current value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\logs'. Its new value: 'C:\ProgramData\Sophos\Sophos Tamper Protection\logs\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Adding SOPHOS_DEVICE_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Modifying LOGS2 property. Its current value is 'C:\ProgramData\Sophos\Sophos Device Control\logs'. Its new value: 'C:\ProgramData\Sophos\Sophos Device Control\logs\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Adding SOPHOS_DATA_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Modifying LOGS1 property. Its current value is 'C:\ProgramData\Sophos\Sophos Data Control\logs'. Its new value: 'C:\ProgramData\Sophos\Sophos Data Control\logs\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Adding RESOURCES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Adding RES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Adding NEW_DIRECTORY3 property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Modifying CACHE property. Its current value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Cache'. Its new value: 'C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Modifying TEMP property. Its current value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Temp'. Its new value: 'C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Modifying SAFESTORE property. Its current value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore'. Its new value: 'C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Modifying LOGS property. Its current value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\logs'. Its new value: 'C:\ProgramData\Sophos\Sophos Anti-Virus\logs\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Modifying INFECTED property. Its current value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED'. Its new value: 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Modifying LOW property. Its current value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low'. Its new value: 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\'. MSI (s) (18:64) [05:41:05:895]: PROPERTY CHANGE: Modifying CONFIG property. Its current value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'. Its new value: 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config\'. MSI (s) (18:64) [05:41:05:895]: Target path resolution complete. Dumping Directory table... MSI (s) (18:64) [05:41:05:895]: Note: target paths subject to change (via custom actions or browsing) MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: TARGETDIR , Object: D:\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: ProgramMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: newfolder1 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: newfolder2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: StartMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: WindowsVolume , Object: C:\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: WindowsFolder , Object: C:\Windows\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: TemplateFolder , Object: C:\ProgramData\Microsoft\Windows\Templates\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: TempFolder , Object: C:\Windows\TEMP\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: System16Folder , Object: D:\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: StartupFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: SendToFolder , Object: C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: ProgramFiles64Folder , Object: C:\Program Files (x86)\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: PrimaryVolumePath , Object: D:\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: LocalAppDataFolder , Object: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: GlobalAssemblyCache , Object: D:\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: FontsFolder , Object: C:\Windows\Fonts\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: FavoritesFolder , Object: C:\Windows\SysWOW64\config\systemprofile\Favorites\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: DesktopFolder , Object: C:\Users\Public\Desktop\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: CommonFiles64Folder , Object: C:\Program Files (x86)\Common Files\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: AdminToolsFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: USERPROFILE , Object: C:\Users\Default\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: ALLUSERSPROFILE , Object: C:\ProgramData\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: SystemFolder , Object: C:\Windows\SysWOW64\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: System64Folder , Object: C:\Windows\SysWOW64\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files (x86)\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: SOPHOS , Object: C:\Program Files (x86)\Sophos\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: SOPHOS_ANTI_VIRUS , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: INSTALLDIR_X64 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: INSTALLDIR_WIN32 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: Microsoft.VC90.CRT , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: Microsoft.VC90.ATL , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: LOGS3 , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\logs\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\Sophos Device Control\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: LOGS2 , Object: C:\ProgramData\Sophos\Sophos Device Control\logs\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\Sophos Data Control\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: LOGS1 , Object: C:\ProgramData\Sophos\Sophos Data Control\logs\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: RESOURCES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: RES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: CACHE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: TEMP , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: SAFESTORE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: LOGS , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\logs\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: INFECTED , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: LOW , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\ MSI (s) (18:64) [05:41:05:895]: Dir (target): Key: CONFIG , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\ Action start 5:41:05: CostFinalize. MSI (s) (18:64) [05:41:05:896]: Doing action: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 5:41:05: CostFinalize. Return value 1. MSI (s) (18:64) [05:41:05:897]: PROPERTY CHANGE: Modifying SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\'. Action start 5:41:05: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (18:64) [05:41:05:897]: Doing action: ResolveSource Action ended 5:41:05: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. MSI (s) (18:64) [05:41:05:897]: Resolving source. MSI (s) (18:64) [05:41:05:897]: Resolving source to launched-from source. MSI (s) (18:64) [05:41:05:897]: Setting launched-from source as last-used. MSI (s) (18:64) [05:41:05:897]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\'. MSI (s) (18:64) [05:41:05:897]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\'. MSI (s) (18:64) [05:41:05:897]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{65323B2D-83D4-470D-A209-D769DB30BBDB}'. MSI (s) (18:64) [05:41:05:897]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ MSI (s) (18:64) [05:41:05:897]: SOURCEDIR product ==> {65323B2D-83D4-470D-A209-D769DB30BBDB} MSI (s) (18:64) [05:41:05:897]: SECREPAIR: CryptAcquireContext succeeded MSI (s) (18:64) [05:41:05:898]: Determining source type MSI (s) (18:64) [05:41:05:898]: Source type from package 'Sophos Anti-Virus.msi': 0 MSI (s) (18:64) [05:41:05:898]: SECREPAIR: Hash Database: C:\Windows\Installer\SourceHash{65323B2D-83D4-470D-A209-D769DB30BBDB} Action start 5:41:05: ResolveSource. MSI (s) (18:64) [05:41:06:410]: Source path resolution complete. Dumping Directory table... MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: TARGETDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ , LongSubPath: , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: ProgramMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\ , LongSubPath: Programs\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: newfolder1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\Sophos\ , LongSubPath: Programs\Sophos\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: newfolder2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Programs\Sophos\Sophos Endpoint Security and Control\ , LongSubPath: Programs\Sophos\Sophos Endpoint Security and Control\ , ShortSubPath: Programs\Sophos\SOPHOS~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: StartMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Start Menu\ , LongSubPath: Start Menu\ , ShortSubPath: STARTM~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Start Menu\Sophos\ , LongSubPath: Start Menu\Sophos\ , ShortSubPath: STARTM~1\Sophos\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: WindowsVolume , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\WinRoot\ , LongSubPath: WinRoot\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: WindowsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: TemplateFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ShellNew\ , LongSubPath: ShellNew\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: TempFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Temp\ , LongSubPath: Temp\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: System16Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System\ , LongSubPath: System\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: StartupFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\StartUp\ , LongSubPath: StartUp\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: SendToFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\SendTo\ , LongSubPath: SendTo\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: ProgramFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Program Files 64\ , LongSubPath: Program Files 64\ , ShortSubPath: Prog64~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: PrimaryVolumePath , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\PrimaryVolumePath\ , LongSubPath: PrimaryVolumePath\ , ShortSubPath: Primar~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: LocalAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\LocalAppData\ , LongSubPath: LocalAppData\ , ShortSubPath: LocalA~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: GlobalAssemblyCache , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\GlobalAssemblyCache\ , LongSubPath: GlobalAssemblyCache\ , ShortSubPath: Global~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: FontsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Fonts\ , LongSubPath: Fonts\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: FavoritesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Favorites\ , LongSubPath: Favorites\ , ShortSubPath: FAVORI~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: DesktopFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Desktop\ , LongSubPath: Desktop\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: CommonFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Common64\ , LongSubPath: Common64\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: AdminToolsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\AdminTools\ , LongSubPath: AdminTools\ , ShortSubPath: Admint~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: USERPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\UserProfile\ , LongSubPath: UserProfile\ , ShortSubPath: USERPR~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: ALLUSERSPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\All Users\ , LongSubPath: All Users\ , ShortSubPath: ALLUSE~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: SystemFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System32\ , LongSubPath: System32\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: System64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\System64\ , LongSubPath: System64\ , ShortSubPath: MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: ProgramFilesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\ , LongSubPath: program files\ , ShortSubPath: PROGRA~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: SOPHOS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\ , LongSubPath: program files\Sophos\ , ShortSubPath: PROGRA~1\Sophos\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: SOPHOS_ANTI_VIRUS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: INSTALLDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Control\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: INSTALLDIR_X64 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_X64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_X64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\WSC_X64\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: INSTALLDIR_WIN32 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\jwgiamqy\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: Microsoft.VC90.CRT , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\oeg2ttzz\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: Microsoft.VC90.ATL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\l3j1top6\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: CommonAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\ , LongSubPath: CommonAppData\ , ShortSubPath: Common~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\ , LongSubPath: CommonAppData\Sophos\ , ShortSubPath: Common~1\Sophos\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Tamper Protection\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: LOGS3 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Tamper Protection\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\logs\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Device Control\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: LOGS2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Device Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\logs\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Data Control\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: LOGS1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Data Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\logs\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: RESOURCES , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: RES , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: CACHE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Cache\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: TEMP , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Temp\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: SAFESTORE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Safestore\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Safestore\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\ynotdaxl\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: LOGS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\logs\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: INFECTED , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: LOW , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\Low\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\Low\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\Low\ MSI (s) (18:64) [05:41:06:410]: Dir (source): Key: CONFIG , Object: C:\ProgramData\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Config\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Config\ MSI (s) (18:64) [05:41:06:411]: Doing action: SetInstallDir Action ended 5:41:06: ResolveSource. Return value 1. Action start 5:41:06: SetInstallDir. MSI (s) (18:64) [05:41:06:412]: Skipping action: UninstallDowngradeCheck (condition is false) MSI (s) (18:64) [05:41:06:412]: Doing action: SetScriptProperty Action ended 5:41:06: SetInstallDir. Return value 1. MSI (s) (18:64) [05:41:06:412]: PROPERTY CHANGE: Adding RunPreLaunchScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"'. Action start 5:41:06: SetScriptProperty. MSI (s) (18:64) [05:41:06:413]: Skipping action: CheckForSophosClientFirewall (condition is false) MSI (s) (18:64) [05:41:06:413]: Skipping action: ISInitAllUsers (condition is false) MSI (s) (18:64) [05:41:06:413]: Doing action: SetODBCFolders Action ended 5:41:06: SetScriptProperty. Return value 1. MSI (s) (18:64) [05:41:06:413]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (18:64) [05:41:06:413]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCDriver`, `Component` WHERE `ODBCDriver`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2) MSI (s) (18:64) [05:41:06:413]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (18:64) [05:41:06:413]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCTranslator`, `Component` WHERE `ODBCTranslator`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2) Action start 5:41:06: SetODBCFolders. MSI (s) (18:64) [05:41:06:413]: Doing action: MigrateFeatureStates Action ended 5:41:06: SetODBCFolders. Return value 0. MSI (s) (18:64) [05:41:06:413]: Skipping MigrateFeatureStates action: not run in maintenance mode Action start 5:41:06: MigrateFeatureStates. MSI (s) (18:64) [05:41:06:413]: Doing action: InstallValidate Action ended 5:41:06: MigrateFeatureStates. Return value 0. MSI (s) (18:64) [05:41:06:414]: Note: 1: 2205 2: 3: Dialog MSI (s) (18:64) [05:41:06:414]: Feature: SAVService; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Feature: MainComponents; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Feature: HomeEdition; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Feature: ConfigFiles; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Feature: Resources; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Feature: EngineFiles; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Feature: ServiceComponents; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Component: ConfigFilesNoReplace; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ConfigFilesReplace; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ConfigFilesReplaceHome; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Component: AllOtherFiles2; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: AllOtherFiles9; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: AllOtherFiles1; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SAFESTOREDIR; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: AllOtherFiles3; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: AllOtherFiles8; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: AllOtherFiles5; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: AllOtherFiles6; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: AllOtherFiles7; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ControlSAVAdminService; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ControlSAVService; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SophosCleanupService.exe; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: scs_integrity_dat; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SophosOfficeAV.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SophosOfficeAVx64.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: sav32cli.exe; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: bpaif.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: AllOtherFiles4; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SAVHelpChs.chm; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SAVHelpCht.chm; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SAVHelpDeu.chm; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SAVHelpEsp.chm; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SAVHelpFra.chm; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SAVHelpIta.chm; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SAVHelpJap.chm; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SCF.dat; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SOF.dat; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavHelpEng.chm; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavShellExtx64; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: TamperProtectionControlx64; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: Shortcut_de; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Component: Shortcut_es; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Component: Shortcut_fr; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Component: Shortcut_it; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Component: Shortcut_ja; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Component: Shortcut_zh_cn; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Component: Shortcut_zh_tw; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Component: Shortcuts; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: Categories.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavNeutralRes.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavRes.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavResChs.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavResCht.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavResDeu.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavResEng.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavResEsp.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavResFra.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavResIt.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavResJap.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: BackgroundScanClient.exe; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavAdapter.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: Microsoft.VC90.ATL.manifest; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: atl90.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: Microsoft.VC90.CRT.manifest; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: msvcm90.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: msvcp90.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: msvcr90.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: PsRootCertificate; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: PsCertificateRevocationList; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: integrity_dat; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ForceUpdateAlongSideSGN.exe; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WSCClientW32; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Component: WSCClientX64; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SAVService; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SAVAdminService; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: AllOtherFiles; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: AuthorisedLists.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: AppFeedManager.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ApplicationManagement.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: DCManagement.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: DataControlManagement.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: DataControlPlugin.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: DetectionFeedback.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: DeviceControlPlugin.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: BHOManagement.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: BackgroundScanning.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ComponentManager.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: Configuration.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: DesktopMessaging.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SAVUserContext.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: DriveProcessor.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: EEConsumer.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: FSDecomposer.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: FilterProcessors.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ICAdapter.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ICManagement.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ICProcessors.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: Instrumentation.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: Instrumentation.man; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: LegacyConsumers.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: Localisation.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: Logging.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: Persistance.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SAVControl.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavPlugin.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SIPSManagement.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SWIManagement.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavMain.exe; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavProgress.exe; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavShellExt.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SAVTelem.exe; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ScanEditExports.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ScanEditFacade.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ScanManagement.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavSecurity.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SophtainerAdapter.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SystemInformation.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: TamperProtectionControl.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: TamperProtectionManagement.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: TamperProtectionPlugin.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ThreatDetection.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ThreatManagement.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: Translators.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: VEController.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: VirusDetection.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SafeStore32.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SafeStore64.dll; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ssr32.exe; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: ssr64.exe; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: HomeEditionComponent; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:414]: Component: swc_service_exe.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: integrity_dat.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SWCAdapter_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCPResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCPResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCPResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCPResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCPResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCPResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCPResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCPResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WebControlMessaging_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCMResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCMResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCMResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCMResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCMResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCMResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCMResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WCMResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:414]: Component: WebControlMessaging_dll_reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: SwiCallout64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: SwiDi.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: Difx_dll_64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: SwiComponent32OnlyNotWFP_SwiUpdate32.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: SwiComponent64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: SwiCallout_cat.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: Swi_di.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: Difx_dll.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: SwiProxy.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: SwiProxyChild.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: integrity.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __Shortcuts65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __Shortcut_de65; Installed: Null; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: __Shortcuts66; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __Shortcuts67; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __SavMain.exe65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __Shortcut_es65; Installed: Null; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: __Shortcut_fr65; Installed: Null; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: __Shortcut_it65; Installed: Null; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: __Shortcut_ja65; Installed: Null; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: __Shortcut_zh_cn65; Installed: Null; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: __Shortcut_zh_tw65; Installed: Null; Request: Null; Action: Null MSI (s) (18:64) [05:41:06:415]: Component: __SAFESTOREDIR65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __SAVService65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __SAVTelem.exe65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __VirusDetection.dll65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __SafeStore32.dll65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C10165; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __SavShellExt.dll65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __SavMain.exe66; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __SavProgress.exe65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __DesktopMessaging.dll65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __SavPlugin.dll65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __DataControlManagement.dll65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Component: __DCManagement.dll65; Installed: Null; Request: Null; Action: Local MSI (s) (18:64) [05:41:06:415]: Note: 1: 2205 2: 3: BindImage MSI (s) (18:64) [05:41:06:415]: Note: 1: 2205 2: 3: ProgId MSI (s) (18:64) [05:41:06:415]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (18:64) [05:41:06:415]: Note: 1: 2205 2: 3: SelfReg MSI (s) (18:64) [05:41:06:415]: Note: 1: 2205 2: 3: Extension MSI (s) (18:64) [05:41:06:415]: Note: 1: 2205 2: 3: Font MSI (s) (18:64) [05:41:06:415]: Note: 1: 2205 2: 3: Class MSI (s) (18:64) [05:41:06:415]: Note: 1: 2205 2: 3: TypeLib Action start 5:41:06: InstallValidate. MSI (s) (18:64) [05:41:06:415]: Note: 1: 2205 2: 3: _RemoveFilePath MSI (s) (18:64) [05:41:06:440]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'. MSI (s) (18:64) [05:41:06:440]: Note: 1: 2205 2: 3: BindImage MSI (s) (18:64) [05:41:06:440]: Note: 1: 2205 2: 3: ProgId MSI (s) (18:64) [05:41:06:440]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (18:64) [05:41:06:440]: Note: 1: 2205 2: 3: SelfReg MSI (s) (18:64) [05:41:06:440]: Note: 1: 2205 2: 3: Extension MSI (s) (18:64) [05:41:06:440]: Note: 1: 2205 2: 3: Font MSI (s) (18:64) [05:41:06:440]: Note: 1: 2205 2: 3: Class MSI (s) (18:64) [05:41:06:440]: Note: 1: 2205 2: 3: TypeLib MSI (s) (18:64) [05:41:06:440]: Note: 1: 2727 2: MSI (s) (18:64) [05:41:06:441]: Note: 1: 2727 2: MSI (s) (18:64) [05:41:06:441]: Doing action: SetARPINSTALLLOCATION Action ended 5:41:06: InstallValidate. Return value 1. MSI (s) (18:64) [05:41:06:441]: PROPERTY CHANGE: Adding ARPINSTALLLOCATION property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:06: SetARPINSTALLLOCATION. MSI (s) (18:64) [05:41:06:442]: Skipping action: SetSAVSERVICEUSER (condition is false) MSI (s) (18:64) [05:41:06:442]: Doing action: RemoveExistingProducts Action ended 5:41:06: SetARPINSTALLLOCATION. Return value 1. MSI (s) (18:64) [05:41:06:442]: Skipping RemoveExistingProducts action: current configuration is maintenance mode or an uninstall Action start 5:41:06: RemoveExistingProducts. MSI (s) (18:64) [05:41:06:442]: Doing action: InstallInitialize Action ended 5:41:06: RemoveExistingProducts. Return value 0. MSI (s) (18:64) [05:41:06:442]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (18:64) [05:41:06:442]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (18:64) [05:41:06:442]: BeginTransaction: Locking Server MSI (s) (18:64) [05:41:06:443]: SRSetRestorePoint skipped for this transaction. MSI (s) (18:64) [05:41:06:443]: Server not locked: locking for product {65323B2D-83D4-470D-A209-D769DB30BBDB} Action start 5:41:06: InstallInitialize. MSI (s) (18:64) [05:41:07:600]: Doing action: SetUpdateFailed Action ended 5:41:07: InstallInitialize. Return value 1. Action start 5:41:07: SetUpdateFailed. MSI (s) (18:64) [05:41:07:606]: Doing action: SetRestoreMovedFiles Action ended 5:41:07: SetUpdateFailed. Return value 1. MSI (s) (18:64) [05:41:07:606]: PROPERTY CHANGE: Adding RestoreMovedFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetRestoreMovedFiles. MSI (s) (18:64) [05:41:07:606]: Doing action: RestoreMovedFiles Action ended 5:41:07: SetRestoreMovedFiles. Return value 1. Action start 5:41:07: RestoreMovedFiles. MSI (s) (18:64) [05:41:07:609]: Doing action: CheckRegForNullDACLs Action ended 5:41:07: RestoreMovedFiles. Return value 1. Action start 5:41:07: CheckRegForNullDACLs. MSI (s) (18:64) [05:41:07:613]: Doing action: SetErrorScriptProperty Action ended 5:41:07: CheckRegForNullDACLs. Return value 1. MSI (s) (18:64) [05:41:07:613]: PROPERTY CHANGE: Adding RunErrorScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"'. Action start 5:41:07: SetErrorScriptProperty. MSI (s) (18:64) [05:41:07:613]: Doing action: RunErrorScript Action ended 5:41:07: SetErrorScriptProperty. Return value 1. Action start 5:41:07: RunErrorScript. MSI (s) (18:64) [05:41:07:617]: Doing action: ExtractClassicConfig Action ended 5:41:07: RunErrorScript. Return value 1. MSI (s) (18:00) [05:41:07:620]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI5036.tmp, Entrypoint: ExtractClassicConfig MSI (s) (18:5C) [05:41:07:620]: Generating random cookie. MSI (s) (18:5C) [05:41:07:621]: Created Custom Action Server with PID 2656 (0xA60). MSI (s) (18:7C) [05:41:07:643]: Running as a service. MSI (s) (18:7C) [05:41:07:645]: Hello, I'm your 32bit Elevated Non-remapped custom action server. Action start 5:41:07: ExtractClassicConfig. MSI (s) (18:64) [05:41:07:654]: Doing action: PreInstallChecks Action ended 5:41:07: ExtractClassicConfig. Return value 1. MSI (s) (18:8C) [05:41:07:657]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI5057.tmp, Entrypoint: PreInstallChecks Action start 5:41:07: PreInstallChecks. MSI (s) (18:64) [05:41:07:665]: Doing action: SetUpdateBegin Action ended 5:41:07: PreInstallChecks. Return value 1. Action start 5:41:07: SetUpdateBegin. MSI (s) (18:64) [05:41:07:668]: Doing action: SetBootDriverStartupProperty Action ended 5:41:07: SetUpdateBegin. Return value 1. MSI (s) (18:F8) [05:41:07:670]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI5067.tmp, Entrypoint: SetBootDriverStartupProperty Action start 5:41:07: SetBootDriverStartupProperty. MSI (s) (18:64) [05:41:07:679]: Doing action: CloseSavMainWindow Action ended 5:41:07: SetBootDriverStartupProperty. Return value 1. Action start 5:41:07: CloseSavMainWindow. MSI (s) (18:64) [05:41:07:683]: Skipping action: AllocateRegistrySpace (condition is false) MSI (s) (18:64) [05:41:07:683]: Doing action: ProcessComponents Action ended 5:41:07: CloseSavMainWindow. Return value 1. Action start 5:41:07: ProcessComponents. MSI (s) (18:64) [05:41:07:698]: Doing action: UnpublishComponents Action ended 5:41:07: ProcessComponents. Return value 1. MSI (s) (18:64) [05:41:07:698]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (18:64) [05:41:07:698]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND (`Feature`.`Action` = 0 OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2))) Action start 5:41:07: UnpublishComponents. MSI (s) (18:64) [05:41:07:698]: Doing action: MsiUnpublishAssemblies Action ended 5:41:07: UnpublishComponents. Return value 0. MSI (s) (18:64) [05:41:07:698]: Note: 1: 2205 2: 3: MsiAssembly MSI (s) (18:64) [05:41:07:698]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT null, null, `Component`.`Component`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `MsiAssembly`, `Component`, `Feature` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Feature_` = `Feature`.`Feature` AND `MsiAssembly`.`File_Application` = null AND (`Feature`.`Action` = 0 OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2))) Action start 5:41:07: MsiUnpublishAssemblies. MSI (s) (18:64) [05:41:07:699]: Doing action: UnpublishFeatures Action ended 5:41:07: MsiUnpublishAssemblies. Return value 0. Action start 5:41:07: UnpublishFeatures. MSI (s) (18:64) [05:41:07:699]: Doing action: SchedSecureObjectsRollback Action ended 5:41:07: UnpublishFeatures. Return value 1. MSI (s) (18:A4) [05:41:07:700]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI5087.tmp, Entrypoint: SchedSecureObjectsRollback Action start 5:41:07: SchedSecureObjectsRollback. SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070003 - continuing SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070002 - continuing SchedSecureObjectsRollback: Failed to store ACL rollback information with error 0x80070002 - continuing MSI (s) (18:64) [05:41:07:707]: Doing action: RollbackDisableServices Action ended 5:41:07: SchedSecureObjectsRollback. Return value 1. Action start 5:41:07: RollbackDisableServices. MSI (s) (18:64) [05:41:07:711]: Doing action: DisableServices Action ended 5:41:07: RollbackDisableServices. Return value 1. Action start 5:41:07: DisableServices. MSI (s) (18:64) [05:41:07:714]: Doing action: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:07: DisableServices. Return value 1. MSI (s) (18:CC) [05:41:07:716]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI5098.tmp, Entrypoint: SwcDisableSwcServiceStart Action start 5:41:07: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:07:718]: Doing action: SwiServiceUnregister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 5:41:07: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (18:64) [05:41:07:718]: PROPERTY CHANGE: Adding SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'swi_service'. Action start 5:41:07: SwiServiceUnregister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (18:64) [05:41:07:719]: Doing action: SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 5:41:07: SwiServiceUnregister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. Action start 5:41:07: SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (18:64) [05:41:07:722]: Doing action: StopServices Action ended 5:41:07: SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. Action start 5:41:07: StopServices. MSI (s) (18:64) [05:41:07:723]: Skipping action: DeleteSwiFc.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:07:723]: Skipping action: DeleteSwiFc.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:07:723]: Skipping action: DeleteScfDotDat.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:07:723]: Skipping action: DeleteScfDotDat.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:07:723]: Skipping action: SwiCalloutUninstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:07:723]: Skipping action: SwiFilterUninstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:07:723]: Skipping action: SwiFilterUninstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:07:723]: Skipping action: SwiCalloutUninstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:07:723]: Doing action: ForceStopSAVService Action ended 5:41:07: StopServices. Return value 1. Action start 5:41:07: ForceStopSAVService. MSI (s) (18:64) [05:41:07:726]: Doing action: WaitForSAVService Action ended 5:41:07: ForceStopSAVService. Return value 1. Action start 5:41:07: WaitForSAVService. MSI (s) (18:64) [05:41:07:730]: Skipping action: CleanUpSsspUserAccount.SetProperty (condition is false) MSI (s) (18:64) [05:41:07:730]: Skipping action: CleanUpSsspUserAccountRollback.SetProperty (condition is false) MSI (s) (18:64) [05:41:07:730]: Skipping action: CleanUpSsspUserAccountRollback (condition is false) MSI (s) (18:64) [05:41:07:730]: Skipping action: CleanUpSsspUserAccount (condition is false) MSI (s) (18:64) [05:41:07:730]: Skipping action: RemoveSIPSSubmitterUserAccount.SetProperty (condition is false) MSI (s) (18:64) [05:41:07:730]: Skipping action: RemoveSIPSSubmitterUserAccount (condition is false) MSI (s) (18:64) [05:41:07:730]: Skipping action: RemoveSIPSSubmitterUserAccountRollback.SetProperty (condition is false) MSI (s) (18:64) [05:41:07:730]: Skipping action: RemoveSIPSSubmitterUserAccountRollback (condition is false) MSI (s) (18:64) [05:41:07:730]: Skipping action: RemoveTamperProtectionRegKeyRollback (condition is false) MSI (s) (18:64) [05:41:07:730]: Skipping action: RemoveTamperProtectionRegKey (condition is false) MSI (s) (18:64) [05:41:07:730]: Doing action: DeleteServices Action ended 5:41:07: WaitForSAVService. Return value 1. Action start 5:41:07: DeleteServices. MSI (s) (18:64) [05:41:07:731]: Skipping action: RemoveSophosCleanupService (condition is false) MSI (s) (18:64) [05:41:07:731]: Doing action: UnregisterComPlus Action ended 5:41:07: DeleteServices. Return value 1. MSI (s) (18:64) [05:41:07:731]: Note: 1: 2205 2: 3: Complus MSI (s) (18:64) [05:41:07:731]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND `Action` = 0 Action start 5:41:07: UnregisterComPlus. MSI (s) (18:64) [05:41:07:732]: Doing action: SelfUnregModules Action ended 5:41:07: UnregisterComPlus. Return value 0. MSI (s) (18:64) [05:41:07:732]: Note: 1: 2205 2: 3: SelfReg MSI (s) (18:64) [05:41:07:732]: Note: 1: 2228 2: 3: SelfReg 4: Select `File`.`FileName`,`Component`.`Directory_`,`Component`.`Installed`, `File`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `File`, `Component` Where `SelfReg`.`File_` = `File`.`File` And `File`.`Component_` = `Component`.`Component` And `Component`.`Action` = 0 Action start 5:41:07: SelfUnregModules. MSI (s) (18:64) [05:41:07:732]: Doing action: UnregisterTypeLibraries Action ended 5:41:07: SelfUnregModules. Return value 1. MSI (s) (18:64) [05:41:07:732]: Note: 1: 2205 2: 3: TypeLib MSI (s) (18:64) [05:41:07:733]: Note: 1: 2228 2: 3: TypeLib 4: SELECT `LibID`, `TypeLib`.`Version`, `TypeLib`.`Language`, `TypeLib`.`Directory_`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `BinaryType`, `Component`.`Component`, `Component`.`Attributes` FROM `TypeLib`, `Component`, `File` WHERE `TypeLib`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Component`.`Action`=0) Action start 5:41:07: UnregisterTypeLibraries. MSI (s) (18:64) [05:41:07:733]: Doing action: RemoveODBC Action ended 5:41:07: UnregisterTypeLibraries. Return value 0. MSI (s) (18:64) [05:41:07:733]: Note: 1: 2205 2: 3: ODBCDataSource MSI (s) (18:64) [05:41:07:733]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ? MSI (s) (18:64) [05:41:07:733]: Note: 1: 2205 2: 3: ODBCDataSource MSI (s) (18:64) [05:41:07:733]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ? MSI (s) (18:64) [05:41:07:733]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (18:64) [05:41:07:733]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ? MSI (s) (18:64) [05:41:07:733]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (18:64) [05:41:07:733]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ? MSI (s) (18:64) [05:41:07:733]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (18:64) [05:41:07:733]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ? MSI (s) (18:64) [05:41:07:733]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (18:64) [05:41:07:733]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ? MSI (s) (18:64) [05:41:07:733]: Note: 1: 2711 2: ODBCDriverManager Action start 5:41:07: RemoveODBC. MSI (s) (18:64) [05:41:07:733]: Note: 1: 2711 2: ODBCDriverManager64 MSI (s) (18:64) [05:41:07:733]: Doing action: UnregisterFonts Action ended 5:41:07: RemoveODBC. Return value 1. MSI (s) (18:64) [05:41:07:734]: Note: 1: 2205 2: 3: Font MSI (s) (18:64) [05:41:07:734]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Installed`From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And `FileAction`.`Action` = 0 ORDER BY `FileAction`.`Directory_` Action start 5:41:07: UnregisterFonts. MSI (s) (18:64) [05:41:07:734]: Skipping action: UninstallSecurityCenter (condition is false) MSI (s) (18:64) [05:41:07:734]: Doing action: RemoveRegistryValues Action ended 5:41:07: UnregisterFonts. Return value 1. Action start 5:41:07: RemoveRegistryValues. MSI (s) (18:64) [05:41:07:749]: Skipping action: SwcPauseForUnload.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (18:64) [05:41:07:749]: Doing action: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:07: RemoveRegistryValues. Return value 1. Action start 5:41:07: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:07:750]: Skipping action: SwcDeleteReg.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (18:64) [05:41:07:750]: Skipping action: SwcService_unreg_rb.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (18:64) [05:41:07:750]: Skipping action: SwcService_unregister.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (18:64) [05:41:07:750]: Skipping action: Swc_postcleanup.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (18:64) [05:41:07:750]: Doing action: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:07: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 5:41:07: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:07:752]: Doing action: ConfigureEventManifestUnregister Action ended 5:41:07: Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (18:0C) [05:41:07:757]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI50C8.tmp, Entrypoint: ConfigureEventManifestUnregister MSI (s) (18!CC) [05:41:07:763]: PROPERTY CHANGE: Adding RollbackUnregisterEventManifest property. Its value is '"wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"'. Action start 5:41:07: ConfigureEventManifestUnregister. MSI (s) (18!CC) [05:41:07:763]: Doing action: RollbackUnregisterEventManifest Action start 5:41:07: RollbackUnregisterEventManifest. Action ended 5:41:07: RollbackUnregisterEventManifest. Return value 1. MSI (s) (18:64) [05:41:07:766]: Doing action: UnregisterClassInfo Action ended 5:41:07: ConfigureEventManifestUnregister. Return value 1. MSI (s) (18:64) [05:41:07:767]: Note: 1: 2205 2: 3: Class MSI (s) (18:64) [05:41:07:767]: Note: 1: 2228 2: 3: Class 4: SELECT `BinaryType`, `CLSID`, `ProgId_Default`, `Class`.`Description`, `Context`, `Feature_`, `ComponentId`, `Component`, `Class`.`Attributes`, `AppId_`, `FileTypeMask`, `Icon_`, `IconIndex`, `DefInprocHandler`, `Argument`, `Component`.`RuntimeFlags`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action`, `Component`.`Attributes` FROM `Class`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2))) Action start 5:41:07: UnregisterClassInfo. MSI (s) (18:64) [05:41:07:767]: Doing action: UnregisterExtensionInfo Action ended 5:41:07: UnregisterClassInfo. Return value 0. MSI (s) (18:64) [05:41:07:767]: Note: 1: 2205 2: 3: Extension MSI (s) (18:64) [05:41:07:767]: Note: 1: 2228 2: 3: Extension 4: SELECT `Extension`, `BinaryType`, `ProgId_`, null, null, `MIME_`, `Feature_`, `ComponentId`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action` FROM `Extension`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2))) Action start 5:41:07: UnregisterExtensionInfo. MSI (s) (18:64) [05:41:07:768]: Doing action: UnregisterProgIdInfo Action ended 5:41:07: UnregisterExtensionInfo. Return value 0. MSI (s) (18:64) [05:41:07:768]: Note: 1: 2205 2: 3: ProgId MSI (s) (18:64) [05:41:07:768]: Note: 1: 2228 2: 3: ProgId 4: SELECT DISTINCT `BinaryType`, `ProgId`, `Class_`, `ProgId`.`Description`, `ProgId`.`Icon_`, `ProgId`.`IconIndex`, null, `Component`.`RuntimeFlags` , `Component`.`Component`, `Component`.`Attributes` FROM `ProgId`, `Class`, `Feature`, `Component` WHERE `ProgId`.`Class_` = `Class`.`CLSID` AND `Class`.`Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2))) Action start 5:41:07: UnregisterProgIdInfo. MSI (s) (18:64) [05:41:07:768]: Doing action: UnregisterMIMEInfo Action ended 5:41:07: UnregisterProgIdInfo. Return value 0. MSI (s) (18:64) [05:41:07:768]: Note: 1: 2205 2: 3: MIME MSI (s) (18:64) [05:41:07:768]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2))) Action start 5:41:07: UnregisterMIMEInfo. MSI (s) (18:64) [05:41:07:769]: Doing action: RemoveIniValues Action ended 5:41:07: UnregisterMIMEInfo. Return value 0. MSI (s) (18:64) [05:41:07:769]: Note: 1: 2205 2: 3: IniFile MSI (s) (18:64) [05:41:07:769]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND `Component`.`Action`=0 ORDER BY `FileName`,`Section` Action start 5:41:07: RemoveIniValues. MSI (s) (18:64) [05:41:07:769]: Doing action: RemoveShortcuts Action ended 5:41:07: RemoveIniValues. Return value 1. Action start 5:41:07: RemoveShortcuts. MSI (s) (18:64) [05:41:07:769]: Doing action: RemoveEnvironmentStrings Action ended 5:41:07: RemoveShortcuts. Return value 1. MSI (s) (18:64) [05:41:07:770]: Note: 1: 2205 2: 3: Environment MSI (s) (18:64) [05:41:07:770]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 0) Action start 5:41:07: RemoveEnvironmentStrings. MSI (s) (18:64) [05:41:07:770]: Doing action: SetRemoveSAVIProperty Action ended 5:41:07: RemoveEnvironmentStrings. Return value 1. MSI (s) (18:64) [05:41:07:770]: PROPERTY CHANGE: Modifying RemoveSAVI property. Its current value is 'INSTALLDIR'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetRemoveSAVIProperty. MSI (s) (18:64) [05:41:07:770]: Skipping action: RemoveSAVI (condition is false) MSI (s) (18:64) [05:41:07:770]: Doing action: SetUninstallDriverFilesOnUpdateProperty Action ended 5:41:07: SetRemoveSAVIProperty. Return value 1. MSI (s) (18:64) [05:41:07:771]: PROPERTY CHANGE: Adding UninstallDriverFilesOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'. Action start 5:41:07: SetUninstallDriverFilesOnUpdateProperty. MSI (s) (18:64) [05:41:07:771]: Doing action: SetUninstallBootDriverProperty Action ended 5:41:07: SetUninstallDriverFilesOnUpdateProperty. Return value 1. MSI (s) (18:64) [05:41:07:771]: PROPERTY CHANGE: Adding UninstallBootDriver property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'. Action start 5:41:07: SetUninstallBootDriverProperty. MSI (s) (18:64) [05:41:07:771]: Doing action: SetUninstallBootDriverOnUpdateProperty Action ended 5:41:07: SetUninstallBootDriverProperty. Return value 1. MSI (s) (18:64) [05:41:07:771]: PROPERTY CHANGE: Adding UninstallBootDriverOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'. Action start 5:41:07: SetUninstallBootDriverOnUpdateProperty. MSI (s) (18:64) [05:41:07:772]: Doing action: SetUninstallKMSDriverProperty Action ended 5:41:07: SetUninstallBootDriverOnUpdateProperty. Return value 1. MSI (s) (18:64) [05:41:07:772]: PROPERTY CHANGE: Adding UninstallKMSDriver property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF'. Action start 5:41:07: SetUninstallKMSDriverProperty. MSI (s) (18:64) [05:41:07:772]: Doing action: SetUninstallKMSDriverOnUpdateProperty Action ended 5:41:07: SetUninstallKMSDriverProperty. Return value 1. MSI (s) (18:64) [05:41:07:772]: PROPERTY CHANGE: Adding UninstallKMSDriverOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF'. Action start 5:41:07: SetUninstallKMSDriverOnUpdateProperty. MSI (s) (18:64) [05:41:07:772]: Doing action: SetUninstallDriverFilesVistaProperty Action ended 5:41:07: SetUninstallKMSDriverOnUpdateProperty. Return value 1. MSI (s) (18:64) [05:41:07:773]: PROPERTY CHANGE: Adding UninstallDriverFilesVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'. Action start 5:41:07: SetUninstallDriverFilesVistaProperty. MSI (s) (18:64) [05:41:07:773]: Doing action: SetUninstallClassFilterVistaProperty Action ended 5:41:07: SetUninstallDriverFilesVistaProperty. Return value 1. MSI (s) (18:64) [05:41:07:773]: PROPERTY CHANGE: Adding UninstallClassFilterVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf'. Action start 5:41:07: SetUninstallClassFilterVistaProperty. MSI (s) (18:64) [05:41:07:773]: Doing action: SetClassFilterPresentProperty Action ended 5:41:07: SetUninstallClassFilterVistaProperty. Return value 1. MSI (s) (18:1C) [05:41:07:775]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI50D8.tmp, Entrypoint: SetClassFilterPresentProperty MSI (s) (18!54) [05:41:07:780]: PROPERTY CHANGE: Modifying CLASSFILTERPRESENT property. Its current value is '0'. Its new value: '1'. Action start 5:41:07: SetClassFilterPresentProperty. MSI (s) (18:64) [05:41:07:782]: Doing action: CheckUninstallDrivers Action ended 5:41:07: SetClassFilterPresentProperty. Return value 1. Action start 5:41:07: CheckUninstallDrivers. MSI (s) (18:64) [05:41:07:786]: Skipping action: UninstallDriverFilesOnUpdate (condition is false) MSI (s) (18:64) [05:41:07:786]: Doing action: UninstallDriverFiles64OnUpdate Action ended 5:41:07: CheckUninstallDrivers. Return value 1. Action start 5:41:07: UninstallDriverFiles64OnUpdate. MSI (s) (18:64) [05:41:07:788]: Skipping action: UninstallDriverFiles (condition is false) MSI (s) (18:64) [05:41:07:788]: Skipping action: UninstallDriverFiles64 (condition is false) MSI (s) (18:64) [05:41:07:788]: Skipping action: UninstallDriverFilesVista (condition is false) MSI (s) (18:64) [05:41:07:788]: Skipping action: UninstallDriverFiles64Vista (condition is false) MSI (s) (18:64) [05:41:07:788]: Skipping action: UninstallBootDriverOnUpdate (condition is false) MSI (s) (18:64) [05:41:07:788]: Doing action: UninstallBootDriverOnUpdate64 Action ended 5:41:07: UninstallDriverFiles64OnUpdate. Return value 1. Action start 5:41:07: UninstallBootDriverOnUpdate64. MSI (s) (18:64) [05:41:07:789]: Skipping action: UninstallBootDriver (condition is false) MSI (s) (18:64) [05:41:07:789]: Skipping action: UninstallBootDriver64 (condition is false) MSI (s) (18:64) [05:41:07:789]: Skipping action: UninstallClassFilterCleanReg (condition is false) MSI (s) (18:64) [05:41:07:789]: Skipping action: UninstallClassFilter64 (condition is false) MSI (s) (18:64) [05:41:07:789]: Skipping action: UninstallClassFilter64Vista (condition is false) MSI (s) (18:64) [05:41:07:789]: Skipping action: UninstallClassFilter (condition is false) MSI (s) (18:64) [05:41:07:789]: Skipping action: UninstallClassFilterVista (condition is false) MSI (s) (18:64) [05:41:07:789]: Skipping action: UninstallKMSDriver (condition is false) MSI (s) (18:64) [05:41:07:789]: Skipping action: UninstallKMSDriverOnUpdate (condition is false) MSI (s) (18:64) [05:41:07:789]: Skipping action: UnregisterTamperProtectionControlX64 (condition is false) MSI (s) (18:64) [05:41:07:789]: Skipping action: UnregisterSavShellExtX64 (condition is false) MSI (s) (18:64) [05:41:07:789]: Skipping action: UnregisterSophosOfficeAV (condition is false) MSI (s) (18:64) [05:41:07:789]: Skipping action: UnregisterSophosOfficeAVX64 (condition is false) MSI (s) (18:64) [05:41:07:789]: Doing action: SetUninstallDeviceControlProperty Action ended 5:41:07: UninstallBootDriverOnUpdate64. Return value 1. MSI (s) (18:64) [05:41:07:789]: PROPERTY CHANGE: Adding UninstallDeviceControl property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'. Action start 5:41:07: SetUninstallDeviceControlProperty. MSI (s) (18:64) [05:41:07:789]: Skipping action: UninstallDeviceControl (condition is false) MSI (s) (18:64) [05:41:07:789]: Doing action: SetDeleteDriverKeysProperty Action ended 5:41:07: SetUninstallDeviceControlProperty. Return value 1. MSI (s) (18:64) [05:41:07:790]: PROPERTY CHANGE: Adding DeleteDriverKeys property. Its value is '0'. Action start 5:41:07: SetDeleteDriverKeysProperty. MSI (s) (18:64) [05:41:07:790]: Skipping action: DeleteDriverKeys (condition is false) MSI (s) (18:64) [05:41:07:790]: Skipping action: DeleteSKMScanDriverKeys (condition is false) MSI (s) (18:64) [05:41:07:790]: Skipping action: DeleteSDCFilterDriverKeys (condition is false) MSI (s) (18:64) [05:41:07:790]: Skipping action: DeleteSDCFilterDriverFiles (condition is false) MSI (s) (18:64) [05:41:07:790]: Doing action: SetUnregisterBufferOverflowProtection Action ended 5:41:07: SetDeleteDriverKeysProperty. Return value 1. MSI (s) (18:64) [05:41:07:790]: PROPERTY CHANGE: Adding UnregisterBufferOverflowProtection property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetUnregisterBufferOverflowProtection. MSI (s) (18:64) [05:41:07:790]: Doing action: UnregisterBufferOverflowProtection Action ended 5:41:07: SetUnregisterBufferOverflowProtection. Return value 1. Action start 5:41:07: UnregisterBufferOverflowProtection. MSI (s) (18:64) [05:41:07:793]: Doing action: SetDeleteNonEngineFilesProperty Action ended 5:41:07: UnregisterBufferOverflowProtection. Return value 1. MSI (s) (18:64) [05:41:07:794]: PROPERTY CHANGE: Adding DeleteNonEngineFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetDeleteNonEngineFilesProperty. MSI (s) (18:64) [05:41:07:794]: Skipping action: DeleteNonEngineFiles (condition is false) MSI (s) (18:64) [05:41:07:794]: Doing action: SetDeleteOtherFilesProperty Action ended 5:41:07: SetDeleteNonEngineFilesProperty. Return value 1. MSI (s) (18:64) [05:41:07:795]: PROPERTY CHANGE: Adding DeleteOtherFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetDeleteOtherFilesProperty. MSI (s) (18:64) [05:41:07:795]: Skipping action: DeleteOtherFiles (condition is false) MSI (s) (18:64) [05:41:07:795]: Skipping action: CreateRebootTestFile (condition is false) MSI (s) (18:64) [05:41:07:795]: Skipping action: CheckCTAInstalled (condition is false) MSI (s) (18:64) [05:41:07:795]: Doing action: RemoveDuplicateFiles Action ended 5:41:07: SetDeleteOtherFilesProperty. Return value 1. Action start 5:41:07: RemoveDuplicateFiles. MSI (s) (18:64) [05:41:07:796]: Skipping action: EnableWindowsDefender (condition is false) MSI (s) (18:64) [05:41:07:796]: Skipping action: SwiUpdateCleanup.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:07:796]: Skipping action: SwiUpdateCleanup.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:07:796]: Skipping action: Win8Cleanup.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:07:796]: Skipping action: SwiUpdateCleanup64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:07:796]: Skipping action: SwiUpdateCleanup64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:07:796]: Doing action: RemoveFiles Action ended 5:41:07: RemoveDuplicateFiles. Return value 1. Action start 5:41:07: RemoveFiles. MSI (s) (18:64) [05:41:07:797]: Doing action: RemoveFolders Action ended 5:41:07: RemoveFiles. Return value 1. Action start 5:41:07: RemoveFolders. MSI (s) (18:64) [05:41:07:797]: Doing action: CreateFolders Action ended 5:41:07: RemoveFolders. Return value 1. Action start 5:41:07: CreateFolders. MSI (s) (18:64) [05:41:07:799]: Doing action: SetDeleteIDEsProperty Action ended 5:41:07: CreateFolders. Return value 1. MSI (s) (18:64) [05:41:07:800]: PROPERTY CHANGE: Modifying DeleteIDEs property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetDeleteIDEsProperty. MSI (s) (18:64) [05:41:07:800]: Doing action: DeleteIDEs Action ended 5:41:07: SetDeleteIDEsProperty. Return value 1. Action start 5:41:07: DeleteIDEs. MSI (s) (18:64) [05:41:07:803]: Doing action: SetDeleteBDLsProperty Action ended 5:41:07: DeleteIDEs. Return value 1. MSI (s) (18:64) [05:41:07:804]: PROPERTY CHANGE: Modifying DeleteBDLs property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetDeleteBDLsProperty. MSI (s) (18:64) [05:41:07:804]: Doing action: DeleteBDLs Action ended 5:41:07: SetDeleteBDLsProperty. Return value 1. Action start 5:41:07: DeleteBDLs. MSI (s) (18:64) [05:41:07:807]: Doing action: SetDeleteHIPSConfigProperty Action ended 5:41:07: DeleteBDLs. Return value 1. MSI (s) (18:64) [05:41:07:808]: PROPERTY CHANGE: Adding DeleteHIPSConfig property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetDeleteHIPSConfigProperty. MSI (s) (18:64) [05:41:07:808]: Doing action: DeleteHIPSConfig Action ended 5:41:07: SetDeleteHIPSConfigProperty. Return value 1. Action start 5:41:07: DeleteHIPSConfig. MSI (s) (18:64) [05:41:07:813]: Doing action: SetRemoveFilesOnUpgradeProperty Action ended 5:41:07: DeleteHIPSConfig. Return value 1. MSI (s) (18:64) [05:41:07:813]: PROPERTY CHANGE: Adding RemoveFilesOnUpgrade property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetRemoveFilesOnUpgradeProperty. MSI (s) (18:64) [05:41:07:813]: Doing action: RemoveFilesOnUpgrade Action ended 5:41:07: SetRemoveFilesOnUpgradeProperty. Return value 1. Action start 5:41:07: RemoveFilesOnUpgrade. MSI (s) (18:64) [05:41:07:817]: Doing action: SetRollbackForceProperty Action ended 5:41:07: RemoveFilesOnUpgrade. Return value 1. MSI (s) (18:64) [05:41:07:818]: PROPERTY CHANGE: Adding RollbackForceDeleteFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetRollbackForceProperty. MSI (s) (18:64) [05:41:07:818]: Skipping action: RollbackForceDeleteFiles (condition is false) MSI (s) (18:64) [05:41:07:818]: Doing action: SetRollbackForceUserProperty Action ended 5:41:07: SetRollbackForceProperty. Return value 1. MSI (s) (18:64) [05:41:07:819]: PROPERTY CHANGE: Adding RollbackForceDeleteUserPlugin property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetRollbackForceUserProperty. MSI (s) (18:64) [05:41:07:819]: Skipping action: RollbackForceDeleteUserPlugin (condition is false) MSI (s) (18:64) [05:41:07:819]: Doing action: SetRollbackOtherFilesProperty Action ended 5:41:07: SetRollbackForceUserProperty. Return value 1. MSI (s) (18:64) [05:41:07:819]: PROPERTY CHANGE: Modifying RollbackOtherFiles property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetRollbackOtherFilesProperty. MSI (s) (18:64) [05:41:07:819]: Skipping action: RollbackOtherFiles (condition is false) MSI (s) (18:64) [05:41:07:819]: Doing action: SetRollbackUpdateSavAdapterDllProperty Action ended 5:41:07: SetRollbackOtherFilesProperty. Return value 1. MSI (s) (18:64) [05:41:07:820]: PROPERTY CHANGE: Adding RollbackUpdateSavAdapterDll property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetRollbackUpdateSavAdapterDllProperty. MSI (s) (18:64) [05:41:07:820]: Doing action: RollbackUpdateSavAdapterDll Action ended 5:41:07: SetRollbackUpdateSavAdapterDllProperty. Return value 1. Action start 5:41:07: RollbackUpdateSavAdapterDll. MSI (s) (18:64) [05:41:07:823]: Doing action: SetUpdateSavAdapterDllProperty Action ended 5:41:07: RollbackUpdateSavAdapterDll. Return value 1. MSI (s) (18:64) [05:41:07:824]: PROPERTY CHANGE: Adding UpdateSavAdapterDll property. Its value is ';10.7.2.49;'. Action start 5:41:07: SetUpdateSavAdapterDllProperty. MSI (s) (18:64) [05:41:07:824]: Doing action: UpdateSavAdapterDll Action ended 5:41:07: SetUpdateSavAdapterDllProperty. Return value 1. Action start 5:41:07: UpdateSavAdapterDll. MSI (s) (18:64) [05:41:07:829]: Doing action: SetRollbackUpdateDesktopMessagingProperty Action ended 5:41:07: UpdateSavAdapterDll. Return value 1. MSI (s) (18:64) [05:41:07:829]: PROPERTY CHANGE: Adding RollbackUpdateDesktopMessaging property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetRollbackUpdateDesktopMessagingProperty. MSI (s) (18:64) [05:41:07:830]: Doing action: RollbackUpdateDesktopMessaging Action ended 5:41:07: SetRollbackUpdateDesktopMessagingProperty. Return value 1. Action start 5:41:07: RollbackUpdateDesktopMessaging. MSI (s) (18:64) [05:41:07:833]: Doing action: SetUpdateDesktopMessagingProperty Action ended 5:41:07: RollbackUpdateDesktopMessaging. Return value 1. MSI (s) (18:64) [05:41:07:834]: PROPERTY CHANGE: Adding UpdateDesktopMessaging property. Its value is ';10.7.2.49;'. Action start 5:41:07: SetUpdateDesktopMessagingProperty. MSI (s) (18:64) [05:41:07:834]: Doing action: UpdateDesktopMessaging Action ended 5:41:07: SetUpdateDesktopMessagingProperty. Return value 1. Action start 5:41:07: UpdateDesktopMessaging. MSI (s) (18:64) [05:41:07:837]: Skipping action: SetInitialDriverProperty (condition is false) MSI (s) (18:64) [05:41:07:837]: Doing action: SetInstallDriverProperty Action ended 5:41:07: UpdateDesktopMessaging. Return value 1. MSI (s) (18:14) [05:41:07:839]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI5118.tmp, Entrypoint: SetDriverProperty MSI (s) (18!D8) [05:41:07:847]: PROPERTY CHANGE: Modifying DRIVERVERSION property. Its current value is '0'. Its new value: 'WIN7_AMD64'. MSI (s) (18!D8) [05:41:07:847]: PROPERTY CHANGE: Modifying BOOTDRIVERSIGNED property. Its current value is '0'. Its new value: '1'. Action start 5:41:07: SetInstallDriverProperty. MSI (s) (18:64) [05:41:07:849]: Doing action: SetProcessorProperties Action ended 5:41:07: SetInstallDriverProperty. Return value 1. MSI (s) (18:78) [05:41:07:851]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI5128.tmp, Entrypoint: SetProcessorProperties MSI (s) (18!38) [05:41:07:857]: PROPERTY CHANGE: Modifying PROCESSOR_NX_ENABLED property. Its current value is '0'. Its new value: '1'. Action start 5:41:07: SetProcessorProperties. MSI (s) (18:64) [05:41:07:859]: Doing action: SetCopyOtherFilesProperty Action ended 5:41:07: SetProcessorProperties. Return value 1. MSI (s) (18:64) [05:41:07:860]: PROPERTY CHANGE: Adding CopyOtherFiles property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"'. Action start 5:41:07: SetCopyOtherFilesProperty. MSI (s) (18:64) [05:41:07:860]: Doing action: CopyOtherFiles Action ended 5:41:07: SetCopyOtherFilesProperty. Return value 1. Action start 5:41:07: CopyOtherFiles. MSI (s) (18:64) [05:41:07:864]: Doing action: SetForceDeleteUserPluginProperty Action ended 5:41:07: CopyOtherFiles. Return value 1. MSI (s) (18:64) [05:41:07:865]: PROPERTY CHANGE: Adding ForceDeleteUserPlugin property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetForceDeleteUserPluginProperty. MSI (s) (18:64) [05:41:07:865]: Doing action: ForceDeleteUserPlugin Action ended 5:41:07: SetForceDeleteUserPluginProperty. Return value 1. Action start 5:41:07: ForceDeleteUserPlugin. MSI (s) (18:64) [05:41:07:868]: Doing action: SetRegisterBufferOverflowProtection Action ended 5:41:07: ForceDeleteUserPlugin. Return value 1. MSI (s) (18:64) [05:41:07:868]: PROPERTY CHANGE: Adding RegisterBufferOverflowProtection property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:07: SetRegisterBufferOverflowProtection. MSI (s) (18:64) [05:41:07:868]: Skipping action: RegisterBufferOverflowProtection (condition is false) MSI (s) (18:64) [05:41:07:868]: Skipping action: RollbackClassFilter (condition is false) MSI (s) (18:64) [05:41:07:868]: Skipping action: RollbackClassFilter64 (condition is false) MSI (s) (18:64) [05:41:07:868]: Skipping action: RollbackClassFilter64Vista (condition is false) MSI (s) (18:64) [05:41:07:868]: Skipping action: RollbackDriverFiles (condition is false) MSI (s) (18:64) [05:41:07:868]: Skipping action: RollbackBootDriver (condition is false) MSI (s) (18:64) [05:41:07:868]: Doing action: SetRestoreExcludedProcessesProperty Action ended 5:41:07: SetRegisterBufferOverflowProtection. Return value 1. MSI (s) (18:88) [05:41:07:871]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI5139.tmp, Entrypoint: SetRestoreExcludedProcessesProperty Action start 5:41:07: SetRestoreExcludedProcessesProperty. MSI (s) (18:64) [05:41:07:880]: Skipping action: RollbackDriverFiles64 (condition is false) MSI (s) (18:64) [05:41:07:880]: Skipping action: RollbackBootDriver64 (condition is false) MSI (s) (18:64) [05:41:07:880]: Skipping action: RollbackKMSDriver (condition is false) MSI (s) (18:64) [05:41:07:880]: Doing action: SetRollbackDriverFilesVistaProperty Action ended 5:41:07: SetRestoreExcludedProcessesProperty. Return value 1. MSI (s) (18:64) [05:41:07:880]: PROPERTY CHANGE: Adding RollbackDriverFilesVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'. Action start 5:41:07: SetRollbackDriverFilesVistaProperty. MSI (s) (18:64) [05:41:07:880]: Doing action: SetRollbackBootDriverVistaProperty Action ended 5:41:07: SetRollbackDriverFilesVistaProperty. Return value 1. MSI (s) (18:64) [05:41:07:881]: PROPERTY CHANGE: Adding RollbackBootDriverVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'. Action start 5:41:07: SetRollbackBootDriverVistaProperty. MSI (s) (18:64) [05:41:07:881]: Doing action: SetRollbackClassFilterVistaProperty Action ended 5:41:07: SetRollbackBootDriverVistaProperty. Return value 1. MSI (s) (18:64) [05:41:07:881]: PROPERTY CHANGE: Adding RollbackClassFilterVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf'. Action start 5:41:07: SetRollbackClassFilterVistaProperty. MSI (s) (18:64) [05:41:07:882]: Doing action: SetRollbackKMSDriverVistaProperty Action ended 5:41:07: SetRollbackClassFilterVistaProperty. Return value 1. MSI (s) (18:64) [05:41:07:882]: PROPERTY CHANGE: Adding RollbackKMSDriverVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\skmscan.inf'. Action start 5:41:07: SetRollbackKMSDriverVistaProperty. MSI (s) (18:64) [05:41:07:882]: Skipping action: RollbackBootDriverVista (condition is false) MSI (s) (18:64) [05:41:07:882]: Skipping action: RollbackDriverFilesVista (condition is false) MSI (s) (18:64) [05:41:07:882]: Skipping action: RollbackClassFilterVista (condition is false) MSI (s) (18:64) [05:41:07:882]: Skipping action: RollbackBootDriver64Vista (condition is false) MSI (s) (18:64) [05:41:07:882]: Skipping action: RollbackDriverFiles64Vista (condition is false) MSI (s) (18:64) [05:41:07:882]: Doing action: RestoreExcludedProcesses Action ended 5:41:07: SetRollbackKMSDriverVistaProperty. Return value 1. Action start 5:41:07: RestoreExcludedProcesses. MSI (s) (18:64) [05:41:07:886]: Skipping action: RollbackKMSDriverVista (condition is false) MSI (s) (18:64) [05:41:07:886]: Skipping action: InstallDriverFilesXP (condition is false) MSI (s) (18:64) [05:41:07:886]: Skipping action: InstallBootDriverXP (condition is false) MSI (s) (18:64) [05:41:07:886]: Doing action: SetInstallDriverFilesVistaProperty Action ended 5:41:07: RestoreExcludedProcesses. Return value 1. MSI (s) (18:64) [05:41:07:886]: PROPERTY CHANGE: Adding InstallDriverFilesVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\wlh_i386\SAVONACCESSDRIV.INF'. Action start 5:41:07: SetInstallDriverFilesVistaProperty. MSI (s) (18:64) [05:41:07:887]: Skipping action: InstallDriverFilesVista (condition is false) MSI (s) (18:64) [05:41:07:887]: Doing action: SetInstallDriverFilesWin7Property Action ended 5:41:07: SetInstallDriverFilesVistaProperty. Return value 1. MSI (s) (18:64) [05:41:07:888]: PROPERTY CHANGE: Adding InstallDriverFilesWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\win7_i386\SAVONACCESSDRIV.INF'. Action start 5:41:07: SetInstallDriverFilesWin7Property. MSI (s) (18:64) [05:41:07:888]: Skipping action: InstallDriverFilesWin7 (condition is false) MSI (s) (18:64) [05:41:07:888]: Doing action: SetInstallClassFilterVistaProperty Action ended 5:41:07: SetInstallDriverFilesWin7Property. Return value 1. MSI (s) (18:64) [05:41:07:888]: PROPERTY CHANGE: Adding InstallClassFilterVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\wxp_i386\sdcfilter.inf'. Action start 5:41:07: SetInstallClassFilterVistaProperty. MSI (s) (18:64) [05:41:07:888]: Doing action: SetInstallClassFilterWin7Property Action ended 5:41:07: SetInstallClassFilterVistaProperty. Return value 1. MSI (s) (18:64) [05:41:07:889]: PROPERTY CHANGE: Adding InstallClassFilterWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\win7_i386\sdcfilter.inf'. Action start 5:41:07: SetInstallClassFilterWin7Property. MSI (s) (18:64) [05:41:07:889]: Skipping action: InstallClassFilterVista (condition is false) MSI (s) (18:64) [05:41:07:889]: Skipping action: InstallClassFilterWin7 (condition is false) MSI (s) (18:64) [05:41:07:889]: Doing action: SetInstallBootDriverVistaProperty Action ended 5:41:07: SetInstallClassFilterWin7Property. Return value 1. MSI (s) (18:64) [05:41:07:890]: PROPERTY CHANGE: Adding InstallBootDriverVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\wxp_i386\SOPHOSBOOTDRIVER.INF'. Action start 5:41:07: SetInstallBootDriverVistaProperty. MSI (s) (18:64) [05:41:07:890]: Doing action: SetInstallBootDriverWin7Property Action ended 5:41:07: SetInstallBootDriverVistaProperty. Return value 1. MSI (s) (18:64) [05:41:07:890]: PROPERTY CHANGE: Adding InstallBootDriverWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_i386\SOPHOSBOOTDRIVER.INF'. Action start 5:41:07: SetInstallBootDriverWin7Property. MSI (s) (18:64) [05:41:07:890]: Skipping action: InstallBootDriverVista (condition is false) MSI (s) (18:64) [05:41:07:890]: Skipping action: InstallBootDriverWin7 (condition is false) MSI (s) (18:64) [05:41:07:890]: Skipping action: InstallBootDriverAMD64 (condition is false) MSI (s) (18:64) [05:41:07:890]: Skipping action: InstallDriverFilesAMD64 (condition is false) MSI (s) (18:64) [05:41:07:890]: Skipping action: InstallBootDriverAMD64Vista (condition is false) MSI (s) (18:64) [05:41:07:890]: Doing action: InstallBootDriverAMD64Win7 Action ended 5:41:07: SetInstallBootDriverWin7Property. Return value 1. Action start 5:41:07: InstallBootDriverAMD64Win7. MSI (s) (18:64) [05:41:07:891]: Skipping action: InstallDriverFilesAMD64Vista (condition is false) MSI (s) (18:64) [05:41:07:891]: Doing action: InstallDriverFilesAMD64Win7 Action ended 5:41:07: InstallBootDriverAMD64Win7. Return value 1. Action start 5:41:07: InstallDriverFilesAMD64Win7. MSI (s) (18:64) [05:41:07:892]: Doing action: SetInstallUnsignedBootDriver Action ended 5:41:07: InstallDriverFilesAMD64Win7. Return value 1. MSI (s) (18:64) [05:41:07:892]: PROPERTY CHANGE: Adding InstallUnsignedBootDriver property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"'. Action start 5:41:07: SetInstallUnsignedBootDriver. MSI (s) (18:64) [05:41:07:892]: Doing action: SetInstallUnsignedDrivers Action ended 5:41:07: SetInstallUnsignedBootDriver. Return value 1. MSI (s) (18:64) [05:41:07:892]: PROPERTY CHANGE: Adding InstallUnsignedDrivers property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64"'. Action start 5:41:07: SetInstallUnsignedDrivers. MSI (s) (18:64) [05:41:07:893]: Skipping action: InstallUnsignedBootDriver (condition is false) MSI (s) (18:64) [05:41:07:893]: Skipping action: InstallUnsignedDrivers (condition is false) MSI (s) (18:64) [05:41:07:893]: Skipping action: InstallUnsignedBootDriverAMD64 (condition is false) MSI (s) (18:64) [05:41:07:893]: Skipping action: InstallUnsignedDriversAMD64 (condition is false) MSI (s) (18:64) [05:41:07:893]: Skipping action: InstallClassFilterXP (condition is false) MSI (s) (18:64) [05:41:07:893]: Skipping action: InstallClassFilterAMD64 (condition is false) MSI (s) (18:64) [05:41:07:893]: Skipping action: InstallClassFilterAMD64Vista (condition is false) MSI (s) (18:64) [05:41:07:893]: Doing action: InstallClassFilterAMD64Win7 Action ended 5:41:07: SetInstallUnsignedDrivers. Return value 1. Action start 5:41:07: InstallClassFilterAMD64Win7. MSI (s) (18:64) [05:41:07:893]: Doing action: SetInstallKMSDriverProperty Action ended 5:41:07: InstallClassFilterAMD64Win7. Return value 1. MSI (s) (18:64) [05:41:07:894]: PROPERTY CHANGE: Adding InstallKMSDriver property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\kms\wxp_i386\skmscan.inf'. Action start 5:41:07: SetInstallKMSDriverProperty. MSI (s) (18:64) [05:41:07:894]: Skipping action: InstallKMSDriver (condition is false) MSI (s) (18:64) [05:41:07:894]: Doing action: SetInstallKMSDriverWin7Property Action ended 5:41:07: SetInstallKMSDriverProperty. Return value 1. MSI (s) (18:64) [05:41:07:894]: PROPERTY CHANGE: Adding InstallKMSDriverWin7 property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\kms\win7_i386\skmscan.inf'. Action start 5:41:07: SetInstallKMSDriverWin7Property. MSI (s) (18:64) [05:41:07:894]: Skipping action: InstallKMSDriverWin7 (condition is false) MSI (s) (18:64) [05:41:07:894]: Doing action: SetStartDriverServicesProperty Action ended 5:41:07: SetInstallKMSDriverWin7Property. Return value 1. MSI (s) (18:64) [05:41:07:895]: PROPERTY CHANGE: Adding StartDriverServices property. Its value is 'WIN7_AMD64'. Action start 5:41:07: SetStartDriverServicesProperty. MSI (s) (18:64) [05:41:07:895]: Doing action: StartDriverServices Action ended 5:41:07: SetStartDriverServicesProperty. Return value 1. Action start 5:41:07: StartDriverServices. MSI (s) (18:64) [05:41:07:898]: Doing action: SetMoveLockedFiles Action ended 5:41:07: StartDriverServices. Return value 1. MSI (s) (18:64) [05:41:07:898]: PROPERTY CHANGE: Adding MoveLockedFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\|'. Action start 5:41:07: SetMoveLockedFiles. MSI (s) (18:64) [05:41:07:899]: Skipping action: MoveLockedFiles (condition is false) MSI (s) (18:64) [05:41:07:899]: Doing action: MoveFiles Action ended 5:41:07: SetMoveLockedFiles. Return value 1. Action start 5:41:07: MoveFiles. MSI (s) (18:64) [05:41:07:899]: Doing action: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:07: MoveFiles. Return value 1. MSI (s) (18:0C) [05:41:07:901]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI5159.tmp, Entrypoint: SwcDeleteSAUPluginRegistry Action start 5:41:07: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:07:905]: Doing action: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:07: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (18:78) [05:41:07:908]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI515A.tmp, Entrypoint: SwcDeleteRMSPluginRegistry Action start 5:41:07: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:07:910]: Doing action: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:07: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (18:C4) [05:41:07:911]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI516B.tmp, Entrypoint: SwcPauseForUnhook Action start 5:41:07: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:12:913]: Doing action: InstallFiles Action ended 5:41:12: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 5:41:12: InstallFiles. MSI (s) (18:64) [05:41:12:919]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:919]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:919]: Note: 1: 2205 2: 3: MsiSFCBypass MSI (s) (18:64) [05:41:12:919]: Note: 1: 2228 2: 3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ? MSI (s) (18:64) [05:41:12:919]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (18:64) [05:41:12:919]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ? MSI (s) (18:64) [05:41:12:920]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (18:64) [05:41:12:920]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (18:64) [05:41:12:920]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (18:64) [05:41:12:936]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:936]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:949]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:949]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:953]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:953]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:955]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:955]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:956]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:956]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:965]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:965]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:965]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:965]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:970]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:970]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:971]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:971]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:972]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:972]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:972]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:972]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:973]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:973]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:973]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:973]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:977]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:977]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:979]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:979]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:980]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:980]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:981]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:981]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:981]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:981]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:982]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:982]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:982]: Note: 1: 2203 2: 3: 0 MSI (s) (18:64) [05:41:12:983]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:983]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:985]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:985]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:986]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:986]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:986]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:986]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:987]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:987]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:987]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:987]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:988]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:988]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:989]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:989]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:989]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:990]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:990]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:990]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:991]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:991]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:992]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:992]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:993]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:993]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:994]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:994]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:994]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:994]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:995]: Note: 1: 2203 2: 3: 0 MSI (s) (18:64) [05:41:12:995]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:995]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:996]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:996]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:997]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:997]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:997]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:997]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:998]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:998]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:998]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:998]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:999]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:999]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:12:999]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:12:999]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:000]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:000]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:000]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:000]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:001]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:001]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:001]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:001]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:002]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:002]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:002]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:002]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:003]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:003]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:003]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:003]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:003]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:003]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:004]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:004]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:004]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:004]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:005]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:005]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:005]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:005]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:006]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:006]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:006]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:006]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:007]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:007]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:007]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:007]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:008]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:008]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:008]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:008]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:009]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:009]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:009]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:009]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:009]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:009]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:010]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:010]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:010]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:010]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:011]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:011]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:011]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:011]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:011]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:012]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:012]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:012]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:012]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:012]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:013]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:013]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:013]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:013]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:014]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:014]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:014]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:014]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:014]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:014]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:015]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:015]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:015]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:015]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:016]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:016]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:016]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:016]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:017]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:017]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:017]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:017]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:018]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:018]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:018]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:018]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:019]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:019]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:019]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:019]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:020]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:020]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:020]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:020]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:021]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:021]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:021]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:021]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:021]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:021]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:022]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:022]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:023]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:023]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:023]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:023]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:024]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:024]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:024]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:024]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:025]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:025]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:025]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:025]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:026]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:026]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:026]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:026]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:027]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:027]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:027]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:027]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:027]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:027]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:028]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:028]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:028]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:028]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:029]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:029]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:029]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:029]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:030]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:030]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:030]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:030]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:031]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:031]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:031]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:031]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:031]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:031]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:032]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:032]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:032]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:032]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:033]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:033]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:033]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:033]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:034]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:034]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:034]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:034]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:035]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:035]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:036]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:036]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:037]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:037]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:038]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:038]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:038]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:038]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:040]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:040]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:041]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:041]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (18:64) [05:41:13:044]: Doing action: SwcService_unreg_nc.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:13: InstallFiles. Return value 1. Action start 5:41:13: SwcService_unreg_nc.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:13:044]: Doing action: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:13: SwcService_unreg_nc.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 5:41:13: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:13:045]: Doing action: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:13: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 5:41:13: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:13:046]: Skipping action: SwcDeleteRegExceptId.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (18:64) [05:41:13:046]: Doing action: PatchFiles Action ended 5:41:13: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (18:64) [05:41:13:046]: Note: 1: 2205 2: 3: Patch MSI (s) (18:64) [05:41:13:046]: Note: 1: 2228 2: 3: Patch 4: SELECT `File`,`FileName`,`FileSize`,`Directory_`,`PatchSize`,`File`.`Attributes`,`Patch`.`Attributes`,`Patch`.`Sequence`,`Component`.`Component`,`Component`.`ComponentId` FROM `File`,`Component`,`Patch` WHERE `Patch`.`#_MsiActive`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` Action start 5:41:13: PatchFiles. MSI (s) (18:64) [05:41:13:046]: Doing action: DuplicateFiles Action ended 5:41:13: PatchFiles. Return value 0. Action start 5:41:13: DuplicateFiles. MSI (s) (18:64) [05:41:13:047]: Doing action: SchedXmlFile Action ended 5:41:13: DuplicateFiles. Return value 1. MSI (s) (18:A4) [05:41:13:048]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6578.tmp, Entrypoint: SchedXmlFile MSI (s) (18!C0) [05:41:13:055]: PROPERTY CHANGE: Adding ExecXmlFile property. Its value is '1€0€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man€7€1€/*/*/*/*[@messageFileName]€messageFileName€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll€7€1€/*/*/*/*[@parameterFileName]€parameterFileName€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll€1€0€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man€7€1€/*/*/*/*[@resourceFileName]€resourceFileName€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll'. Action start 5:41:13: SchedXmlFile. MSI (s) (18!C0) [05:41:13:055]: Doing action: ExecXmlFile Action start 5:41:13: ExecXmlFile. Action ended 5:41:13: ExecXmlFile. Return value 1. MSI (s) (18:64) [05:41:13:057]: Doing action: ConfigureEventManifestRegister Action ended 5:41:13: SchedXmlFile. Return value 1. MSI (s) (18:AC) [05:41:13:059]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6589.tmp, Entrypoint: ConfigureEventManifestRegister MSI (s) (18!F0) [05:41:13:062]: PROPERTY CHANGE: Adding RollbackRegisterEventManifest property. Its value is '"wevtutil.exe" um "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"'. Action start 5:41:13: ConfigureEventManifestRegister. MSI (s) (18!F0) [05:41:13:062]: Doing action: RollbackRegisterEventManifest Action start 5:41:13: RollbackRegisterEventManifest. MSI (s) (18!F0) [05:41:13:064]: PROPERTY CHANGE: Adding RegisterEventManifest property. Its value is '"wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man"'. Action ended 5:41:13: RollbackRegisterEventManifest. Return value 1. MSI (s) (18!F0) [05:41:13:064]: Doing action: RegisterEventManifest Action start 5:41:13: RegisterEventManifest. Action ended 5:41:13: RegisterEventManifest. Return value 1. MSI (s) (18:64) [05:41:13:067]: Skipping action: DeleteUserGroups (condition is false) MSI (s) (18:64) [05:41:13:067]: Skipping action: RollbackUserGroups (condition is false) MSI (s) (18:64) [05:41:13:067]: Doing action: SetUserGroupsProperty Action ended 5:41:13: ConfigureEventManifestRegister. Return value 1. MSI (s) (18:64) [05:41:13:067]: PROPERTY CHANGE: Adding CreateUserGroups property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'. Action start 5:41:13: SetUserGroupsProperty. MSI (s) (18:64) [05:41:13:067]: Doing action: CreateUserGroups Action ended 5:41:13: SetUserGroupsProperty. Return value 1. Action start 5:41:13: CreateUserGroups. MSI (s) (18:64) [05:41:13:071]: Doing action: PurgeIOfficeAVCache Action ended 5:41:13: CreateUserGroups. Return value 1. Action start 5:41:13: PurgeIOfficeAVCache. MSI (s) (18:64) [05:41:13:074]: Doing action: EnableAttachmentScanning Action ended 5:41:13: PurgeIOfficeAVCache. Return value 1. Action start 5:41:13: EnableAttachmentScanning. MSI (s) (18:64) [05:41:13:077]: Doing action: AddDomainGroups Action ended 5:41:13: EnableAttachmentScanning. Return value 1. Action start 5:41:13: AddDomainGroups. MSI (s) (18:64) [05:41:13:081]: Doing action: BindImage Action ended 5:41:13: AddDomainGroups. Return value 1. Action start 5:41:13: BindImage. MSI (s) (18:64) [05:41:13:081]: Doing action: CreateShortcuts Action ended 5:41:13: BindImage. Return value 1. Action start 5:41:13: CreateShortcuts. MSI (s) (18:64) [05:41:13:087]: Doing action: RegisterClassInfo Action ended 5:41:13: CreateShortcuts. Return value 1. MSI (s) (18:64) [05:41:13:088]: Note: 1: 2205 2: 3: Class MSI (s) (18:64) [05:41:13:088]: Note: 1: 2228 2: 3: Class 4: SELECT `BinaryType`, `CLSID`, `ProgId_Default`, `Class`.`Description`, `Context`, `Feature_`, `ComponentId`, `Component`, `Class`.`Attributes`, `AppId_`, `FileTypeMask`, `Icon_`, `IconIndex`, `DefInprocHandler`, `Argument`, `Component`.`RuntimeFlags`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action`, `Component`.`Attributes` FROM `Class`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))) Action start 5:41:13: RegisterClassInfo. MSI (s) (18:64) [05:41:13:088]: Doing action: RegisterExtensionInfo Action ended 5:41:13: RegisterClassInfo. Return value 0. MSI (s) (18:64) [05:41:13:088]: Note: 1: 2205 2: 3: Extension MSI (s) (18:64) [05:41:13:088]: Note: 1: 2228 2: 3: Extension 4: SELECT `Extension`, `BinaryType`, `ProgId_`, null, null, `MIME_`, `Feature_`, `ComponentId`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `Feature`.`Action` FROM `Extension`, `Component`, `File`, `Feature` WHERE `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))) Action start 5:41:13: RegisterExtensionInfo. MSI (s) (18:64) [05:41:13:088]: Doing action: RegisterProgIdInfo Action ended 5:41:13: RegisterExtensionInfo. Return value 0. MSI (s) (18:64) [05:41:13:089]: Note: 1: 2205 2: 3: ProgId MSI (s) (18:64) [05:41:13:089]: Note: 1: 2228 2: 3: ProgId 4: SELECT DISTINCT `BinaryType`, `ProgId`, `Class_`, `ProgId`.`Description`, `ProgId`.`Icon_`, `ProgId`.`IconIndex`, null, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `ProgId`, `Class`, `Feature`, `Component` WHERE `ProgId`.`Class_` = `Class`.`CLSID` AND `Class`.`Feature_` = `Feature` AND `Class`.`Component_` = `Component` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))) Action start 5:41:13: RegisterProgIdInfo. MSI (s) (18:64) [05:41:13:089]: Doing action: RegisterMIMEInfo Action ended 5:41:13: RegisterProgIdInfo. Return value 0. MSI (s) (18:64) [05:41:13:089]: Note: 1: 2205 2: 3: MIME MSI (s) (18:64) [05:41:13:089]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))) Action start 5:41:13: RegisterMIMEInfo. MSI (s) (18:64) [05:41:13:089]: Doing action: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:13: RegisterMIMEInfo. Return value 0. Action start 5:41:13: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:13:091]: Doing action: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:13: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (18:64) [05:41:13:091]: PROPERTY CHANGE: Adding SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll'. Action start 5:41:13: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:13:091]: Doing action: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:13: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 5:41:13: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:13:093]: Doing action: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:13: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (18:64) [05:41:13:093]: PROPERTY CHANGE: Adding SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll'. Action start 5:41:13: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:13:093]: Doing action: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:13: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 5:41:13: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:13:095]: Doing action: WriteRegistryValues Action ended 5:41:13: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 5:41:13: WriteRegistryValues. MSI (s) (18:64) [05:41:13:990]: Skipping action: SetSAVAdminUpdateBegin (condition is false) MSI (s) (18:64) [05:41:13:990]: Doing action: SetRollBackSaviProperty Action ended 5:41:13: WriteRegistryValues. Return value 1. MSI (s) (18:64) [05:41:13:991]: PROPERTY CHANGE: Modifying RollbackSavi property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:13: SetRollBackSaviProperty. MSI (s) (18:64) [05:41:13:991]: Skipping action: RollbackSavi (condition is false) MSI (s) (18:64) [05:41:13:991]: Doing action: SetUpdateSaviProperty Action ended 5:41:13: SetRollBackSaviProperty. Return value 1. MSI (s) (18:64) [05:41:13:991]: PROPERTY CHANGE: Modifying UpdateSAVI property. Its current value is '0'. Its new value: '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"'. Action start 5:41:13: SetUpdateSaviProperty. MSI (s) (18:64) [05:41:13:991]: Doing action: UpdateSAVI Action ended 5:41:13: SetUpdateSaviProperty. Return value 1. Action start 5:41:13: UpdateSAVI. MSI (s) (18:64) [05:41:13:995]: Doing action: SetSetFolderPermissions Action ended 5:41:13: UpdateSAVI. Return value 1. MSI (s) (18:64) [05:41:13:996]: PROPERTY CHANGE: Adding SetFolderPermissions property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:13: SetSetFolderPermissions. MSI (s) (18:64) [05:41:13:996]: Doing action: SetFolderPermissions Action ended 5:41:13: SetSetFolderPermissions. Return value 1. Action start 5:41:13: SetFolderPermissions. MSI (s) (18:64) [05:41:13:999]: Doing action: WriteIniValues Action ended 5:41:13: SetFolderPermissions. Return value 1. MSI (s) (18:64) [05:41:14:000]: Note: 1: 2205 2: 3: IniFile MSI (s) (18:64) [05:41:14:000]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND (`Component`.`Action`=1 OR `Component`.`Action`=2) ORDER BY `FileName`,`Section` Action start 5:41:14: WriteIniValues. MSI (s) (18:64) [05:41:14:000]: Doing action: WriteEnvironmentStrings Action ended 5:41:14: WriteIniValues. Return value 1. MSI (s) (18:64) [05:41:14:001]: Note: 1: 2205 2: 3: Environment MSI (s) (18:64) [05:41:14:001]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) Action start 5:41:14: WriteEnvironmentStrings. MSI (s) (18:64) [05:41:14:001]: Doing action: RegisterFonts Action ended 5:41:14: WriteEnvironmentStrings. Return value 1. MSI (s) (18:64) [05:41:14:001]: Note: 1: 2205 2: 3: Font MSI (s) (18:64) [05:41:14:001]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Action` From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 Or `FileAction`.`Action` = 2) ORDER BY `FileAction`.`Directory_` Action start 5:41:14: RegisterFonts. MSI (s) (18:64) [05:41:14:002]: Doing action: InstallODBC Action ended 5:41:14: RegisterFonts. Return value 1. MSI (s) (18:64) [05:41:14:002]: Note: 1: 2711 2: ODBCDriverManager MSI (s) (18:64) [05:41:14:002]: Note: 1: 2711 2: ODBCDriverManager64 MSI (s) (18:64) [05:41:14:002]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (18:64) [05:41:14:002]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ? MSI (s) (18:64) [05:41:14:002]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (18:64) [05:41:14:002]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ? MSI (s) (18:64) [05:41:14:002]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (18:64) [05:41:14:002]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ? MSI (s) (18:64) [05:41:14:002]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (18:64) [05:41:14:002]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ? MSI (s) (18:64) [05:41:14:002]: Note: 1: 2205 2: 3: ODBCDataSource MSI (s) (18:64) [05:41:14:002]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ? MSI (s) (18:64) [05:41:14:002]: Note: 1: 2205 2: 3: ODBCDataSource MSI (s) (18:64) [05:41:14:002]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ? Action start 5:41:14: InstallODBC. MSI (s) (18:64) [05:41:14:003]: Doing action: RegisterTypeLibraries Action ended 5:41:14: InstallODBC. Return value 0. MSI (s) (18:64) [05:41:14:003]: Note: 1: 2205 2: 3: TypeLib MSI (s) (18:64) [05:41:14:003]: Note: 1: 2228 2: 3: TypeLib 4: SELECT `LibID`, `TypeLib`.`Version`, `TypeLib`.`Language`, `TypeLib`.`Directory_`, `FileName`, `Component`.`Directory_`, `Component`.`Action`, `Component`.`Installed`, `BinaryType`, `Component`.`Component`, `Component`.`Attributes`, `Component`.`RuntimeFlags` FROM `TypeLib`, `Component`, `File` WHERE `TypeLib`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND ((`Component`.`Action`=1 OR `Component`.`Action`=2) OR (`Component`.`Action` = null AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2))) Action start 5:41:14: RegisterTypeLibraries. MSI (s) (18:64) [05:41:14:003]: Doing action: RegisterComPlus Action ended 5:41:14: RegisterTypeLibraries. Return value 0. MSI (s) (18:64) [05:41:14:004]: Note: 1: 2205 2: 3: Complus MSI (s) (18:64) [05:41:14:004]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Action` = 1 OR `Action` = 2) Action start 5:41:14: RegisterComPlus. MSI (s) (18:64) [05:41:14:004]: Doing action: SelfRegModules Action ended 5:41:14: RegisterComPlus. Return value 0. MSI (s) (18:64) [05:41:14:004]: Note: 1: 2205 2: 3: SelfReg MSI (s) (18:64) [05:41:14:004]: Note: 1: 2228 2: 3: SelfReg 4: Select `FileAction`.`FileName`,`FileAction`.`Directory_`,`FileAction`.`Action`, `FileAction`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `FileAction` Where `SelfReg`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 OR `FileAction`.`Action` = 2) Action start 5:41:14: SelfRegModules. MSI (s) (18:64) [05:41:14:004]: Doing action: InstallServices Action ended 5:41:14: SelfRegModules. Return value 1. Action start 5:41:14: InstallServices. MSI (s) (18:64) [05:41:14:005]: Doing action: AddSIPSSubmitterUserAccount.SetProperty Action ended 5:41:14: InstallServices. Return value 1. MSI (s) (18:64) [05:41:14:005]: PROPERTY CHANGE: Adding AddSIPSSubmitterUserAccount property. Its value is 'NT SERVICE\SAVService'. Action start 5:41:14: AddSIPSSubmitterUserAccount.SetProperty. MSI (s) (18:64) [05:41:14:005]: Doing action: AddSIPSSubmitterUserAccount Action ended 5:41:14: AddSIPSSubmitterUserAccount.SetProperty. Return value 1. Action start 5:41:14: AddSIPSSubmitterUserAccount. MSI (s) (18:64) [05:41:14:007]: Doing action: AddSIPSSubmitterUserAccountRollback.SetProperty Action ended 5:41:14: AddSIPSSubmitterUserAccount. Return value 1. MSI (s) (18:64) [05:41:14:007]: PROPERTY CHANGE: Adding AddSIPSSubmitterUserAccountRollback property. Its value is 'NT SERVICE\SAVService'. Action start 5:41:14: AddSIPSSubmitterUserAccountRollback.SetProperty. MSI (s) (18:64) [05:41:14:007]: Doing action: AddSIPSSubmitterUserAccountRollback Action ended 5:41:14: AddSIPSSubmitterUserAccountRollback.SetProperty. Return value 1. Action start 5:41:14: AddSIPSSubmitterUserAccountRollback. MSI (s) (18:64) [05:41:14:008]: Doing action: CreateTamperProtectionRegKeyRollback Action ended 5:41:14: AddSIPSSubmitterUserAccountRollback. Return value 1. Action start 5:41:14: CreateTamperProtectionRegKeyRollback. MSI (s) (18:64) [05:41:14:012]: Doing action: CreateTamperProtectionRegKey Action ended 5:41:14: CreateTamperProtectionRegKeyRollback. Return value 1. Action start 5:41:14: CreateTamperProtectionRegKey. MSI (s) (18:64) [05:41:14:017]: Doing action: SchedSecureObjects Action ended 5:41:14: CreateTamperProtectionRegKey. Return value 1. MSI (s) (18:08) [05:41:14:019]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6941.tmp, Entrypoint: SchedSecureObjects MSI (s) (18!5C) [05:41:14:023]: PROPERTY CHANGE: Adding ExecSecureObjects property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\€CreateFolder€€NT SERVICE\SavService€268435456€MACHINE\SOFTWARE\Sophos\SAVService\Telemetry€Registry€€NT SERVICE\SavService€268435456€MACHINE\SOFTWARE\Sophos\SAVService\ThreatLifetime€Registry€€NT SERVICE\SavService€268435456'. Action start 5:41:14: SchedSecureObjects. MSI (s) (18!5C) [05:41:14:023]: Doing action: ExecSecureObjects Action start 5:41:14: ExecSecureObjects. Action ended 5:41:14: ExecSecureObjects. Return value 1. MSI (s) (18:64) [05:41:14:025]: Doing action: SetupSspUserAccount.SetProperty Action ended 5:41:14: SchedSecureObjects. Return value 1. MSI (s) (18:64) [05:41:14:026]: PROPERTY CHANGE: Adding SetupSspUserAccount property. Its value is 'NT SERVICE\SAVService'. Action start 5:41:14: SetupSspUserAccount.SetProperty. MSI (s) (18:64) [05:41:14:026]: Doing action: SetupSspUserAccountRollback.SetProperty Action ended 5:41:14: SetupSspUserAccount.SetProperty. Return value 1. MSI (s) (18:64) [05:41:14:026]: PROPERTY CHANGE: Adding SetupSspUserAccountRollback property. Its value is 'NT SERVICE\SAVService'. Action start 5:41:14: SetupSspUserAccountRollback.SetProperty. MSI (s) (18:64) [05:41:14:026]: Doing action: SetupSspUserAccountRollback Action ended 5:41:14: SetupSspUserAccountRollback.SetProperty. Return value 1. Action start 5:41:14: SetupSspUserAccountRollback. MSI (s) (18:64) [05:41:14:028]: Doing action: SetupSspUserAccount Action ended 5:41:14: SetupSspUserAccountRollback. Return value 1. Action start 5:41:14: SetupSspUserAccount. MSI (s) (18:64) [05:41:14:031]: Doing action: SetServiceXP Action ended 5:41:14: SetupSspUserAccount. Return value 1. Action start 5:41:14: SetServiceXP. MSI (s) (18:64) [05:41:14:036]: Doing action: SetSAVServiceSID Action ended 5:41:14: SetServiceXP. Return value 1. Action start 5:41:14: SetSAVServiceSID. MSI (s) (18:64) [05:41:14:039]: Skipping action: RestartDriversAfterSecurityChange (condition is false) MSI (s) (18:64) [05:41:14:039]: Doing action: SetServiceSecurity Action ended 5:41:14: SetSAVServiceSID. Return value 1. Action start 5:41:14: SetServiceSecurity. MSI (s) (18:64) [05:41:14:042]: Doing action: SetServiceRecoveryActions Action ended 5:41:14: SetServiceSecurity. Return value 1. Action start 5:41:14: SetServiceRecoveryActions. MSI (s) (18:64) [05:41:14:047]: Doing action: SetRollbackInstallDeviceControlProperty Action ended 5:41:14: SetServiceRecoveryActions. Return value 1. MSI (s) (18:64) [05:41:14:048]: PROPERTY CHANGE: Adding RollBackInstallDeviceControl property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:14: SetRollbackInstallDeviceControlProperty. MSI (s) (18:64) [05:41:14:048]: Skipping action: RollbackInstallDeviceControl (condition is false) MSI (s) (18:64) [05:41:14:048]: Doing action: SetInstallDeviceControlProperty Action ended 5:41:14: SetRollbackInstallDeviceControlProperty. Return value 1. MSI (s) (18:64) [05:41:14:048]: PROPERTY CHANGE: Adding InstallDeviceControl property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"'. Action start 5:41:14: SetInstallDeviceControlProperty. MSI (s) (18:64) [05:41:14:049]: Doing action: InstallDeviceControl Action ended 5:41:14: SetInstallDeviceControlProperty. Return value 1. Action start 5:41:14: InstallDeviceControl. MSI (s) (18:64) [05:41:14:052]: Doing action: SetAdminGroupDescription Action ended 5:41:14: InstallDeviceControl. Return value 1. Action start 5:41:14: SetAdminGroupDescription. MSI (s) (18:64) [05:41:14:056]: Doing action: SetPowerGroupDescription Action ended 5:41:14: SetAdminGroupDescription. Return value 1. Action start 5:41:14: SetPowerGroupDescription. MSI (s) (18:64) [05:41:14:059]: Doing action: SetUserGroupDescription Action ended 5:41:14: SetPowerGroupDescription. Return value 1. Action start 5:41:14: SetUserGroupDescription. MSI (s) (18:64) [05:41:14:064]: Doing action: MsiConfigureServices Action ended 5:41:14: SetUserGroupDescription. Return value 1. Action start 5:41:14: MsiConfigureServices. MSI (s) (18:64) [05:41:14:065]: Note: 1: 2205 2: 3: MsiServiceConfigFailureActions MSI (s) (18:64) [05:41:14:065]: Note: 1: 2228 2: 3: MsiServiceConfigFailureActions 4: SELECT `Name`, `Event`, `ResetPeriod`, `RebootMessage`,`Command`, `Actions`, `DelayActions`, `Action` FROM `MsiServiceConfigFailureActions`, `Component` WHERE `Component_` = `Component` AND (`Action` = 0 OR `Action` = 1 OR `Action` = 3) MSI (s) (18:64) [05:41:14:066]: Doing action: SetOnAccessGroupDescription Action ended 5:41:14: MsiConfigureServices. Return value 1. Action start 5:41:14: SetOnAccessGroupDescription. MSI (s) (18:64) [05:41:14:069]: Skipping action: DisableOnAccess (condition is false) MSI (s) (18:64) [05:41:14:069]: Skipping action: DisablePUADetection_setprop (condition is false) MSI (s) (18:64) [05:41:14:069]: Skipping action: DisablePUADetection (condition is false) MSI (s) (18:64) [05:41:14:069]: Doing action: DeleteExpiredCaches Action ended 5:41:14: SetOnAccessGroupDescription. Return value 1. Action start 5:41:14: DeleteExpiredCaches. MSI (s) (18:64) [05:41:14:073]: Skipping action: EnableJournals (condition is false) MSI (s) (18:64) [05:41:14:073]: Skipping action: DisableWebProtection_setprop (condition is false) MSI (s) (18:64) [05:41:14:073]: Skipping action: DisableWebProtection (condition is false) MSI (s) (18:64) [05:41:14:073]: Skipping action: DisableSxlLookups_setprop (condition is false) MSI (s) (18:64) [05:41:14:073]: Skipping action: DisableSxlLookups (condition is false) MSI (s) (18:64) [05:41:14:073]: Skipping action: CheckSNMPDLLPresence_setprop (condition is false) MSI (s) (18:64) [05:41:14:073]: Skipping action: CheckSNMPDLLPresence (condition is false) MSI (s) (18:64) [05:41:14:073]: Doing action: SetUpdateSXLServerList Action ended 5:41:14: DeleteExpiredCaches. Return value 1. MSI (s) (18:64) [05:41:14:073]: PROPERTY CHANGE: Adding UpdateSXLServerList property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'. Action start 5:41:14: SetUpdateSXLServerList. MSI (s) (18:64) [05:41:14:073]: Doing action: UpdateSXLServerList Action ended 5:41:14: SetUpdateSXLServerList. Return value 1. Action start 5:41:14: UpdateSXLServerList. MSI (s) (18:64) [05:41:14:078]: Skipping action: GenerateSavMachineId (condition is false) MSI (s) (18:64) [05:41:14:078]: Doing action: RegisterUser Action ended 5:41:14: UpdateSXLServerList. Return value 1. Action start 5:41:14: RegisterUser. MSI (s) (18:64) [05:41:14:078]: Skipping action: ConfigureScanMyComputerScan_setprop (condition is false) MSI (s) (18:64) [05:41:14:078]: Skipping action: ConfigureScanMyComputerScan (condition is false) MSI (s) (18:64) [05:41:14:078]: Skipping action: DisableWindowsDefender (condition is false) MSI (s) (18:64) [05:41:14:078]: Doing action: RegisterProduct Action ended 5:41:14: RegisterUser. Return value 0. Action start 5:41:14: RegisterProduct. MSI (s) (18:64) [05:41:14:079]: Doing action: PublishComponents Action ended 5:41:14: RegisterProduct. Return value 1. MSI (s) (18:64) [05:41:14:080]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (18:64) [05:41:14:080]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))) Action start 5:41:14: PublishComponents. MSI (s) (18:64) [05:41:14:080]: Doing action: MsiPublishAssemblies Action ended 5:41:14: PublishComponents. Return value 0. MSI (s) (18:64) [05:41:14:081]: Note: 1: 2205 2: 3: MsiAssembly MSI (s) (18:64) [05:41:14:081]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT null, null, `Component`.`Component`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `MsiAssembly`, `Component`, `Feature` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Feature_` = `Feature`.`Feature` AND `MsiAssembly`.`File_Application` = null AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))) Action start 5:41:14: MsiPublishAssemblies. MSI (s) (18:64) [05:41:14:081]: Doing action: PublishFeatures Action ended 5:41:14: MsiPublishAssemblies. Return value 0. Action start 5:41:14: PublishFeatures. MSI (s) (18:64) [05:41:14:082]: Doing action: PublishProduct Action ended 5:41:14: PublishFeatures. Return value 1. Action start 5:41:14: PublishProduct. MSI (s) (18:64) [05:41:14:083]: Skipping action: RollbackRegisterTamperProtectionControlX64 (condition is false) MSI (s) (18:64) [05:41:14:083]: Skipping action: RollbackRegisterSavShellExtX64 (condition is false) MSI (s) (18:64) [05:41:14:083]: Skipping action: RollbackRegisterSophosOfficeAV (condition is false) MSI (s) (18:64) [05:41:14:083]: Skipping action: RollbackRegisterSophosOfficeAVX64 (condition is false) MSI (s) (18:64) [05:41:14:083]: Doing action: RegisterTamperProtectionControlX64 Action ended 5:41:14: PublishProduct. Return value 1. Action start 5:41:14: RegisterTamperProtectionControlX64. MSI (s) (18:64) [05:41:14:084]: Doing action: RegisterSavShellExtX64 Action ended 5:41:14: RegisterTamperProtectionControlX64. Return value 1. Action start 5:41:14: RegisterSavShellExtX64. MSI (s) (18:64) [05:41:14:085]: Doing action: RegisterSophosOfficeAV Action ended 5:41:14: RegisterSavShellExtX64. Return value 1. Action start 5:41:14: RegisterSophosOfficeAV. MSI (s) (18:64) [05:41:14:085]: Doing action: RegisterSophosOfficeAVX64 Action ended 5:41:14: RegisterSophosOfficeAV. Return value 1. Action start 5:41:14: RegisterSophosOfficeAVX64. MSI (s) (18:64) [05:41:14:086]: Skipping action: RollbackInstallSecurityCenter (condition is false) MSI (s) (18:64) [05:41:14:086]: Doing action: SetRestoreFirstInstallTimeProperty Action ended 5:41:14: RegisterSophosOfficeAVX64. Return value 1. MSI (s) (18:64) [05:41:14:086]: PROPERTY CHANGE: Adding RestoreFirstInstallTime property. Its value is '0'. Action start 5:41:14: SetRestoreFirstInstallTimeProperty. MSI (s) (18:64) [05:41:14:086]: Skipping action: RestoreFirstInstallTime (condition is false) MSI (s) (18:64) [05:41:14:086]: Doing action: SetSAVAdminUpdateComplete Action ended 5:41:14: SetRestoreFirstInstallTimeProperty. Return value 1. Action start 5:41:14: SetSAVAdminUpdateComplete. MSI (s) (18:64) [05:41:14:092]: Doing action: RunPreLaunchScript Action ended 5:41:14: SetSAVAdminUpdateComplete. Return value 1. Action start 5:41:14: RunPreLaunchScript. MSI (s) (18:64) [05:41:14:097]: Doing action: RegisterDCIfEnabled Action ended 5:41:14: RunPreLaunchScript. Return value 1. Action start 5:41:14: RegisterDCIfEnabled. MSI (s) (18:64) [05:41:14:101]: Doing action: StartSAVServices Action ended 5:41:14: RegisterDCIfEnabled. Return value 1. Action start 5:41:14: StartSAVServices. MSI (s) (18:64) [05:41:14:105]: Skipping action: ApplyCachedPolicies (condition is false) MSI (s) (18:64) [05:41:14:105]: Skipping action: CopySwiFcRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:105]: Skipping action: CopySwiFcRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:105]: Skipping action: CopySwiFcToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:105]: Skipping action: CopySwiFcToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:105]: Skipping action: CopyScfDotDatToProgramData.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:105]: Skipping action: CopyScfDotDatToProgramData.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:105]: Doing action: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 5:41:14: StartSAVServices. Return value 1. MSI (s) (18:64) [05:41:14:105]: PROPERTY CHANGE: Adding SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'swi_service'. Action start 5:41:14: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (18:64) [05:41:14:106]: Doing action: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 5:41:14: SwiServiceRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. Action start 5:41:14: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (18:64) [05:41:14:109]: Doing action: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 5:41:14: SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. MSI (s) (18:64) [05:41:14:110]: PROPERTY CHANGE: Adding SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /registerService'. Action start 5:41:14: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (18:64) [05:41:14:110]: Doing action: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 5:41:14: SwiServiceRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. Action start 5:41:14: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (18:64) [05:41:14:112]: Skipping action: SwiCalloutInstallCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:112]: Skipping action: SwiCalloutRollback.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:112]: Skipping action: SwiCalloutRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:112]: Skipping action: SwiCalloutInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:112]: Skipping action: SwiFilterRegister.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:112]: Skipping action: SwiFilterRollbackCmd.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:112]: Skipping action: SwiFilterRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:112]: Skipping action: SwiFilterRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:112]: Doing action: StartServices Action ended 5:41:14: SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. Action start 5:41:14: StartServices. MSI (s) (18:64) [05:41:14:113]: Skipping action: SwiUpdateInstallRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:113]: Skipping action: SwiUpdateInstall.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:113]: Skipping action: SwiUpdateInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:113]: Skipping action: SwiUpdateInstall64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:113]: Skipping action: SwiUpdateInstall64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:113]: Doing action: SwiUpdateUpgradeRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 5:41:14: StartServices. Return value 1. Action start 5:41:14: SwiUpdateUpgradeRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (18:64) [05:41:14:116]: Skipping action: SwiUpdateUpgrade.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:116]: Skipping action: SwiUpdateUpgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (18:64) [05:41:14:116]: Doing action: SwiUpdateUpgrade64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 5:41:14: SwiUpdateUpgradeRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. MSI (s) (18:64) [05:41:14:116]: PROPERTY CHANGE: Adding SwiUpdateUpgrade64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe" /update'. Action start 5:41:14: SwiUpdateUpgrade64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (18:64) [05:41:14:116]: Doing action: SwiUpdateUpgrade64.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 5:41:14: SwiUpdateUpgrade64.P.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. Action start 5:41:14: SwiUpdateUpgrade64.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (18:64) [05:41:14:118]: Doing action: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 5:41:14: SwiUpdateUpgrade64.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. MSI (s) (18:48) [05:41:14:120]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI69B0.tmp, Entrypoint: SwcEnableSwcServiceStart Action start 5:41:14: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (18:64) [05:41:14:137]: Doing action: BootDriverStartup Action ended 5:41:14: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 5:41:14: BootDriverStartup. MSI (s) (18:64) [05:41:14:141]: Doing action: SetUpdateDriversProperty Action ended 5:41:14: BootDriverStartup. Return value 1. MSI (s) (18:64) [05:41:14:142]: PROPERTY CHANGE: Modifying UPDATEDRIVERS property. Its current value is '1'. Its new value: '0'. Action start 5:41:14: SetUpdateDriversProperty. MSI (s) (18:64) [05:41:14:142]: Doing action: SetConfigureSAVProperty Action ended 5:41:14: SetUpdateDriversProperty. Return value 1. MSI (s) (18:64) [05:41:14:143]: PROPERTY CHANGE: Adding ConfigureSAV property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""0"'. Action start 5:41:14: SetConfigureSAVProperty. MSI (s) (18:64) [05:41:14:143]: Doing action: ScheduleReboot Action ended 5:41:14: SetConfigureSAVProperty. Return value 1. MSI (s) (18:64) [05:41:14:143]: PROPERTY CHANGE: Adding MsiRebootActionScheduled property. Its value is '1'. Action start 5:41:14: ScheduleReboot. MSI (s) (18:64) [05:41:14:143]: Doing action: ConfigureSAV Action ended 5:41:14: ScheduleReboot. Return value 1. Action start 5:41:14: ConfigureSAV. MSI (s) (18:64) [05:41:14:147]: Doing action: SetUpdateFinished Action ended 5:41:14: ConfigureSAV. Return value 1. Action start 5:41:14: SetUpdateFinished. MSI (s) (18:64) [05:41:14:151]: Skipping action: SetInstallationComplete (condition is false) MSI (s) (18:64) [05:41:14:151]: Doing action: SetCreateSavAdapterDllRegistryEntryProperty Action ended 5:41:14: SetUpdateFinished. Return value 1. MSI (s) (18:64) [05:41:14:152]: PROPERTY CHANGE: Adding CreateSavAdapterDllRegistryEntry property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:14: SetCreateSavAdapterDllRegistryEntryProperty. MSI (s) (18:64) [05:41:14:152]: Doing action: CreateSavAdapterDllRegistryEntry Action ended 5:41:14: SetCreateSavAdapterDllRegistryEntryProperty. Return value 1. Action start 5:41:14: CreateSavAdapterDllRegistryEntry. MSI (s) (18:64) [05:41:14:156]: Doing action: SetForceDeleteFilesProperty Action ended 5:41:14: CreateSavAdapterDllRegistryEntry. Return value 1. MSI (s) (18:64) [05:41:14:157]: PROPERTY CHANGE: Adding ForceDeleteFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 5:41:14: SetForceDeleteFilesProperty. MSI (s) (18:64) [05:41:14:157]: Skipping action: ForceDeleteFiles (condition is false) MSI (s) (18:64) [05:41:14:157]: Doing action: SetAfterScriptProperty Action ended 5:41:14: SetForceDeleteFilesProperty. Return value 1. MSI (s) (18:64) [05:41:14:158]: PROPERTY CHANGE: Adding RunAfterScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49"'. Action start 5:41:14: SetAfterScriptProperty. MSI (s) (18:64) [05:41:14:158]: Doing action: RunAfterScript Action ended 5:41:14: SetAfterScriptProperty. Return value 1. Action start 5:41:14: RunAfterScript. MSI (s) (18:64) [05:41:14:161]: Doing action: SetCopySavSyncFileProperty Action ended 5:41:14: RunAfterScript. Return value 1. MSI (s) (18:64) [05:41:14:161]: PROPERTY CHANGE: Adding CopySAVSyncFile property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\"'. Action start 5:41:14: SetCopySavSyncFileProperty. MSI (s) (18:64) [05:41:14:162]: Doing action: CopySAVSyncFile Action ended 5:41:14: SetCopySavSyncFileProperty. Return value 1. Action start 5:41:14: CopySAVSyncFile. MSI (s) (18:64) [05:41:14:165]: Skipping action: RestoreWindowsDefender (condition is false) MSI (s) (18:64) [05:41:14:165]: Skipping action: WixFailWhenDeferred (condition is false) MSI (s) (18:64) [05:41:14:165]: Doing action: InstallFinalize Action ended 5:41:14: CopySAVSyncFile. Return value 1. MSI (s) (18:64) [05:41:14:165]: Running Script: C:\Windows\Installer\MSI5026.tmp MSI (s) (18:64) [05:41:14:165]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'. MSI (s) (18:64) [05:41:14:166]: Machine policy value 'DisableRollback' is 0 MSI (s) (18:64) [05:41:14:167]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (18:64) [05:41:14:168]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1264135460,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1) Action start 5:41:14: InstallFinalize. MSI (s) (18:64) [05:41:14:168]: Executing op: ProductInfo(ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=168230914,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={B11B63E0-A3EB-478A-AF04-AAE0B577AEB2},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3) MSI (s) (18:64) [05:41:14:168]: Executing op: DialogInfo(Type=0,Argument=1033) MSI (s) (18:64) [05:41:14:169]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus) MSI (s) (18:64) [05:41:14:169]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1]) MSI (s) (18:64) [05:41:14:169]: Executing op: SetBaseline(Baseline=0,) MSI (s) (18:64) [05:41:14:169]: Executing op: SetBaseline(Baseline=1,) MSI (s) (18:64) [05:41:14:169]: Executing op: ActionStart(Name=SetUpdateFailed,,) MSI (s) (18:64) [05:41:14:169]: Executing op: CustomActionSchedule(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,) MSI (s) (18:64) [05:41:14:171]: Executing op: ActionStart(Name=RestoreMovedFiles,,) MSI (s) (18:64) [05:41:14:172]: Executing op: CustomActionSchedule(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (18:64) [05:41:14:174]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,) MSI (s) (18:64) [05:41:14:174]: Executing op: CustomActionSchedule(Action=CheckRegForNullDACLs,ActionType=1025,Source=BinaryData,Target=CheckRegForNullDACLs,) MSI (s) (18:BC) [05:41:14:176]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI69E0.tmp, Entrypoint: CheckRegForNullDACLs MSI (s) (18:64) [05:41:14:185]: Executing op: ActionStart(Name=RunErrorScript,,) MSI (s) (18:64) [05:41:14:185]: Executing op: CustomActionSchedule(Action=RunErrorScript,ActionType=1345,Source=BinaryData,Target=RunErrorScripts,CustomActionData="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49") MSI (s) (18:64) [05:41:14:188]: Executing op: ActionStart(Name=SetUpdateBegin,,) MSI (s) (18:64) [05:41:14:189]: Executing op: CustomActionSchedule(Action=SetUpdateBegin,ActionType=1025,Source=BinaryData,Target=SetUpdateBegin,) MSI (s) (18:54) [05:41:14:191]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI69F1.tmp, Entrypoint: SetUpdateBegin MSI (s) (18:64) [05:41:14:199]: Executing op: ActionStart(Name=CloseSavMainWindow,,) MSI (s) (18:64) [05:41:14:199]: Executing op: CustomActionSchedule(Action=CloseSavMainWindow,ActionType=1025,Source=BinaryData,Target=CloseSavMainWindow,) MSI (s) (18:48) [05:41:14:201]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6A02.tmp, Entrypoint: CloseSavMainWindow MSI (s) (18:64) [05:41:14:209]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,) MSI (s) (18:64) [05:41:14:210]: Executing op: ProgressTotal(Total=141,Type=1,ByteEquivalent=24000) MSI (s) (18:64) [05:41:14:210]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:210]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:211]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:211]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:212]: Executing op: ComponentRegister(ComponentId={CCFFD125-B6F4-4E85-B42F-EEDE0E647001},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:212]: Executing op: ComponentRegister(ComponentId={034A5FFF-0A1F-4035-920F-73803E07C209},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:212]: Executing op: ComponentRegister(ComponentId={A4D31E85-0B09-4E42-96C3-DE5DE60EB97F},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:212]: Executing op: ComponentRegister(ComponentId={BC7402A1-8EC2-4834-BDFF-7D991375467D},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:213]: Executing op: ComponentRegister(ComponentId={4AEE9519-9D9B-44CE-9852-434F0BB544E3},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:213]: Executing op: ComponentRegister(ComponentId={6EE91E7E-1391-4C83-838D-8EE0407A2C5E},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:213]: Executing op: ComponentRegister(ComponentId={63284722-D09A-447D-861D-CFEBE89D28F4},KeyPath=C:\ProgramData\Sophos\Sophos Data Control\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:214]: Executing op: ComponentRegister(ComponentId={B7EF36A2-B450-43CD-9919-427EAE165995},KeyPath=C:\ProgramData\Sophos\Sophos Device Control\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:214]: Executing op: ComponentRegister(ComponentId={177335D9-9D47-4E12-A841-7884DB0B65FE},KeyPath=C:\ProgramData\Sophos\Sophos Tamper Protection\logs\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:214]: Executing op: ComponentRegister(ComponentId={A153DC07-D119-4900-B5D1-F671EC25C7EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:214]: Executing op: ComponentRegister(ComponentId={F4E436FD-FE28-4278-86D5-E3412859F5E5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:215]: Executing op: ComponentRegister(ComponentId={484E3E44-1A83-4137-BAA1-B984E5636086},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:215]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:215]: Executing op: ComponentRegister(ComponentId={68FF2A0F-9051-42F8-9394-384797B1AAD2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:215]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:216]: Executing op: ComponentRegister(ComponentId={D2BB3772-EC58-4939-8333-E89A6E780F18},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:216]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:216]: Executing op: ComponentRegister(ComponentId={CD46A165-DB78-470B-B062-D973ED80944B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:217]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:217]: Executing op: ComponentRegister(ComponentId={3CFF4AE8-C6ED-41A6-9AC0-6E0B51B84C41},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:217]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:217]: Executing op: ComponentRegister(ComponentId={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:218]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:218]: Executing op: ComponentRegister(ComponentId={A891B002-2209-413D-896C-A999F157D57A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:219]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:219]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:219]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:219]: Executing op: ComponentRegister(ComponentId={B763A398-206E-43BF-9810-E482FC158A74},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:220]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:220]: Executing op: ComponentRegister(ComponentId={49A894EE-FF4F-4862-B9B8-A4EBBEA0A77E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:220]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:220]: Executing op: ComponentRegister(ComponentId={E3FAD286-FF50-4A29-93F2-FA93F9E5E897},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:220]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:220]: Executing op: ComponentRegister(ComponentId={C0E2EF20-B6D0-44A7-88AD-DAFAA4A325BF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:221]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:221]: Executing op: ComponentRegister(ComponentId={1601B2AC-3E23-4EA6-861E-17F52F42AAA4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:221]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:221]: Executing op: ComponentRegister(ComponentId={B46DA52C-6057-4314-B5BE-670483AB08D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:221]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:222]: Executing op: ComponentRegister(ComponentId={C5E5F1CE-2724-447B-A7E2-3B4B4BE9E801},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:222]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:222]: Executing op: ComponentRegister(ComponentId={9EED603A-240C-44CD-9136-F3703168D6A8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:222]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:222]: Executing op: ComponentRegister(ComponentId={6368E4D7-C225-4D2B-AA09-75E27732DDD4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:223]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:223]: Executing op: ComponentRegister(ComponentId={72649A5C-570A-467A-96A8-D77FAB4A16ED},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:223]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:223]: Executing op: ComponentRegister(ComponentId={E05D9609-9A70-4DEF-A8D3-5B884BEA1139},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:224]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:224]: Executing op: ComponentRegister(ComponentId={175C5C85-0E0E-44BF-8F48-CD96A4EBBA5B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:224]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:224]: Executing op: ComponentRegister(ComponentId={F6C47B05-6049-4F2B-94C5-28C6F9CC00AB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:224]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:225]: Executing op: ComponentRegister(ComponentId={09743465-1197-4046-87F7-3F24D3FD7CEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:225]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:225]: Executing op: ComponentRegister(ComponentId={9D8FDDD5-6302-4133-A040-27AE6FCA4A50},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:225]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:225]: Executing op: ComponentRegister(ComponentId={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:225]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:225]: Executing op: ComponentRegister(ComponentId={F2814579-3850-4A1C-9312-5F0644872616},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:226]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:226]: Executing op: ComponentRegister(ComponentId={7D755E63-DF4E-4F44-A3CC-D43CA33ABC53},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:226]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:226]: Executing op: ComponentRegister(ComponentId={274E0945-DD13-4FB3-8FED-A4865A87E518},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:226]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:226]: Executing op: ComponentRegister(ComponentId={494298F4-4204-4E18-BA16-8152108CE3DD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:227]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:227]: Executing op: ComponentRegister(ComponentId={CB2061C6-BCA4-431E-8768-637BA7B6A021},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:227]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:227]: Executing op: ComponentRegister(ComponentId={FAEE7082-8088-4157-B163-68605546E3D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:227]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:227]: Executing op: ComponentRegister(ComponentId={F403AD90-FEC7-4036-9C1A-BB012A8E790E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:227]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:228]: Executing op: ComponentRegister(ComponentId={691C4A89-DB0D-4C7C-B684-ACAA9F794FAD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:228]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:228]: Executing op: ComponentRegister(ComponentId={C8CFF022-47AD-4EBF-A615-683844308F40},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:228]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:228]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:228]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:229]: Executing op: ComponentRegister(ComponentId={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:229]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:229]: Executing op: ComponentRegister(ComponentId={F74F470D-4B17-4901-9B74-60A3838B7457},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:229]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:230]: Executing op: ComponentRegister(ComponentId={341B1BFF-FEAD-4104-A29F-E9363B7517BF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:230]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:231]: Executing op: ComponentRegister(ComponentId={36E7E558-86C8-4D1B-8CA8-2EEF33963A1E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:231]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:231]: Executing op: ComponentRegister(ComponentId={8F31C598-9FCF-46DD-92CE-BF02EAAF7CC8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:232]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:232]: Executing op: ComponentRegister(ComponentId={C9B04594-F409-4FA4-B2BC-086361DBC58D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:233]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:233]: Executing op: ComponentRegister(ComponentId={A5486A6B-FF88-41D8-82F3-B46ED9697255},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:234]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:234]: Executing op: ComponentRegister(ComponentId={238C4CC5-16A9-4A25-B94F-C07F9692D5E2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:234]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:234]: Executing op: ComponentRegister(ComponentId={BC39E663-65CB-43D3-880E-BAB2744A9597},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:235]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:235]: Executing op: ComponentRegister(ComponentId={3D564A97-4F0A-44FD-97D1-CBF283B05453},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:235]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:235]: Executing op: ComponentRegister(ComponentId={39F322E9-713E-417C-8380-2A8CBEB5E46C},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:235]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:235]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:236]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:236]: Executing op: ComponentRegister(ComponentId={A94755DD-6057-4746-8C39-B06D97E39D54},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:236]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:236]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:236]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:237]: Executing op: ComponentRegister(ComponentId={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:237]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:237]: Executing op: ComponentRegister(ComponentId={FE613E3D-0469-40F8-9A0F-635D16097928},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:237]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:237]: Executing op: ComponentRegister(ComponentId={7ED7F039-CC97-4CF5-8CCB-8CB15DF14759},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:238]: Executing op: ComponentRegister(ComponentId={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:238]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:238]: Executing op: ComponentRegister(ComponentId={52411750-073E-47D7-BB97-8B404AF42B76},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:238]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:239]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:239]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:239]: Executing op: ComponentRegister(ComponentId={F5D90A95-0F03-41CF-BEA3-247569C57BD3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:239]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:239]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:240]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:240]: Executing op: ComponentRegister(ComponentId={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:240]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:240]: Executing op: ComponentRegister(ComponentId={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:240]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:241]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:241]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:241]: Executing op: ComponentRegister(ComponentId={DC99F7C0-7CFB-413C-8E6F-D16EE6F7AB8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:241]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:241]: Executing op: ComponentRegister(ComponentId={3276B786-D941-4ABD-810D-5AE5E3106F02},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:242]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:242]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:242]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:242]: Executing op: ComponentRegister(ComponentId={F85BB204-89AC-441C-8589-F6F0D7F329B4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:242]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:243]: Executing op: ComponentRegister(ComponentId={3BF07D0A-37CC-4FA8-81DA-D351E301276A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:243]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:243]: Executing op: ComponentRegister(ComponentId={D36CD500-4FBE-4943-90EC-D7646AA41519},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:243]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:244]: Executing op: ComponentRegister(ComponentId={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:244]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:244]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:244]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:245]: Executing op: ComponentRegister(ComponentId={BFCC0446-6C34-413E-9611-520B993B04B1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:245]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:246]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:246]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:246]: Executing op: ComponentRegister(ComponentId={B1C9846E-5F65-40D5-BA10-79055269A722},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:247]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:247]: Executing op: ComponentRegister(ComponentId={2BDF5C8A-E036-4C5F-9275-9927CA13F3C6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:248]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:248]: Executing op: ComponentRegister(ComponentId={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:248]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:248]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:248]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:249]: Executing op: ComponentRegister(ComponentId={65937A4F-1784-4285-8C24-D06DA20D3AF0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:249]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:249]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:249]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:250]: Executing op: ComponentRegister(ComponentId={A4BACF9D-BF67-4909-AC27-8627DEA42367},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:250]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:250]: Executing op: ComponentRegister(ComponentId={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:250]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:251]: Executing op: ComponentRegister(ComponentId={C45AAE65-B109-4933-AA74-817CFBE6233A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:251]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:251]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:251]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:251]: Executing op: ComponentRegister(ComponentId={59C347AA-B20B-4146-B11B-E570BFDF7D81},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:252]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:252]: Executing op: ComponentRegister(ComponentId={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:252]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:252]: Executing op: ComponentRegister(ComponentId={E25426F9-3251-4E63-A4A4-06BA9A25ABDD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:252]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:252]: Executing op: ComponentRegister(ComponentId={9BC4D741-ADF6-496E-9DA7-8ADEDFF50252},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:253]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:253]: Executing op: ComponentRegister(ComponentId={63B09FF1-4A74-4963-B2D9-182293950F88},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:253]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:253]: Executing op: ComponentRegister(ComponentId={FBF7F8C3-003B-40EB-B316-260E7D5DD274},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:254]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:254]: Executing op: ComponentRegister(ComponentId={823855BF-3AC5-4C0C-87E6-AD864B361AAF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:254]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:254]: Executing op: ComponentRegister(ComponentId={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:254]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:255]: Executing op: ComponentRegister(ComponentId={7B2E98BC-F11A-4210-A219-05880ABC3333},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:255]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:255]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:255]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:255]: Executing op: ComponentRegister(ComponentId={9315FDA5-16DD-4475-84D6-277B8FD87283},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:256]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:256]: Executing op: ComponentRegister(ComponentId={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:256]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:256]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:256]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:256]: Executing op: ComponentRegister(ComponentId={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:257]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:257]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:257]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:257]: Executing op: ComponentRegister(ComponentId={9221364E-2674-41A1-B3AF-A7BEBBE7567D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:257]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:258]: Executing op: ComponentRegister(ComponentId={05AEBC59-942F-43EE-929D-21174A215441},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:258]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:258]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:258]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:258]: Executing op: ComponentRegister(ComponentId={ECE39B6C-338A-465E-A941-158F7D2E5795},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:259]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:259]: Executing op: ComponentRegister(ComponentId={B9937941-AA62-41C9-BCE7-3DBE63781A79},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:260]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:260]: Executing op: ComponentRegister(ComponentId={57056C41-556E-4FFA-A53F-31BB318C2243},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:261]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:261]: Executing op: ComponentRegister(ComponentId={AE86B1D3-36AD-45E7-B7A6-301DE878C695},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:261]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:261]: Executing op: ComponentRegister(ComponentId={ECB3B148-F965-49B5-A338-857D09CBC0B3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:262]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:263]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:263]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:263]: Executing op: ComponentRegister(ComponentId={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:264]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:264]: Executing op: ComponentRegister(ComponentId={5E31220B-69F2-4AD7-BD59-69C7F695A17C},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:264]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:264]: Executing op: ComponentRegister(ComponentId={719B5EDD-B014-4686-AB60-A4474B84240D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:264]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:264]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:264]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:265]: Executing op: ComponentRegister(ComponentId={E54C4F8D-A952-4E5C-B973-76D109A0E0EC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:265]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:265]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:265]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:266]: Executing op: ComponentRegister(ComponentId={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:266]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:266]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:266]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:266]: Executing op: ComponentRegister(ComponentId={9BB8ADD9-6613-46AC-9BD3-24B31A9F1594},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:267]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:267]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:267]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:267]: Executing op: ComponentRegister(ComponentId={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:268]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:268]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:268]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:268]: Executing op: ComponentRegister(ComponentId={E5EB5509-3611-458A-BE68-3477BF3D96CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:268]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:268]: Executing op: ComponentRegister(ComponentId={09FFDB10-614F-4899-82E8-85A7D8BFA32A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:269]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:269]: Executing op: ComponentRegister(ComponentId={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:269]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:269]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:269]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:270]: Executing op: ComponentRegister(ComponentId={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll,State=3,,Disk=1,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:14:270]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:270]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:270]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:270]: Executing op: ComponentRegister(ComponentId={FCEAE5B9-2AE7-47F8-91A5-D21203F761F0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:271]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:271]: Executing op: ComponentRegister(ComponentId={11B3AA50-1BDE-42AF-A841-1C249A848A31},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:271]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:271]: Executing op: ComponentRegister(ComponentId={E9D16629-7181-425B-83DC-0FDF61D63E11},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:271]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:271]: Executing op: ComponentRegister(ComponentId={189F69DA-324A-4F9A-9CDE-EF79A930D2AD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:271]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:272]: Executing op: ComponentRegister(ComponentId={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:272]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:272]: Executing op: ComponentRegister(ComponentId={8A03894B-68DA-452F-A18A-712256FA8A85},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:272]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:272]: Executing op: ComponentRegister(ComponentId={F21CB2A2-E3F4-4AF7-AC06-A1A66ACA0735},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:272]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:272]: Executing op: ComponentRegister(ComponentId={F4BF2F3A-652E-4CBA-8B19-B7EE4E251C29},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:273]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:273]: Executing op: ComponentRegister(ComponentId={2B97F024-FE76-40AC-9D67-FF52C6A46570},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:273]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:273]: Executing op: ComponentRegister(ComponentId={524153EC-3AC1-4F92-B7F5-18415FD243CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:273]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:273]: Executing op: ComponentRegister(ComponentId={01CC3BCC-55E1-4B1A-906A-FB7CE1A4629B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:274]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:274]: Executing op: ComponentRegister(ComponentId={5282C6CF-9946-4B05-B59F-6638E098E3DC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:274]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:274]: Executing op: ComponentRegister(ComponentId={B43C5DBE-50BB-429B-B447-4EB82AD8554D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:274]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:274]: Executing op: ComponentRegister(ComponentId={5C56F239-F279-4B01-879F-8729A44D44A0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:275]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:275]: Executing op: ComponentRegister(ComponentId={AE660058-42CE-44E1-8D2E-BD62AD69EE1E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:275]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:275]: Executing op: ComponentRegister(ComponentId={63138B11-92E8-4415-8064-1B9BC3A17F93},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:275]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:275]: Executing op: ComponentRegister(ComponentId={08A57BC6-9561-4F83-B710-A130F47DBA83},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:275]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:276]: Executing op: ComponentRegister(ComponentId={CA6E867B-7D76-4BBE-B278-04AFA8C84F9E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:276]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:276]: Executing op: ComponentRegister(ComponentId={C5B8B969-E83E-41E3-820E-9E47E219644E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:276]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:276]: Executing op: ComponentRegister(ComponentId={60BD5635-B25C-450A-9E36-EA84EDB18BDA},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:276]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:276]: Executing op: ComponentRegister(ComponentId={2E247D31-0A06-4AF5-ACE4-018BA1A73978},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:277]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:277]: Executing op: ComponentRegister(ComponentId={8BD71FEA-7E62-46B4-BBB2-19D4D3706BEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:277]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:277]: Executing op: ComponentRegister(ComponentId={56B38697-86C5-4537-92A0-F2E6CEF972B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:277]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:277]: Executing op: ComponentRegister(ComponentId={6C6EA6F0-CE05-4D37-8F3F-A957850E1AC6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:278]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:278]: Executing op: ComponentRegister(ComponentId={AEF7CD44-576B-4841-A0B4-58CEF190AFC5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:278]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:278]: Executing op: ComponentRegister(ComponentId={3570C981-DCAC-4D6C-AEB0-8D4943972259},KeyPath=02:\Software\Sophos\Web Intelligence\WebControlAvailable,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:278]: Executing op: ComponentRegister(ComponentId={B9CA91A9-8C87-4CCA-AA1A-73DFA321CE92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:279]: Executing op: ComponentRegister(ComponentId={15A3052C-E1D6-4ADE-9DF2-DAAF479F9A7B},KeyPath=02:\Software\Sophos\SAVService\SAVUI\plugins\WebControlPlugin.WebControlUIPlugin,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:279]: Executing op: ComponentRegister(ComponentId={DBD323D5-758C-4D26-BD2E-E46EB73EAC11},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:279]: Executing op: ComponentRegister(ComponentId={3630E612-875A-427A-8A2A-2708A9B24393},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:279]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:279]: Executing op: ComponentRegister(ComponentId={62922683-34EB-46E1-8AF4-E9D59E61833E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:280]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:280]: Executing op: ComponentRegister(ComponentId={8B4CB61B-B986-4851-A3A8-8A29B744166F},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:14:280]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:14:280]: Executing op: ActionStart(Name=RollbackDisableServices,,) MSI (s) (18:64) [05:41:14:280]: Executing op: CustomActionSchedule(Action=RollbackDisableServices,ActionType=1281,Source=BinaryData,Target=RollbackDisableServices,) MSI (s) (18:64) [05:41:14:283]: Executing op: ActionStart(Name=DisableServices,,) MSI (s) (18:64) [05:41:14:283]: Executing op: CustomActionSchedule(Action=DisableServices,ActionType=1025,Source=BinaryData,Target=DisableServices,) MSI (s) (18:BC) [05:41:14:285]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6A51.tmp, Entrypoint: DisableServices MSI (s) (18:64) [05:41:14:736]: Executing op: ActionStart(Name=SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101,,) MSI (s) (18:64) [05:41:14:736]: Executing op: CustomActionSchedule(Action=SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101,ActionType=3137,Source=BinaryData,Target=UninstallService,CustomActionData=swi_service) MSI (s) (18:84) [05:41:14:739]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6C16.tmp, Entrypoint: UninstallService MSI (s) (18:64) [05:41:14:772]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1]) CustomAction SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101 returned actual error code 1603 but will be translated to success due to continue marking MSI (s) (18:64) [05:41:14:772]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000) MSI (s) (18:64) [05:41:14:772]: Executing op: ServiceControl(,Name=Sophos Web Control Service,Action=2,Wait=1,) MSI (s) (18:64) [05:41:14:773]: Executing op: ActionStart(Name=ForceStopSAVService,,) MSI (s) (18:64) [05:41:14:773]: Executing op: CustomActionSchedule(Action=ForceStopSAVService,ActionType=1025,Source=BinaryData,Target=ForceStopSAVService,) MSI (s) (18:48) [05:41:14:776]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6C46.tmp, Entrypoint: ForceStopSAVService MSI (s) (18:64) [05:41:14:853]: Executing op: ActionStart(Name=WaitForSAVService,,) MSI (s) (18:64) [05:41:14:853]: Executing op: CustomActionSchedule(Action=WaitForSAVService,ActionType=1025,Source=BinaryData,Target=WaitForSAVService,) MSI (s) (18:20) [05:41:14:855]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6C95.tmp, Entrypoint: WaitForSAVService MSI (s) (18:64) [05:41:14:925]: Executing op: ActionStart(Name=DeleteServices,Description=Deleting services,Template=Service: [1]) MSI (s) (18:64) [05:41:14:925]: Executing op: ProgressTotal(Total=2,Type=1,ByteEquivalent=1300000) MSI (s) (18:64) [05:41:14:925]: Executing op: ServiceControl(,Name=SAVAdminService,Action=8,Wait=1,) MSI (s) (18:64) [05:41:14:925]: Executing op: ServiceControl(,Name=SAVService,Action=8,Wait=1,) MSI (s) (18:64) [05:41:14:928]: Executing op: ActionStart(Name=RemoveODBC,Description=Removing ODBC components,) MSI (s) (18:64) [05:41:14:928]: Executing op: ODBCDriverManager(,BinaryType=0) MSI (s) (18:64) [05:41:14:928]: Executing op: ODBCDriverManager(,BinaryType=1) MSI (s) (18:64) [05:41:14:928]: Executing op: ActionStart(Name=RemoveRegistryValues,Description=Removing system registry values,Template=Key: [1], Name: [2]) MSI (s) (18:64) [05:41:14:928]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200) MSI (s) (18:64) [05:41:14:928]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\SAVI,,BinaryType=0,,) MSI (s) (18:64) [05:41:14:928]: Executing op: RegRemoveKey() MSI (s) (18:64) [05:41:14:928]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Sophos\SAVI 3: 2 MSI (s) (18:64) [05:41:14:928]: Executing op: ActionStart(Name=Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A,,) MSI (s) (18:64) [05:41:14:929]: Executing op: CustomActionSchedule(Action=Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A,ActionType=1089,Source=BinaryData,Target=SwcPostUpgradeTasks,) MSI (s) (18:B0) [05:41:14:931]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6CE4.tmp, Entrypoint: SwcPostUpgradeTasks MSI (s) (18:64) [05:41:15:001]: Executing op: ActionStart(Name=RollbackUnregisterEventManifest,,) MSI (s) (18:64) [05:41:15:001]: Executing op: CustomActionSchedule(Action=RollbackUnregisterEventManifest,ActionType=3329,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man") MSI (s) (18:64) [05:41:15:002]: Executing op: ActionStart(Name=CheckUninstallDrivers,,) MSI (s) (18:64) [05:41:15:002]: Executing op: CustomActionSchedule(Action=CheckUninstallDrivers,ActionType=1025,Source=BinaryData,Target=CheckUninstallDrivers,) MSI (s) (18:10) [05:41:15:004]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6D23.tmp, Entrypoint: CheckUninstallDrivers MSI (s) (18:64) [05:41:15:012]: Executing op: ActionStart(Name=UninstallDriverFiles64OnUpdate,,) MSI (s) (18:64) [05:41:15:012]: Executing op: CustomActionSchedule(Action=UninstallDriverFiles64OnUpdate,ActionType=1058,Source=C:\Windows\SysWOW64\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF",) MSI (s) (18:64) [05:41:15:013]: Note: 1: 1721 2: UninstallDriverFiles64OnUpdate 3: C:\Windows\SysWOW64\ 4: "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF" MSI (s) (18:64) [05:41:15:013]: Product: Sophos Anti-Virus -- Error 1721.There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: UninstallDriverFiles64OnUpdate, location: C:\Windows\SysWOW64\, command: "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE" /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF" MSI (s) (18:64) [05:41:15:021]: User policy value 'DisableRollback' is 0 MSI (s) (18:64) [05:41:15:021]: Machine policy value 'DisableRollback' is 0 Action ended 5:41:15: InstallFinalize. Return value 3. MSI (s) (18:64) [05:41:15:024]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1264135464,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1) MSI (s) (18:64) [05:41:15:024]: Executing op: DialogInfo(Type=0,Argument=1033) MSI (s) (18:64) [05:41:15:024]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus) MSI (s) (18:64) [05:41:15:024]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1]) MSI (s) (18:64) [05:41:15:025]: Executing op: ActionStart(Name=UninstallDriverFiles64OnUpdate,,) MSI (s) (18:64) [05:41:15:025]: Executing op: ProductInfo(ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=168230914,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={B11B63E0-A3EB-478A-AF04-AAE0B577AEB2},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3) MSI (s) (18:64) [05:41:15:026]: Executing op: ActionStart(Name=CheckUninstallDrivers,,) MSI (s) (18:64) [05:41:15:027]: Executing op: ActionStart(Name=RollbackUnregisterEventManifest,,) MSI (s) (18:64) [05:41:15:027]: Executing op: CustomActionRollback(Action=RollbackUnregisterEventManifest,ActionType=3329,Source=BinaryData,Target=CAQuietExec,CustomActionData="wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man") MSI (s) (18:74) [05:41:15:028]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI6D43.tmp, Entrypoint: CAQuietExec CAQuietExec: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man(0): Error 0x800c0005: At column=0, The system cannot locate the resource specified. CAQuietExec: CAQuietExec: Failed to load xml document C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man. Incorrect function. MSI (s) (18:64) [05:41:15:081]: Executing op: ActionStart(Name=Swc_postupgrade.92A5750A_B99C_4D18_8E96_314353D4097A,,) MSI (s) (18:64) [05:41:15:081]: Executing op: ActionStart(Name=RemoveRegistryValues,Description=Removing system registry values,Template=Key: [1], Name: [2]) MSI (s) (18:64) [05:41:15:081]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\SAVI,,BinaryType=0,,) MSI (s) (18:64) [05:41:15:081]: Executing op: RegRemoveKey() MSI (s) (18:64) [05:41:15:082]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Sophos\SAVI 3: 2 MSI (s) (18:64) [05:41:15:082]: Executing op: ActionStart(Name=RemoveODBC,Description=Removing ODBC components,) MSI (s) (18:64) [05:41:15:082]: Executing op: ActionStart(Name=DeleteServices,Description=Deleting services,Template=Service: [1]) MSI (s) (18:64) [05:41:15:082]: Executing op: ServiceInstall(Name=SAVService,DisplayName=Sophos Anti-Virus,ImagePath="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe",ServiceType=16,StartType=4,ErrorControl=1,LoadOrderGroup=PlugPlay,Dependencies=RPCSS[~][~],TagId=0,StartName=NT AUTHORITY\LocalService,Password=**********,Description=Performs threat scanning and cleanup functions.,SecurityDescriptor=BinaryData,) MSI (s) (18:64) [05:41:15:709]: Executing op: ActionStart(Name=WaitForSAVService,,) MSI (s) (18:64) [05:41:15:718]: Executing op: ActionStart(Name=ForceStopSAVService,,) MSI (s) (18:64) [05:41:15:718]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1]) MSI (s) (18:64) [05:41:15:718]: Executing op: ActionStart(Name=SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101,,) MSI (s) (18:64) [05:41:15:719]: Executing op: ActionStart(Name=DisableServices,,) MSI (s) (18:64) [05:41:15:723]: Executing op: ActionStart(Name=RollbackDisableServices,,) MSI (s) (18:64) [05:41:15:723]: Executing op: CustomActionRollback(Action=RollbackDisableServices,ActionType=1281,Source=BinaryData,Target=RollbackDisableServices,) MSI (s) (18:B8) [05:41:15:731]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI7002.tmp, Entrypoint: RollbackDisableServices MSI (s) (18:64) [05:41:15:977]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,) MSI (s) (18:64) [05:41:15:978]: Executing op: ComponentRegister(ComponentId={8B4CB61B-B986-4851-A3A8-8A29B744166F},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:978]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:978]: Executing op: ComponentRegister(ComponentId={62922683-34EB-46E1-8AF4-E9D59E61833E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:978]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:979]: Executing op: ComponentRegister(ComponentId={3630E612-875A-427A-8A2A-2708A9B24393},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:979]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:979]: Executing op: ComponentRegister(ComponentId={DBD323D5-758C-4D26-BD2E-E46EB73EAC11},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:979]: Executing op: ComponentRegister(ComponentId={15A3052C-E1D6-4ADE-9DF2-DAAF479F9A7B},KeyPath=02:\Software\Sophos\SAVService\SAVUI\plugins\WebControlPlugin.WebControlUIPlugin,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:980]: Executing op: ComponentRegister(ComponentId={B9CA91A9-8C87-4CCA-AA1A-73DFA321CE92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:980]: Executing op: ComponentRegister(ComponentId={3570C981-DCAC-4D6C-AEB0-8D4943972259},KeyPath=02:\Software\Sophos\Web Intelligence\WebControlAvailable,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:980]: Executing op: ComponentRegister(ComponentId={AEF7CD44-576B-4841-A0B4-58CEF190AFC5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:980]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:980]: Executing op: ComponentRegister(ComponentId={6C6EA6F0-CE05-4D37-8F3F-A957850E1AC6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:980]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:981]: Executing op: ComponentRegister(ComponentId={56B38697-86C5-4537-92A0-F2E6CEF972B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:981]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:981]: Executing op: ComponentRegister(ComponentId={8BD71FEA-7E62-46B4-BBB2-19D4D3706BEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:981]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:981]: Executing op: ComponentRegister(ComponentId={2E247D31-0A06-4AF5-ACE4-018BA1A73978},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:981]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:981]: Executing op: ComponentRegister(ComponentId={60BD5635-B25C-450A-9E36-EA84EDB18BDA},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:982]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:982]: Executing op: ComponentRegister(ComponentId={C5B8B969-E83E-41E3-820E-9E47E219644E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:982]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:982]: Executing op: ComponentRegister(ComponentId={CA6E867B-7D76-4BBE-B278-04AFA8C84F9E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:982]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCMResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:982]: Executing op: ComponentRegister(ComponentId={08A57BC6-9561-4F83-B710-A130F47DBA83},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:982]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:982]: Executing op: ComponentRegister(ComponentId={63138B11-92E8-4415-8064-1B9BC3A17F93},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:983]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:983]: Executing op: ComponentRegister(ComponentId={AE660058-42CE-44E1-8D2E-BD62AD69EE1E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:983]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:983]: Executing op: ComponentRegister(ComponentId={5C56F239-F279-4B01-879F-8729A44D44A0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:983]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:983]: Executing op: ComponentRegister(ComponentId={B43C5DBE-50BB-429B-B447-4EB82AD8554D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:983]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:983]: Executing op: ComponentRegister(ComponentId={5282C6CF-9946-4B05-B59F-6638E098E3DC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:984]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:984]: Executing op: ComponentRegister(ComponentId={01CC3BCC-55E1-4B1A-906A-FB7CE1A4629B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:984]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:984]: Executing op: ComponentRegister(ComponentId={524153EC-3AC1-4F92-B7F5-18415FD243CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:985]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:985]: Executing op: ComponentRegister(ComponentId={2B97F024-FE76-40AC-9D67-FF52C6A46570},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:985]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WCPResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:986]: Executing op: ComponentRegister(ComponentId={F4BF2F3A-652E-4CBA-8B19-B7EE4E251C29},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:986]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:986]: Executing op: ComponentRegister(ComponentId={F21CB2A2-E3F4-4AF7-AC06-A1A66ACA0735},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:986]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:987]: Executing op: ComponentRegister(ComponentId={8A03894B-68DA-452F-A18A-712256FA8A85},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:987]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:987]: Executing op: ComponentRegister(ComponentId={6F7485F9-659C-4D3F-9EA4-017A31D3CD92},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:987]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:987]: Executing op: ComponentRegister(ComponentId={189F69DA-324A-4F9A-9CDE-EF79A930D2AD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:987]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr64.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:988]: Executing op: ComponentRegister(ComponentId={E9D16629-7181-425B-83DC-0FDF61D63E11},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:988]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ssr32.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:988]: Executing op: ComponentRegister(ComponentId={11B3AA50-1BDE-42AF-A841-1C249A848A31},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:988]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SafeStore64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:988]: Executing op: ComponentRegister(ComponentId={FCEAE5B9-2AE7-47F8-91A5-D21203F761F0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:988]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Safestore32.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:989]: Executing op: ComponentRegister(ComponentId={EE6DC968-0EAA-48C0-9923-CF97A3C32CE3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:15:989]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:989]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:989]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VirusDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:989]: Executing op: ComponentRegister(ComponentId={E5817265-059C-47F5-82BE-7E9CB0B4AFD2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:15:990]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:990]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:990]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\VEController.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:990]: Executing op: ComponentRegister(ComponentId={09FFDB10-614F-4899-82E8-85A7D8BFA32A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:990]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Translators.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:991]: Executing op: ComponentRegister(ComponentId={E5EB5509-3611-458A-BE68-3477BF3D96CB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:991]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:991]: Executing op: ComponentRegister(ComponentId={9F9F5795-BF8F-4FF3-9E12-7AA4BA31AC0D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:15:991]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:991]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:991]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ThreatDetection.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:992]: Executing op: ComponentRegister(ComponentId={9BB8ADD9-6613-46AC-9BD3-24B31A9F1594},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:15:992]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:992]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:992]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:993]: Executing op: ComponentRegister(ComponentId={270CB26F-99D3-4472-8BCC-C88EBAC8C3B6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:15:993]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:993]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:993]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:994]: Executing op: ComponentRegister(ComponentId={E54C4F8D-A952-4E5C-B973-76D109A0E0EC},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:15:994]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:994]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:994]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:994]: Executing op: ComponentRegister(ComponentId={719B5EDD-B014-4686-AB60-A4474B84240D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:15:995]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:995]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:995]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SystemInformation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:995]: Executing op: ComponentRegister(ComponentId={5E31220B-69F2-4AD7-BD59-69C7F695A17C},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:995]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophtainerAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:996]: Executing op: ComponentRegister(ComponentId={956D8FCD-0CD9-47E3-A9E6-2F13E6A06CC4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:996]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavSecurity.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:996]: Executing op: ComponentRegister(ComponentId={ECB3B148-F965-49B5-A338-857D09CBC0B3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:15:996]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:996]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:996]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:997]: Executing op: ComponentRegister(ComponentId={AE86B1D3-36AD-45E7-B7A6-301DE878C695},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:997]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditFacade.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:997]: Executing op: ComponentRegister(ComponentId={57056C41-556E-4FFA-A53F-31BB318C2243},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:997]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ScanEditExports.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:997]: Executing op: ComponentRegister(ComponentId={B9937941-AA62-41C9-BCE7-3DBE63781A79},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:998]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVTelem.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:998]: Executing op: ComponentRegister(ComponentId={ECE39B6C-338A-465E-A941-158F7D2E5795},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:998]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:998]: Executing op: ComponentRegister(ComponentId={05AEBC59-942F-43EE-929D-21174A215441},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:15:998]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:998]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:998]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavProgress.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:15:999]: Executing op: ComponentRegister(ComponentId={9221364E-2674-41A1-B3AF-A7BEBBE7567D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:15:999]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavMain.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:000]: Executing op: ComponentRegister(ComponentId={A4D4BED0-4395-4349-9A91-C91DF9DF9D7B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:000]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:000]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:001]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SWIManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:001]: Executing op: ComponentRegister(ComponentId={C18AF9C5-0F96-4A55-ABEF-DDDED0A08D22},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:002]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:002]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:002]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SIPSManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:003]: Executing op: ComponentRegister(ComponentId={9315FDA5-16DD-4475-84D6-277B8FD87283},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:003]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:003]: Executing op: ComponentRegister(ComponentId={7B2E98BC-F11A-4210-A219-05880ABC3333},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:003]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:003]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:004]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVControl.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:004]: Executing op: ComponentRegister(ComponentId={1DC6E291-A2D5-47D5-8A4C-092F7873C4B5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:004]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Persistance.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:005]: Executing op: ComponentRegister(ComponentId={823855BF-3AC5-4C0C-87E6-AD864B361AAF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:005]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Logging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:005]: Executing op: ComponentRegister(ComponentId={FBF7F8C3-003B-40EB-B316-260E7D5DD274},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:005]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Localisation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:005]: Executing op: ComponentRegister(ComponentId={63B09FF1-4A74-4963-B2D9-182293950F88},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:006]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\LegacyConsumers.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:006]: Executing op: ComponentRegister(ComponentId={9BC4D741-ADF6-496E-9DA7-8ADEDFF50252},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:006]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:006]: Executing op: ComponentRegister(ComponentId={E25426F9-3251-4E63-A4A4-06BA9A25ABDD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:006]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:006]: Executing op: ComponentRegister(ComponentId={7782E8F3-B6D3-4728-B0F9-6EFF6ACD27E8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:006]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:007]: Executing op: ComponentRegister(ComponentId={59C347AA-B20B-4146-B11B-E570BFDF7D81},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:007]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:007]: Executing op: ComponentRegister(ComponentId={C45AAE65-B109-4933-AA74-817CFBE6233A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:007]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:007]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:007]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ICAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:008]: Executing op: ComponentRegister(ComponentId={8D7B30D8-C082-4B3F-BBAE-9F8DA9F840EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:008]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FilterProcessors.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:008]: Executing op: ComponentRegister(ComponentId={A4BACF9D-BF67-4909-AC27-8627DEA42367},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:008]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\FSDecomposer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:008]: Executing op: ComponentRegister(ComponentId={65937A4F-1784-4285-8C24-D06DA20D3AF0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:009]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:009]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:009]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\EEConsumer.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:009]: Executing op: ComponentRegister(ComponentId={AD0D6623-0CDE-479C-BE28-BED8A990DDB8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:009]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:009]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:010]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DriveProcessor.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:010]: Executing op: ComponentRegister(ComponentId={2BDF5C8A-E036-4C5F-9275-9927CA13F3C6},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:010]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVUserContext.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:010]: Executing op: ComponentRegister(ComponentId={B1C9846E-5F65-40D5-BA10-79055269A722},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:011]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DesktopMessaging.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:011]: Executing op: ComponentRegister(ComponentId={BFCC0446-6C34-413E-9611-520B993B04B1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:011]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:011]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:011]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Configuration.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:012]: Executing op: ComponentRegister(ComponentId={B9A7F59F-A0BB-4179-83C7-C8ED24DF7184},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:012]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:012]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:012]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ComponentManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:012]: Executing op: ComponentRegister(ComponentId={D36CD500-4FBE-4943-90EC-D7646AA41519},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:012]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanning.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:013]: Executing op: ComponentRegister(ComponentId={3BF07D0A-37CC-4FA8-81DA-D351E301276A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:013]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BHOManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:013]: Executing op: ComponentRegister(ComponentId={F85BB204-89AC-441C-8589-F6F0D7F329B4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:013]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DeviceControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:013]: Executing op: ComponentRegister(ComponentId={3276B786-D941-4ABD-810D-5AE5E3106F02},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:014]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:014]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:014]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DetectionFeedback.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:014]: Executing op: ComponentRegister(ComponentId={DC99F7C0-7CFB-413C-8E6F-D16EE6F7AB8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:015]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlPlugin.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:015]: Executing op: ComponentRegister(ComponentId={E6BD712F-CD98-4C7F-BD6D-5DA9EF297869},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:015]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:016]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:016]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DataControlManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:017]: Executing op: ComponentRegister(ComponentId={8704CBD6-DCC6-4BE1-90C4-6E4E802D30D0},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:017]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\DCManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:017]: Executing op: ComponentRegister(ComponentId={F5D90A95-0F03-41CF-BEA3-247569C57BD3},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:017]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:017]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:017]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ApplicationManagement.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:018]: Executing op: ComponentRegister(ComponentId={52411750-073E-47D7-BB97-8B404AF42B76},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:018]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:018]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:018]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AppFeedManager.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:019]: Executing op: ComponentRegister(ComponentId={AA3D41D1-00BB-48D8-9DA9-5567CF722F77},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:019]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\AuthorisedLists.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:020]: Executing op: ComponentRegister(ComponentId={7ED7F039-CC97-4CF5-8CCB-8CB15DF14759},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:020]: Executing op: ComponentRegister(ComponentId={FE613E3D-0469-40F8-9A0F-635D16097928},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:020]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:021]: Executing op: ComponentRegister(ComponentId={D0457C5C-2602-48AF-9F0D-F73C1A499E8E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:021]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:021]: Executing op: ComponentRegister(ComponentId={A94755DD-6057-4746-8C39-B06D97E39D54},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:021]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:021]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:021]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:022]: Executing op: ComponentRegister(ComponentId={39F322E9-713E-417C-8380-2A8CBEB5E46C},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:022]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:022]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:022]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ForceUpdateAlongSideSGN.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:023]: Executing op: ComponentRegister(ComponentId={3D564A97-4F0A-44FD-97D1-CBF283B05453},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:023]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:023]: Executing op: ComponentRegister(ComponentId={BC39E663-65CB-43D3-880E-BAB2744A9597},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:023]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps.crl' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:023]: Executing op: ComponentRegister(ComponentId={238C4CC5-16A9-4A25-B94F-C07F9692D5E2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:023]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ps_rootca.crt' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:023]: Executing op: ComponentRegister(ComponentId={A5486A6B-FF88-41D8-82F3-B46ED9697255},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:024]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcr90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:024]: Executing op: ComponentRegister(ComponentId={C9B04594-F409-4FA4-B2BC-086361DBC58D},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:024]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcp90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:024]: Executing op: ComponentRegister(ComponentId={8F31C598-9FCF-46DD-92CE-BF02EAAF7CC8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:024]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\msvcm90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:024]: Executing op: ComponentRegister(ComponentId={36E7E558-86C8-4D1B-8CA8-2EEF33963A1E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:024]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:025]: Executing op: ComponentRegister(ComponentId={341B1BFF-FEAD-4104-A29F-E9363B7517BF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:025]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\atl90.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:025]: Executing op: ComponentRegister(ComponentId={F74F470D-4B17-4901-9B74-60A3838B7457},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:025]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\Microsoft.VC90.ATL.manifest' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:025]: Executing op: ComponentRegister(ComponentId={F4A1C63F-748A-4F74-9C59-A22F2CD3D7B7},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:025]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:025]: Executing op: ComponentRegister(ComponentId={C8CFF022-47AD-4EBF-A615-683844308F40},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:025]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:026]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:026]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\BackgroundScanClient.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:026]: Executing op: ComponentRegister(ComponentId={691C4A89-DB0D-4C7C-B684-ACAA9F794FAD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:026]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResJap.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:026]: Executing op: ComponentRegister(ComponentId={F403AD90-FEC7-4036-9C1A-BB012A8E790E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:026]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResIt.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:027]: Executing op: ComponentRegister(ComponentId={FAEE7082-8088-4157-B163-68605546E3D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:027]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResFra.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:027]: Executing op: ComponentRegister(ComponentId={CB2061C6-BCA4-431E-8768-637BA7B6A021},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:027]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEsp.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:027]: Executing op: ComponentRegister(ComponentId={494298F4-4204-4E18-BA16-8152108CE3DD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:027]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResEng.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:027]: Executing op: ComponentRegister(ComponentId={274E0945-DD13-4FB3-8FED-A4865A87E518},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:027]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResDeu.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:028]: Executing op: ComponentRegister(ComponentId={7D755E63-DF4E-4F44-A3CC-D43CA33ABC53},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:028]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResCht.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:028]: Executing op: ComponentRegister(ComponentId={F2814579-3850-4A1C-9312-5F0644872616},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:028]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavResChs.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:028]: Executing op: ComponentRegister(ComponentId={2BE73E10-64B6-4FBA-83B9-F7CA416B729F},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:028]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:028]: Executing op: ComponentRegister(ComponentId={9D8FDDD5-6302-4133-A040-27AE6FCA4A50},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:028]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavNeutralRes.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:029]: Executing op: ComponentRegister(ComponentId={09743465-1197-4046-87F7-3F24D3FD7CEE},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Categories.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:029]: Executing op: ComponentRegister(ComponentId={F6C47B05-6049-4F2B-94C5-28C6F9CC00AB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Sophos Anti-Virus.URL' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:029]: Executing op: ComponentRegister(ComponentId={175C5C85-0E0E-44BF-8F48-CD96A4EBBA5B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:029]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\TamperProtectionControlX64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:030]: Executing op: ComponentRegister(ComponentId={E05D9609-9A70-4DEF-A8D3-5B884BEA1139},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:030]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:031]: Executing op: ComponentRegister(ComponentId={72649A5C-570A-467A-96A8-D77FAB4A16ED},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:031]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavHelpEng.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:031]: Executing op: ComponentRegister(ComponentId={6368E4D7-C225-4D2B-AA09-75E27732DDD4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:031]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sof.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:032]: Executing op: ComponentRegister(ComponentId={9EED603A-240C-44CD-9136-F3703168D6A8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:032]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:032]: Executing op: ComponentRegister(ComponentId={C5E5F1CE-2724-447B-A7E2-3B4B4BE9E801},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:032]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpJap.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:032]: Executing op: ComponentRegister(ComponentId={B46DA52C-6057-4314-B5BE-670483AB08D1},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:032]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpIta.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:033]: Executing op: ComponentRegister(ComponentId={1601B2AC-3E23-4EA6-861E-17F52F42AAA4},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:033]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpFra.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:033]: Executing op: ComponentRegister(ComponentId={C0E2EF20-B6D0-44A7-88AD-DAFAA4A325BF},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:033]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpEsp.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:033]: Executing op: ComponentRegister(ComponentId={E3FAD286-FF50-4A29-93F2-FA93F9E5E897},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:033]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpDeu.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:034]: Executing op: ComponentRegister(ComponentId={49A894EE-FF4F-4862-B9B8-A4EBBEA0A77E},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:034]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpCht.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:034]: Executing op: ComponentRegister(ComponentId={B763A398-206E-43BF-9810-E482FC158A74},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:034]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVHelpChs.chm' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:034]: Executing op: ComponentRegister(ComponentId={A891B002-2209-413D-896C-A999F157D57A},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=1,BinaryType=0) MSI (s) (18:64) [05:41:16:034]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:034]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:035]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\public.pem' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:035]: Executing op: ComponentRegister(ComponentId={30AFB56A-6B2A-4180-8667-FA43B6BB97DD},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:035]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\bpaif.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:035]: Executing op: ComponentRegister(ComponentId={3CFF4AE8-C6ED-41A6-9AC0-6E0B51B84C41},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:035]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sav32cli.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:036]: Executing op: ComponentRegister(ComponentId={CD46A165-DB78-470B-B062-D973ED80944B},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:036]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAVx64.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:036]: Executing op: ComponentRegister(ComponentId={D2BB3772-EC58-4939-8333-E89A6E780F18},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:036]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosOfficeAV.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:036]: Executing op: ComponentRegister(ComponentId={68FF2A0F-9051-42F8-9394-384797B1AAD2},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:036]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scs-integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:037]: Executing op: ComponentRegister(ComponentId={484E3E44-1A83-4137-BAA1-B984E5636086},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:037]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVCleanupService.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (18:64) [05:41:16:037]: Executing op: ComponentRegister(ComponentId={F4E436FD-FE28-4278-86D5-E3412859F5E5},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:037]: Executing op: ComponentRegister(ComponentId={A153DC07-D119-4900-B5D1-F671EC25C7EB},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:038]: Executing op: ComponentRegister(ComponentId={177335D9-9D47-4E12-A841-7884DB0B65FE},KeyPath=C:\ProgramData\Sophos\Sophos Tamper Protection\logs\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:038]: Executing op: ComponentRegister(ComponentId={B7EF36A2-B450-43CD-9919-427EAE165995},KeyPath=C:\ProgramData\Sophos\Sophos Device Control\logs\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:038]: Executing op: ComponentRegister(ComponentId={63284722-D09A-447D-861D-CFEBE89D28F4},KeyPath=C:\ProgramData\Sophos\Sophos Data Control\logs\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:038]: Executing op: ComponentRegister(ComponentId={6EE91E7E-1391-4C83-838D-8EE0407A2C5E},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:039]: Executing op: ComponentRegister(ComponentId={4AEE9519-9D9B-44CE-9852-434F0BB544E3},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:039]: Executing op: ComponentRegister(ComponentId={BC7402A1-8EC2-4834-BDFF-7D991375467D},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:039]: Executing op: ComponentRegister(ComponentId={A4D31E85-0B09-4E42-96C3-DE5DE60EB97F},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\logs\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:039]: Executing op: ComponentRegister(ComponentId={034A5FFF-0A1F-4035-920F-73803E07C209},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:039]: Executing op: ComponentRegister(ComponentId={CCFFD125-B6F4-4E85-B42F-EEDE0E647001},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:039]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:040]: Executing op: ComponentRegister(ComponentId={D3E72F8E-081F-44F9-B67C-95456E21A5CF},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\factory.xml,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:040]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:040]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={65323B2D-83D4-470D-A209-D769DB30BBDB},,SharedDllRefCount=0,BinaryType=0) MSI (s) (18:64) [05:41:16:040]: Executing op: ActionStart(Name=CloseSavMainWindow,,) MSI (s) (18:64) [05:41:16:041]: Executing op: ActionStart(Name=SetUpdateBegin,,) MSI (s) (18:64) [05:41:16:041]: Executing op: ActionStart(Name=RunErrorScript,,) MSI (s) (18:64) [05:41:16:041]: Executing op: CustomActionRollback(Action=RunErrorScript,ActionType=1345,Source=BinaryData,Target=RunErrorScripts,CustomActionData="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49") MSI (s) (18:90) [05:41:16:043]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI713B.tmp, Entrypoint: RunErrorScripts MSI (s) (18:64) [05:41:16:051]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,) MSI (s) (18:64) [05:41:16:051]: Executing op: ActionStart(Name=RestoreMovedFiles,,) MSI (s) (18:64) [05:41:16:052]: Executing op: CustomActionRollback(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (18:68) [05:41:16:053]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI714C.tmp, Entrypoint: RestoreMovedFiles MSI (s) (18:64) [05:41:16:061]: Executing op: ActionStart(Name=SetUpdateFailed,,) MSI (s) (18:64) [05:41:16:063]: Executing op: CustomActionRollback(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,) MSI (s) (18:6C) [05:41:16:065]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI714D.tmp, Entrypoint: SetUpdateFailed MSI (s) (18:64) [05:41:16:072]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0) MSI (s) (18:64) [05:41:16:072]: Error in rollback skipped. Return: 5 MSI (s) (18:64) [05:41:16:076]: Note: 1: 2318 2: MSI (s) (18:64) [05:41:16:076]: No System Restore sequence number for this installation. MSI (s) (18:64) [05:41:16:076]: Unlocking Server MSI (s) (18:64) [05:41:16:237]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'. Action ended 5:41:16: INSTALL. Return value 3. Property(S): DiskPrompt = [1] Property(S): CONFIG = C:\ProgramData\Sophos\Sophos Anti-Virus\Config\ Property(S): INFECTED = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\ Property(S): LOW = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\Low\ Property(S): LOGS = C:\ProgramData\Sophos\Sophos Anti-Virus\logs\ Property(S): SAFESTORE = C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\ Property(S): TEMP = C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ Property(S): CACHE = C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\ Property(S): LOGS1 = C:\ProgramData\Sophos\Sophos Data Control\logs\ Property(S): LOGS2 = C:\ProgramData\Sophos\Sophos Device Control\logs\ Property(S): LOGS3 = C:\ProgramData\Sophos\Sophos Tamper Protection\logs\ Property(S): INSTALLDIR = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): MsiAMD64 = 6 Property(S): Microsoft.VC90.ATL = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.ATL\ Property(S): Microsoft.VC90.CRT = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Microsoft.VC90.CRT\ Property(S): INSTALLDIR_WIN32 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): INSTALLDIR_X64 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): VersionNT64 = 601 Property(S): BootDriverStartup = 0 Property(S): ConfigureSAV = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""0" Property(S): CopyOtherFiles = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64" Property(S): CopySAVSyncFile = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\" Property(S): CreateSavAdapterDllRegistryEntry = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): CreateUserGroups = C:\ProgramData\Sophos\Sophos Anti-Virus\Config Property(S): DeleteBDLs = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): DeleteDriverKeys = 0 Property(S): DeleteHIPSConfig = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): DeleteIDEs = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): DeleteNonEngineFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): DeleteOtherFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): ForceDeleteFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): ForceDeleteUserPlugin = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): ALLUSERS = 1 Property(S): System64Folder = C:\Windows\SysWOW64\ Property(S): InstallBootDriverVista = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\wxp_i386\SOPHOSBOOTDRIVER.INF Property(S): InstallBootDriverWin7 = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\boottasks\win7_i386\SOPHOSBOOTDRIVER.INF Property(S): SystemFolder = C:\Windows\SysWOW64\ Property(S): InstallClassFilterVista = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\wxp_i386\sdcfilter.inf Property(S): InstallClassFilterWin7 = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\sdcfilter\win7_i386\sdcfilter.inf Property(S): InstallDeviceControl = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\" Property(S): InstallDriverFilesVista = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\wlh_i386\SAVONACCESSDRIV.INF Property(S): InstallDriverFilesWin7 = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\onaccess\win7_i386\SAVONACCESSDRIV.INF Property(S): InstallKMSDriver = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\kms\wxp_i386\skmscan.inf Property(S): InstallKMSDriverWin7 = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\drivers\kms\win7_i386\skmscan.inf Property(S): InstallUnsignedBootDriver = "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64" Property(S): InstallUnsignedDrivers = "C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""WIN7_AMD64" Property(S): MoveLockedFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\| Property(S): RegisterBufferOverflowProtection = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RemoveFilesOnUpgrade = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RemoveSAVI = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RestoreFirstInstallTime = 0 Property(S): RestoreMovedFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackBootDriverVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF Property(S): RollbackClassFilterVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf Property(S): RollbackDriverFilesVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF Property(S): RollbackForceDeleteFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackForceDeleteUserPlugin = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackKMSDriverVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\skmscan.inf Property(S): RollbackOtherFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackSavi = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackUpdateSavAdapterDll = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackUpdateDesktopMessaging = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): UpdateDesktopMessaging = ;10.7.2.49; Property(S): RunAfterScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49" Property(S): RunErrorScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49" Property(S): RunPreLaunchScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\""10.7.2.49" Property(S): SetAdminGroupDescription = SophosAdministrators may run Sophos Anti-Virus with complete access Property(S): ALLUSERSPROFILE = C:\ProgramData\ Property(S): SetFolderPermissions = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): UPDATEDRIVERS = 0 Property(S): TARGETDIR = D:\ Property(S): SetOnAccessGroupDescription = Contains accounts used by Sophos Anti-Virus when it performs threat scanning and cleanup functions Property(S): SetPowerGroupDescription = SophosPowerUsers may run Sophos Anti-Virus with the access that SophosUsers have, plus greater access to cleanup Property(S): RollBackInstallDeviceControl = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): StartDriverServices = WIN7_AMD64 Property(S): UninstallBootDriverOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF Property(S): UninstallBootDriver = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF Property(S): UninstallClassFilterVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf Property(S): UninstallDeviceControl = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config" Property(S): UninstallDriverFilesOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF Property(S): UninstallDriverFilesVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF Property(S): UninstallKMSDriverOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF Property(S): UninstallKMSDriver = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF Property(S): UnregisterBufferOverflowProtection = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): UpdateSXLServerList = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config" Property(S): UpdateSAVI = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\savxp\" Property(S): SetUserGroupDescription = SophosUsers may run Sophos Anti-Virus with limited access to scanning configuration and cleanup Property(S): UpdateSavAdapterDll = ;10.7.2.49; Property(S): USERPROFILE = C:\Users\Default\ Property(S): EventType = BEGIN_SYSTEM_CHANGE Property(S): SetupSspUserAccount = NT SERVICE\SAVService Property(S): SetupSspUserAccountRollback = NT SERVICE\SAVService Property(S): AddSIPSSubmitterUserAccount = NT SERVICE\SAVService Property(S): AddSIPSSubmitterUserAccountRollback = NT SERVICE\SAVService Property(S): ARPINSTALLLOCATION = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): SAVSERVICEUSER = NT SERVICE\SavService Property(S): ExecSecureObjects = C:\ProgramData\Sophos\Sophos Anti-Virus\Safestore\€CreateFolder€€NT SERVICE\SavService€268435456€MACHINE\SOFTWARE\Sophos\SAVService\Telemetry€Registry€€NT SERVICE\SavService€268435456€MACHINE\SOFTWARE\Sophos\SAVService\ThreatLifetime€Registry€€NT SERVICE\SavService€268435456 Property(S): RegisterEventManifest = "wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man" Property(S): RollbackRegisterEventManifest = "wevtutil.exe" um "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man" Property(S): RollbackUnregisterEventManifest = "wevtutil.exe" im "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man" Property(S): ExecXmlFile = 1€0€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man€7€1€/*/*/*/*[@messageFileName]€messageFileName€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll€7€1€/*/*/*/*[@parameterFileName]€parameterFileName€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll€1€0€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.man€7€1€/*/*/*/*[@resourceFileName]€resourceFileName€C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Instrumentation.dll Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ Property(S): CommonFiles64Folder = C:\Program Files (x86)\Common Files\ Property(S): DesktopFolder = C:\Users\Public\Desktop\ Property(S): FavoritesFolder = C:\Windows\SysWOW64\config\systemprofile\Favorites\ Property(S): FontsFolder = C:\Windows\Fonts\ Property(S): GlobalAssemblyCache = D:\ Property(S): LocalAppDataFolder = C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ Property(S): PrimaryVolumePath = D:\ Property(S): ProgramFiles64Folder = C:\Program Files (x86)\ Property(S): SendToFolder = C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\ Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ Property(S): System16Folder = D:\ Property(S): TempFolder = C:\Windows\TEMP\ Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\ Property(S): WindowsFolder = C:\Windows\ Property(S): WindowsVolume = C:\ Property(S): RESOURCES = C:\ProgramData\Sophos\Sophos Anti-Virus\ Property(S): NEW_DIRECTORY3 = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\ Property(S): RES = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\ Property(S): NEW_DIRECTORY1 = C:\ProgramData\Sophos\ Property(S): SOPHOS_DATA_CONTROL = C:\ProgramData\Sophos\Sophos Data Control\ Property(S): SOPHOS_DEVICE_CONTROL = C:\ProgramData\Sophos\Sophos Device Control\ Property(S): SOPHOS_TAMPER_PROTECTION = C:\ProgramData\Sophos\Sophos Tamper Protection\ Property(S): CommonAppDataFolder = C:\ProgramData\ Property(S): SOPHOS_ANTI_VIRUS = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): SOPHOS = C:\Program Files (x86)\Sophos\ Property(S): ProgramFilesFolder = C:\Program Files (x86)\ Property(S): NEW_DIRECTORY2 = C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\ Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\ Property(S): newfolder2 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\ Property(S): newfolder1 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\ Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ Property(S): VersionNT = 601 Property(S): Installed = 00:00:00 Property(S): AdminUser = 1 Property(S): Manufacturer = Sophos Limited Property(S): ProductCode = {65323B2D-83D4-470D-A209-D769DB30BBDB} Property(S): ProductLanguage = 1033 Property(S): ProductName = Sophos Anti-Virus Property(S): ProductVersion = 10.7.2.49 Property(S): UpgradeCode = {597B239E-3032-491A-A322-817737925E8A} Property(S): _IsMaintenance = Change Property(S): _IsSetupTypeMin = Typical Property(S): AFTERREBOOT = 0 Property(S): AgreeToLicense = No Property(S): ApplicationUsers = AllUsers Property(S): APPLYCLASSICCONFIG = 0 Property(S): ARPCOMMENTS = Protects your computer and network from threats Property(S): ARPCONTACT = Sophos Technical Support Property(S): ARPHELPLINK = http://www.sophos.com/support Property(S): ARPHELPTELEPHONE = Property(S): ARPNOMODIFY = 1 Property(S): ARPNOREPAIR = 1 Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe Property(S): ARPURLINFOABOUT = http://www.sophos.com Property(S): ARPURLUPDATEINFO = http://www.sophos.com/support/updates Property(S): BOOTDRIVERSIGNED = 1 Property(S): CHECKFORCOMPETITORS = 1 Property(S): CHECKFORSCF = 1 Property(S): CLASSFILTERPRESENT = 1 Property(S): CopyBDLs = 0 Property(S): CopyIDEs = 0 Property(S): DATACONTROL = 1 Property(S): DefaultUIFont = Tahoma8 Property(S): DEVICECONTROL = 1 Property(S): DialogCaption = Sophos Installer Property(S): DISABLEONACCESS = 0 Property(S): Display_IsBitmapDlg = 1 Property(S): DisplayNameCustom = Custom Property(S): DisplayNameMinimal = Minimal Property(S): DisplayNameTypical = Typical Property(S): DRIVERVERSION = WIN7_AMD64 Property(S): FIRST_INSTALL_DATE = 0 Property(S): IDEONLY = 0 Property(S): InstallChoice = AR Property(S): INSTALLLEVEL = 100 Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1] Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1] Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1] Property(S): IS_PROGMSG_XML_COSTING = Costing XML files... Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s... Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes... Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s... Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes... Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s... Property(S): IS_SQLSERVER_AUTHENTICATION = 0 Property(S): IS_SQLSERVER_USERNAME = sa Property(S): ISReleaseFlags = SAV Property(S): ISVROOT_PORT_NO = 0 Property(S): MAJORUPGRADE = 0 Property(S): MANAGED = 1 Property(S): MSIRESTARTMANAGERCONTROL = Disable Property(S): NEEDREBOOT = 0 Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@ Property(S): PRODUCTTYPE = 0 Property(S): PROCESSOR_NX_ENABLED = 1 Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools... Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories... Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions... Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories... Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories... Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools... Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories... Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions... Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools... Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes... Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions... Property(S): ProgressType0 = install Property(S): ProgressType1 = Installing Property(S): ProgressType2 = installed Property(S): ProgressType3 = installs Property(S): RebootYesNo = Yes Property(S): Registration = No Property(S): ReinstallModeText = omus Property(S): SAVIONLY = 0 Property(S): SCRIPTDIR = [SOURCEDIR] Property(S): SequenceNumber = 0 Property(S): SetupType = Typical Property(S): UITYPE = full Property(S): UNINSTALLBOOTDRIVERS = 1 Property(S): UNINSTALLCLASSFILTER = 1 Property(S): UNINSTALLDRIVERS = 1 Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus. Property(S): UNINSTALLKMSDRIVERS = 1 Property(S): UPDATEBOOTDRIVERS = 1 Property(S): UPDATECLASSFILTER = 1 Property(S): VIRUSDATAUPDATE = 0 Property(S): SecureCustomProperties = EXCLUDEDPROCESSES;INSTALLINGVERSION;MAJORUPGRADE;WEBCONTROL Property(S): WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\ Property(S): SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll Property(S): SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll Property(S): SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\ Property(S): SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\ Property(S): SwiServiceUnregister.11DACB83_28A7_4FA6_AF5B_C006E340C101 = swi_service Property(S): SwiServiceRollback.11DACB83_28A7_4FA6_AF5B_C006E340C101 = swi_service Property(S): SwiServiceRegister.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /registerService Property(S): SwiUpdateUpgrade64.11DACB83_28A7_4FA6_AF5B_C006E340C101 = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_update_64.exe" /update Property(S): REBOOTREQUIREDFILE.11DACB83_28A7_4FA6_AF5B_C006E340C101 = SwiRebootRequired.txt Property(S): MsiLogFileLocation = C:\Windows\TEMP\Sophos Anti-Virus Major Install Log_171025_044105.txt Property(S): PackageCode = {B11B63E0-A3EB-478A-AF04-AAE0B577AEB2} Property(S): ProductState = 5 Property(S): ProductToBeRegistered = 1 Property(S): REBOOT = ReallySuppress Property(S): DETOUREDEXCLUDED = 1 Property(S): UPDATEKMSDRIVERS = 1 Property(S): RECOVERYMODE = 0 Property(S): WEBCONTROL = 1 Property(S): CURRENTDIRECTORY = C:\Windows\system32 Property(S): CLIENTUILEVEL = 3 Property(S): MSICLIENTUSESEXTERNALUI = 1 Property(S): CLIENTPROCESSID = 5652 Property(S): PRODUCTLANGUAGE = 1033 Property(S): VersionDatabase = 200 Property(S): VersionMsi = 5.00 Property(S): WindowsBuild = 7601 Property(S): ServicePackLevel = 1 Property(S): ServicePackLevelMinor = 0 Property(S): MsiNTProductType = 1 Property(S): RemoteAdminTS = 1 Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\ Property(S): AppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\ Property(S): NetHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\ Property(S): PersonalFolder = C:\Windows\system32\config\systemprofile\Documents\ Property(S): PrintHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\ Property(S): RecentFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\ Property(S): MyPicturesFolder = C:\Windows\system32\config\systemprofile\Pictures\ Property(S): GPTSupport = 1 Property(S): OLEAdvtSupport = 1 Property(S): ShellAdvtSupport = 1 Property(S): Msix64 = 6 Property(S): Intel = 6 Property(S): PhysicalMemory = 8073 Property(S): VirtualMemory = 13640 Property(S): MsiTrueAdminUser = 1 Property(S): LogonUser = SYSTEM Property(S): UserSID = S-1-5-18 Property(S): UserLanguageID = 1033 Property(S): ComputerName = STI-LON138 Property(S): SystemLanguageID = 1033 Property(S): ScreenX = 1024 Property(S): ScreenY = 768 Property(S): CaptionHeight = 22 Property(S): BorderTop = 1 Property(S): BorderSide = 1 Property(S): TextHeight = 16 Property(S): TextInternalLeading = 3 Property(S): ColorBits = 32 Property(S): TTCSupport = 1 Property(S): Time = 5:41:16 Property(S): Date = 10/25/2017 Property(S): MsiNetAssemblySupport = 4.6.1590.0 Property(S): MsiWin32AssemblySupport = 6.1.7601.17514 Property(S): RedirectedDllSupport = 2 Property(S): MsiRunningElevated = 1 Property(S): Privileged = 1 Property(S): USERNAME = Shipco Transport Inc Property(S): COMPANYNAME = Shipco Transport Inc. Property(S): DATABASE = C:\Windows\Installer\1adca5.msi Property(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi Property(S): UILevel = 2 Property(S): ACTION = INSTALL Property(S): ROOTDRIVE = D:\ Property(S): CostingComplete = 1 Property(S): OutOfDiskSpace = 0 Property(S): OutOfNoRbDiskSpace = 0 Property(S): PrimaryVolumeSpaceAvailable = 0 Property(S): PrimaryVolumeSpaceRequired = 0 Property(S): PrimaryVolumeSpaceRemaining = 0 Property(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\cache\savxp\ Property(S): SourcedirProduct = {65323B2D-83D4-470D-A209-D769DB30BBDB} Property(S): MsiRebootActionScheduled = 1 MSI (s) (18:64) [05:41:16:272]: Note: 1: 1729 MSI (s) (18:64) [05:41:16:272]: Product: Sophos Anti-Virus -- Configuration failed. MSI (s) (18:64) [05:41:16:273]: Windows Installer reconfigured the product. Product Name: Sophos Anti-Virus. Product Version: 10.7.2.49. Product Language: 1033. Manufacturer: Sophos Limited. Reconfiguration success or error status: 1603. MSI (s) (18:64) [05:41:16:275]: Deferring clean up of packages/files, if any exist MSI (s) (18:64) [05:41:16:275]: MainEngineThread is returning 1603 MSI (s) (18:3C) [05:41:16:275]: No System Restore sequence number for this installation. === Logging stopped: 10/25/2017 5:41:16 === MSI (s) (18:3C) [05:41:16:276]: User policy value 'DisableRollback' is 0 MSI (s) (18:3C) [05:41:16:276]: Machine policy value 'DisableRollback' is 0 MSI (s) (18:3C) [05:41:16:276]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (18:3C) [05:41:16:276]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (18:3C) [05:41:16:276]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (18:3C) [05:41:16:276]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (s) (18:3C) [05:41:16:276]: Restoring environment variables MSI (s) (18:3C) [05:41:16:277]: Destroying RemoteAPI object. MSI (s) (18:5C) [05:41:16:277]: Custom Action Manager thread ending. MSI (c) (14:C0) [05:41:16:278]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (14:C0) [05:41:16:279]: MainEngineThread is returning 1603 === Verbose logging stopped: 10/25/2017 5:41:16 === 2017-10-25 05:41:16 ERROR: Installation failed 2017-10-25 05:41:16 ERROR: SetupPlugin: Unable to get buffer size for Application registry key Path value. 2017-10-25 05:41:16 ERROR: Failed to get current install location to register with tamper protection. Error 0x80070002