=== Verbose logging started: 7/7/2017 11:26:19 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\setup.exe === MSI (c) (20:B4) [11:26:19:088]: Cloaking enabled. MSI (c) (20:B4) [11:26:19:088]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (20:B4) [11:26:19:088]: End dialog not enabled MSI (c) (20:B4) [11:26:19:088]: Original package ==> C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\Sophos AutoUpdate.msi MSI (c) (20:B4) [11:26:19:088]: Package we're running from ==> C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\Sophos AutoUpdate.msi MSI (c) (20:B4) [11:26:19:088]: APPCOMPAT: Compatibility mode property overrides found. MSI (c) (20:B4) [11:26:19:088]: APPCOMPAT: looking for appcompat database entry with ProductCode '{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E}'. MSI (c) (20:B4) [11:26:19:088]: APPCOMPAT: no matching ProductCode found in database. MSI (c) (20:B4) [11:26:19:228]: MSCOREE not loaded loading copy from system32 MSI (c) (20:B4) [11:26:19:228]: APPCOMPAT: looking for appcompat database entry with ProductCode '{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E}'. MSI (c) (20:B4) [11:26:19:228]: APPCOMPAT: no matching ProductCode found in database. MSI (c) (20:B4) [11:26:19:228]: Transforms are not secure. MSI (c) (20:B4) [11:26:19:228]: Note: 1: 2205 2: 3: Control MSI (c) (20:B4) [11:26:19:228]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\Sophos AutoUpdate Install Log.txt'. MSI (c) (20:B4) [11:26:19:228]: No Command Line. MSI (c) (20:B4) [11:26:19:228]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{30B5CB19-DB64-45C2-BD5D-BC0AB7693D3B}'. MSI (c) (20:B4) [11:26:19:228]: Product Code passed to Engine.Initialize: '(none)' MSI (c) (20:B4) [11:26:19:228]: Product Code from property table before transforms: '{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E}' MSI (c) (20:B4) [11:26:19:228]: Product Code from property table after transforms: '{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E}' MSI (c) (20:B4) [11:26:19:228]: Product not registered: beginning first-time install MSI (c) (20:B4) [11:26:19:228]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'. MSI (c) (20:B4) [11:26:19:228]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (c) (20:B4) [11:26:19:228]: User policy value 'SearchOrder' is 'nmu' MSI (c) (20:B4) [11:26:19:228]: Adding new sources is allowed. MSI (c) (20:B4) [11:26:19:228]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'. MSI (c) (20:B4) [11:26:19:228]: Package name extracted from package path: 'Sophos AutoUpdate.msi' MSI (c) (20:B4) [11:26:19:228]: Package to be registered: 'Sophos AutoUpdate.msi' MSI (c) (20:B4) [11:26:19:228]: Note: 1: 2205 2: 3: Error MSI (c) (20:B4) [11:26:19:228]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (c) (20:B4) [11:26:19:228]: TRANSFORMS property is now: MSI (c) (20:B4) [11:26:19:228]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'. MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\Favorites MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\Documents MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Recent MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\SendTo MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Templates MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Local MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\Pictures MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Start Menu MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\Desktop MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (c) (20:B4) [11:26:19:228]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts MSI (c) (20:B4) [11:26:19:244]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (c) (20:B4) [11:26:19:244]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation MSI (c) (20:B4) [11:26:19:244]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (c) (20:B4) [11:26:19:244]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (c) (20:B4) [11:26:19:244]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (c) (20:B4) [11:26:19:244]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (20:B4) [11:26:19:244]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Lenovo User'. MSI (c) (20:B4) [11:26:19:244]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (20:B4) [11:26:19:244]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\Sophos AutoUpdate.msi'. MSI (c) (20:B4) [11:26:19:244]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\Sophos AutoUpdate.msi'. MSI (c) (20:B4) [11:26:19:244]: Machine policy value 'MsiDisableEmbeddedUI' is 0 MSI (c) (20:B4) [11:26:19:244]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI MSI (c) (20:B4) [11:26:19:244]: EEUI - Disabling MsiEmbeddedUI in quiet mode === Logging started: 7/7/2017 11:26:19 === MSI (c) (20:B4) [11:26:19:244]: Machine policy value 'DisableRollback' is 0 MSI (c) (20:B4) [11:26:19:244]: User policy value 'DisableRollback' is 0 MSI (c) (20:B4) [11:26:19:244]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. MSI (c) (20:B4) [11:26:19:244]: Creating MSIHANDLE (4) of type 790537 for thread 4276 MSI (c) (20:B4) [11:26:19:244]: MsiOpenPackageEx is returning 0 MSI (c) (20:B4) [11:26:19:275]: Closing MSIHANDLE (4) of type 790537 for thread 4276 === Verbose logging stopped: 7/7/2017 11:26:19 === === Verbose logging started: 7/7/2017 11:26:19 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\setup.exe === MSI (c) (20:30) [11:26:19:291]: Resetting cached policy values MSI (c) (20:30) [11:26:19:291]: Machine policy value 'Debug' is 0 MSI (c) (20:30) [11:26:19:291]: ******* RunEngine: ******* Product: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\Sophos AutoUpdate.msi ******* Action: ******* CommandLine: ********** MSI (c) (20:30) [11:26:19:291]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (20:30) [11:26:19:291]: Grabbed execution mutex. MSI (c) (20:30) [11:26:19:291]: Cloaking enabled. MSI (c) (20:30) [11:26:19:291]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (20:30) [11:26:19:291]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (98:84) [11:26:19:291]: Running installation inside multi-package transaction C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\Sophos AutoUpdate.msi MSI (s) (98:84) [11:26:19:291]: Grabbed execution mutex. MSI (s) (98:58) [11:26:19:291]: Resetting cached policy values MSI (s) (98:58) [11:26:19:291]: Machine policy value 'Debug' is 0 MSI (s) (98:58) [11:26:19:291]: ******* RunEngine: ******* Product: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\Sophos AutoUpdate.msi ******* Action: ******* CommandLine: ********** MSI (s) (98:58) [11:26:19:291]: Machine policy value 'DisableUserInstalls' is 0 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109110000000000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109110000000000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 000041091A0090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 000041091A0090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109440090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109440090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109510090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109510090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109511090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109511090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109610090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109610090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109611090400100000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109611090400100000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109711090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109711090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109810090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109810090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109910090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109910090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109A10090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109A10090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109A20000000100000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109A20000000100000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109A20090400100000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109A20090400100000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109AB0090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109AB0090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109B10090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109B10090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109C20090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109C20090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109E60090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109E60090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109F10090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109F10090400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109F100A0C00000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109F100A0C00000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 00004109F100C0400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 00004109F100C0400000000000F01FEC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 1007C6B46D7C017319E3B52CF3EC196E MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 1007C6B46D7C017319E3B52CF3EC196E MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 1926E8D15D0BCE53481466615F760A7F MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 1926E8D15D0BCE53481466615F760A7F MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 1af2a8da7e60d0b429d7e6453b3d0182 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 1af2a8da7e60d0b429d7e6453b3d0182 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 1D5E3C0FEDA1E123187686FED06E995A MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 1D5E3C0FEDA1E123187686FED06E995A MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 21F994EE50D4B6847B5C012AA60B99FF MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 21F994EE50D4B6847B5C012AA60B99FF MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 2A1E41C2BE4CE66438471882D627D3A3 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 2A1E41C2BE4CE66438471882D627D3A3 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 435B99166B1ADE6478B3790BCE8F8FE1 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 435B99166B1ADE6478B3790BCE8F8FE1 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 44C2AF74841DCBD4FA069B9143AA8424 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 44C2AF74841DCBD4FA069B9143AA8424 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 4BEA594979BAED93C82408E6FE57CE7A MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 4BEA594979BAED93C82408E6FE57CE7A MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 4EA42A62D9304AC4784BF238120704FF MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 4EA42A62D9304AC4784BF238120704FF MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 6414876250E69FF3395387C6C7F05BEB MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 6414876250E69FF3395387C6C7F05BEB MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 67D6ECF5CD5FBA732B8B22BAC8DE1B4D MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 67D6ECF5CD5FBA732B8B22BAC8DE1B4D MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 68AB67CA7DA73301B744BA0000000010 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 68AB67CA7DA73301B744BA0000000010 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 6E815EB96CCE9A53884E7857C57002F0 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 6E815EB96CCE9A53884E7857C57002F0 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 78F2732D2AD77F741A20FA12188BAE2A MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 78F2732D2AD77F741A20FA12188BAE2A MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 84b9c17023c712640acaf308593282f8 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 84b9c17023c712640acaf308593282f8 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 93BAD29AC2E44034A96BCB446EB8552E MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 93BAD29AC2E44034A96BCB446EB8552E MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: 9eab5ec6ac3d99b498a1d16c1c815acf MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: 9eab5ec6ac3d99b498a1d16c1c815acf MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: A089CE062ADB6BC44A720BA745894BAC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: A089CE062ADB6BC44A720BA745894BAC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: A840CE732A18A254D8F1B32E10E867D7 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: A840CE732A18A254D8F1B32E10E867D7 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: b25099274a207264182f8181add555d0 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: b25099274a207264182f8181add555d0 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: c1c4f01781cc94c4c8fb1542c0981a2a MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: c1c4f01781cc94c4c8fb1542c0981a2a MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: C9335768C821DD4438FBA0D5A6DB2879 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: C9335768C821DD4438FBA0D5A6DB2879 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: CFD2C1F142D260E3CB8B271543DA9F98 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: CFD2C1F142D260E3CB8B271543DA9F98 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: D01D779AA9894D040B1B549045155634 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: D01D779AA9894D040B1B549045155634 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: D20352A90C039D93DBF6126ECE614057 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: D20352A90C039D93DBF6126ECE614057 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: D7314F9862C648A4DB8BE2A5B47BE100 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: D7314F9862C648A4DB8BE2A5B47BE100 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: EFEE0228DC83E77358593193D847A0EC MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: EFEE0228DC83E77358593193D847A0EC MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: F2ACB6ACBEDEF80458B01304B41EA616 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: F2ACB6ACBEDEF80458B01304B41EA616 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: F60730A4A66673047777F5728467D401 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: F60730A4A66673047777F5728467D401 MSI (s) (98:58) [11:26:19:291]: Setting cached product context: machine assigned for product: F904F79EC1E90A247BD267A587FD6369 MSI (s) (98:58) [11:26:19:291]: Using cached product context: machine assigned for product: F904F79EC1E90A247BD267A587FD6369 MSI (s) (98:58) [11:26:19:291]: SRSetRestorePoint skipped for this transaction. MSI (s) (98:58) [11:26:19:291]: File will have security applied from OpCode. MSI (s) (98:58) [11:26:19:306]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\Sophos AutoUpdate.msi' against software restriction policy MSI (s) (98:58) [11:26:19:306]: SOFTWARE RESTRICTION POLICY: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\Sophos AutoUpdate.msi has a digital signature MSI (s) (98:58) [11:26:19:322]: SOFTWARE RESTRICTION POLICY: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\Sophos AutoUpdate.msi is permitted to run at the 'unrestricted' authorization level. MSI (s) (98:58) [11:26:19:322]: End dialog not enabled MSI (s) (98:58) [11:26:19:322]: Original package ==> C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\Sophos AutoUpdate.msi MSI (s) (98:58) [11:26:19:322]: Package we're running from ==> C:\Windows\Installer\8a239.msi MSI (s) (98:58) [11:26:19:322]: APPCOMPAT: Compatibility mode property overrides found. MSI (s) (98:58) [11:26:19:322]: APPCOMPAT: looking for appcompat database entry with ProductCode '{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E}'. MSI (s) (98:58) [11:26:19:322]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (98:58) [11:26:19:322]: MSCOREE not loaded loading copy from system32 MSI (s) (98:58) [11:26:19:322]: Machine policy value 'TransformsSecure' is 0 MSI (s) (98:58) [11:26:19:322]: User policy value 'TransformsAtSource' is 0 MSI (s) (98:58) [11:26:19:322]: Machine policy value 'DisablePatch' is 0 MSI (s) (98:58) [11:26:19:322]: Machine policy value 'AllowLockdownPatch' is 0 MSI (s) (98:58) [11:26:19:322]: Machine policy value 'DisableLUAPatching' is 0 MSI (s) (98:58) [11:26:19:322]: Machine policy value 'DisableFlyWeightPatching' is 0 MSI (s) (98:58) [11:26:19:322]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active MSI (s) (98:58) [11:26:19:322]: APPCOMPAT: looking for appcompat database entry with ProductCode '{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E}'. MSI (s) (98:58) [11:26:19:322]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (98:58) [11:26:19:322]: Transforms are not secure. MSI (s) (98:58) [11:26:19:322]: Note: 1: 2205 2: 3: Control MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\Sophos AutoUpdate Install Log.txt'. MSI (s) (98:58) [11:26:19:322]: Command Line: USEAPPDATAONXP=1 INSTALLDIR=C:\Program Files (x86)\Sophos\AutoUpdate REBOOT=ReallySuppress BOOTSTRAP=NOUPDATE RMSACTION=1 SOPHOS_TP_TOKEN=1 USEAPPDATAONXP=1 CURRENTDIRECTORY=C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=4128 MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{30B5CB19-DB64-45C2-BD5D-BC0AB7693D3B}'. MSI (s) (98:58) [11:26:19:322]: Product Code passed to Engine.Initialize: '' MSI (s) (98:58) [11:26:19:322]: Product Code from property table before transforms: '{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E}' MSI (s) (98:58) [11:26:19:322]: Product Code from property table after transforms: '{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E}' MSI (s) (98:58) [11:26:19:322]: Product not registered: beginning first-time install MSI (s) (98:58) [11:26:19:322]: Product {E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E} is not managed. MSI (s) (98:58) [11:26:19:322]: MSI_LUA: Credential prompt not required, user is an admin MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'. MSI (s) (98:58) [11:26:19:322]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (s) (98:58) [11:26:19:322]: User policy value 'SearchOrder' is 'nmu' MSI (s) (98:58) [11:26:19:322]: Adding new sources is allowed. MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'. MSI (s) (98:58) [11:26:19:322]: Package name extracted from package path: 'Sophos AutoUpdate.msi' MSI (s) (98:58) [11:26:19:322]: Package to be registered: 'Sophos AutoUpdate.msi' MSI (s) (98:58) [11:26:19:322]: Note: 1: 2205 2: 3: Error MSI (s) (98:58) [11:26:19:322]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (s) (98:58) [11:26:19:322]: Machine policy value 'DisableMsi' is 0 MSI (s) (98:58) [11:26:19:322]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (98:58) [11:26:19:322]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (98:58) [11:26:19:322]: Product installation will be elevated because user is admin and product is being installed per-machine. MSI (s) (98:58) [11:26:19:322]: Running product '{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E}' with elevated privileges: Product is assigned. MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding USEAPPDATAONXP property. Its value is '1'. MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files (x86)\Sophos\AutoUpdate'. MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding BOOTSTRAP property. Its value is 'NOUPDATE'. MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding RMSACTION property. Its value is '1'. MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding SOPHOS_TP_TOKEN property. Its value is '1'. MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap'. MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'. MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'. MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '4128'. MSI (s) (98:58) [11:26:19:322]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0 MSI (s) (98:58) [11:26:19:322]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality. MSI (s) (98:58) [11:26:19:322]: TRANSFORMS property is now: MSI (s) (98:58) [11:26:19:322]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'. MSI (s) (98:58) [11:26:19:322]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming MSI (s) (98:58) [11:26:19:322]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\Favorites MSI (s) (98:58) [11:26:19:322]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (s) (98:58) [11:26:19:322]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\Documents MSI (s) (98:58) [11:26:19:322]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (s) (98:58) [11:26:19:322]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Recent MSI (s) (98:58) [11:26:19:322]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\SendTo MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Templates MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Local MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\Pictures MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Start Menu MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\Users\jeff.siegel\Desktop MSI (s) (98:58) [11:26:19:338]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (s) (98:58) [11:26:19:509]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts MSI (s) (98:58) [11:26:19:509]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (s) (98:58) [11:26:19:525]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (s) (98:58) [11:26:19:525]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (s) (98:58) [11:26:19:525]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (s) (98:58) [11:26:19:525]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (98:58) [11:26:19:525]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Lenovo User'. MSI (s) (98:58) [11:26:19:525]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (98:58) [11:26:19:525]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\8a239.msi'. MSI (s) (98:58) [11:26:19:525]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\Sophos AutoUpdate.msi'. MSI (s) (98:58) [11:26:19:525]: Machine policy value 'MsiDisableEmbeddedUI' is 0 MSI (s) (98:58) [11:26:19:525]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI MSI (s) (98:58) [11:26:19:525]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install MSI (s) (98:58) [11:26:19:525]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (98:58) [11:26:19:525]: Machine policy value 'DisableRollback' is 0 MSI (s) (98:58) [11:26:19:525]: User policy value 'DisableRollback' is 0 MSI (s) (98:58) [11:26:19:525]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. MSI (s) (98:58) [11:26:19:525]: PROPERTY CHANGE: Adding MsiUIHideCancel property. Its value is '1'. === Logging started: 7/7/2017 11:26:19 === MSI (s) (98:58) [11:26:19:525]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'. MSI (s) (98:58) [11:26:19:525]: Doing action: INSTALL MSI (s) (98:58) [11:26:19:525]: Note: 1: 2205 2: 3: ActionText Action start 11:26:19: INSTALL. MSI (s) (98:58) [11:26:19:525]: Running ExecuteSequence MSI (s) (98:58) [11:26:19:525]: Doing action: FindRelatedProducts MSI (s) (98:58) [11:26:19:525]: Note: 1: 2205 2: 3: ActionText MSI (s) (98:58) [11:26:19:525]: FindRelatedProducts: could not read ASSIGNMENTTYPE info for product '{D924231F-D02D-4E0B-B511-CC4A0E3ED547}'. Skipping... MSI (s) (98:58) [11:26:19:525]: FindRelatedProducts: could not read ASSIGNMENTTYPE info for product '{D924231F-D02D-4E0B-B511-CC4A0E3ED547}'. Skipping... Action start 11:26:19: FindRelatedProducts. MSI (s) (98:58) [11:26:19:525]: Doing action: AppSearch MSI (s) (98:58) [11:26:19:525]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:19: FindRelatedProducts. Return value 1. Action start 11:26:19: AppSearch. MSI (s) (98:58) [11:26:19:525]: Note: 1: 2262 2: Signature 3: -2147287038 MSI (s) (98:58) [11:26:19:525]: Note: 1: 2262 2: Signature 3: -2147287038 MSI (s) (98:58) [11:26:19:525]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SYSTEM\CurrentControlSet\Services\Sophos AutoUpdate Service 3: 2 MSI (s) (98:58) [11:26:19:525]: Doing action: LaunchConditions MSI (s) (98:58) [11:26:19:525]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:19: AppSearch. Return value 1. Action start 11:26:19: LaunchConditions. MSI (s) (98:58) [11:26:19:525]: Doing action: ValidateProductID MSI (s) (98:58) [11:26:19:525]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:19: LaunchConditions. Return value 1. Action start 11:26:19: ValidateProductID. MSI (s) (98:58) [11:26:19:525]: Doing action: CostInitialize MSI (s) (98:58) [11:26:19:525]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:19: ValidateProductID. Return value 1. MSI (s) (98:58) [11:26:19:525]: Machine policy value 'MaxPatchCacheSize' is 10 MSI (s) (98:58) [11:26:19:525]: Baseline: Sorting baselines for {E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E}. MSI (s) (98:58) [11:26:19:525]: Baseline: New baseline 5.5.0 from transaction. MSI (s) (98:58) [11:26:19:525]: Baseline: Sorted order Native: Order 0. MSI (s) (98:58) [11:26:19:525]: Baseline Data Table: MSI (s) (98:58) [11:26:19:525]: ProductCode: {E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E} Version: 5.5.0 Attributes: 0 PatchId: Native BaselineId: -2147483648 Order: 0 MSI (s) (98:58) [11:26:19:525]: Baseline File Table: MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'F:\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'. MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Patch MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: __MsiPatchFileList MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (98:58) [11:26:19:587]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId` MSI (s) (98:58) [11:26:19:587]: Delta compression fallback method for this product transaction is 'MSI 2.0 legacy obsolescence' MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Patch Action start 11:26:19: CostInitialize. MSI (s) (98:58) [11:26:19:587]: Doing action: FileCost MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:19: CostInitialize. Return value 1. MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: MsiAssembly MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Class MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Extension MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: TypeLib Action start 11:26:19: FileCost. MSI (s) (98:58) [11:26:19:587]: Doing action: CostFinalize MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:19: FileCost. Return value 1. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'. MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Patch MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Condition MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'F:\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding SophosProgramFilesFolder property. Its value is 'C:\Program Files (x86)\Sophos\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding AutoUpdateProgramFilesFolder property. Its value is 'C:\Program Files (x86)\Sophos\AutoUpdate\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Modifying INSTALLDIR property. Its current value is 'C:\Program Files (x86)\Sophos\AutoUpdate'. Its new value: 'C:\Program Files (x86)\Sophos\AutoUpdate\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding TelemetryFolder property. Its value is 'C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding SophosAppDataFolder property. Its value is 'C:\ProgramData\Sophos\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding SAUAppDataFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding AutoUpdateDataFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding LogsFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Logs\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding ConfigFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Config\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding DataFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\data\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding CacheFolder property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding Certificates property. Its value is 'C:\ProgramData\Sophos\Certificates\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding CertificatesAutoUpdate property. Its value is 'C:\ProgramData\Sophos\Certificates\AutoUpdate\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding CertificatesCache property. Its value is 'C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\'. MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding CertificatesManifest property. Its value is 'C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\'. MSI (s) (98:58) [11:26:19:587]: Target path resolution complete. Dumping Directory table... MSI (s) (98:58) [11:26:19:587]: Note: target paths subject to change (via custom actions or browsing) MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: TARGETDIR , Object: F:\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: WindowsFolder , Object: C:\Windows\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files (x86)\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: SophosProgramFilesFolder , Object: C:\Program Files (x86)\Sophos\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: AutoUpdateProgramFilesFolder , Object: C:\Program Files (x86)\Sophos\AutoUpdate\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files (x86)\Sophos\AutoUpdate\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: TelemetryFolder , Object: C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: SophosAppDataFolder , Object: C:\ProgramData\Sophos\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: SAUAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: AutoUpdateDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: LogsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Logs\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: ConfigFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Config\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: DataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\data\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: CacheFolder , Object: C:\ProgramData\Sophos\AutoUpdate\Cache\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: Certificates , Object: C:\ProgramData\Sophos\Certificates\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: CertificatesAutoUpdate , Object: C:\ProgramData\Sophos\Certificates\AutoUpdate\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: CertificatesCache , Object: C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\ MSI (s) (98:58) [11:26:19:587]: Dir (target): Key: CertificatesManifest , Object: C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\ MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'. MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: MsiAssembly MSI (s) (98:58) [11:26:19:587]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ? Action start 11:26:19: CostFinalize. MSI (s) (98:58) [11:26:19:587]: Doing action: MigrateFeatureStates MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:19: CostFinalize. Return value 1. Action start 11:26:19: MigrateFeatureStates. MSI (s) (98:58) [11:26:19:587]: Doing action: InstallValidate MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:19: MigrateFeatureStates. Return value 0. MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Dialog MSI (s) (98:58) [11:26:19:587]: Feature: Main; Installed: Absent; Request: Local; Action: Local MSI (s) (98:58) [11:26:19:587]: Component: SAU_Certificate_Folder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: RevocationList; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: RootCertificate; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: SAU_Certificate_Cache_Folder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: CacheFolderPermissions; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: DataFolderPermissions; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: iconn; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: ilog; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: isched; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: iupd; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: AutoUpdateService; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: AUAdapter; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: SophosUpdate; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: License; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: Sof; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: Integrity; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: ServiceKeyPermissions; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: PolicyFeaturesPermissions; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: InstallationPath; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: DataPath; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: ProductVersion; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: AdapterRegistry; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: Metrics; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: CloudUpdating; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: IsManaged; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: TELEMAUTelem.exe; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: TELEMGatherTelem.exe; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: TELEMSubmitTelem.exe; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: TELEMtelem.man; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (98:58) [11:26:19:587]: Component: __ServiceKeyPermissions65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (98:58) [11:26:19:587]: Component: __PolicyFeaturesPermissions65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (98:58) [11:26:19:587]: Component: __InstallationPath65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (98:58) [11:26:19:587]: Component: __DataPath65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (98:58) [11:26:19:587]: Component: __ProductVersion65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (98:58) [11:26:19:587]: Component: __AdapterRegistry65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (98:58) [11:26:19:587]: Component: __Metrics65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (98:58) [11:26:19:587]: Component: __CloudUpdating65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (98:58) [11:26:19:587]: Component: __IsManaged65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (98:58) [11:26:19:587]: Component: __AutoUpdateService65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (98:58) [11:26:19:587]: Component: __TELEMAUTelem.exe65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (98:58) [11:26:19:587]: Component: __TELEMGatherTelem.exe65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: BindImage MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: ProgId MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: SelfReg MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Extension MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Font MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Shortcut MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Class MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Icon MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: TypeLib Action start 11:26:19: InstallValidate. MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: _RemoveFilePath MSI (s) (98:58) [11:26:19:587]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'. MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: BindImage MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: ProgId MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: SelfReg MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Extension MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Font MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Shortcut MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Class MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: Icon MSI (s) (98:58) [11:26:19:587]: Note: 1: 2205 2: 3: TypeLib MSI (s) (98:58) [11:26:19:587]: Note: 1: 2727 2: MSI (s) (98:58) [11:26:19:603]: Note: 1: 2727 2: MSI (s) (98:58) [11:26:19:603]: Doing action: RemoveExistingProducts MSI (s) (98:58) [11:26:19:603]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:19: InstallValidate. Return value 1. MSI (s) (98:58) [11:26:19:603]: Note: 1: 2205 2: 3: Error MSI (s) (98:58) [11:26:19:603]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 22 Action start 11:26:19: RemoveExistingProducts. MSI (s) (98:58) [11:26:19:603]: Note: 1: 2205 2: 3: Error MSI (s) (98:58) [11:26:19:603]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 23 MSI (s) (98:58) [11:26:19:603]: Note: 1: 2205 2: 3: Error MSI (s) (98:58) [11:26:19:603]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 16 MSI (s) (98:58) [11:26:19:603]: Note: 1: 2205 2: 3: Error MSI (s) (98:58) [11:26:19:603]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 21 MSI (s) (98:58) [11:26:19:603]: Doing action: InstallInitialize MSI (s) (98:58) [11:26:19:603]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:19: RemoveExistingProducts. Return value 1. MSI (s) (98:58) [11:26:19:603]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (98:58) [11:26:19:603]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (98:58) [11:26:19:603]: BeginTransaction: Locking Server MSI (s) (98:58) [11:26:19:603]: SRSetRestorePoint skipped for this transaction. MSI (s) (98:58) [11:26:19:603]: Server not locked: locking for product {E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E} Action start 11:26:19: InstallInitialize. MSI (s) (98:58) [11:26:20:974]: Skipping action: ScheduleSetPermissions.Rollback_x32 (condition is false) MSI (s) (98:58) [11:26:20:974]: Skipping action: ScheduleSetPermissions.Rollback_x64 (condition is false) MSI (s) (98:58) [11:26:20:974]: Doing action: ProcessComponents MSI (s) (98:58) [11:26:20:974]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:20: InstallInitialize. Return value 1. MSI (s) (98:58) [11:26:20:974]: Note: 1: 2205 2: 3: MsiPatchCertificate MSI (s) (98:58) [11:26:20:974]: LUA patching is disabled: missing MsiPatchCertificate table MSI (s) (98:58) [11:26:20:974]: Resolving source. MSI (s) (98:58) [11:26:20:974]: Resolving source to launched-from source. MSI (s) (98:58) [11:26:20:974]: Setting launched-from source as last-used. MSI (s) (98:58) [11:26:20:974]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\'. MSI (s) (98:58) [11:26:20:974]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\'. MSI (s) (98:58) [11:26:20:974]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E}'. MSI (s) (98:58) [11:26:20:974]: SOURCEDIR ==> C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\ MSI (s) (98:58) [11:26:20:974]: SOURCEDIR product ==> {E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E} MSI (s) (98:58) [11:26:20:974]: SECREPAIR: CryptAcquireContext succeeded MSI (s) (98:58) [11:26:20:974]: Determining source type MSI (s) (98:58) [11:26:20:974]: Source type from package 'Sophos AutoUpdate.msi': 0 MSI (s) (98:58) [11:26:20:974]: SECREPAIR: Hash Database: C:\Windows\Installer\SourceHash{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E} MSI (s) (98:58) [11:26:20:990]: Note: 1: 2262 2: SourceHash 3: -2147287038 MSI (s) (98:58) [11:26:21:644]: SECREPAIR: New Hash Database creation complete. MSI (s) (98:58) [11:26:21:644]: SECREPAIR: Hash Value for the file:Sophos AutoUpdate.msi is: ULOT0MI6/CwqzVRraOVj9XHgnjhNyjsN8OFmKyyrhMA= MSI (s) (98:58) [11:26:21:644]: SECREPAIR: Hash Value for the file:CommonAppData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crl is: Zx9KrmXI/cLj1/SaQxrbNuJL08XBbj0Yh2P9Pyw4Aow= MSI (s) (98:58) [11:26:21:644]: SECREPAIR: Hash Value for the file:CommonAppData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crt is: MR5xYKaBLG1LVS63zSgutyqPCCvsi1EXl5Srl5FzGHA= MSI (s) (98:58) [11:26:21:644]: SECREPAIR: Hash Value for the file:CommonAppData\Sophos\AutoUpdate\Config\iconn.cfg is: tolwtpxBxYpaa8Pq0o6TJRoXKCbYmsfVLGIGY3jlSQQ= MSI (s) (98:58) [11:26:21:644]: SECREPAIR: Hash Value for the file:CommonAppData\Sophos\AutoUpdate\Config\ilog.cfg is: BD9AR6hBuyJr8cmjZAzT0hRHMSwyU7sAEuVwU8p8vjA= MSI (s) (98:58) [11:26:21:644]: SECREPAIR: Hash Value for the file:CommonAppData\Sophos\AutoUpdate\Config\isched.cfg is: kdMz4o4W/bD1Ha8PyPslvV2oXTjtRhZugD5G55MkvXg= MSI (s) (98:58) [11:26:21:644]: SECREPAIR: Hash Value for the file:CommonAppData\Sophos\AutoUpdate\Config\iupd.cfg is: b+/KhXGP8UbZ7q1UQyQvdzYcBx1uta/pGYp+W81y6Ew= MSI (s) (98:58) [11:26:21:644]: SECREPAIR: Hash Value for the file:program files\Sophos\AutoUpdate\ALsvc.exe is: G53JUksLDG32caMyW5tSbZdxAX3msqk40YY6nafBuUQ= MSI (s) (98:58) [11:26:21:660]: SECREPAIR: Hash Value for the file:program files\Sophos\AutoUpdate\AUAdapter.dll is: VgXtuGjZsgzsekpXdsf+5Eaipwgl9KM8QRuyy1Xl8uw= MSI (s) (98:58) [11:26:21:676]: SECREPAIR: Hash Value for the file:program files\Sophos\AutoUpdate\SophosUpdate.exe is: AkMA7LZWXm87253kZsVZx1wcbg+6J4bf06i8ThGDSxg= MSI (s) (98:58) [11:26:21:676]: SECREPAIR: Hash Value for the file:program files\Sophos\AutoUpdate\license_agreements.txt is: 4TsHJ3hjrXQ54xrxXgzEGjlukyfKWq9rQvcFHZn5qpA= MSI (s) (98:58) [11:26:21:676]: SECREPAIR: Hash Value for the file:program files\Sophos\AutoUpdate\sof.dat is: lfRnt4Ivk4qa/VKeVLp0l8gLg9MF2HhFyEAcbASnBBA= MSI (s) (98:58) [11:26:21:676]: SECREPAIR: Hash Value for the file:program files\Sophos\AutoUpdate\integrity.dat is: UMVkc3qqdjv5Q1CZCHRnvIxFphrWjcwVmcyOuP5vVgQ= MSI (s) (98:58) [11:26:21:676]: SECREPAIR: Hash Value for the file:program files\Sophos\AutoUpdate\Telemetry\AUTelem.exe is: pNrWqRUZsf4C9mP2s3yo8KBiKUgO2eI91kgUQAnMBxg= MSI (s) (98:58) [11:26:21:676]: SECREPAIR: Hash Value for the file:program files\Sophos\AutoUpdate\Telemetry\GatherTelem.exe is: /k/vvsimFQjGZ/ZqSi6+Kfj3J9SKk/qW1ytfM1RcSUA= MSI (s) (98:58) [11:26:21:676]: SECREPAIR: Hash Value for the file:program files\Sophos\AutoUpdate\Telemetry\SubmitTelem.exe is: GoBA3sjaYPX5lMZyLKNSRK5xeSqzH81FxzYFBaALH0A= MSI (s) (98:58) [11:26:21:676]: SECREPAIR: Hash Value for the file:program files\Sophos\AutoUpdate\Telemetry\telem.man is: apJzWxsW1ZdPMyPvVk5gN8tMnfljP8lrb8Ex/OH69zA= Action start 11:26:20: ProcessComponents. MSI (s) (98:58) [11:26:21:691]: Source path resolution complete. Dumping Directory table... MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: TARGETDIR , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\ , LongSubPath: , ShortSubPath: MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: WindowsFolder , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\ , LongSubPath: , ShortSubPath: MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: ProgramFilesFolder , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\ , LongSubPath: program files\ , ShortSubPath: xlqr-nev\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: SophosProgramFilesFolder , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\ , LongSubPath: program files\Sophos\ , ShortSubPath: xlqr-nev\Sophos\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: AutoUpdateProgramFilesFolder , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\AutoUpdate\ , LongSubPath: program files\Sophos\AutoUpdate\ , ShortSubPath: xlqr-nev\Sophos\o1bsosrm\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: INSTALLDIR , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\AutoUpdate\ , LongSubPath: program files\Sophos\AutoUpdate\ , ShortSubPath: xlqr-nev\Sophos\o1bsosrm\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: TelemetryFolder , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\AutoUpdate\Telemetry\ , LongSubPath: program files\Sophos\AutoUpdate\Telemetry\ , ShortSubPath: xlqr-nev\Sophos\o1bsosrm\sl-84hyg\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: CommonAppDataFolder , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\ , LongSubPath: CommonAppData\ , ShortSubPath: ykpqggg9\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: SophosAppDataFolder , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\ , LongSubPath: CommonAppData\Sophos\ , ShortSubPath: ykpqggg9\Sophos\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: SAUAppDataFolder , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\AutoUpdate\ , LongSubPath: CommonAppData\Sophos\AutoUpdate\ , ShortSubPath: ykpqggg9\Sophos\yly7b0qx\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: AutoUpdateDataFolder , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\AutoUpdate\ , LongSubPath: CommonAppData\Sophos\AutoUpdate\ , ShortSubPath: ykpqggg9\Sophos\yly7b0qx\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: LogsFolder , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\AutoUpdate\Logs\ , LongSubPath: CommonAppData\Sophos\AutoUpdate\Logs\ , ShortSubPath: ykpqggg9\Sophos\yly7b0qx\Logs\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: ConfigFolder , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\AutoUpdate\Config\ , LongSubPath: CommonAppData\Sophos\AutoUpdate\Config\ , ShortSubPath: ykpqggg9\Sophos\yly7b0qx\Config\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: DataFolder , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\AutoUpdate\data\ , LongSubPath: CommonAppData\Sophos\AutoUpdate\data\ , ShortSubPath: ykpqggg9\Sophos\yly7b0qx\data\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: CacheFolder , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\AutoUpdate\Cache\ , LongSubPath: CommonAppData\Sophos\AutoUpdate\Cache\ , ShortSubPath: ykpqggg9\Sophos\yly7b0qx\Cache\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: Certificates , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\Certificates\ , LongSubPath: CommonAppData\Sophos\Certificates\ , ShortSubPath: ykpqggg9\Sophos\pyanas3q\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: CertificatesAutoUpdate , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\Certificates\AutoUpdate\ , LongSubPath: CommonAppData\Sophos\Certificates\AutoUpdate\ , ShortSubPath: ykpqggg9\Sophos\pyanas3q\fl_ddemz\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: CertificatesCache , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\Certificates\AutoUpdate\Cache\ , LongSubPath: CommonAppData\Sophos\Certificates\AutoUpdate\Cache\ , ShortSubPath: ykpqggg9\Sophos\pyanas3q\fl_ddemz\Cache\ MSI (s) (98:58) [11:26:21:691]: Dir (source): Key: CertificatesManifest , Object: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\Certificates\AutoUpdate\Manifest\ , LongSubPath: CommonAppData\Sophos\Certificates\AutoUpdate\Manifest\ , ShortSubPath: ykpqggg9\Sophos\pyanas3q\fl_ddemz\Manifest\ MSI (s) (98:58) [11:26:21:691]: Note: 1: 2205 2: 3: ActionText MSI (s) (98:58) [11:26:21:691]: Note: 1: 2205 2: 3: ActionText MSI (s) (98:58) [11:26:21:691]: Note: 1: 2205 2: 3: ActionText MSI (s) (98:58) [11:26:21:707]: Doing action: UnpublishFeatures MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:21: ProcessComponents. Return value 1. Action start 11:26:21: UnpublishFeatures. MSI (s) (98:58) [11:26:21:707]: Doing action: StopServices MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:21: UnpublishFeatures. Return value 1. Action start 11:26:21: StopServices. MSI (s) (98:58) [11:26:21:707]: Doing action: DeleteServices MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:21: StopServices. Return value 1. Action start 11:26:21: DeleteServices. MSI (s) (98:58) [11:26:21:707]: Doing action: RemoveRegistryValues MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:21: DeleteServices. Return value 1. Action start 11:26:21: RemoveRegistryValues. MSI (s) (98:58) [11:26:21:707]: Skipping action: ISSAUTPRemoveAllowed (condition is false) MSI (s) (98:58) [11:26:21:707]: Skipping action: SetWaitAUAdapterUnlocked (condition is false) MSI (s) (98:58) [11:26:21:707]: Skipping action: WaitAUAdapterUnlocked (condition is false) MSI (s) (98:58) [11:26:21:707]: Doing action: RemoveFiles MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:21: RemoveRegistryValues. Return value 1. Action start 11:26:21: RemoveFiles. MSI (s) (98:58) [11:26:21:707]: Doing action: RemoveFolders MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:21: RemoveFiles. Return value 1. Action start 11:26:21: RemoveFolders. MSI (s) (98:58) [11:26:21:707]: Doing action: CreateFolders MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:21: RemoveFolders. Return value 1. Action start 11:26:21: CreateFolders. MSI (s) (98:58) [11:26:21:707]: Doing action: InstallFiles MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:21: CreateFolders. Return value 1. MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'rootca.crl' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'rootca.crt' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'iconn' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'ilog' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'isched' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'iupd' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'ALsvc' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'AUAdapter' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'SophosUpdate' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'License' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'Sof' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'Integrity' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'TELEMAUTelem.exe' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'TELEMGatherTelem.exe' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'TELEMSubmitTelem.exe' has no eligible binary patches MSI (s) (98:58) [11:26:21:707]: The file represented by File table key 'TELEMtelem.man' has no eligible binary patches Action start 11:26:21: InstallFiles. MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: Patch MSI (s) (98:58) [11:26:21:707]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence` MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: Error MSI (s) (98:58) [11:26:21:707]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1302 MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: MsiSFCBypass MSI (s) (98:58) [11:26:21:707]: Note: 1: 2228 2: 3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ? MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (98:58) [11:26:21:707]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ? MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (98:58) [11:26:21:707]: Doing action: WriteRegistryValues MSI (s) (98:58) [11:26:21:707]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:21: InstallFiles. Return value 1. Action start 11:26:21: WriteRegistryValues. MSI (s) (98:58) [11:26:21:722]: Doing action: InstallServices MSI (s) (98:58) [11:26:21:722]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:21: WriteRegistryValues. Return value 1. Action start 11:26:21: InstallServices. MSI (s) (98:58) [11:26:21:722]: Doing action: ScheduleSetPermissions.Deferred_x32 MSI (s) (98:58) [11:26:21:722]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:21: InstallServices. Return value 1. MSI (s) (98:58) [11:26:21:722]: Creating MSIHANDLE (267) of type 790542 for thread 4440 MSI (s) (98:80) [11:26:21:722]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI90B4.tmp, Entrypoint: SchedulePermissionsDeferred MSI (s) (98:6C) [11:26:21:722]: Generating random cookie. MSI (s) (98:6C) [11:26:21:722]: Created Custom Action Server with PID 4248 (0x1098). MSI (s) (98:B0) [11:26:21:754]: Running as a service. MSI (s) (98:B0) [11:26:21:754]: Hello, I'm your 32bit Impersonated custom action server. MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (268) of type 790541 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (269) of type 790531 for thread 2328 Action start 11:26:21: ScheduleSetPermissions.Deferred_x32. MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (269) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (270) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (271) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (272) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (272) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (273) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (273) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (274) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (274) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (275) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (275) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (276) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (276) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (277) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (277) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (278) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (278) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (279) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (279) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (280) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (280) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (281) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (281) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (282) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (282) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (283) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (283) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (284) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (284) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (285) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (285) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (286) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (286) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (287) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (287) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (288) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (288) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (289) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (289) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (290) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (290) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (291) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (291) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (292) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (292) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (293) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (293) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (294) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (294) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (295) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (295) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (296) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (296) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (297) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (297) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (298) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (298) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (299) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (299) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (300) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (300) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (301) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (301) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (302) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (302) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (303) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (303) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (304) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (304) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (305) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (305) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (306) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (306) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (307) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (307) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (308) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (308) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (309) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (309) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (310) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (310) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (311) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (311) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (312) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (312) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (271) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (270) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (313) of type 790531 for thread 2328 SchedulePermissionsDeferred: Initialized. MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (313) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (314) of type 790531 for thread 2328 SchedulePermissionsDeferred: PopulateComponentAttributeMap: Loaded components table in a table view object. MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (314) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (315) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (316) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (317) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (317) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (318) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (318) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (319) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (319) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (320) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (320) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (321) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (321) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (322) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (322) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (323) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Closing MSIHANDLE (323) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:847]: Creating MSIHANDLE (324) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (324) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (325) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (325) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (326) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (326) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (327) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (327) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (328) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (328) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (329) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (329) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (330) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (330) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (316) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (315) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (331) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (331) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (332) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (333) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (334) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (335) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (335) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (336) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (336) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (334) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (333) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (332) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (337) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (337) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (338) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (339) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (340) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (341) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (341) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (342) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (342) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (340) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (339) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (338) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (343) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (343) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (344) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (345) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (346) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (347) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (347) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (348) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (348) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (346) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (345) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (344) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (349) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (349) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (350) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (351) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (352) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (353) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (353) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (354) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (354) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (352) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (351) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (350) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (355) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (355) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (356) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (357) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (358) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (359) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (359) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (360) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (360) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (358) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (357) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (356) of type 790540 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (361) of type 790531 for thread 2328 SchedulePermissionsDeferred: Component attributes have been loaded successfully. MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (361) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (362) of type 790531 for thread 2328 SchedulePermissionsDeferred: Action data construction has been completed. MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (362) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: PROPERTY CHANGE: Adding SetPermissions.Deferred_x32 property. Its value is '2{14}2{14}8{objectid}11{componentid}11{objecttable}6{action}8{identity}12{identitytype}11{inheritance}10{genericall}11{genericread}12{genericwrite}14{genericexecute}6{modify}10{objectpath}5{win64}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Allow}5{Users}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}39{C:\ProgramData\Sophos\AutoUpdate\Cache\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}39{C:\ProgramData\Sophos\AutoUpdate\Cache\}2{n MSI (s) (98!18) [11:26:21:863]: Doing action: SetPermissions.Deferred_x32 MSI (s) (98!18) [11:26:21:863]: Note: 1: 2205 2: 3: ActionText SchedulePermissionsDeferred: Action data serialization has been completed. Action start 11:26:21: SetPermissions.Deferred_x32. MSI (s) (98!18) [11:26:21:863]: Creating MSIHANDLE (363) of type 790531 for thread 2328 Action ended 11:26:21: SetPermissions.Deferred_x32. Return value 1. MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (363) of type 790531 for thread 2328 MSI (s) (98!18) [11:26:21:863]: Closing MSIHANDLE (268) of type 790541 for thread 2328 MSI (s) (98:80) [11:26:21:863]: Closing MSIHANDLE (267) of type 790542 for thread 4440 SchedulePermissionsDeferred: Custom action SetPermissions.Deferred has been scheduled. MSI (s) (98:58) [11:26:21:863]: Doing action: ScheduleSetPermissions.Deferred_x64 MSI (s) (98:58) [11:26:21:863]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:21: ScheduleSetPermissions.Deferred_x32. Return value 1. MSI (s) (98:58) [11:26:21:863]: Creating MSIHANDLE (364) of type 790542 for thread 4440 MSI (s) (98:80) [11:26:21:863]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI9141.tmp, Entrypoint: SchedulePermissionsDeferred MSI (s) (98:6C) [11:26:21:863]: Generating random cookie. MSI (s) (98:6C) [11:26:21:863]: Created Custom Action Server with PID 4404 (0x1134). MSI (s) (98:B0) [11:26:21:878]: Running as a service. MSI (s) (98:B0) [11:26:21:894]: Hello, I'm your 64bit Impersonated custom action server. MSI (s) (98!60) [11:26:22:159]: Creating MSIHANDLE (365) of type 790541 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (366) of type 790531 for thread 2400 Action start 11:26:21: ScheduleSetPermissions.Deferred_x64. MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (366) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (367) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (368) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (369) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (369) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (370) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (370) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (371) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (371) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (372) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (372) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (373) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (373) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (374) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (374) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (375) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (375) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (376) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (376) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (377) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (377) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (378) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (378) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (379) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (379) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (380) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (380) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (381) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (381) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (382) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (382) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (383) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (383) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (384) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (384) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (385) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (385) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (386) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (386) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (387) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (387) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (388) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (388) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (389) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (389) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (390) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (390) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (391) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (391) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (392) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (392) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (393) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (393) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (394) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (394) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (395) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (395) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (396) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (396) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (397) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (397) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (398) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (398) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (399) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (399) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (400) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (400) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (401) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (401) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (402) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (402) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (403) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (403) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (404) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (404) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (405) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (405) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (406) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (406) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (407) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (407) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (408) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (408) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (409) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (409) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (368) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (367) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (410) of type 790531 for thread 2400 SchedulePermissionsDeferred: Initialized. MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (410) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (411) of type 790531 for thread 2400 SchedulePermissionsDeferred: PopulateComponentAttributeMap: Loaded components table in a table view object. MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (411) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (412) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (413) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (414) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (414) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (415) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (415) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (416) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (416) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (417) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (417) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (418) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (418) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (419) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (419) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (420) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (420) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (421) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (421) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (422) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (422) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (423) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Closing MSIHANDLE (423) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:174]: Creating MSIHANDLE (424) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (424) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (425) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (425) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (426) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (426) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (427) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (427) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (413) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (412) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (428) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (428) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (429) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (430) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (431) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (432) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (432) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (433) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (433) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (431) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (430) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (429) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (434) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (434) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (435) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (436) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (437) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (438) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (438) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (439) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (439) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (437) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (436) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (435) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (440) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (440) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (441) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (442) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (443) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (444) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (444) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (445) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (445) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (443) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (442) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (441) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (446) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (446) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (447) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (448) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (449) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (450) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (450) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (451) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (451) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (449) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (448) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (447) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (452) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (452) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (453) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (454) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (455) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (456) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (456) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (457) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (457) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (455) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (454) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (453) of type 790540 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (458) of type 790531 for thread 2400 SchedulePermissionsDeferred: Component attributes have been loaded successfully. MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (458) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (459) of type 790531 for thread 2400 SchedulePermissionsDeferred: Action data construction has been completed. MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (459) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: PROPERTY CHANGE: Adding SetPermissions.Deferred_x64 property. Its value is '2{14}2{14}8{objectid}11{componentid}11{objecttable}6{action}8{identity}12{identitytype}11{inheritance}10{genericall}11{genericread}12{genericwrite}14{genericexecute}6{modify}10{objectpath}5{win64}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Allow}5{Users}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}39{C:\ProgramData\Sophos\AutoUpdate\Cache\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}39{C:\ProgramData\Sophos\AutoUpdate\Cache\}2{n MSI (s) (98!60) [11:26:22:190]: Doing action: SetPermissions.Deferred_x64 MSI (s) (98!60) [11:26:22:190]: Note: 1: 2205 2: 3: ActionText SchedulePermissionsDeferred: Action data serialization has been completed. Action start 11:26:22: SetPermissions.Deferred_x64. MSI (s) (98!60) [11:26:22:190]: Creating MSIHANDLE (460) of type 790531 for thread 2400 Action ended 11:26:22: SetPermissions.Deferred_x64. Return value 1. MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (460) of type 790531 for thread 2400 MSI (s) (98!60) [11:26:22:190]: Closing MSIHANDLE (365) of type 790541 for thread 2400 MSI (s) (98:80) [11:26:22:190]: Closing MSIHANDLE (364) of type 790542 for thread 4440 SchedulePermissionsDeferred: Custom action SetPermissions.Deferred has been scheduled. MSI (s) (98:58) [11:26:22:190]: Doing action: StartServices MSI (s) (98:58) [11:26:22:190]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:22: ScheduleSetPermissions.Deferred_x64. Return value 1. Action start 11:26:22: StartServices. MSI (s) (98:58) [11:26:22:190]: Doing action: RegisterUser MSI (s) (98:58) [11:26:22:190]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:22: StartServices. Return value 1. Action start 11:26:22: RegisterUser. MSI (s) (98:58) [11:26:22:190]: Doing action: RegisterProduct MSI (s) (98:58) [11:26:22:190]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:22: RegisterUser. Return value 1. MSI (s) (98:58) [11:26:22:190]: Note: 1: 2205 2: 3: Error MSI (s) (98:58) [11:26:22:190]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1302 Action start 11:26:22: RegisterProduct. MSI (s) (98:58) [11:26:22:190]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'. MSI (s) (98:58) [11:26:22:190]: Doing action: PublishFeatures MSI (s) (98:58) [11:26:22:190]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:22: RegisterProduct. Return value 1. Action start 11:26:22: PublishFeatures. MSI (s) (98:58) [11:26:22:190]: Doing action: PublishProduct MSI (s) (98:58) [11:26:22:190]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:22: PublishFeatures. Return value 1. MSI (s) (98:58) [11:26:22:190]: Note: 1: 2205 2: 3: Icon MSI (s) (98:58) [11:26:22:190]: Note: 1: 2228 2: 3: Icon 4: SELECT `Name`, `Data` FROM `Icon` Action start 11:26:22: PublishProduct. MSI (s) (98:58) [11:26:22:206]: Doing action: InstallFinalize MSI (s) (98:58) [11:26:22:206]: Note: 1: 2205 2: 3: ActionText Action ended 11:26:22: PublishProduct. Return value 1. MSI (s) (98:58) [11:26:22:206]: Running Script: C:\Windows\Installer\MSI9094.tmp MSI (s) (98:58) [11:26:22:206]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'. MSI (s) (98:58) [11:26:22:206]: Machine policy value 'DisableRollback' is 0 MSI (s) (98:58) [11:26:22:206]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (98:58) [11:26:22:206]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1256676171,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1) Action start 11:26:22: InstallFinalize. MSI (s) (98:58) [11:26:22:206]: Executing op: ProductInfo(ProductKey={E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E},ProductName=Sophos AutoUpdate XG,PackageName=Sophos AutoUpdate.msi,Language=1033,Version=84213760,Assignment=1,ObsoleteArg=0,,,PackageCode={30B5CB19-DB64-45C2-BD5D-BC0AB7693D3B},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3) MSI (s) (98:58) [11:26:22:206]: Executing op: DialogInfo(Type=0,Argument=1033) MSI (s) (98:58) [11:26:22:206]: Executing op: DialogInfo(Type=1,Argument=Sophos AutoUpdate XG) MSI (s) (98:58) [11:26:22:206]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1]) MSI (s) (98:58) [11:26:22:206]: Executing op: SetBaseline(Baseline=0,) MSI (s) (98:58) [11:26:22:206]: Executing op: SetBaseline(Baseline=1,) MSI (s) (98:58) [11:26:22:206]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,) MSI (s) (98:58) [11:26:22:206]: Executing op: ProgressTotal(Total=29,Type=1,ByteEquivalent=24000) MSI (s) (98:58) [11:26:22:206]: Executing op: ComponentRegister(ComponentId={7B32C653-BFD1-4DBF-9967-DCC72D363BCC},KeyPath=C:\ProgramData\Sophos\Certificates\AutoUpdate\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:206]: Executing op: ComponentRegister(ComponentId={1A5FBAAA-8A81-4FB0-AAC7-87FADDD97277},KeyPath=C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crl,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:206]: Executing op: ComponentRegister(ComponentId={0559090D-440E-4FA8-9549-16179DD07404},KeyPath=C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:206]: Executing op: ComponentRegister(ComponentId={AEC4F882-96A8-4BF7-9A67-BF5C0452744F},KeyPath=C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:206]: Executing op: ComponentRegister(ComponentId={EE343324-C924-4F01-AD97-9EBA07AFF882},KeyPath=C:\ProgramData\Sophos\AutoUpdate\Cache\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:206]: Executing op: ComponentRegister(ComponentId={FBB9FD6F-D781-4E5B-8016-13C37DF4D113},KeyPath=C:\ProgramData\Sophos\AutoUpdate\data\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:206]: Executing op: ComponentRegister(ComponentId={FAD2F9C8-13A0-4572-975E-550FA6E7DC3F},KeyPath=C:\ProgramData\Sophos\AutoUpdate\Config\iconn.cfg,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:206]: Executing op: ComponentRegister(ComponentId={DC8EDB3E-D715-4788-89AD-5EACAA13B5AE},KeyPath=C:\ProgramData\Sophos\AutoUpdate\Config\ilog.cfg,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:206]: Executing op: ComponentRegister(ComponentId={D4F97B26-4154-41C7-B15C-05359B80BEAF},KeyPath=C:\ProgramData\Sophos\AutoUpdate\Config\isched.cfg,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:206]: Executing op: ComponentRegister(ComponentId={D4FDA50D-1EB0-4AA3-B016-7CA0C7601983},KeyPath=C:\ProgramData\Sophos\AutoUpdate\Config\iupd.cfg,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={ADECE077-A75A-4666-819F-AEBB42F82CDC},KeyPath=C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={A6BCDEF5-FC1A-4B0A-AEAD-444071FFF479},KeyPath=C:\Program Files (x86)\Sophos\AutoUpdate\AUAdapter.dll,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\AUAdapter.dll' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={58848A8F-83B7-487F-A2FC-7BD6BC4F7F0B},KeyPath=C:\Program Files (x86)\Sophos\AutoUpdate\SophosUpdate.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\SophosUpdate.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={404B4121-9B38-4F84-8B9D-B642AF25E1AD},KeyPath=C:\Program Files (x86)\Sophos\AutoUpdate\license_agreements.txt,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\license_agreements.txt' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={5C8EF82C-BB07-4464-A055-48D8AD5D540C},KeyPath=C:\Program Files (x86)\Sophos\AutoUpdate\sof.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\sof.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={7AD6CBFB-E302-4E47-B7C6-4EEAA50AB660},KeyPath=C:\Program Files (x86)\Sophos\AutoUpdate\integrity.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\integrity.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={24EC2547-E7F5-412B-A8CF-061C8BB9FC61},KeyPath=C:\Program Files (x86)\Sophos\AutoUpdate\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={C41DBB6D-1C80-4645-872D-4CB514BEE266},KeyPath=C:\Program Files (x86)\Sophos\AutoUpdate\,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={9C4489C5-2D76-46E3-8648-2A927F9A3935},KeyPath=02:\SOFTWARE\Sophos\AutoUpdate\Installation Path,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={CC900A24-6AF9-4E79-8A53-158B22B2E635},KeyPath=02:\SOFTWARE\Sophos\AutoUpdate\Data Path,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={D0C311B9-32F1-4B5D-9227-462EF7C5A332},KeyPath=02:\SOFTWARE\Sophos\AutoUpdate\ProductVersion,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={1925DFF1-64BE-4C02-AC94-5629E1951815},KeyPath=02:\SOFTWARE\Sophos\Remote Management System\ManagementAgent\Adapters\ALC\DLLPath,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={07A84D49-C37F-4A8A-AB15-BCA186138E32},KeyPath=02:\SOFTWARE\Sophos\AutoUpdate\MetricsEnabled,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={6EE05E3A-45C5-4734-8622-A5C81D412B8E},KeyPath=02:\SOFTWARE\Sophos\AutoUpdate\CloudUpdating,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={B35C3D57-B073-4EFA-917F-CF9A028699EC},KeyPath=02:\SOFTWARE\Sophos\AutoUpdate\IsManaged,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={3A0E79AD-2ADB-49B9-991D-036880DD7726},KeyPath=C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\AUTelem.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\AUTelem.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={60FD7993-E630-4E39-AD1E-3D2F2F482374},KeyPath=C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\GatherTelem.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\GatherTelem.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={3802F4D0-A617-4982-B01A-9CEB288FF232},KeyPath=C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\SubmitTelem.exe,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:221]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\SubmitTelem.exe' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (98:58) [11:26:22:221]: Executing op: ComponentRegister(ComponentId={8D032536-1910-4094-9CF2-32CD9BFBF019},KeyPath=C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\telem.man,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (98:58) [11:26:22:237]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\telem.man' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (98:58) [11:26:22:237]: Executing op: ActionStart(Name=StopServices,Description=Stopping services,Template=Service: [1]) MSI (s) (98:58) [11:26:22:237]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000) MSI (s) (98:58) [11:26:22:237]: Executing op: ServiceControl(,Name=Sophos AutoUpdate Service,Action=2,,StartupArguments=-NoStartupCheck) MSI (s) (98:58) [11:26:22:237]: Executing op: ActionStart(Name=RemoveRegistryValues,Description=Removing system registry values,Template=Key: [1], Name: [2]) MSI (s) (98:58) [11:26:22:237]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200) MSI (s) (98:58) [11:26:22:237]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\Remote Management System\ManagementAgent\Adapters\ALC,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:237]: Executing op: RegRemoveKey() MSI (s) (98:58) [11:26:22:237]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Sophos\Remote Management System\ManagementAgent\Adapters\ALC 3: 2 MSI (s) (98:58) [11:26:22:237]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1]) MSI (s) (98:58) [11:26:22:237]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Certificates\AutoUpdate\,Foreign=0,,) MSI (s) (98:58) [11:26:22:237]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\,Foreign=0,,) MSI (s) (98:58) [11:26:22:237]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\AutoUpdate\Cache\,Foreign=0,,) MSI (s) (98:58) [11:26:22:237]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\AutoUpdate\data\,Foreign=0,,) MSI (s) (98:58) [11:26:22:237]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\AutoUpdate\,Foreign=0,,) MSI (s) (98:58) [11:26:22:237]: Executing op: FolderCreate(Folder=C:\Program Files (x86)\Sophos\AutoUpdate\,Foreign=0,,) MSI (s) (98:58) [11:26:22:237]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1], Directory: [9], Size: [6]) MSI (s) (98:58) [11:26:22:237]: Executing op: ProgressTotal(Total=4694180,Type=0,ByteEquivalent=1) MSI (s) (98:58) [11:26:22:237]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\AutoUpdate\) MSI (s) (98:58) [11:26:22:237]: Executing op: SetSourceFolder(Folder=1\xlqr-nev\Sophos\o1bsosrm\|program files\Sophos\AutoUpdate\) MSI (s) (98:58) [11:26:22:237]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,,BytesPerTick=65536,CopierType=0,,,,,,IsFirstPhysicalMedia=1) MSI (s) (98:58) [11:26:22:237]: Executing op: FileCopy(SourceName=ALsvc.exe,SourceCabKey=ALsvc,DestName=ALsvc.exe,Attributes=9728,FileSize=780432,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.5.0.187,Language=1033,InstallMode=58982400,,,,,,,) MSI (s) (98:58) [11:26:22:237]: File: C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:237]: Source for file 'ALsvc.exe' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\AutoUpdate\'. MSI (s) (98:58) [11:26:22:237]: Executing op: FileCopy(SourceName=g9pxfwgm.dll|AUAdapter.dll,SourceCabKey=AUAdapter,DestName=AUAdapter.dll,Attributes=9728,FileSize=922248,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.5.0.187,Language=1033,InstallMode=58982400,,,,,,,) MSI (s) (98:58) [11:26:22:237]: File: C:\Program Files (x86)\Sophos\AutoUpdate\AUAdapter.dll; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:237]: Source for file 'AUAdapter.dll' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\AutoUpdate\'. MSI (s) (98:58) [11:26:22:237]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\AutoUpdate\Config\) MSI (s) (98:58) [11:26:22:237]: Executing op: SetSourceFolder(Folder=1\ykpqggg9\Sophos\yly7b0qx\Config\|CommonAppData\Sophos\AutoUpdate\Config\) MSI (s) (98:58) [11:26:22:237]: Executing op: FileCopy(SourceName=iconn.cfg,SourceCabKey=iconn,DestName=iconn.cfg,Attributes=512,FileSize=400,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-2021093478,HashPart2=-1859773745,HashPart3=1239451470,HashPart4=-1088642067,,) MSI (s) (98:58) [11:26:22:237]: File: C:\ProgramData\Sophos\AutoUpdate\Config\iconn.cfg; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:237]: Source for file 'iconn.cfg' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\AutoUpdate\Config\'. MSI (s) (98:58) [11:26:22:237]: Executing op: FileCopy(SourceName=ilog.cfg,SourceCabKey=ilog,DestName=ilog.cfg,Attributes=512,FileSize=416,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=676823361,HashPart2=724014214,HashPart3=2008393678,HashPart4=-1148119030,,) MSI (s) (98:58) [11:26:22:237]: File: C:\ProgramData\Sophos\AutoUpdate\Config\ilog.cfg; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:237]: Source for file 'ilog.cfg' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\AutoUpdate\Config\'. MSI (s) (98:58) [11:26:22:237]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\AutoUpdate\) MSI (s) (98:58) [11:26:22:237]: Executing op: SetSourceFolder(Folder=1\xlqr-nev\Sophos\o1bsosrm\|program files\Sophos\AutoUpdate\) MSI (s) (98:58) [11:26:22:237]: Executing op: FileCopy(SourceName=o-7ajprv.dat|integrity.dat,SourceCabKey=Integrity,DestName=integrity.dat,Attributes=8704,FileSize=1934,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1194632219,HashPart2=-1845021430,HashPart3=-1535783876,HashPart4=837044415,,) MSI (s) (98:58) [11:26:22:237]: File: C:\Program Files (x86)\Sophos\AutoUpdate\integrity.dat; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:237]: Source for file 'integrity.dat' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\AutoUpdate\'. MSI (s) (98:58) [11:26:22:237]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\AutoUpdate\Config\) MSI (s) (98:58) [11:26:22:237]: Executing op: SetSourceFolder(Folder=1\ykpqggg9\Sophos\yly7b0qx\Config\|CommonAppData\Sophos\AutoUpdate\Config\) MSI (s) (98:58) [11:26:22:237]: Executing op: FileCopy(SourceName=isched.cfg,SourceCabKey=isched,DestName=isched.cfg,Attributes=512,FileSize=284,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1702739158,HashPart2=-973782780,HashPart3=-1911645403,HashPart4=1275381045,,) MSI (s) (98:58) [11:26:22:237]: File: C:\ProgramData\Sophos\AutoUpdate\Config\isched.cfg; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:237]: Source for file 'isched.cfg' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\AutoUpdate\Config\'. MSI (s) (98:58) [11:26:22:237]: Executing op: FileCopy(SourceName=iupd.cfg,SourceCabKey=iupd,DestName=iupd.cfg,Attributes=512,FileSize=1059,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1444990640,HashPart2=1749221778,HashPart3=94222119,HashPart4=-249707029,,) MSI (s) (98:58) [11:26:22:252]: File: C:\ProgramData\Sophos\AutoUpdate\Config\iupd.cfg; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:252]: Source for file 'iupd.cfg' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\AutoUpdate\Config\'. MSI (s) (98:58) [11:26:22:252]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\AutoUpdate\) MSI (s) (98:58) [11:26:22:252]: Executing op: SetSourceFolder(Folder=1\xlqr-nev\Sophos\o1bsosrm\|program files\Sophos\AutoUpdate\) MSI (s) (98:58) [11:26:22:252]: Executing op: FileCopy(SourceName=afr3hgrn.txt|license_agreements.txt,SourceCabKey=License,DestName=license_agreements.txt,Attributes=8704,FileSize=6417,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=422646103,HashPart2=-2064635243,HashPart3=-589680517,HashPart4=-589656984,,) MSI (s) (98:58) [11:26:22:252]: File: C:\Program Files (x86)\Sophos\AutoUpdate\license_agreements.txt; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:252]: Source for file 'license_agreements.txt' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\AutoUpdate\'. MSI (s) (98:58) [11:26:22:284]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\) MSI (s) (98:58) [11:26:22:284]: Executing op: SetSourceFolder(Folder=1\ykpqggg9\Sophos\pyanas3q\fl_ddemz\Manifest\|CommonAppData\Sophos\Certificates\AutoUpdate\Manifest\) MSI (s) (98:58) [11:26:22:284]: Executing op: FileCopy(SourceName=rootca.crl,SourceCabKey=rootca.crl,DestName=rootca.crl,Attributes=9728,FileSize=678,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-442981800,HashPart2=1282909748,HashPart3=786695861,HashPart4=-1380253462,,) MSI (s) (98:58) [11:26:22:284]: File: C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crl; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:284]: Source for file 'rootca.crl' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\Certificates\AutoUpdate\Manifest\'. MSI (s) (98:58) [11:26:22:284]: Executing op: FileCopy(SourceName=rootca.crt,SourceCabKey=rootca.crt,DestName=rootca.crt,Attributes=9728,FileSize=1306,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=1125782938,HashPart2=-1631502551,HashPart3=-1580007443,HashPart4=1881380357,,) MSI (s) (98:58) [11:26:22:284]: File: C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\rootca.crt; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:284]: Source for file 'rootca.crt' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\CommonAppData\Sophos\Certificates\AutoUpdate\Manifest\'. MSI (s) (98:58) [11:26:22:284]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\AutoUpdate\) MSI (s) (98:58) [11:26:22:284]: Executing op: SetSourceFolder(Folder=1\xlqr-nev\Sophos\o1bsosrm\|program files\Sophos\AutoUpdate\) MSI (s) (98:58) [11:26:22:284]: Executing op: FileCopy(SourceName=sof.dat,SourceCabKey=Sof,DestName=sof.dat,Attributes=8704,FileSize=2912,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-447128795,HashPart2=-2086490375,HashPart3=-237438388,HashPart4=-1734290309,,) MSI (s) (98:58) [11:26:22:284]: File: C:\Program Files (x86)\Sophos\AutoUpdate\sof.dat; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:284]: Source for file 'sof.dat' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\AutoUpdate\'. MSI (s) (98:58) [11:26:22:284]: Executing op: FileCopy(SourceName=xukp9uhl.exe|SophosUpdate.exe,SourceCabKey=SophosUpdate,DestName=SophosUpdate.exe,Attributes=9728,FileSize=1913480,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=5.5.0.141,Language=1033,InstallMode=58982400,,,,,,,) MSI (s) (98:58) [11:26:22:284]: File: C:\Program Files (x86)\Sophos\AutoUpdate\SophosUpdate.exe; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:284]: Source for file 'SophosUpdate.exe' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\AutoUpdate\'. MSI (s) (98:58) [11:26:22:284]: Executing op: SetTargetFolder(Folder=C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\) MSI (s) (98:58) [11:26:22:284]: Executing op: SetSourceFolder(Folder=1\xlqr-nev\Sophos\o1bsosrm\sl-84hyg\|program files\Sophos\AutoUpdate\Telemetry\) MSI (s) (98:58) [11:26:22:284]: Executing op: FileCopy(SourceName=AUTelem.exe,SourceCabKey=TELEMAUTelem.exe,DestName=AUTelem.exe,Attributes=9728,FileSize=484784,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1961031928,HashPart2=-958126464,HashPart3=790974345,HashPart4=-310604897,,) MSI (s) (98:58) [11:26:22:284]: File: C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\AUTelem.exe; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:284]: Source for file 'AUTelem.exe' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\AutoUpdate\Telemetry\'. MSI (s) (98:58) [11:26:22:284]: Executing op: FileCopy(SourceName=qqaohpff.exe|GatherTelem.exe,SourceCabKey=TELEMGatherTelem.exe,DestName=GatherTelem.exe,Attributes=9728,FileSize=283696,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2016.1.0.608,Language=1033,InstallMode=58982400,,,,,,,) MSI (s) (98:58) [11:26:22:284]: File: C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\GatherTelem.exe; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:284]: Source for file 'GatherTelem.exe' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\AutoUpdate\Telemetry\'. MSI (s) (98:58) [11:26:22:299]: Executing op: FileCopy(SourceName=ngjshbn0.exe|SubmitTelem.exe,SourceCabKey=TELEMSubmitTelem.exe,DestName=SubmitTelem.exe,Attributes=9728,FileSize=289448,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,Version=2016.1.0.608,Language=1033,InstallMode=58982400,,,,,,,) MSI (s) (98:58) [11:26:22:299]: File: C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\SubmitTelem.exe; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:299]: Source for file 'SubmitTelem.exe' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\AutoUpdate\Telemetry\'. MSI (s) (98:58) [11:26:22:299]: Executing op: FileCopy(SourceName=telem.man,SourceCabKey=TELEMtelem.man,DestName=telem.man,Attributes=9728,FileSize=4686,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=535757223,HashPart2=1863877155,HashPart3=-1526328685,HashPart4=-555218479,,) MSI (s) (98:58) [11:26:22:299]: File: C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\telem.man; To be installed; Won't patch; No existing file MSI (s) (98:58) [11:26:22:299]: Source for file 'telem.man' is uncompressed, at 'C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\program files\Sophos\AutoUpdate\Telemetry\'. MSI (s) (98:58) [11:26:22:299]: Executing op: CacheSizeFlush(,) MSI (s) (98:58) [11:26:22:299]: Executing op: ActionStart(Name=WriteRegistryValues,Description=Writing system registry values,Template=Key: [1], Name: [2], Value: [3]) MSI (s) (98:58) [11:26:22:299]: Executing op: ProgressTotal(Total=97,Type=1,ByteEquivalent=13200) MSI (s) (98:58) [11:26:22:299]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:299]: Executing op: RegAddValue(,Value=Reports the status and time of the last update.,) MSI (s) (98:58) [11:26:22:299]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus\CLSID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:299]: Executing op: RegAddValue(,Value={07723A69-B7C8-4113-88F9-F18FB917A82F},) MSI (s) (98:58) [11:26:22:299]: Executing op: RegOpenKey(,Key=CLSID\{07723A69-B7C8-4113-88F9-F18FB917A82F}\VersionIndependentProgID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:299]: Executing op: RegAddValue(,Value=ActiveLinkClient.AutoUpdateStatus,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus\CurVer,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value=ActiveLinkClient.AutoUpdateStatus.1,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus.1,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value=Reports the status and time of the last update.,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus.1\CLSID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value={07723A69-B7C8-4113-88F9-F18FB917A82F},) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=CLSID\{07723A69-B7C8-4113-88F9-F18FB917A82F}\ProgID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value=ActiveLinkClient.AutoUpdateStatus.1,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=CLSID\{07723A69-B7C8-4113-88F9-F18FB917A82F}\LocalServer32,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value="C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe",) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=CLSID\{07723A69-B7C8-4113-88F9-F18FB917A82F},,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(Name=AppID,Value={CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=CLSID\{07723A69-B7C8-4113-88F9-F18FB917A82F}\TypeLib,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ClientUpdate,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value=Provides interfaces for performing an update, and for installing/caching packages,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ClientUpdate\CLSID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value={7CBCADE4-7AA7-43AE-BD20-D88223B6353E},) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=CLSID\{7CBCADE4-7AA7-43AE-BD20-D88223B6353E}\VersionIndependentProgID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value=ActiveLinkClient.ClientUpdate,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ClientUpdate\CurVer,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value=ActiveLinkClient.ClientUpdate.1,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ClientUpdate.1,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value=Provides interfaces for performing an update, and for installing/caching packages,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ClientUpdate.1\CLSID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value={7CBCADE4-7AA7-43AE-BD20-D88223B6353E},) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=CLSID\{7CBCADE4-7AA7-43AE-BD20-D88223B6353E}\ProgID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value=ActiveLinkClient.ClientUpdate.1,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=CLSID\{7CBCADE4-7AA7-43AE-BD20-D88223B6353E}\LocalServer32,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value="C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe",) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=CLSID\{7CBCADE4-7AA7-43AE-BD20-D88223B6353E},,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(Name=AppID,Value={CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},) MSI (s) (98:58) [11:26:22:315]: Executing op: RegOpenKey(,Key=CLSID\{7CBCADE4-7AA7-43AE-BD20-D88223B6353E}\TypeLib,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:315]: Executing op: RegAddValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ALUpdateNotification,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(,Value=ALUpdateNotification CoClass,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ALUpdateNotification\CLSID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(,Value={ACB50159-5EFF-47D5-B93F-5433C1BD2F3A},) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=CLSID\{ACB50159-5EFF-47D5-B93F-5433C1BD2F3A}\VersionIndependentProgID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(,Value=ActiveLinkClient.ALUpdateNotification,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ALUpdateNotification\CurVer,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(,Value=ActiveLinkClient.ALUpdateNotification.1,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ALUpdateNotification.1,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(,Value=ALUpdateNotification CoClass,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=ActiveLinkClient.ALUpdateNotification.1\CLSID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(,Value={ACB50159-5EFF-47D5-B93F-5433C1BD2F3A},) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=CLSID\{ACB50159-5EFF-47D5-B93F-5433C1BD2F3A}\ProgID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(,Value=ActiveLinkClient.ALUpdateNotification.1,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=CLSID\{ACB50159-5EFF-47D5-B93F-5433C1BD2F3A}\LocalServer32,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(,Value="C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe",) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=CLSID\{ACB50159-5EFF-47D5-B93F-5433C1BD2F3A},,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(Name=AppID,Value={CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=CLSID\{ACB50159-5EFF-47D5-B93F-5433C1BD2F3A}\TypeLib,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=ActiveLinkClient.MonitorControl,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(,Value=Activates and deactivates the system tray icon.,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=ActiveLinkClient.MonitorControl\CLSID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(,Value={BF515489-25C1-472D-8F02-378E6CC06B3C},) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=CLSID\{BF515489-25C1-472D-8F02-378E6CC06B3C}\VersionIndependentProgID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(,Value=ActiveLinkClient.MonitorControl,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegOpenKey(,Key=ActiveLinkClient.MonitorControl\CurVer,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:330]: Executing op: RegAddValue(,Value=ActiveLinkClient.MonitorControl.1,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=ActiveLinkClient.MonitorControl.1,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(,Value=Activates and deactivates the system tray icon.,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=ActiveLinkClient.MonitorControl.1\CLSID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(,Value={BF515489-25C1-472D-8F02-378E6CC06B3C},) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=CLSID\{BF515489-25C1-472D-8F02-378E6CC06B3C}\ProgID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(,Value=ActiveLinkClient.MonitorControl.1,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=CLSID\{BF515489-25C1-472D-8F02-378E6CC06B3C}\LocalServer32,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(,Value="C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe",) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=CLSID\{BF515489-25C1-472D-8F02-378E6CC06B3C},,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(Name=AppID,Value={CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=CLSID\{BF515489-25C1-472D-8F02-378E6CC06B3C}\TypeLib,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus2,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(,Value=Reports the status and time of the last update.,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus2\CLSID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(,Value={DDF239DC-0DCC-45BD-906E-2B283534234E},) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=CLSID\{DDF239DC-0DCC-45BD-906E-2B283534234E}\VersionIndependentProgID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(,Value=ActiveLinkClient.AutoUpdateStatus2,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus2\CurVer,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(,Value=ActiveLinkClient.AutoUpdateStatus2.1,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus2.1,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(,Value=Reports the status and time of the last update.,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=ActiveLinkClient.AutoUpdateStatus2.1\CLSID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(,Value={DDF239DC-0DCC-45BD-906E-2B283534234E},) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=CLSID\{DDF239DC-0DCC-45BD-906E-2B283534234E}\ProgID,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(,Value=ActiveLinkClient.AutoUpdateStatus2.1,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=CLSID\{DDF239DC-0DCC-45BD-906E-2B283534234E}\LocalServer32,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(,Value="C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe",) MSI (s) (98:58) [11:26:22:346]: Executing op: RegOpenKey(,Key=CLSID\{DDF239DC-0DCC-45BD-906E-2B283534234E},,BinaryType=0,,) MSI (s) (98:58) [11:26:22:346]: Executing op: RegAddValue(Name=AppID,Value={CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=CLSID\{DDF239DC-0DCC-45BD-906E-2B283534234E}\TypeLib,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=AppID\{CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegCreateKey() MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=LocalService,Value=Sophos AutoUpdate Service,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=ServiceParameters,Value=-Service,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{1E4DEB88-3386-4E80-A7D1-9997C39A570D},,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value=_IALUpdateNotificationEvents,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{1E4DEB88-3386-4E80-A7D1-9997C39A570D}\TypeLib,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=Version,Value=1.1,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{1E4DEB88-3386-4E80-A7D1-9997C39A570D}\ProxyStubClsid32,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={00020420-0000-0000-C000-000000000046},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{4629634A-1AF8-4E02-B5A2-0273FE770C74},,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value=ICheckUpdate,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{4629634A-1AF8-4E02-B5A2-0273FE770C74}\TypeLib,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=Version,Value=1.1,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{4629634A-1AF8-4E02-B5A2-0273FE770C74}\ProxyStubClsid32,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={00020424-0000-0000-C000-000000000046},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{86488B03-B5B7-413D-A3C2-AD22B892ED9A},,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value=IMonitorControl,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{86488B03-B5B7-413D-A3C2-AD22B892ED9A}\TypeLib,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=Version,Value=1.1,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{86488B03-B5B7-413D-A3C2-AD22B892ED9A}\ProxyStubClsid32,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={00020424-0000-0000-C000-000000000046},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{BE7DA681-81E5-4C33-B2C6-AFEFF67EE394},,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value=IALUpdateNotification,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{BE7DA681-81E5-4C33-B2C6-AFEFF67EE394}\TypeLib,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=Version,Value=1.1,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{BE7DA681-81E5-4C33-B2C6-AFEFF67EE394}\ProxyStubClsid32,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={00020424-0000-0000-C000-000000000046},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{CFC0864D-2BAC-403F-8396-2B4C654EF349},,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value=IAutoUpdateStatus,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{CFC0864D-2BAC-403F-8396-2B4C654EF349}\TypeLib,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=Version,Value=1.1,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{CFC0864D-2BAC-403F-8396-2B4C654EF349}\ProxyStubClsid32,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={00020424-0000-0000-C000-000000000046},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{D2847657-A135-4C7A-BB39-72E5C04B98EE},,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value=IAutoUpdateStatus2,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{D2847657-A135-4C7A-BB39-72E5C04B98EE}\TypeLib,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=Version,Value=1.1,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{D2847657-A135-4C7A-BB39-72E5C04B98EE}\ProxyStubClsid32,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={00020424-0000-0000-C000-000000000046},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{EECA3174-B9E3-43BE-98B3-A97732F41972},,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value=IClientUpdate,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{EECA3174-B9E3-43BE-98B3-A97732F41972}\TypeLib,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={CE94B62D-25F3-4430-AA85-A22C2888EE65},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=Version,Value=1.1,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=Interface\{EECA3174-B9E3-43BE-98B3-A97732F41972}\ProxyStubClsid32,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value={00020424-0000-0000-C000-000000000046},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=TypeLib\{CE94B62D-25F3-4430-AA85-A22C2888EE65}\1.1,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value=ActiveLinkClient 1.1 Type Library,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=TypeLib\{CE94B62D-25F3-4430-AA85-A22C2888EE65}\1.1\0\win32,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value=C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=TypeLib\{CE94B62D-25F3-4430-AA85-A22C2888EE65}\1.1\FLAGS,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(,Value=0,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(,Key=AppID\ALSVC.EXE,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=AppID,Value={CFC5C7CA-DA4C-4CFB-B16A-65193004E9C2},) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\AutoUpdate\Service,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegCreateKey() MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\AutoUpdate\Service\PolicyFeatures,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegCreateKey() MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\AutoUpdate,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=Installation Path,Value=C:\Program Files (x86)\Sophos\AutoUpdate\,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=Data Path,Value=C:\ProgramData\Sophos\AutoUpdate\,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=ProductVersion,Value=5.5.0.26,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=MetricsEnabled,Value=#1,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=CloudUpdating,Value=#1,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=IsManaged,Value=#1,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\Remote Management System\ManagementAgent\Adapters\ALC,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=DLLPath,Value=C:\Program Files (x86)\Sophos\AutoUpdate\AUAdapter.dll,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\Telemetry\Plugins\AUPlugin,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:361]: Executing op: RegAddValue(Name=Path,Value=C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\AUTelem.exe,) MSI (s) (98:58) [11:26:22:377]: Executing op: RegAddValue(Name=Cmd,Value=AUTelem.exe,) MSI (s) (98:58) [11:26:22:377]: Executing op: RegOpenKey(Root=-2147483646,Key=SOFTWARE\Sophos\Telemetry,,BinaryType=0,,) MSI (s) (98:58) [11:26:22:377]: Executing op: RegAddValue(Name=InstallPath,Value=C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\,) MSI (s) (98:58) [11:26:22:377]: Executing op: ActionStart(Name=InstallServices,Description=Installing new services,Template=Service: [2]) MSI (s) (98:58) [11:26:22:377]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000) MSI (s) (98:58) [11:26:22:377]: Executing op: ServiceInstall(Name=Sophos AutoUpdate Service,DisplayName=Sophos AutoUpdate Service,ImagePath="C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe" ,ServiceType=16,StartType=2,ErrorControl=1,,Dependencies=rpcss[~][~][~],,,Password=**********,Description=Part of the updating system for Sophos components,,) MSI (s) (98:58) [11:26:22:736]: Executing op: ActionStart(Name=SetPermissions.Deferred_x32,,) MSI (s) (98:58) [11:26:22:736]: Executing op: CustomActionSchedule(Action=SetPermissions.Deferred_x32,ActionType=1089,Source=BinaryData,Target=SetPermissions,CustomActionData=2{14}2{14}8{objectid}11{componentid}11{objecttable}6{action}8{identity}12{identitytype}11{inheritance}10{genericall}11{genericread}12{genericwrite}14{genericexecute}6{modify}10{objectpath}5{win64}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Allow}5{Users}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}39{C:\ProgramData\Sophos\AutoUpdate\Cache\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Allow}14{Administrators}12{WellKnownSID} MSI (s) (98:58) [11:26:22:736]: Creating MSIHANDLE (461) of type 790536 for thread 4440 MSI (s) (98:F4) [11:26:22:736]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI94AD.tmp, Entrypoint: SetPermissions MSI (s) (98!18) [11:26:22:736]: Creating MSIHANDLE (462) of type 790531 for thread 3096 MSI (s) (98!18) [11:26:22:736]: Closing MSIHANDLE (462) of type 790531 for thread 3096 MSI (s) (98!18) [11:26:22:736]: Creating MSIHANDLE (463) of type 790531 for thread 3096 MSI (s) (98!18) [11:26:22:736]: Closing MSIHANDLE (463) of type 790531 for thread 3096 MSI (s) (98!18) [11:26:22:736]: Creating MSIHANDLE (464) of type 790531 for thread 3096 SetPermissions: Initialized. MSI (s) (98!18) [11:26:22:736]: Closing MSIHANDLE (464) of type 790531 for thread 3096 MSI (s) (98!18) [11:26:22:736]: Creating MSIHANDLE (465) of type 790531 for thread 3096 SetPermissions: ParseObjectPermissions has been entered. MSI (s) (98!18) [11:26:22:736]: Closing MSIHANDLE (465) of type 790531 for thread 3096 MSI (s) (98!18) [11:26:22:736]: Creating MSIHANDLE (466) of type 790531 for thread 3096 SetPermissions: ApplyObjectPermissions has been entered (object name: C:\ProgramData\Sophos\AutoUpdate\Cache\). MSI (s) (98!18) [11:26:22:736]: Closing MSIHANDLE (466) of type 790531 for thread 3096 MSI (s) (98!18) [11:26:22:767]: Creating MSIHANDLE (467) of type 790531 for thread 3096 SetPermissions: ApplyObjectPermissions has been entered (object name: C:\ProgramData\Sophos\AutoUpdate\data\). MSI (s) (98!18) [11:26:22:767]: Closing MSIHANDLE (467) of type 790531 for thread 3096 MSI (s) (98!18) [11:26:22:767]: Creating MSIHANDLE (468) of type 790531 for thread 3096 SetPermissions: ApplyObjectPermissions has been entered (object name: C:\ProgramData\Sophos\Certificates\AutoUpdate\). MSI (s) (98!18) [11:26:22:767]: Closing MSIHANDLE (468) of type 790531 for thread 3096 MSI (s) (98!18) [11:26:22:767]: Creating MSIHANDLE (469) of type 790531 for thread 3096 SetPermissions: ApplyObjectPermissions has been entered (object name: MACHINE\SOFTWARE\Sophos\AutoUpdate\Service). MSI (s) (98!18) [11:26:22:767]: Closing MSIHANDLE (469) of type 790531 for thread 3096 MSI (s) (98:F4) [11:26:22:767]: Closing MSIHANDLE (461) of type 790536 for thread 4440 MSI (s) (98:58) [11:26:22:767]: Executing op: ActionStart(Name=SetPermissions.Deferred_x64,,) SetPermissions: ApplyObjectPermissions has been entered (object name: MACHINE\SOFTWARE\Sophos\AutoUpdate\Service\PolicyFeatures). MSI (s) (98:58) [11:26:22:767]: Executing op: CustomActionSchedule(Action=SetPermissions.Deferred_x64,ActionType=1089,Source=BinaryData,Target=SetPermissions,CustomActionData=2{14}2{14}8{objectid}11{componentid}11{objecttable}6{action}8{identity}12{identitytype}11{inheritance}10{genericall}11{genericread}12{genericwrite}14{genericexecute}6{modify}10{objectpath}5{win64}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Allow}5{Users}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}39{C:\ProgramData\Sophos\AutoUpdate\Cache\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Allow}14{Administrators}12{WellKnownSID} MSI (s) (98:58) [11:26:22:782]: Creating MSIHANDLE (470) of type 790536 for thread 4440 MSI (s) (98:90) [11:26:22:782]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI94CD.tmp, Entrypoint: SetPermissions MSI (s) (98!2C) [11:26:22:782]: Creating MSIHANDLE (471) of type 790531 for thread 3628 MSI (s) (98!2C) [11:26:22:782]: Closing MSIHANDLE (471) of type 790531 for thread 3628 MSI (s) (98!2C) [11:26:22:782]: Creating MSIHANDLE (472) of type 790531 for thread 3628 MSI (s) (98!2C) [11:26:22:782]: Closing MSIHANDLE (472) of type 790531 for thread 3628 MSI (s) (98!2C) [11:26:22:782]: Creating MSIHANDLE (473) of type 790531 for thread 3628 SetPermissions: Initialized. MSI (s) (98!2C) [11:26:22:782]: Closing MSIHANDLE (473) of type 790531 for thread 3628 MSI (s) (98!2C) [11:26:22:782]: Creating MSIHANDLE (474) of type 790531 for thread 3628 SetPermissions: ParseObjectPermissions has been entered. MSI (s) (98!2C) [11:26:22:782]: Closing MSIHANDLE (474) of type 790531 for thread 3628 MSI (s) (98!2C) [11:26:22:782]: Creating MSIHANDLE (475) of type 790531 for thread 3628 SetPermissions: ApplyObjectPermissions has been entered (object name: C:\ProgramData\Sophos\AutoUpdate\Cache\). MSI (s) (98!2C) [11:26:22:782]: Closing MSIHANDLE (475) of type 790531 for thread 3628 MSI (s) (98!2C) [11:26:22:798]: Creating MSIHANDLE (476) of type 790531 for thread 3628 SetPermissions: ApplyObjectPermissions has been entered (object name: C:\ProgramData\Sophos\AutoUpdate\data\). MSI (s) (98!2C) [11:26:22:798]: Closing MSIHANDLE (476) of type 790531 for thread 3628 MSI (s) (98!2C) [11:26:22:798]: Creating MSIHANDLE (477) of type 790531 for thread 3628 SetPermissions: ApplyObjectPermissions has been entered (object name: C:\ProgramData\Sophos\Certificates\AutoUpdate\). MSI (s) (98!2C) [11:26:22:798]: Closing MSIHANDLE (477) of type 790531 for thread 3628 MSI (s) (98!2C) [11:26:22:798]: Creating MSIHANDLE (478) of type 790531 for thread 3628 SetPermissions: ApplyObjectPermissions has been entered (object name: MACHINE\SOFTWARE\Sophos\AutoUpdate\Service). MSI (s) (98!2C) [11:26:22:798]: Closing MSIHANDLE (478) of type 790531 for thread 3628 MSI (s) (98:90) [11:26:22:798]: Closing MSIHANDLE (470) of type 790536 for thread 4440 MSI (s) (98:58) [11:26:22:798]: Executing op: ActionStart(Name=StartServices,Description=Starting services,Template=Service: [1]) SetPermissions: ApplyObjectPermissions has been entered (object name: MACHINE\SOFTWARE\Sophos\AutoUpdate\Service\PolicyFeatures). MSI (s) (98:58) [11:26:22:798]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000) MSI (s) (98:58) [11:26:22:798]: Executing op: ServiceControl(,Name=Sophos AutoUpdate Service,Action=1,,StartupArguments=-NoStartupCheck) MSI (s) (98:58) [11:26:23:920]: Executing op: ActionStart(Name=RegisterProduct,Description=Registering product,Template=[1]) MSI (s) (98:58) [11:26:23:920]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,,BytesPerTick=0,CopierType=0,,,,,,IsFirstPhysicalMedia=1) MSI (s) (98:58) [11:26:23:920]: Executing op: DatabaseCopy(DatabasePath=C:\Windows\Installer\8a239.msi,ProductCode={E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E},,,) MSI (s) (98:58) [11:26:23:920]: Note: 1: 1402 2: UNKNOWN\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3\InstallProperties 3: 2 MSI (s) (98:58) [11:26:23:920]: File will have security applied from OpCode. MSI (s) (98:58) [11:26:23:920]: Executing op: ProductRegister(UpgradeCode={3B8886D0-98A2-4992-A0AC-893AEDBB494B},VersionString=5.5.0.26,,,,InstallSource=C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\,Publisher=Sophos Limited,,,,NoModify=1,NoRepair=1,,Comments=Keeps Sophos Anti-Virus and other Sophos components up to date,,,,,EstimatedSize=4599,,,,) MSI (s) (98:58) [11:26:23:936]: Executing op: ProductCPDisplayInfoRegister() MSI (s) (98:58) [11:26:23:951]: Executing op: ActionStart(Name=PublishFeatures,Description=Publishing Product Features,Template=Feature: [1]) MSI (s) (98:58) [11:26:23:951]: Executing op: FeaturePublish(Feature=Main,,Absent=2,Component=E[_ZOrO$~@yC}7i=fG_j]*SP+0g%]As-6TyuI5ING0+f$sa0[A0[eK*e$hL$m,S2aUiDK@FximEBQ[UAMfOWugXHIAr=8}dZT~*RKbtuy&Eb3A@n6dg%OOG)d58]y=)3C=(ztw'!NaT8X.Jto6j8~=k%zI`Jym0aCN7Nmr?~.9q9P&5^V.QaX6bNm6O!~?bU=Y[B*Q.Rq}Mu`'X?^=_k=Cem7zioal*Z^?Z*-@_hg`8^.g4OuX5ND&@XA?pDPxmj{*d&lIMa8{5EWAJNUM93Z4t`4ZZhE=vL}9?%[Sn=Uoz&AAoPONDV1A1G%BtDL&*GPobr.s0Ky8nh`!,wbuQG.Pb%hPBdY=03q=cDUf(IX7(7ZK*Xk=_$)}V[-',5_2LhjT]o6AQ3[dTo4TC5-P0+lJDr6@V71s2gpK?445$*+DjQL@=dB@1x7Ck)oF4O%@UJz?G.K}[(&,94fp$_KYb6t=?+JQi@JucUx`w_b@5^HANQ9iY3Z_&uBN&a6,E&d?J@RLIz@vF0=Ha2GrN'0AaHS333DiCM!i2!6]n6^?}tZftZQoG4jPACU}.6i8crmyjuUcD+) MSI (s) (98:58) [11:26:23:951]: Executing op: ActionStart(Name=PublishProduct,Description=Publishing product information,) MSI (s) (98:58) [11:26:23:951]: Executing op: CleanupConfigData() MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3\Patches 3: 2 MSI (s) (98:58) [11:26:23:951]: Executing op: RegisterPatchOrder(Continue=0,SequenceType=1,Remove=0) MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: UNKNOWN\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3\Patches 3: 2 MSI (s) (98:58) [11:26:23:951]: Executing op: ProductPublish(PackageKey={30B5CB19-DB64-45C2-BD5D-BC0AB7693D3B}) MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: UNKNOWN\Installer\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3 3: 2 MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: UNKNOWN\Installer\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3 3: 2 MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: UNKNOWN\Installer\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3 3: 2 MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: UNKNOWN\Installer\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3 3: 2 MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: UNKNOWN\Installer\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3 3: 2 MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: UNKNOWN\Installer\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3 3: 2 MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: UNKNOWN\Installer\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3 3: 2 MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: UNKNOWN\Installer\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3 3: 2 MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: UNKNOWN\Installer\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3 3: 2 MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: UNKNOWN\Installer\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3 3: 2 MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: UNKNOWN\Installer\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3 3: 2 MSI (s) (98:58) [11:26:23:951]: Executing op: UpgradeCodePublish(UpgradeCode={3B8886D0-98A2-4992-A0AC-893AEDBB494B}) MSI (s) (98:58) [11:26:23:951]: Executing op: SourceListPublish(,,,,NumberOfDisks=1) MSI (s) (98:58) [11:26:23:951]: Note: 1: 1402 2: UNKNOWN\Installer\Products\8A0DD28EC5E027D4D8ED14BBF00CB6E3\SourceList 3: 2 MSI (s) (98:58) [11:26:23:951]: Executing op: ProductPublishClient(,,) MSI (s) (98:58) [11:26:23:951]: Executing op: SourceListRegisterLastUsed(SourceProduct={E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E},LastUsedSource=C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\) MSI (s) (98:58) [11:26:23:951]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (s) (98:58) [11:26:23:951]: Setting cached product context: machine assigned for product: 8A0DD28EC5E027D4D8ED14BBF00CB6E3 MSI (s) (98:58) [11:26:23:951]: Specifed source is already in a list. MSI (s) (98:58) [11:26:23:951]: User policy value 'SearchOrder' is 'nmu' MSI (s) (98:58) [11:26:23:951]: Adding new sources is allowed. MSI (s) (98:58) [11:26:23:951]: Set LastUsedSource to: C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\. MSI (s) (98:58) [11:26:23:951]: Set LastUsedType to: n. MSI (s) (98:58) [11:26:23:951]: Set LastUsedIndex to: 1. MSI (s) (98:58) [11:26:23:951]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=11509476) MSI (s) (98:58) [11:26:23:967]: User policy value 'DisableRollback' is 0 MSI (s) (98:58) [11:26:23:967]: Machine policy value 'DisableRollback' is 0 MSI (s) (98:58) [11:26:23:967]: Note: 1: 2318 2: MSI (s) (98:58) [11:26:23:967]: No System Restore sequence number for this installation. MSI (s) (98:58) [11:26:23:967]: Unlocking Server MSI (s) (98:58) [11:26:23:983]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'. Action ended 11:26:23: InstallFinalize. Return value 1. Action ended 11:26:23: INSTALL. Return value 1. Property(S): UpgradeCode = {3B8886D0-98A2-4992-A0AC-893AEDBB494B} Property(S): CertificatesAutoUpdate = C:\ProgramData\Sophos\Certificates\AutoUpdate\ Property(S): CertificatesManifest = C:\ProgramData\Sophos\Certificates\AutoUpdate\Manifest\ Property(S): CertificatesCache = C:\ProgramData\Sophos\Certificates\AutoUpdate\Cache\ Property(S): CacheFolder = C:\ProgramData\Sophos\AutoUpdate\Cache\ Property(S): DataFolder = C:\ProgramData\Sophos\AutoUpdate\data\ Property(S): ConfigFolder = C:\ProgramData\Sophos\AutoUpdate\Config\ Property(S): INSTALLDIR = C:\Program Files (x86)\Sophos\AutoUpdate\ Property(S): ProductVersion = 5.5.0.26 Property(S): TelemetryFolder = C:\Program Files (x86)\Sophos\AutoUpdate\Telemetry\ Property(S): SetPermissions.Deferred_x64 = 2{14}2{14}8{objectid}11{componentid}11{objecttable}6{action}8{identity}12{identitytype}11{inheritance}10{genericall}11{genericread}12{genericwrite}14{genericexecute}6{modify}10{objectpath}5{win64}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Allow}5{Users}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}39{C:\ProgramData\Sophos\AutoUpdate\Cache\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}39{C:\ProgramData\Sophos\AutoUpdate\Cache\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Allow}5{Users}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}39{C:\ProgramData\Sophos\AutoUpdate\Cache\}2{no}10{DataFolder}21{DataFolderPermissions}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}38{C:\ProgramData\Sophos\AutoUpdate\data\}2{no}10{DataFolder}21{DataFolderPermissions}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}38{C:\ProgramData\Sophos\AutoUpdate\data\}2{no}10{DataFolder}21{DataFolderPermissions}6{Folder}5{Allow}5{Users}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}38{C:\ProgramData\Sophos\AutoUpdate\data\}2{no}21{ServiceKeyPermissions}21{ServiceKeyPermissions}8{Registry}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}42{MACHINE\SOFTWARE\Sophos\AutoUpdate\Service}2{no}21{ServiceKeyPermissions}21{ServiceKeyPermissions}8{Registry}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}42{MACHINE\SOFTWARE\Sophos\AutoUpdate\Service}2{no}25{PolicyFeaturesPermissions}25{PolicyFeaturesPermissions}8{Registry}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}57{MACHINE\SOFTWARE\Sophos\AutoUpdate\Service\PolicyFeatures}2{no}25{PolicyFeaturesPermissions}25{PolicyFeaturesPermissions}8{Registry}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}57{MACHINE\SOFTWARE\Sophos\AutoUpdate\Service\PolicyFeatures}2{no}25{PolicyFeaturesPermissions}25{PolicyFeaturesPermissions}8{Registry}5{Allow}13{Local Service}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}57{MACHINE\SOFTWARE\Sophos\AutoUpdate\Service\PolicyFeatures}2{no} Property(S): SetPermissions.Deferred_x32 = 2{14}2{14}8{objectid}11{componentid}11{objecttable}6{action}8{identity}12{identitytype}11{inheritance}10{genericall}11{genericread}12{genericwrite}14{genericexecute}6{modify}10{objectpath}5{win64}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}22{CertificatesAutoUpdate}22{SAU_Certificate_Folder}6{Folder}5{Allow}5{Users}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}46{C:\ProgramData\Sophos\Certificates\AutoUpdate\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}39{C:\ProgramData\Sophos\AutoUpdate\Cache\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}39{C:\ProgramData\Sophos\AutoUpdate\Cache\}2{no}11{CacheFolder}22{CacheFolderPermissions}6{Folder}5{Allow}5{Users}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}39{C:\ProgramData\Sophos\AutoUpdate\Cache\}2{no}10{DataFolder}21{DataFolderPermissions}6{Folder}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}38{C:\ProgramData\Sophos\AutoUpdate\data\}2{no}10{DataFolder}21{DataFolderPermissions}6{Folder}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}38{C:\ProgramData\Sophos\AutoUpdate\data\}2{no}10{DataFolder}21{DataFolderPermissions}6{Folder}5{Allow}5{Users}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}38{C:\ProgramData\Sophos\AutoUpdate\data\}2{no}21{ServiceKeyPermissions}21{ServiceKeyPermissions}8{Registry}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}42{MACHINE\SOFTWARE\Sophos\AutoUpdate\Service}2{no}21{ServiceKeyPermissions}21{ServiceKeyPermissions}8{Registry}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}42{MACHINE\SOFTWARE\Sophos\AutoUpdate\Service}2{no}25{PolicyFeaturesPermissions}25{PolicyFeaturesPermissions}8{Registry}5{Clear}3{N/A}0{}2{No}0{}0{}0{}0{}0{}57{MACHINE\SOFTWARE\Sophos\AutoUpdate\Service\PolicyFeatures}2{no}25{PolicyFeaturesPermissions}25{PolicyFeaturesPermissions}8{Registry}5{Allow}14{Administrators}12{WellKnownSID}0{}3{Yes}0{}0{}0{}0{}57{MACHINE\SOFTWARE\Sophos\AutoUpdate\Service\PolicyFeatures}2{no}25{PolicyFeaturesPermissions}25{PolicyFeaturesPermissions}8{Registry}5{Allow}13{Local Service}12{WellKnownSID}0{}0{}3{Yes}0{}0{}0{}57{MACHINE\SOFTWARE\Sophos\AutoUpdate\Service\PolicyFeatures}2{no} Property(S): AutoUpdateDataFolder = C:\ProgramData\Sophos\AutoUpdate\ Property(S): LogsFolder = C:\ProgramData\Sophos\AutoUpdate\Logs\ Property(S): SAUAppDataFolder = C:\ProgramData\Sophos\AutoUpdate\ Property(S): SophosAppDataFolder = C:\ProgramData\Sophos\ Property(S): Certificates = C:\ProgramData\Sophos\Certificates\ Property(S): CommonAppDataFolder = C:\ProgramData\ Property(S): TARGETDIR = F:\ Property(S): AutoUpdateProgramFilesFolder = C:\Program Files (x86)\Sophos\AutoUpdate\ Property(S): SophosProgramFilesFolder = C:\Program Files (x86)\Sophos\ Property(S): ProgramFilesFolder = C:\Program Files (x86)\ Property(S): SourceDir = C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\ Property(S): VersionNT = 601 Property(S): ALLUSERS = 1 Property(S): ARPCOMMENTS = Keeps Sophos Anti-Virus and other Sophos components up to date Property(S): ARPNOMODIFY = 1 Property(S): ARPNOREPAIR = 1 Property(S): MSIRESTARTMANAGERCONTROL = Disable Property(S): REBOOT = ReallySuppress Property(S): Manufacturer = Sophos Limited Property(S): ProductCode = {E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E} Property(S): ProductLanguage = 1033 Property(S): ProductName = Sophos AutoUpdate XG Property(S): SecureCustomProperties = FOUND_AUADAPTER;WIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTED Property(S): MsiLogFileLocation = C:\Users\JEFF~1.SIE\AppData\Local\Temp\Sophos AutoUpdate Install Log.txt Property(S): PackageCode = {30B5CB19-DB64-45C2-BD5D-BC0AB7693D3B} Property(S): ProductState = -1 Property(S): PackagecodeChanging = 1 Property(S): USEAPPDATAONXP = 1 Property(S): BOOTSTRAP = NOUPDATE Property(S): RMSACTION = 1 Property(S): SOPHOS_TP_TOKEN = 1 Property(S): CURRENTDIRECTORY = C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap Property(S): CLIENTUILEVEL = 3 Property(S): MSICLIENTUSESEXTERNALUI = 1 Property(S): CLIENTPROCESSID = 4128 Property(S): VersionDatabase = 200 Property(S): VersionMsi = 5.00 Property(S): VersionNT64 = 601 Property(S): WindowsBuild = 7601 Property(S): ServicePackLevel = 1 Property(S): ServicePackLevelMinor = 0 Property(S): MsiNTProductType = 1 Property(S): WindowsFolder = C:\Windows\ Property(S): WindowsVolume = C:\ Property(S): System64Folder = C:\Windows\system32\ Property(S): SystemFolder = C:\Windows\SysWOW64\ Property(S): RemoteAdminTS = 1 Property(S): TempFolder = C:\Users\JEFF~1.SIE\AppData\Local\Temp\ Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\ Property(S): ProgramFiles64Folder = C:\Program Files\ Property(S): CommonFiles64Folder = C:\Program Files\Common Files\ Property(S): AppDataFolder = C:\Users\jeff.siegel\AppData\Roaming\ Property(S): FavoritesFolder = C:\Users\jeff.siegel\Favorites\ Property(S): NetHoodFolder = C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Network Shortcuts\ Property(S): PersonalFolder = C:\Users\jeff.siegel\Documents\ Property(S): PrintHoodFolder = C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\ Property(S): RecentFolder = C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\Recent\ Property(S): SendToFolder = C:\Users\jeff.siegel\AppData\Roaming\Microsoft\Windows\SendTo\ Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\ Property(S): LocalAppDataFolder = C:\Users\jeff.siegel\AppData\Local\ Property(S): MyPicturesFolder = C:\Users\jeff.siegel\Pictures\ Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\ Property(S): DesktopFolder = C:\Users\Public\Desktop\ Property(S): FontsFolder = C:\Windows\Fonts\ Property(S): GPTSupport = 1 Property(S): OLEAdvtSupport = 1 Property(S): ShellAdvtSupport = 1 Property(S): MsiAMD64 = 6 Property(S): Msix64 = 6 Property(S): Intel = 6 Property(S): PhysicalMemory = 8015 Property(S): VirtualMemory = 18275 Property(S): AdminUser = 1 Property(S): MsiTrueAdminUser = 1 Property(S): LogonUser = jeff.siegel Property(S): UserSID = S-1-5-21-3030894125-527100958-1144950615-22737 Property(S): UserLanguageID = 1033 Property(S): ComputerName = CAVCO-MJ07XGE Property(S): SystemLanguageID = 1033 Property(S): ScreenX = 1024 Property(S): ScreenY = 768 Property(S): CaptionHeight = 22 Property(S): BorderTop = 1 Property(S): BorderSide = 1 Property(S): TextHeight = 16 Property(S): TextInternalLeading = 3 Property(S): ColorBits = 32 Property(S): TTCSupport = 1 Property(S): Time = 11:26:23 Property(S): Date = 7/7/2017 Property(S): MsiNetAssemblySupport = 4.0.30319.36392 Property(S): MsiWin32AssemblySupport = 6.1.7601.17514 Property(S): RedirectedDllSupport = 2 Property(S): MsiRunningElevated = 1 Property(S): Privileged = 1 Property(S): USERNAME = Lenovo User Property(S): DATABASE = C:\Windows\Installer\8a239.msi Property(S): OriginalDatabase = C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\Sophos AutoUpdate.msi Property(S): UILevel = 2 Property(S): MsiUIHideCancel = 1 Property(S): ACTION = INSTALL Property(S): ROOTDRIVE = F:\ Property(S): CostingComplete = 1 Property(S): OutOfDiskSpace = 0 Property(S): OutOfNoRbDiskSpace = 0 Property(S): PrimaryVolumeSpaceAvailable = 0 Property(S): PrimaryVolumeSpaceRequired = 0 Property(S): PrimaryVolumeSpaceRemaining = 0 Property(S): INSTALLLEVEL = 1 Property(S): SOURCEDIR = C:\Users\JEFF~1.SIE\AppData\Local\Temp\sophos_bootstrap\sau_xg\ Property(S): SourcedirProduct = {E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E} Property(S): ProductToBeRegistered = 1 MSI (s) (98:58) [11:26:23:998]: Note: 1: 1707 MSI (s) (98:58) [11:26:23:998]: Note: 1: 2205 2: 3: Error MSI (s) (98:58) [11:26:23:998]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1707 MSI (s) (98:58) [11:26:23:998]: Note: 1: 2205 2: 3: Error MSI (s) (98:58) [11:26:23:998]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709 MSI (s) (98:58) [11:26:23:998]: Product: Sophos AutoUpdate XG -- Installation completed successfully. MSI (s) (98:58) [11:26:23:998]: Windows Installer installed the product. Product Name: Sophos AutoUpdate XG. Product Version: 5.5.0.26. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 0. MSI (s) (98:58) [11:26:23:998]: Deferring clean up of packages/files, if any exist MSI (s) (98:58) [11:26:23:998]: MainEngineThread is returning 0 MSI (s) (98:84) [11:26:23:998]: No System Restore sequence number for this installation. === Logging stopped: 7/7/2017 11:26:23 === MSI (s) (98:84) [11:26:23:998]: User policy value 'DisableRollback' is 0 MSI (s) (98:84) [11:26:23:998]: Machine policy value 'DisableRollback' is 0 MSI (s) (98:84) [11:26:23:998]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (98:84) [11:26:23:998]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (98:84) [11:26:23:998]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (98:84) [11:26:23:998]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (s) (98:84) [11:26:23:998]: Restoring environment variables MSI (s) (98:84) [11:26:23:998]: Destroying RemoteAPI object. MSI (s) (98:6C) [11:26:23:998]: Custom Action Manager thread ending. MSI (c) (20:30) [11:26:23:998]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (20:30) [11:26:23:998]: MainEngineThread is returning 0 === Verbose logging stopped: 7/7/2017 11:26:23 ===