ProductSetup::ProductSetup: Begin product setup ProductSetup::InstUninstEntry: Begin install setup::TamperProtectionControl::TamperProtectionControl: Disabled tamper protection for component NTP setup::TamperProtectionControl::TamperProtectionControl: Disabled tamper protection for service Sophos Network Threat Protection setup::TamperProtectionControl::TamperProtectionControl: Disabled tamper protection for service sntp ProductSetup::InstUninstEntry: Show gui: false ProductSetup::InstUninstEntry: Existing product code: <none> ProductSetup::InstUninstEntry: Install from: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64 ProductSetup::InstUninstEntry: Install to: <default> === Verbose logging started: 7/16/2019 14:50:18 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (04:DC) [14:50:18:207]: Cloaking enabled. MSI (c) (04:DC) [14:50:18:207]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (04:DC) [14:50:18:209]: End dialog not enabled MSI (c) (04:DC) [14:50:18:209]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi MSI (c) (04:DC) [14:50:18:209]: Package we're running from ==> C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi MSI (c) (04:DC) [14:50:18:210]: Machine policy value 'DisableUserInstalls' is 0 MSI (c) (04:DC) [14:50:18:211]: APPCOMPAT: Compatibility mode property overrides found. MSI (c) (04:DC) [14:50:18:211]: APPCOMPAT: looking for appcompat database entry with ProductCode '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}'. MSI (c) (04:DC) [14:50:18:211]: APPCOMPAT: no matching ProductCode found in database. MSI (c) (04:DC) [14:50:18:218]: MSCOREE not loaded loading copy from system32 MSI (c) (04:DC) [14:50:18:223]: APPCOMPAT: looking for appcompat database entry with ProductCode '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}'. MSI (c) (04:DC) [14:50:18:223]: APPCOMPAT: no matching ProductCode found in database. MSI (c) (04:DC) [14:50:18:223]: Transforms are not secure. MSI (c) (04:DC) [14:50:18:223]: Note: 1: 2205 2: 3: Control MSI (c) (04:DC) [14:50:18:223]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\WINDOWS\TEMP\Sophos Network Threat Protection Install Log 20190716 145018.txt'. MSI (c) (04:DC) [14:50:18:223]: No Command Line. MSI (c) (04:DC) [14:50:18:223]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{FEBAF421-B555-408D-B670-6604E0732280}'. MSI (c) (04:DC) [14:50:18:223]: Product Code passed to Engine.Initialize: '(none)' MSI (c) (04:DC) [14:50:18:223]: Product Code from property table before transforms: '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}' MSI (c) (04:DC) [14:50:18:223]: Product Code from property table after transforms: '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}' MSI (c) (04:DC) [14:50:18:223]: Product not registered: beginning first-time install MSI (c) (04:DC) [14:50:18:223]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'. MSI (c) (04:DC) [14:50:18:223]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 MSI (c) (04:DC) [14:50:18:223]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (c) (04:DC) [14:50:18:223]: User policy value 'SearchOrder' is 'nmu' MSI (c) (04:DC) [14:50:18:223]: Adding new sources is allowed. MSI (c) (04:DC) [14:50:18:223]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'. MSI (c) (04:DC) [14:50:18:224]: Package name extracted from package path: 'Sophos Network Threat Protection.msi' MSI (c) (04:DC) [14:50:18:224]: Package to be registered: 'Sophos Network Threat Protection.msi' MSI (c) (04:DC) [14:50:18:225]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (c) (04:DC) [14:50:18:225]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'. MSI (c) (04:DC) [14:50:18:225]: TRANSFORMS property is now: MSI (c) (04:DC) [14:50:18:225]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '405'. MSI (c) (04:DC) [14:50:18:226]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming MSI (c) (04:DC) [14:50:18:226]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Favorites MSI (c) (04:DC) [14:50:18:226]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (c) (04:DC) [14:50:18:227]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Documents MSI (c) (04:DC) [14:50:18:227]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (c) (04:DC) [14:50:18:228]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent MSI (c) (04:DC) [14:50:18:228]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo MSI (c) (04:DC) [14:50:18:229]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates MSI (c) (04:DC) [14:50:18:229]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (c) (04:DC) [14:50:18:229]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Local MSI (c) (04:DC) [14:50:18:229]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Pictures MSI (c) (04:DC) [14:50:18:230]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (c) (04:DC) [14:50:18:230]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (c) (04:DC) [14:50:18:231]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (c) (04:DC) [14:50:18:231]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (c) (04:DC) [14:50:18:231]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (c) (04:DC) [14:50:18:232]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (c) (04:DC) [14:50:18:233]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (c) (04:DC) [14:50:18:233]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (c) (04:DC) [14:50:18:233]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu MSI (c) (04:DC) [14:50:18:234]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Desktop MSI (c) (04:DC) [14:50:18:234]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (c) (04:DC) [14:50:18:235]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts MSI (c) (04:DC) [14:50:18:235]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (c) (04:DC) [14:50:18:239]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation MSI (c) (04:DC) [14:50:18:239]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (c) (04:DC) [14:50:18:239]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (c) (04:DC) [14:50:18:239]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (c) (04:DC) [14:50:18:239]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (04:DC) [14:50:18:239]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Admin'. MSI (c) (04:DC) [14:50:18:239]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (04:DC) [14:50:18:239]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Microsoft'. MSI (c) (04:DC) [14:50:18:239]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi'. MSI (c) (04:DC) [14:50:18:239]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi'. MSI (c) (04:DC) [14:50:18:240]: Machine policy value 'MsiDisableEmbeddedUI' is 0 MSI (c) (04:DC) [14:50:18:240]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI MSI (c) (04:DC) [14:50:18:240]: EEUI - Disabling MsiEmbeddedUI in quiet mode === Logging started: 7/16/2019 14:50:18 === MSI (c) (04:DC) [14:50:18:240]: Machine policy value 'DisableRollback' is 0 MSI (c) (04:DC) [14:50:18:240]: User policy value 'DisableRollback' is 0 MSI (c) (04:DC) [14:50:18:240]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. MSI (c) (04:DC) [14:50:18:240]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038 MSI (c) (04:DC) [14:50:18:240]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes. MSI (c) (04:DC) [14:50:18:242]: Creating MSIHANDLE (1) of type 790537 for thread 3548 MSI (c) (04:DC) [14:50:18:242]: MsiOpenPackageEx is returning 0 MSI (c) (04:DC) [14:50:18:242]: Closing MSIHANDLE (1) of type 790537 for thread 3548 === Verbose logging stopped: 7/16/2019 14:50:18 === setup::MsiInstaller::install: New version: {604350BF-BE9A-4F79-B0EB-B1C22D889E2D}, version: 1.8.77.0 setup::MsiInstaller::install: Performing clean install setup::MsiInstaller::cleanInstall: Running clean install setup::MsiInstaller::installOrUpgrade: Executing: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi INSTALLDIR="" REBOOT=ReallySuppress INSTALLINGVERSION="1.8.77.0" === Verbose logging started: 7/16/2019 14:50:18 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (04:98) [14:50:18:285]: Resetting cached policy values MSI (c) (04:98) [14:50:18:285]: Machine policy value 'Debug' is 0 MSI (c) (04:98) [14:50:18:285]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (c) (04:98) [14:50:18:286]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (04:98) [14:50:18:286]: Grabbed execution mutex. MSI (c) (04:98) [14:50:18:287]: Cloaking enabled. MSI (c) (04:98) [14:50:18:287]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (04:98) [14:50:18:287]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (54:38) [14:50:18:294]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi MSI (s) (54:38) [14:50:18:294]: Grabbed execution mutex. MSI (s) (54:48) [14:50:18:296]: Resetting cached policy values MSI (s) (54:48) [14:50:18:296]: Machine policy value 'Debug' is 0 MSI (s) (54:48) [14:50:18:296]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (s) (54:48) [14:50:18:297]: Machine policy value 'DisableUserInstalls' is 0 MSI (s) (54:48) [14:50:18:297]: Setting cached product context: machine assigned for product: 00006109C80000000000000000F01FEC MSI (s) (54:48) [14:50:18:297]: Using cached product context: machine assigned for product: 00006109C80000000000000000F01FEC MSI (s) (54:48) [14:50:18:298]: Setting cached product context: machine assigned for product: 00006109C80090400000000000F01FEC MSI (s) (54:48) [14:50:18:298]: Using cached product context: machine assigned for product: 00006109C80090400000000000F01FEC MSI (s) (54:48) [14:50:18:298]: Setting cached product context: machine assigned for product: 00006109DD0000000100000000F01FEC MSI (s) (54:48) [14:50:18:298]: Using cached product context: machine assigned for product: 00006109DD0000000100000000F01FEC MSI (s) (54:48) [14:50:18:298]: Setting cached product context: machine assigned for product: 00006109F80000000100000000F01FEC MSI (s) (54:48) [14:50:18:298]: Using cached product context: machine assigned for product: 00006109F80000000100000000F01FEC MSI (s) (54:48) [14:50:18:298]: Setting cached product context: machine assigned for product: 0112BB5534BF3B94394F49A5C0BFA0C6 MSI (s) (54:48) [14:50:18:298]: Using cached product context: machine assigned for product: 0112BB5534BF3B94394F49A5C0BFA0C6 MSI (s) (54:48) [14:50:18:298]: Setting cached product context: machine assigned for product: 02852D02140C950478B1D0D49ECC5067 MSI (s) (54:48) [14:50:18:298]: Using cached product context: machine assigned for product: 02852D02140C950478B1D0D49ECC5067 MSI (s) (54:48) [14:50:18:298]: Setting cached product context: machine assigned for product: 0388F0A9DB1B4224FBE325486694CBCD MSI (s) (54:48) [14:50:18:298]: Using cached product context: machine assigned for product: 0388F0A9DB1B4224FBE325486694CBCD MSI (s) (54:48) [14:50:18:298]: Setting cached product context: machine assigned for product: 048E7B7FB2EBDF54080B37019D702F68 MSI (s) (54:48) [14:50:18:298]: Using cached product context: machine assigned for product: 048E7B7FB2EBDF54080B37019D702F68 MSI (s) (54:48) [14:50:18:298]: Setting cached product context: machine assigned for product: 1007C6B46D7C017319E3B52CF3EC196E MSI (s) (54:48) [14:50:18:299]: Using cached product context: machine assigned for product: 1007C6B46D7C017319E3B52CF3EC196E MSI (s) (54:48) [14:50:18:299]: Setting cached product context: machine assigned for product: 10C51751486F33444B36EBF9A5D2D73E MSI (s) (54:48) [14:50:18:299]: Using cached product context: machine assigned for product: 10C51751486F33444B36EBF9A5D2D73E MSI (s) (54:48) [14:50:18:299]: Setting cached product context: machine assigned for product: 153AA053AF120723B8A73845437E66DA MSI (s) (54:48) [14:50:18:299]: Using cached product context: machine assigned for product: 153AA053AF120723B8A73845437E66DA MSI (s) (54:48) [14:50:18:299]: Setting cached product context: machine assigned for product: 166F59DC4C5A5F446AAACEDD192C14F0 MSI (s) (54:48) [14:50:18:299]: Using cached product context: machine assigned for product: 166F59DC4C5A5F446AAACEDD192C14F0 MSI (s) (54:48) [14:50:18:299]: Setting cached product context: machine assigned for product: 17D92BEB671B3604EA137FF362DCC5B9 MSI (s) (54:48) [14:50:18:299]: Using cached product context: machine assigned for product: 17D92BEB671B3604EA137FF362DCC5B9 MSI (s) (54:48) [14:50:18:299]: Setting cached product context: machine assigned for product: 1926E8D15D0BCE53481466615F760A7F MSI (s) (54:48) [14:50:18:299]: Using cached product context: machine assigned for product: 1926E8D15D0BCE53481466615F760A7F MSI (s) (54:48) [14:50:18:299]: Setting cached product context: machine assigned for product: 1af2a8da7e60d0b429d7e6453b3d0182 MSI (s) (54:48) [14:50:18:300]: Using cached product context: machine assigned for product: 1af2a8da7e60d0b429d7e6453b3d0182 MSI (s) (54:48) [14:50:18:300]: Setting cached product context: machine assigned for product: 1D5E3C0FEDA1E123187686FED06E995A MSI (s) (54:48) [14:50:18:300]: Using cached product context: machine assigned for product: 1D5E3C0FEDA1E123187686FED06E995A MSI (s) (54:48) [14:50:18:300]: Setting cached product context: machine assigned for product: 21EE4A31AE32173319EEFE3BD6FDFFE3 MSI (s) (54:48) [14:50:18:300]: Using cached product context: machine assigned for product: 21EE4A31AE32173319EEFE3BD6FDFFE3 MSI (s) (54:48) [14:50:18:300]: Setting cached product context: machine assigned for product: 22BEFC8F7E2A1793E9ADB411DEFE1C58 MSI (s) (54:48) [14:50:18:300]: Using cached product context: machine assigned for product: 22BEFC8F7E2A1793E9ADB411DEFE1C58 MSI (s) (54:48) [14:50:18:300]: Setting cached product context: machine assigned for product: 27C92205F93556E4EB5B0F94C105477B MSI (s) (54:48) [14:50:18:300]: Using cached product context: machine assigned for product: 27C92205F93556E4EB5B0F94C105477B MSI (s) (54:48) [14:50:18:300]: Setting cached product context: machine assigned for product: 3D5B22C0BA5D93C44909054BD035D266 MSI (s) (54:48) [14:50:18:300]: Using cached product context: machine assigned for product: 3D5B22C0BA5D93C44909054BD035D266 MSI (s) (54:48) [14:50:18:300]: Setting cached product context: machine assigned for product: 4940BFC469E21364384635E8A29A3142 MSI (s) (54:48) [14:50:18:300]: Using cached product context: machine assigned for product: 4940BFC469E21364384635E8A29A3142 MSI (s) (54:48) [14:50:18:300]: Setting cached product context: machine assigned for product: 4BEA594979BAED93C82408E6FE57CE7A MSI (s) (54:48) [14:50:18:300]: Using cached product context: machine assigned for product: 4BEA594979BAED93C82408E6FE57CE7A MSI (s) (54:48) [14:50:18:301]: Setting cached product context: machine assigned for product: 4DACC5B6D2731A641B7A93E5E69BA944 MSI (s) (54:48) [14:50:18:301]: Using cached product context: machine assigned for product: 4DACC5B6D2731A641B7A93E5E69BA944 MSI (s) (54:48) [14:50:18:301]: Setting cached product context: machine assigned for product: 4DE6AB83D990A864398CC46210C6246E MSI (s) (54:48) [14:50:18:301]: Using cached product context: machine assigned for product: 4DE6AB83D990A864398CC46210C6246E MSI (s) (54:48) [14:50:18:301]: Setting cached product context: machine assigned for product: 4EA42A62D9304AC4784BF2238110440F MSI (s) (54:48) [14:50:18:301]: Using cached product context: machine assigned for product: 4EA42A62D9304AC4784BF2238110440F MSI (s) (54:48) [14:50:18:301]: Setting cached product context: machine assigned for product: 50948EF51FAD9134282B6DB0AC90B5EC MSI (s) (54:48) [14:50:18:301]: Using cached product context: machine assigned for product: 50948EF51FAD9134282B6DB0AC90B5EC MSI (s) (54:48) [14:50:18:301]: Setting cached product context: machine assigned for product: 5685576141D9F2B4EB913059A63C6EFF MSI (s) (54:48) [14:50:18:301]: Using cached product context: machine assigned for product: 5685576141D9F2B4EB913059A63C6EFF MSI (s) (54:48) [14:50:18:301]: Setting cached product context: machine assigned for product: 5E9EAAECB0954EC4081C6EFAA38BC113 MSI (s) (54:48) [14:50:18:301]: Using cached product context: machine assigned for product: 5E9EAAECB0954EC4081C6EFAA38BC113 MSI (s) (54:48) [14:50:18:301]: Setting cached product context: machine assigned for product: 62DBF9290209B993A9A757D1160F9B24 MSI (s) (54:48) [14:50:18:301]: Using cached product context: machine assigned for product: 62DBF9290209B993A9A757D1160F9B24 MSI (s) (54:48) [14:50:18:301]: Setting cached product context: machine assigned for product: 67D6ECF5CD5FBA732B8B22BAC8DE1B4D MSI (s) (54:48) [14:50:18:301]: Using cached product context: machine assigned for product: 67D6ECF5CD5FBA732B8B22BAC8DE1B4D MSI (s) (54:48) [14:50:18:302]: Setting cached product context: machine assigned for product: 68AB67CA3301004F7706000000000050 MSI (s) (54:48) [14:50:18:302]: Using cached product context: machine assigned for product: 68AB67CA3301004F7706000000000050 MSI (s) (54:48) [14:50:18:302]: Setting cached product context: machine assigned for product: 68AB67CA408033019195008142136144 MSI (s) (54:48) [14:50:18:302]: Using cached product context: machine assigned for product: 68AB67CA408033019195008142136144 MSI (s) (54:48) [14:50:18:302]: Setting cached product context: machine assigned for product: 68AB67CA7DA73301B744CAF070E41400 MSI (s) (54:48) [14:50:18:302]: Using cached product context: machine assigned for product: 68AB67CA7DA73301B744CAF070E41400 MSI (s) (54:48) [14:50:18:302]: Setting cached product context: machine assigned for product: 6E815EB96CCE9A53884E7857C57002F0 MSI (s) (54:48) [14:50:18:302]: Using cached product context: machine assigned for product: 6E815EB96CCE9A53884E7857C57002F0 MSI (s) (54:48) [14:50:18:302]: Setting cached product context: machine assigned for product: 6E8D947A316B3EB3F8F540C548BE2AB9 MSI (s) (54:48) [14:50:18:302]: Using cached product context: machine assigned for product: 6E8D947A316B3EB3F8F540C548BE2AB9 MSI (s) (54:48) [14:50:18:302]: Setting cached product context: machine assigned for product: 6F9E66FF7E38E3A3FA41D89E8A906A4A MSI (s) (54:48) [14:50:18:302]: Using cached product context: machine assigned for product: 6F9E66FF7E38E3A3FA41D89E8A906A4A MSI (s) (54:48) [14:50:18:302]: Setting cached product context: machine assigned for product: 7E1E595ACB57FCC478EE138B82AAA45A MSI (s) (54:48) [14:50:18:302]: Using cached product context: machine assigned for product: 7E1E595ACB57FCC478EE138B82AAA45A MSI (s) (54:48) [14:50:18:302]: Setting cached product context: machine assigned for product: 84b9c17023c712640acaf308593282f8 MSI (s) (54:48) [14:50:18:302]: Using cached product context: machine assigned for product: 84b9c17023c712640acaf308593282f8 MSI (s) (54:48) [14:50:18:303]: Setting cached product context: machine assigned for product: 8BFDDD6597F70844985D521E5FA22BF8 MSI (s) (54:48) [14:50:18:303]: Using cached product context: machine assigned for product: 8BFDDD6597F70844985D521E5FA22BF8 MSI (s) (54:48) [14:50:18:303]: Setting cached product context: machine assigned for product: 98669C18B5AED7B40AF46123E65CB12C MSI (s) (54:48) [14:50:18:303]: Using cached product context: machine assigned for product: 98669C18B5AED7B40AF46123E65CB12C MSI (s) (54:48) [14:50:18:303]: Setting cached product context: machine assigned for product: 99E80CA9B0328e74791254777B1F42AE MSI (s) (54:48) [14:50:18:303]: Using cached product context: machine assigned for product: 99E80CA9B0328e74791254777B1F42AE MSI (s) (54:48) [14:50:18:303]: Setting cached product context: machine assigned for product: 9B1ACBFAC6946EA489EAE31AFC6FC545 MSI (s) (54:48) [14:50:18:303]: Using cached product context: machine assigned for product: 9B1ACBFAC6946EA489EAE31AFC6FC545 MSI (s) (54:48) [14:50:18:303]: Setting cached product context: machine assigned for product: 9ED5B3172B7757F45B79044A60F51B1D MSI (s) (54:48) [14:50:18:303]: Using cached product context: machine assigned for product: 9ED5B3172B7757F45B79044A60F51B1D MSI (s) (54:48) [14:50:18:303]: Setting cached product context: machine assigned for product: A089CE062ADB6BC44A720BA745894BAC MSI (s) (54:48) [14:50:18:303]: Using cached product context: machine assigned for product: A089CE062ADB6BC44A720BA745894BAC MSI (s) (54:48) [14:50:18:303]: Setting cached product context: machine assigned for product: AA74CE6531856FF4E857450462BFAE38 MSI (s) (54:48) [14:50:18:303]: Using cached product context: machine assigned for product: AA74CE6531856FF4E857450462BFAE38 MSI (s) (54:48) [14:50:18:303]: Setting cached product context: machine assigned for product: AAB6F137689A4A549863C7A3AAAA67B0 MSI (s) (54:48) [14:50:18:303]: Using cached product context: machine assigned for product: AAB6F137689A4A549863C7A3AAAA67B0 MSI (s) (54:48) [14:50:18:304]: Setting cached product context: machine assigned for product: AD7CDE4C8FA399E4CACAC4A1078FC8BF MSI (s) (54:48) [14:50:18:304]: Using cached product context: machine assigned for product: AD7CDE4C8FA399E4CACAC4A1078FC8BF MSI (s) (54:48) [14:50:18:304]: Setting cached product context: machine assigned for product: B7006E469AD1DC24BB4E5DAF767A7CD1 MSI (s) (54:48) [14:50:18:304]: Using cached product context: machine assigned for product: B7006E469AD1DC24BB4E5DAF767A7CD1 MSI (s) (54:48) [14:50:18:304]: Setting cached product context: machine assigned for product: c1c4f01781cc94c4c8fb1542c0981a2a MSI (s) (54:48) [14:50:18:304]: Using cached product context: machine assigned for product: c1c4f01781cc94c4c8fb1542c0981a2a MSI (s) (54:48) [14:50:18:304]: Setting cached product context: machine assigned for product: CFD2C1F142D260E3CB8B271543DA9F98 MSI (s) (54:48) [14:50:18:304]: Using cached product context: machine assigned for product: CFD2C1F142D260E3CB8B271543DA9F98 MSI (s) (54:48) [14:50:18:304]: Setting cached product context: machine assigned for product: D20352A90C039D93DBF6126ECE614057 MSI (s) (54:48) [14:50:18:304]: Using cached product context: machine assigned for product: D20352A90C039D93DBF6126ECE614057 MSI (s) (54:48) [14:50:18:305]: Setting cached product context: machine assigned for product: D5001DEF8CBC5D542A88FF7CBB031412 MSI (s) (54:48) [14:50:18:305]: Using cached product context: machine assigned for product: D5001DEF8CBC5D542A88FF7CBB031412 MSI (s) (54:48) [14:50:18:305]: Setting cached product context: machine assigned for product: D7314F9862C648A4DB8BE2A5B47BE100 MSI (s) (54:48) [14:50:18:305]: Using cached product context: machine assigned for product: D7314F9862C648A4DB8BE2A5B47BE100 MSI (s) (54:48) [14:50:18:305]: Setting cached product context: machine assigned for product: DAAC970D13C02A74A95F8AF2C99D2B12 MSI (s) (54:48) [14:50:18:305]: Using cached product context: machine assigned for product: DAAC970D13C02A74A95F8AF2C99D2B12 MSI (s) (54:48) [14:50:18:305]: Setting cached product context: machine assigned for product: EE6A5A0BAB8F1B84BB23AB1CE7692C4B MSI (s) (54:48) [14:50:18:305]: Using cached product context: machine assigned for product: EE6A5A0BAB8F1B84BB23AB1CE7692C4B MSI (s) (54:48) [14:50:18:305]: Setting cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:48) [14:50:18:305]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:48) [14:50:18:306]: Setting cached product context: machine assigned for product: F60730A4A66673047777F5728467D401 MSI (s) (54:48) [14:50:18:306]: Using cached product context: machine assigned for product: F60730A4A66673047777F5728467D401 MSI (s) (54:48) [14:50:18:306]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038 MSI (s) (54:48) [14:50:18:307]: SRSetRestorePoint skipped for this transaction. MSI (s) (54:48) [14:50:18:307]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 MSI (s) (54:48) [14:50:18:309]: File will have security applied from OpCode. MSI (s) (54:48) [14:50:18:314]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi' against software restriction policy MSI (s) (54:48) [14:50:18:316]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi has a digital signature MSI (s) (54:48) [14:50:18:316]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi is permitted to run because the user token authorizes execution (system or service token). MSI (s) (54:48) [14:50:18:316]: Creating MSIHANDLE (1) of type 790542 for thread 2632 MSI (s) (54:48) [14:50:18:316]: MSCOREE not loaded loading copy from system32 MSI (s) (54:48) [14:50:18:324]: End dialog not enabled MSI (s) (54:48) [14:50:18:324]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi MSI (s) (54:48) [14:50:18:324]: Package we're running from ==> C:\WINDOWS\Installer\77a768.msi MSI (s) (54:48) [14:50:18:325]: APPCOMPAT: Compatibility mode property overrides found. MSI (s) (54:48) [14:50:18:325]: APPCOMPAT: looking for appcompat database entry with ProductCode '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}'. MSI (s) (54:48) [14:50:18:326]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (54:48) [14:50:18:333]: Machine policy value 'TransformsSecure' is 0 MSI (s) (54:48) [14:50:18:334]: User policy value 'TransformsAtSource' is 0 MSI (s) (54:48) [14:50:18:334]: Machine policy value 'DisablePatch' is 0 MSI (s) (54:48) [14:50:18:334]: Machine policy value 'AllowLockdownPatch' is 0 MSI (s) (54:48) [14:50:18:334]: Machine policy value 'DisableLUAPatching' is 0 MSI (s) (54:48) [14:50:18:334]: Machine policy value 'DisableFlyWeightPatching' is 0 MSI (s) (54:48) [14:50:18:334]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active MSI (s) (54:48) [14:50:18:335]: APPCOMPAT: looking for appcompat database entry with ProductCode '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}'. MSI (s) (54:48) [14:50:18:335]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (54:48) [14:50:18:335]: Transforms are not secure. MSI (s) (54:48) [14:50:18:335]: Note: 1: 2205 2: 3: Control MSI (s) (54:48) [14:50:18:335]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\WINDOWS\TEMP\Sophos Network Threat Protection Install Log 20190716 145018.txt'. MSI (s) (54:48) [14:50:18:335]: Command Line: INSTALLDIR= REBOOT=ReallySuppress INSTALLINGVERSION=1.8.77.0 CURRENTDIRECTORY=C:\WINDOWS\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=3844 MSI (s) (54:48) [14:50:18:335]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{FEBAF421-B555-408D-B670-6604E0732280}'. MSI (s) (54:48) [14:50:18:335]: Product Code passed to Engine.Initialize: '' MSI (s) (54:48) [14:50:18:335]: Product Code from property table before transforms: '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}' MSI (s) (54:48) [14:50:18:335]: Product Code from property table after transforms: '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}' MSI (s) (54:48) [14:50:18:335]: Product not registered: beginning first-time install MSI (s) (54:48) [14:50:18:335]: Product {604350BF-BE9A-4F79-B0EB-B1C22D889E2D} is not managed. MSI (s) (54:48) [14:50:18:335]: MSI_LUA: Credential prompt not required, user is an admin MSI (s) (54:48) [14:50:18:335]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'. MSI (s) (54:48) [14:50:18:335]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (s) (54:48) [14:50:18:335]: User policy value 'SearchOrder' is 'nmu' MSI (s) (54:48) [14:50:18:335]: Adding new sources is allowed. MSI (s) (54:48) [14:50:18:335]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'. MSI (s) (54:48) [14:50:18:335]: Package name extracted from package path: 'Sophos Network Threat Protection.msi' MSI (s) (54:48) [14:50:18:336]: Package to be registered: 'Sophos Network Threat Protection.msi' MSI (s) (54:48) [14:50:18:339]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (s) (54:48) [14:50:18:339]: Machine policy value 'DisableMsi' is 0 MSI (s) (54:48) [14:50:18:339]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (54:48) [14:50:18:339]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (54:48) [14:50:18:339]: Product installation will be elevated because user is admin and product is being installed per-machine. MSI (s) (54:48) [14:50:18:339]: Running product '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}' with elevated privileges: Product is assigned. MSI (s) (54:48) [14:50:18:339]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'. MSI (s) (54:48) [14:50:18:339]: PROPERTY CHANGE: Adding INSTALLINGVERSION property. Its value is '1.8.77.0'. MSI (s) (54:48) [14:50:18:339]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\WINDOWS\system32'. MSI (s) (54:48) [14:50:18:339]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'. MSI (s) (54:48) [14:50:18:339]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'. MSI (s) (54:48) [14:50:18:339]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '3844'. MSI (s) (54:48) [14:50:18:339]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0 MSI (s) (54:48) [14:50:18:339]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality. MSI (s) (54:48) [14:50:18:339]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'. MSI (s) (54:48) [14:50:18:339]: TRANSFORMS property is now: MSI (s) (54:48) [14:50:18:339]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '405'. MSI (s) (54:48) [14:50:18:341]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming MSI (s) (54:48) [14:50:18:342]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Favorites MSI (s) (54:48) [14:50:18:343]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (s) (54:48) [14:50:18:344]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Documents MSI (s) (54:48) [14:50:18:345]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (s) (54:48) [14:50:18:346]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent MSI (s) (54:48) [14:50:18:347]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo MSI (s) (54:48) [14:50:18:348]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates MSI (s) (54:48) [14:50:18:348]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (s) (54:48) [14:50:18:349]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Local MSI (s) (54:48) [14:50:18:350]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Pictures MSI (s) (54:48) [14:50:18:352]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (54:48) [14:50:18:353]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (54:48) [14:50:18:354]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (s) (54:48) [14:50:18:354]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (s) (54:48) [14:50:18:355]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (s) (54:48) [14:50:18:357]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (54:48) [14:50:18:358]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (54:48) [14:50:18:359]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (s) (54:48) [14:50:18:360]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu MSI (s) (54:48) [14:50:18:361]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Desktop MSI (s) (54:48) [14:50:18:362]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (s) (54:48) [14:50:18:363]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts MSI (s) (54:48) [14:50:18:363]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (s) (54:48) [14:50:18:371]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (s) (54:48) [14:50:18:371]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (s) (54:48) [14:50:18:371]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (s) (54:48) [14:50:18:371]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (54:48) [14:50:18:371]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Admin'. MSI (s) (54:48) [14:50:18:371]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (54:48) [14:50:18:371]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Microsoft'. MSI (s) (54:48) [14:50:18:371]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\WINDOWS\Installer\77a768.msi'. MSI (s) (54:48) [14:50:18:371]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi'. MSI (s) (54:48) [14:50:18:371]: Machine policy value 'MsiDisableEmbeddedUI' is 0 MSI (s) (54:48) [14:50:18:371]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI MSI (s) (54:48) [14:50:18:371]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install MSI (s) (54:48) [14:50:18:372]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (54:48) [14:50:18:372]: Machine policy value 'DisableRollback' is 0 MSI (s) (54:48) [14:50:18:372]: User policy value 'DisableRollback' is 0 MSI (s) (54:48) [14:50:18:372]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. === Logging started: 7/16/2019 14:50:18 === MSI (s) (54:48) [14:50:18:373]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038 MSI (s) (54:48) [14:50:18:373]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes. MSI (s) (54:48) [14:50:18:375]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'. MSI (s) (54:48) [14:50:18:375]: Doing action: INSTALL MSI (s) (54:48) [14:50:18:375]: Note: 1: 2205 2: 3: ActionText Action start 14:50:18: INSTALL. MSI (s) (54:48) [14:50:18:377]: Running ExecuteSequence MSI (s) (54:48) [14:50:18:377]: Doing action: System64Folder_amd64_VC.05F0B5F5_44A8_3793_976B_A4F17AECF92C MSI (s) (54:48) [14:50:18:377]: Note: 1: 2205 2: 3: ActionText MSI (s) (54:48) [14:50:18:378]: PROPERTY CHANGE: Adding System64Folder_amd64_VC.05F0B5F5_44A8_3793_976B_A4F17AECF92C property. Its value is 'C:\WINDOWS\system32\'. Action start 14:50:18: System64Folder_amd64_VC.05F0B5F5_44A8_3793_976B_A4F17AECF92C. MSI (s) (54:48) [14:50:18:378]: Doing action: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA MSI (s) (54:48) [14:50:18:378]: Note: 1: 2205 2: 3: ActionText Action ended 14:50:18: System64Folder_amd64_VC.05F0B5F5_44A8_3793_976B_A4F17AECF92C. Return value 1. MSI (s) (54:48) [14:50:18:379]: PROPERTY CHANGE: Adding SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA property. Its value is 'C:\WINDOWS\SysWOW64\'. Action start 14:50:18: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA. MSI (s) (54:48) [14:50:18:380]: Doing action: FindRelatedProducts MSI (s) (54:48) [14:50:18:380]: Note: 1: 2205 2: 3: ActionText Action ended 14:50:18: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA. Return value 1. MSI (s) (54:48) [14:50:18:381]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:48) [14:50:18:381]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:48) [14:50:18:381]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC Action start 14:50:18: FindRelatedProducts. MSI (s) (54:48) [14:50:18:382]: PROPERTY CHANGE: Adding WIX_UPGRADE_DETECTED property. Its value is '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'. MSI (s) (54:48) [14:50:18:382]: PROPERTY CHANGE: Adding MIGRATE property. Its value is '{66967E5F-43E8-4402-87A4-04685EE5C2CB}'. MSI (s) (54:48) [14:50:18:382]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:48) [14:50:18:382]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:48) [14:50:18:382]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:48) [14:50:18:382]: Doing action: LaunchConditions MSI (s) (54:48) [14:50:18:382]: Note: 1: 2205 2: 3: ActionText Action ended 14:50:18: FindRelatedProducts. Return value 1. Action start 14:50:18: LaunchConditions. MSI (s) (54:48) [14:50:18:383]: Doing action: ValidateProductID MSI (s) (54:48) [14:50:18:383]: Note: 1: 2205 2: 3: ActionText Action ended 14:50:18: LaunchConditions. Return value 1. Action start 14:50:18: ValidateProductID. MSI (s) (54:48) [14:50:18:384]: Skipping action: TamperProtectionCheckRemove (condition is false) MSI (s) (54:48) [14:50:18:384]: Doing action: CostInitialize MSI (s) (54:48) [14:50:18:384]: Note: 1: 2205 2: 3: ActionText Action ended 14:50:18: ValidateProductID. Return value 1. MSI (s) (54:48) [14:50:18:385]: Machine policy value 'MaxPatchCacheSize' is 10 MSI (s) (54:48) [14:50:18:385]: Baseline: Sorting baselines for {604350BF-BE9A-4F79-B0EB-B1C22D889E2D}. MSI (s) (54:48) [14:50:18:385]: Baseline: New baseline 1.8.77 from transaction. MSI (s) (54:48) [14:50:18:385]: Baseline: Sorted order Native: Order 0. MSI (s) (54:48) [14:50:18:385]: Baseline Data Table: MSI (s) (54:48) [14:50:18:385]: ProductCode: {604350BF-BE9A-4F79-B0EB-B1C22D889E2D} Version: 1.8.77 Attributes: 0 PatchId: Native BaselineId: -2147483648 Order: 0 MSI (s) (54:48) [14:50:18:385]: Baseline File Table: MSI (s) (54:48) [14:50:18:386]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'. MSI (s) (54:48) [14:50:18:386]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'. MSI (s) (54:48) [14:50:18:386]: Note: 1: 2205 2: 3: Patch MSI (s) (54:48) [14:50:18:386]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (54:48) [14:50:18:386]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (54:48) [14:50:18:386]: Note: 1: 2205 2: 3: __MsiPatchFileList MSI (s) (54:48) [14:50:18:386]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (54:48) [14:50:18:386]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId` MSI (s) (54:48) [14:50:18:386]: Delta compression fallback method for this product transaction is 'MSI 2.0 legacy obsolescence' MSI (s) (54:48) [14:50:18:386]: Note: 1: 2205 2: 3: Patch Action start 14:50:18: CostInitialize. MSI (s) (54:48) [14:50:18:387]: Doing action: ResolveSource MSI (s) (54:48) [14:50:18:387]: Note: 1: 2205 2: 3: ActionText Action ended 14:50:18: CostInitialize. Return value 1. MSI (s) (54:48) [14:50:18:388]: Resolving source. MSI (s) (54:48) [14:50:18:388]: Resolving source to launched-from source. MSI (s) (54:48) [14:50:18:388]: Setting launched-from source as last-used. MSI (s) (54:48) [14:50:18:388]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\'. MSI (s) (54:48) [14:50:18:388]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\'. MSI (s) (54:48) [14:50:18:388]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}'. MSI (s) (54:48) [14:50:18:388]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\ MSI (s) (54:48) [14:50:18:388]: SOURCEDIR product ==> {604350BF-BE9A-4F79-B0EB-B1C22D889E2D} MSI (s) (54:48) [14:50:18:388]: Determining source type MSI (s) (54:48) [14:50:18:388]: Source type from package 'Sophos Network Threat Protection.msi': 0 MSI (s) (54:48) [14:50:18:389]: SECREPAIR: Hash Database: C:\WINDOWS\Installer\SourceHash{604350BF-BE9A-4F79-B0EB-B1C22D889E2D} MSI (s) (54:48) [14:50:18:389]: SECREPAIR: SourceHash database file already exists. Deleting it. MSI (s) (54:48) [14:50:18:390]: Note: 1: 2262 2: SourceHash 3: -2147287038 MSI (s) (54:48) [14:50:18:394]: SECREPAIR: New Hash Database creation complete. MSI (s) (54:48) [14:50:18:412]: SECREPAIR: Hash Value for the file:Sophos Network Threat Protection.msi is: Rj5zYBkuXI2RIhyT6h7lWHt3MXv7AN2ZcyxvaVCarWw= MSI (s) (54:48) [14:50:18:414]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\Sntp.sys is: XVRJPb9qW7ekIwuzQBSZTbYVTi9ia+1fAKoTgYMOfJg= MSI (s) (54:48) [14:50:18:415]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\SophosNTPLWF\SophosNTPLWF.sys is: Go/kGCz37Q+1f/OGqpYHGi0IvYjDnfEvAXLjrLYGvtw= MSI (s) (54:48) [14:50:18:488]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\navl.dll is: 6j/zSFbI0gyzjapXcqlmrgMI07ffmBnpkQ3JcGxhxGA= MSI (s) (54:48) [14:50:18:489]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\integrity.dat is: xRALlBIwjvz1B7RKoAHEzIZOXO0UP2XbNwarlVEe0HA= MSI (s) (54:48) [14:50:18:507]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\SophosNtpService.exe is: zat5DNSinc7ftA5F4eo7FduOrxkHIwBV845nsrrvy1w= MSI (s) (54:48) [14:50:18:514]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\NTPAdapter.dll is: sVpKsDh6nYYyiRALWePfO6LUiNDML1l8PAzH1W6RBPw= MSI (s) (54:48) [14:50:18:541]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\Heartbeat.dll is: qkgyuFPF1P8S23OVrDoyH64e45ld2+NtZzIp30UWkAA= MSI (s) (54:48) [14:50:18:541]: SECREPAIR: Hash Value for the file:Sophos\Heartbeat\Config\Heartbeat.xml is: shh3Zis1kKba08xo73HxQMEJRnp3kJzZv0TiLSt92pg= MSI (s) (54:48) [14:50:18:542]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\Notice.txt is: jIJwIN7VbhfeUB/yaU6aBo46AYREvPxxc/xFBOhyltw= MSI (s) (54:48) [14:50:18:544]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\HealthApi.dll is: ImAC1QyIwYJrOeVm5rIHBH1/pdor9Z71aITiikuexKw= MSI (s) (54:48) [14:50:18:553]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\HbtAdapter.dll is: fbrveZd4lJh5Db7vXnO5wfK4d3CktBY+UErw3/2/3gw= MSI (s) (54:48) [14:50:18:556]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\BPAIF.dll is: XMx4rqZddiXbjYyc6FP1zwCkIu2KdeQtQc6kriiPSVg= MSI (s) (54:48) [14:50:18:560]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\SophosNtpTelemetry.exe is: H6HZipon0KwMsZTLTXTs2I65dD2hCk2dRvPCsVOEyDQ= MSI (s) (54:48) [14:50:18:560]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\scf.dat is: dQPD1RhtK+8kjNo8nQTfJvzCeRU6ORtpo9/B+0ixhhg= MSI (s) (54:48) [14:50:18:560]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\sof.dat is: Jql4NkR0GU9EhQR+BWdP0WHl3ZtKNiiJsIF6NDlP5Vg= MSI (s) (54:48) [14:50:18:560]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\Sntp.inf is: ey+EWhVyJF+4F0FI1bEZJtAqCDE7XjX5WJxjp+/lNDg= MSI (s) (54:48) [14:50:18:561]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\Sntp.cat is: 4JK0mlPxleDLdsadgmayROp2CPLU2296Ndp6E4rFNjw= MSI (s) (54:48) [14:50:18:561]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\Sntp.man is: QAzyouqgI0/miqnpfe4uPDJKS5ZTT0bFZ7b6RlwWCtw= MSI (s) (54:48) [14:50:18:561]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\SophosNTPLWF\SophosNTPLWF.inf is: M5Q5bbaEiDqSSSsMRCgBQ42Pqd1ICNz1C0UE2Ujzq8A= MSI (s) (54:48) [14:50:18:562]: SECREPAIR: Hash Value for the file:Sophos\Sophos Network Threat Protection\SophosNTPLWF\SophosNTPLWF.cat is: 8jQAYjoz4caROOTnbcd/fOI3eJO7iit6skcBlg/uabA= MSI (s) (54:48) [14:50:18:568]: SECREPAIR: Hash Value for the file:System\msvcr120.dll is: huObWZWvDgQvzaqF/irv18ndx61l5jJ71ecFi8OrYVw= MSI (s) (54:48) [14:50:18:572]: SECREPAIR: Hash Value for the file:System\msvcp120.dll is: h8QsoVVHPk5xhX0DSXyMvCj6j/fyyNcuih85txB49gA= MSI (s) (54:48) [14:50:18:573]: SECREPAIR: Hash Value for the file:System\vccorlib120.dll is: nJ1OQhxV9+9ORV51tYpmOUKMzXXHblcX9Eiv5MIcUrA= MSI (s) (54:48) [14:50:18:580]: SECREPAIR: Hash Value for the file:System64\msvcr120.dll is: rTIkC7HeVcP1/KyHifWDoXBX+dFJFMU4wqelrTRrNBA= MSI (s) (54:48) [14:50:18:584]: SECREPAIR: Hash Value for the file:System64\msvcp120.dll is: Kr8Kq1o8WulCS2Tp0Z2dbUrrxngU1+kuSSe5eY/vKEA= MSI (s) (54:48) [14:50:18:587]: SECREPAIR: Hash Value for the file:System64\vccorlib120.dll is: YCrdd8vYB9AjBt4dAXnLcakI7ssRZ3EW/CBqfnFKttg= Action start 14:50:18: ResolveSource. MSI (s) (54:48) [14:50:18:591]: Source path resolution complete. Dumping Directory table... MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: TARGETDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\ , LongSubPath: , ShortSubPath: MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\ , LongSubPath: , ShortSubPath: MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: System64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\System64\ , LongSubPath: System64\ , ShortSubPath: Sys64\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: System64Folder_amd64_VC.05F0B5F5_44A8_3793_976B_A4F17AECF92C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\System64\ , LongSubPath: System64\ , ShortSubPath: Sys64\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: SystemFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\System\ , LongSubPath: System\ , ShortSubPath: Sys\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\System\ , LongSubPath: System\ , ShortSubPath: Sys\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: CommonAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\ , LongSubPath: , ShortSubPath: MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: SophosAppData , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos\ , LongSubPath: Sophos\ , ShortSubPath: MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: HeartbeatData , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos\Heartbeat\ , LongSubPath: Sophos\Heartbeat\ , ShortSubPath: Sophos\awner00b\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: HeartbeatPersist , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos\Heartbeat\Persist\ , LongSubPath: Sophos\Heartbeat\Persist\ , ShortSubPath: Sophos\awner00b\Persist\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: HeartbeatLogs , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos\Heartbeat\Logs\ , LongSubPath: Sophos\Heartbeat\Logs\ , ShortSubPath: Sophos\awner00b\Logs\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: HeartbeatConfig , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos\Heartbeat\Config\ , LongSubPath: Sophos\Heartbeat\Config\ , ShortSubPath: Sophos\awner00b\Config\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: ProductData , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos\Sophos Network Threat Protection\ , LongSubPath: Sophos\Sophos Network Threat Protection\ , ShortSubPath: Sophos\hv6uh-kp\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: Logs , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos\Sophos Network Threat Protection\Logs\ , LongSubPath: Sophos\Sophos Network Threat Protection\Logs\ , ShortSubPath: Sophos\hv6uh-kp\Logs\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: Config , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos\Sophos Network Threat Protection\Config\ , LongSubPath: Sophos\Sophos Network Threat Protection\Config\ , ShortSubPath: Sophos\hv6uh-kp\Config\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: Status , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos\Sophos Network Threat Protection\Config\Status\ , LongSubPath: Sophos\Sophos Network Threat Protection\Config\Status\ , ShortSubPath: Sophos\hv6uh-kp\Config\Status\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: ProgramFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\ , LongSubPath: , ShortSubPath: MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: Sophos , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos\ , LongSubPath: Sophos\ , ShortSubPath: MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: INSTALLDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos\Sophos Network Threat Protection\ , LongSubPath: Sophos\Sophos Network Threat Protection\ , ShortSubPath: Sophos\_tph7qnj\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: plugins , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos\Sophos Network Threat Protection\plugins\ , LongSubPath: Sophos\Sophos Network Threat Protection\plugins\ , ShortSubPath: Sophos\_tph7qnj\plugins\ MSI (s) (54:48) [14:50:18:591]: Dir (source): Key: SophosNTPLWFDir , Object: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos\Sophos Network Threat Protection\SophosNTPLWF\ , LongSubPath: Sophos\Sophos Network Threat Protection\SophosNTPLWF\ , ShortSubPath: Sophos\_tph7qnj\inu1lsqb\ MSI (s) (54:48) [14:50:18:592]: Doing action: IdentifyInstallType MSI (s) (54:48) [14:50:18:592]: Note: 1: 2205 2: 3: ActionText Action ended 14:50:18: ResolveSource. Return value 1. MSI (s) (54:48) [14:50:18:595]: Creating MSIHANDLE (2) of type 790542 for thread 2632 MSI (s) (54:9C) [14:50:18:596]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIA881.tmp, Entrypoint: IdentifyInstallType MSI (s) (54:44) [14:50:18:597]: Generating random cookie. MSI (s) (54:44) [14:50:18:603]: Created Custom Action Server with PID 11688 (0x2DA8). MSI (s) (54:6C) [14:50:18:629]: Running as a service. MSI (s) (54:6C) [14:50:18:635]: Hello, I'm your 64bit Elevated Non-remapped custom action server. MSI (s) (54!68) [14:50:18:642]: Creating MSIHANDLE (3) of type 790541 for thread 11624 MSI (s) (54!68) [14:50:18:642]: Creating MSIHANDLE (4) of type 790531 for thread 11624 Action start 14:50:18: IdentifyInstallType. MSI (s) (54!68) [14:50:18:643]: Closing MSIHANDLE (4) of type 790531 for thread 11624 MSI (s) (54!68) [14:50:18:643]: Creating MSIHANDLE (5) of type 790531 for thread 11624 IdentifyInstallType: IdentifyInstallType called MSI (s) (54!68) [14:50:18:644]: Closing MSIHANDLE (5) of type 790531 for thread 11624 MSI (s) (54!68) [14:50:18:644]: Creating MSIHANDLE (6) of type 790531 for thread 11624 IdentifyInstallType: Source directory C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\ MSI (s) (54!68) [14:50:18:644]: Closing MSIHANDLE (6) of type 790531 for thread 11624 MSI (s) (54!68) [14:50:18:645]: PROPERTY CHANGE: Adding OPM_INSTALLTYPE property. Its value is '1'. MSI (s) (54!68) [14:50:18:645]: Closing MSIHANDLE (3) of type 790541 for thread 11624 MSI (s) (54:9C) [14:50:18:645]: Closing MSIHANDLE (2) of type 790542 for thread 2632 IdentifyInstallType: Identified OPM install-type MSI (s) (54:48) [14:50:18:647]: Doing action: FileCost MSI (s) (54:48) [14:50:18:647]: Note: 1: 2205 2: 3: ActionText Action ended 14:50:18: IdentifyInstallType. Return value 1. MSI (s) (54:48) [14:50:18:648]: Note: 1: 2205 2: 3: MsiAssembly MSI (s) (54:48) [14:50:18:648]: Note: 1: 2205 2: 3: Class MSI (s) (54:48) [14:50:18:648]: Note: 1: 2205 2: 3: Extension Action start 14:50:18: FileCost. MSI (s) (54:48) [14:50:18:649]: Doing action: CostFinalize MSI (s) (54:48) [14:50:18:649]: Note: 1: 2205 2: 3: ActionText Action ended 14:50:18: FileCost. Return value 1. MSI (s) (54:48) [14:50:18:650]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'. MSI (s) (54:48) [14:50:18:650]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'. MSI (s) (54:48) [14:50:18:650]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'. MSI (s) (54:48) [14:50:18:650]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'. MSI (s) (54:48) [14:50:18:650]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'. MSI (s) (54:48) [14:50:18:650]: Note: 1: 2205 2: 3: Patch MSI (s) (54:48) [14:50:18:650]: Note: 1: 2205 2: 3: Condition MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 property. Its value is 'C:\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding SophosAppData property. Its value is 'C:\ProgramData\Sophos\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding HeartbeatData property. Its value is 'C:\ProgramData\Sophos\Heartbeat\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding HeartbeatPersist property. Its value is 'C:\ProgramData\Sophos\Heartbeat\Persist\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding HeartbeatLogs property. Its value is 'C:\ProgramData\Sophos\Heartbeat\Logs\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding HeartbeatConfig property. Its value is 'C:\ProgramData\Sophos\Heartbeat\Config\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding ProductData property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding Logs property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding Config property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding Status property. Its value is 'C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding Sophos property. Its value is 'C:\Program Files\Sophos\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding plugins property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\plugins\'. MSI (s) (54:48) [14:50:18:651]: PROPERTY CHANGE: Adding SophosNTPLWFDir property. Its value is 'C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNTPLWF\'. MSI (s) (54:48) [14:50:18:651]: Target path resolution complete. Dumping Directory table... MSI (s) (54:48) [14:50:18:651]: Note: target paths subject to change (via custom actions or browsing) MSI (s) (54:48) [14:50:18:651]: Dir (target): Key: TARGETDIR , Object: C:\ MSI (s) (54:48) [14:50:18:651]: Dir (target): Key: WindowsFolder , Object: C:\WINDOWS\ MSI (s) (54:48) [14:50:18:651]: Dir (target): Key: INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 , Object: C:\ MSI (s) (54:48) [14:50:18:651]: Dir (target): Key: System64Folder , Object: C:\WINDOWS\system32\ MSI (s) (54:48) [14:50:18:651]: Dir (target): Key: System64Folder_amd64_VC.05F0B5F5_44A8_3793_976B_A4F17AECF92C , Object: C:\WINDOWS\system32\ MSI (s) (54:48) [14:50:18:651]: Dir (target): Key: SystemFolder , Object: C:\WINDOWS\SysWOW64\ MSI (s) (54:48) [14:50:18:651]: Dir (target): Key: SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA , Object: C:\WINDOWS\SysWOW64\ MSI (s) (54:48) [14:50:18:651]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\ MSI (s) (54:48) [14:50:18:651]: Dir (target): Key: SophosAppData , Object: C:\ProgramData\Sophos\ MSI (s) (54:48) [14:50:18:651]: Dir (target): Key: HeartbeatData , Object: C:\ProgramData\Sophos\Heartbeat\ MSI (s) (54:48) [14:50:18:651]: Dir (target): Key: HeartbeatPersist , Object: C:\ProgramData\Sophos\Heartbeat\Persist\ MSI (s) (54:48) [14:50:18:651]: Dir (target): Key: HeartbeatLogs , Object: C:\ProgramData\Sophos\Heartbeat\Logs\ MSI (s) (54:48) [14:50:18:651]: Dir (target): Key: HeartbeatConfig , Object: C:\ProgramData\Sophos\Heartbeat\Config\ MSI (s) (54:48) [14:50:18:652]: Dir (target): Key: ProductData , Object: C:\ProgramData\Sophos\Sophos Network Threat Protection\ MSI (s) (54:48) [14:50:18:652]: Dir (target): Key: Logs , Object: C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\ MSI (s) (54:48) [14:50:18:652]: Dir (target): Key: Config , Object: C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\ MSI (s) (54:48) [14:50:18:652]: Dir (target): Key: Status , Object: C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\ MSI (s) (54:48) [14:50:18:652]: Dir (target): Key: ProgramFiles64Folder , Object: C:\Program Files\ MSI (s) (54:48) [14:50:18:652]: Dir (target): Key: Sophos , Object: C:\Program Files\Sophos\ MSI (s) (54:48) [14:50:18:652]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files\Sophos\Sophos Network Threat Protection\ MSI (s) (54:48) [14:50:18:652]: Dir (target): Key: plugins , Object: C:\Program Files\Sophos\Sophos Network Threat Protection\plugins\ MSI (s) (54:48) [14:50:18:652]: Dir (target): Key: SophosNTPLWFDir , Object: C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNTPLWF\ MSI (s) (54:48) [14:50:18:652]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'. MSI (s) (54:48) [14:50:18:652]: Note: 1: 2205 2: 3: MsiAssembly MSI (s) (54:48) [14:50:18:652]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ? Action start 14:50:18: CostFinalize. MSI (s) (54:48) [14:50:18:667]: Doing action: MigrateFeatureStates MSI (s) (54:48) [14:50:18:667]: Note: 1: 2205 2: 3: ActionText Action ended 14:50:18: CostFinalize. Return value 1. MSI (s) (54:48) [14:50:18:668]: Migrating feature settings from product(s) '{66967E5F-43E8-4402-87A4-04685EE5C2CB}' MSI (s) (54:48) [14:50:18:669]: MigrateFeatureStates: based on existing product, setting feature 'AllComponents' to 'Local' state. Action start 14:50:18: MigrateFeatureStates. MSI (s) (54:48) [14:50:18:682]: Doing action: InstallValidate MSI (s) (54:48) [14:50:18:682]: Note: 1: 2205 2: 3: ActionText Action ended 14:50:18: MigrateFeatureStates. Return value 1. MSI (s) (54:48) [14:50:18:683]: Note: 1: 2205 2: 3: Dialog MSI (s) (54:48) [14:50:18:683]: Feature: AllComponents; Installed: Absent; Request: Local; Action: Local MSI (s) (54:48) [14:50:18:683]: Component: InstallationFolder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: ProductDataFolder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: ConfigDataFolder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: StatusFolder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: LogsDataFolder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: HeartbeatProductDataFolder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: HeartbeatConfigFolder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: HeartbeatLogsFolder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: HeartbeatPersistFolder; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: Driver; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: LWF; Installed: Absent; Request: Local; Action: Null; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: navl.dll; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: integrity.dat; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: ProductInformation; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: Service; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: NTPAdapter; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: Heartbeat.dll; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: HeartbeatRegistry; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: Heartbeat.xml; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: Notice.txt; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: HealthApi; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: HbtAdapter; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: SspInterface; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: Telemetry.exe; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: TelemetryRegistry; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: RemoveObsoleteAutoUpdateRegistration; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: ScfDat; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: SofDat; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:683]: Component: C_CENTRAL_msvcr120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:684]: Component: C_CENTRAL_msvcp120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:684]: Component: C_CENTRAL_vccorlib120_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:684]: Component: C_CENTRAL_msvcr120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:684]: Component: C_CENTRAL_msvcp120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:684]: Component: C_CENTRAL_vccorlib120_x64.05F0B5F5_44A8_3793_976B_A4F17AECF92C; Installed: Absent; Request: Local; Action: Local; Client State: Unknown MSI (s) (54:48) [14:50:18:684]: Component: __TelemetryRegistry65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (54:48) [14:50:18:684]: Component: __ProductInformation65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (54:48) [14:50:18:684]: Component: __HeartbeatRegistry65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (54:48) [14:50:18:684]: Component: __Service65; Installed: Null; Request: Local; Action: Local; Client State: Null MSI (s) (54:48) [14:50:18:684]: Note: 1: 2205 2: 3: BindImage MSI (s) (54:48) [14:50:18:684]: Note: 1: 2205 2: 3: ProgId MSI (s) (54:48) [14:50:18:684]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (54:48) [14:50:18:684]: Note: 1: 2205 2: 3: SelfReg MSI (s) (54:48) [14:50:18:684]: Note: 1: 2205 2: 3: Extension MSI (s) (54:48) [14:50:18:684]: Note: 1: 2205 2: 3: Font MSI (s) (54:48) [14:50:18:684]: Note: 1: 2205 2: 3: Shortcut MSI (s) (54:48) [14:50:18:684]: Note: 1: 2205 2: 3: Class Action start 14:50:18: InstallValidate. MSI (s) (54:48) [14:50:18:689]: Note: 1: 2205 2: 3: _RemoveFilePath MSI (s) (54:48) [14:50:18:708]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'. MSI (s) (54:48) [14:50:18:708]: Note: 1: 2205 2: 3: BindImage MSI (s) (54:48) [14:50:18:708]: Note: 1: 2205 2: 3: ProgId MSI (s) (54:48) [14:50:18:708]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (54:48) [14:50:18:708]: Note: 1: 2205 2: 3: SelfReg MSI (s) (54:48) [14:50:18:708]: Note: 1: 2205 2: 3: Extension MSI (s) (54:48) [14:50:18:708]: Note: 1: 2205 2: 3: Font MSI (s) (54:48) [14:50:18:708]: Note: 1: 2205 2: 3: Shortcut MSI (s) (54:48) [14:50:18:708]: Note: 1: 2205 2: 3: Class MSI (s) (54:48) [14:50:18:708]: Note: 1: 2727 2: MSI (s) (54:48) [14:50:18:714]: Note: 1: 2727 2: MSI (s) (54:48) [14:50:18:715]: Doing action: RemoveExistingProducts MSI (s) (54:48) [14:50:18:715]: Note: 1: 2205 2: 3: ActionText Action ended 14:50:18: InstallValidate. Return value 1. Action start 14:50:18: RemoveExistingProducts. MSI (s) (54:E0) [14:50:18:720]: Resetting cached policy values MSI (s) (54:E0) [14:50:18:720]: Machine policy value 'Debug' is 0 MSI (s) (54:E0) [14:50:18:720]: ******* RunEngine: ******* Product: {66967E5F-43E8-4402-87A4-04685EE5C2CB} ******* Action: ******* CommandLine: ********** MSI (s) (54:E0) [14:50:18:720]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:E0) [14:50:18:720]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:E0) [14:50:18:720]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:E0) [14:50:18:720]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:E0) [14:50:18:720]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:E0) [14:50:18:720]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:E0) [14:50:18:720]: Warning: Local cached package 'C:\WINDOWS\Installer\86ab6bec.msi' is missing. MSI (s) (54:E0) [14:50:18:720]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:E0) [14:50:18:720]: User policy value 'SearchOrder' is 'nmu' MSI (s) (54:E0) [14:50:18:721]: User policy value 'DisableMedia' is 0 MSI (s) (54:E0) [14:50:18:721]: Machine policy value 'AllowLockdownMedia' is 0 MSI (s) (54:E0) [14:50:18:721]: SOURCEMGMT: Media enabled only if package is safe. MSI (s) (54:E0) [14:50:18:721]: SOURCEMGMT: Looking for sourcelist for product {66967E5F-43E8-4402-87A4-04685EE5C2CB} MSI (s) (54:E0) [14:50:18:721]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:E0) [14:50:18:721]: SOURCEMGMT: Adding {66967E5F-43E8-4402-87A4-04685EE5C2CB}; to potential sourcelist list (pcode;disk;relpath). MSI (s) (54:E0) [14:50:18:721]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:E0) [14:50:18:721]: SOURCEMGMT: Now checking product {66967E5F-43E8-4402-87A4-04685EE5C2CB} MSI (s) (54:E0) [14:50:18:721]: SOURCEMGMT: Media is enabled for product. MSI (s) (54:E0) [14:50:18:721]: SOURCEMGMT: Attempting to use LastUsedSource from source list. MSI (s) (54:E0) [14:50:18:721]: SOURCEMGMT: Trying source C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\. MSI (s) (54:E0) [14:50:18:721]: Using cached product context: machine assigned for product: F5E769668E342044784A4086E55E2CBC MSI (s) (54:E0) [14:50:18:721]: Creating MSIHANDLE (7) of type 790541 for thread 6112 MSI (s) (54:E0) [14:50:18:722]: Creating MSIHANDLE (8) of type 790540 for thread 6112 MSI (s) (54:E0) [14:50:18:722]: Creating MSIHANDLE (9) of type 790531 for thread 6112 MSI (s) (54:E0) [14:50:18:722]: Closing MSIHANDLE (9) of type 790531 for thread 6112 MSI (s) (54:E0) [14:50:18:722]: Closing MSIHANDLE (8) of type 790540 for thread 6112 MSI (s) (54:E0) [14:50:18:722]: Closing MSIHANDLE (7) of type 790541 for thread 6112 MSI (s) (54:E0) [14:50:18:722]: SOURCEMGMT: Source is invalid due to invalid package code (product code doesn't match). MSI (s) (54:E0) [14:50:18:722]: Note: 1: 1706 2: -2147483646 3: Sophos Network Threat Protection.msi MSI (s) (54:E0) [14:50:18:722]: SOURCEMGMT: Processing net source list. MSI (s) (54:E0) [14:50:18:722]: Note: 1: 1706 2: -2147483647 3: Sophos Network Threat Protection.msi MSI (s) (54:E0) [14:50:18:722]: SOURCEMGMT: Processing media source list. MSI (s) (54:E0) [14:50:18:770]: SOURCEMGMT: Trying media source E:\. MSI (s) (54:E0) [14:50:18:770]: Note: 1: 2203 2: E:\Sophos Network Threat Protection.msi 3: -2147287038 MSI (s) (54:E0) [14:50:18:770]: SOURCEMGMT: Source is invalid due to missing/inaccessible package. MSI (s) (54:E0) [14:50:18:770]: Note: 1: 1706 2: -2147483647 3: Sophos Network Threat Protection.msi MSI (s) (54:E0) [14:50:18:770]: SOURCEMGMT: Processing URL source list. MSI (s) (54:E0) [14:50:18:770]: Note: 1: 1402 2: UNKNOWN\URL 3: 2 MSI (s) (54:E0) [14:50:18:770]: Note: 1: 1706 2: -2147483647 3: Sophos Network Threat Protection.msi MSI (s) (54:E0) [14:50:18:770]: Note: 1: 1706 2: 3: Sophos Network Threat Protection.msi MSI (s) (54:E0) [14:50:18:770]: SOURCEMGMT: Failed to resolve source MSI (s) (54:48) [14:50:18:771]: Note: 1: 1714 2: Sophos Network Threat Protection 3: 1612 CustomAction returned actual error code 1612 (note this may not be 100% accurate if translation happened inside sandbox) MSI (s) (54:48) [14:50:18:772]: Product: Sophos Network Threat Protection -- Error 1714. The older version of Sophos Network Threat Protection cannot be removed. Contact your technical support group. System Error 1612. Error 1714. The older version of Sophos Network Threat Protection cannot be removed. Contact your technical support group. System Error 1612. Action ended 14:50:18: RemoveExistingProducts. Return value 3. Action ended 14:50:18: INSTALL. Return value 3. Property(S): UpgradeCode = {A6CF693D-C171-4DF5-AE49-223B66F65A1A} Property(S): INSTALLDIR = C:\Program Files\Sophos\Sophos Network Threat Protection\ Property(S): ProductData = C:\ProgramData\Sophos\Sophos Network Threat Protection\ Property(S): Config = C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\ Property(S): Status = C:\ProgramData\Sophos\Sophos Network Threat Protection\Config\Status\ Property(S): Logs = C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs\ Property(S): HeartbeatData = C:\ProgramData\Sophos\Heartbeat\ Property(S): HeartbeatConfig = C:\ProgramData\Sophos\Heartbeat\Config\ Property(S): HeartbeatLogs = C:\ProgramData\Sophos\Heartbeat\Logs\ Property(S): HeartbeatPersist = C:\ProgramData\Sophos\Heartbeat\Persist\ Property(S): SophosNTPLWFDir = C:\Program Files\Sophos\Sophos Network Threat Protection\SophosNTPLWF\ Property(S): TARGETDIR = C:\ Property(S): plugins = C:\Program Files\Sophos\Sophos Network Threat Protection\plugins\ Property(S): Sophos = C:\Program Files\Sophos\ Property(S): ProgramFiles64Folder = C:\Program Files\ Property(S): SophosAppData = C:\ProgramData\Sophos\ Property(S): CommonAppDataFolder = C:\ProgramData\ Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\ Property(S): VersionNT = 603 Property(S): VersionNT64 = 603 Property(S): ALLUSERS = 1 Property(S): MSIRESTARTMANAGERCONTROL = Disable Property(S): ARPCOMMENTS = Network-aware threat detection Property(S): ARPCONTACT = Sophos Technical Support Property(S): ARPHELPLINK = http://www.sophos.com/support Property(S): ARPNOMODIFY = 1 Property(S): ARPNOREPAIR = 1 Property(S): ARPPRODUCTICON = shield.ico Property(S): ARPURLINFOABOUT = http://www.sophos.com Property(S): ARPURLUPDATEINFO = http://www.sophos.com/support/updates Property(S): Manufacturer = Sophos Limited Property(S): ProductCode = {604350BF-BE9A-4F79-B0EB-B1C22D889E2D} Property(S): ProductLanguage = 1033 Property(S): ProductName = Sophos Network Threat Protection Property(S): ProductVersion = 1.8.77.0 Property(S): RegisterWithAutoUpdate = {8087796B-2289-4897-98A5-58FF23DAAFD0};ntp64 Property(S): SecureCustomProperties = WIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTED Property(S): MsiHiddenProperties = ExecSecureObjects_64;ExecSecureObjectsRollback_64 Property(S): WIX_UPGRADE_DETECTED = {66967E5F-43E8-4402-87A4-04685EE5C2CB} Property(S): SystemFolder_x86_VC.194841A2_D0F2_3B96_9F71_05BA91BEA0FA = C:\WINDOWS\SysWOW64\ Property(S): SystemFolder = C:\WINDOWS\SysWOW64\ Property(S): DirectoryTable100_x86.194841A2_D0F2_3B96_9F71_05BA91BEA0FA = DirectoryTable Property(S): System64Folder_amd64_VC.05F0B5F5_44A8_3793_976B_A4F17AECF92C = C:\WINDOWS\system32\ Property(S): System64Folder = C:\WINDOWS\system32\ Property(S): DirectoryTable100_amd64.05F0B5F5_44A8_3793_976B_A4F17AECF92C = DirectoryTable Property(S): INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 = C:\ Property(S): MsiLogFileLocation = C:\WINDOWS\TEMP\Sophos Network Threat Protection Install Log 20190716 145018.txt Property(S): PackageCode = {FEBAF421-B555-408D-B670-6604E0732280} Property(S): ProductState = -1 Property(S): PackagecodeChanging = 1 Property(S): REBOOT = ReallySuppress Property(S): INSTALLINGVERSION = 1.8.77.0 Property(S): CURRENTDIRECTORY = C:\WINDOWS\system32 Property(S): CLIENTUILEVEL = 3 Property(S): MSICLIENTUSESEXTERNALUI = 1 Property(S): CLIENTPROCESSID = 3844 Property(S): MsiSystemRebootPending = 1 Property(S): VersionDatabase = 405 Property(S): VersionMsi = 5.00 Property(S): WindowsBuild = 9600 Property(S): ServicePackLevel = 0 Property(S): ServicePackLevelMinor = 0 Property(S): MsiNTProductType = 1 Property(S): WindowsFolder = C:\WINDOWS\ Property(S): WindowsVolume = C:\ Property(S): RemoteAdminTS = 1 Property(S): TempFolder = C:\WINDOWS\TEMP\ Property(S): ProgramFilesFolder = C:\Program Files (x86)\ Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\ Property(S): CommonFiles64Folder = C:\Program Files\Common Files\ Property(S): AppDataFolder = C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\ Property(S): FavoritesFolder = C:\WINDOWS\system32\config\systemprofile\Favorites\ Property(S): NetHoodFolder = C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\ Property(S): PersonalFolder = C:\WINDOWS\system32\config\systemprofile\Documents\ Property(S): PrintHoodFolder = C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\ Property(S): RecentFolder = C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\ Property(S): SendToFolder = C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\ Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\ Property(S): LocalAppDataFolder = C:\WINDOWS\system32\config\systemprofile\AppData\Local\ Property(S): MyPicturesFolder = C:\WINDOWS\system32\config\systemprofile\Pictures\ Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\ Property(S): DesktopFolder = C:\Users\Public\Desktop\ Property(S): FontsFolder = C:\WINDOWS\Fonts\ Property(S): GPTSupport = 1 Property(S): OLEAdvtSupport = 1 Property(S): ShellAdvtSupport = 1 Property(S): MsiAMD64 = 6 Property(S): Msix64 = 6 Property(S): Intel = 6 Property(S): PhysicalMemory = 8183 Property(S): VirtualMemory = 3856 Property(S): AdminUser = 1 Property(S): MsiTrueAdminUser = 1 Property(S): LogonUser = SYSTEM Property(S): UserSID = S-1-5-18 Property(S): UserLanguageID = 1033 Property(S): ComputerName = FM756 Property(S): SystemLanguageID = 2057 Property(S): ScreenX = 1024 Property(S): ScreenY = 768 Property(S): CaptionHeight = 19 Property(S): BorderTop = 1 Property(S): BorderSide = 1 Property(S): TextHeight = 16 Property(S): TextInternalLeading = 3 Property(S): ColorBits = 32 Property(S): TTCSupport = 1 Property(S): Time = 14:50:18 Property(S): Date = 7/16/2019 Property(S): MsiNetAssemblySupport = 4.8.3752.0 Property(S): MsiWin32AssemblySupport = 6.3.18362.1 Property(S): RedirectedDllSupport = 2 Property(S): MsiRunningElevated = 1 Property(S): Privileged = 1 Property(S): USERNAME = Admin Property(S): COMPANYNAME = Microsoft Property(S): DATABASE = C:\WINDOWS\Installer\77a768.msi Property(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi Property(S): UILevel = 2 Property(S): ACTION = INSTALL Property(S): MIGRATE = {66967E5F-43E8-4402-87A4-04685EE5C2CB} Property(S): ROOTDRIVE = C:\ Property(S): CostingComplete = 1 Property(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\ Property(S): SourcedirProduct = {604350BF-BE9A-4F79-B0EB-B1C22D889E2D} Property(S): OPM_INSTALLTYPE = 1 Property(S): OutOfDiskSpace = 0 Property(S): OutOfNoRbDiskSpace = 0 Property(S): PrimaryVolumeSpaceAvailable = 0 Property(S): PrimaryVolumeSpaceRequired = 0 Property(S): PrimaryVolumeSpaceRemaining = 0 Property(S): INSTALLLEVEL = 1 MSI (s) (54:48) [14:50:18:804]: Windows Installer installed the product. Product Name: Sophos Network Threat Protection. Product Version: 1.8.77.0. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1603. MSI (s) (54:48) [14:50:18:807]: Closing MSIHANDLE (1) of type 790542 for thread 2632 MSI (s) (54:48) [14:50:18:809]: Deferring clean up of packages/files, if any exist MSI (s) (54:48) [14:50:18:809]: MainEngineThread is returning 1603 MSI (s) (54:38) [14:50:18:809]: No System Restore sequence number for this installation. === Logging stopped: 7/16/2019 14:50:18 === MSI (s) (54:38) [14:50:18:810]: User policy value 'DisableRollback' is 0 MSI (s) (54:38) [14:50:18:810]: Machine policy value 'DisableRollback' is 0 MSI (s) (54:38) [14:50:18:810]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (54:38) [14:50:18:810]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (54:38) [14:50:18:811]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (54:38) [14:50:18:811]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (s) (54:38) [14:50:18:812]: Destroying RemoteAPI object. MSI (s) (54:44) [14:50:18:812]: Custom Action Manager thread ending. MSI (c) (04:98) [14:50:18:813]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (04:98) [14:50:18:813]: MainEngineThread is returning 1603 === Verbose logging stopped: 7/16/2019 14:50:18 === setup::MsiInstaller::installOrUpgrade: Install/upgrade returned 1603 `anonymous-namespace'::setResult: installation failed setup::TamperProtectionControl::enable: Registered tamper protection integrity.dat for NTP setup::TamperProtectionControl::enable: Enabled tamper protection for NTP ProductSetup::~ProductSetup: End product setup