ProductSetup::ProductSetup: Begin product setup ProductSetup::InstUninstEntry: Begin install setup::TamperProtectionControl::TamperProtectionControl: Disabled tamper protection for component NTP setup::TamperProtectionControl::TamperProtectionControl: Disabled tamper protection for service Sophos Network Threat Protection setup::TamperProtectionControl::TamperProtectionControl: Disabled tamper protection for service sntp ProductSetup::InstUninstEntry: Show gui: false ProductSetup::InstUninstEntry: Existing product code: {604350BF-BE9A-4F79-B0EB-B1C22D889E2D} ProductSetup::InstUninstEntry: Install from: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64 ProductSetup::InstUninstEntry: Install to: <default> === Verbose logging started: 9/1/2020 12:18:21 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (18:3C) [12:18:21:649]: Cloaking enabled. MSI (c) (18:3C) [12:18:21:649]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (18:3C) [12:18:21:651]: End dialog not enabled MSI (c) (18:3C) [12:18:21:651]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi MSI (c) (18:3C) [12:18:21:651]: Package we're running from ==> C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi MSI (c) (18:3C) [12:18:21:651]: Machine policy value 'DisableUserInstalls' is 0 MSI (c) (18:3C) [12:18:21:653]: APPCOMPAT: Compatibility mode property overrides found. MSI (c) (18:3C) [12:18:21:663]: APPCOMPAT: looking for appcompat database entry with ProductCode '{4B1F9009-CD85-43C0-BCBD-D491908D5A52}'. MSI (c) (18:3C) [12:18:21:663]: APPCOMPAT: no matching ProductCode found in database. MSI (c) (18:3C) [12:18:21:681]: MSCOREE not loaded loading copy from system32 MSI (c) (18:3C) [12:18:21:693]: APPCOMPAT: looking for appcompat database entry with ProductCode '{4B1F9009-CD85-43C0-BCBD-D491908D5A52}'. MSI (c) (18:3C) [12:18:21:693]: APPCOMPAT: no matching ProductCode found in database. MSI (c) (18:3C) [12:18:21:693]: Transforms are not secure. MSI (c) (18:3C) [12:18:21:693]: Note: 1: 2205 2: 3: Control MSI (c) (18:3C) [12:18:21:693]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\WINDOWS\TEMP\Sophos Network Threat Protection Install Log 20200901 121821.txt'. MSI (c) (18:3C) [12:18:21:693]: No Command Line. MSI (c) (18:3C) [12:18:21:693]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{0B95A4E2-4953-4CE7-B8F7-53BB197E234A}'. MSI (c) (18:3C) [12:18:21:693]: Product Code passed to Engine.Initialize: '(none)' MSI (c) (18:3C) [12:18:21:693]: Product Code from property table before transforms: '{4B1F9009-CD85-43C0-BCBD-D491908D5A52}' MSI (c) (18:3C) [12:18:21:693]: Product Code from property table after transforms: '{4B1F9009-CD85-43C0-BCBD-D491908D5A52}' MSI (c) (18:3C) [12:18:21:693]: Product not registered: beginning first-time install MSI (c) (18:3C) [12:18:21:693]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'. MSI (c) (18:3C) [12:18:21:693]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 MSI (c) (18:3C) [12:18:21:693]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (c) (18:3C) [12:18:21:693]: User policy value 'SearchOrder' is 'nmu' MSI (c) (18:3C) [12:18:21:693]: Adding new sources is allowed. MSI (c) (18:3C) [12:18:21:693]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'. MSI (c) (18:3C) [12:18:21:693]: Package name extracted from package path: 'Sophos Network Threat Protection.msi' MSI (c) (18:3C) [12:18:21:693]: Package to be registered: 'Sophos Network Threat Protection.msi' MSI (c) (18:3C) [12:18:21:693]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (c) (18:3C) [12:18:21:695]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'. MSI (c) (18:3C) [12:18:21:695]: TRANSFORMS property is now: MSI (c) (18:3C) [12:18:21:695]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '405'. MSI (c) (18:3C) [12:18:21:695]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming MSI (c) (18:3C) [12:18:21:695]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Favorites MSI (c) (18:3C) [12:18:21:695]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (c) (18:3C) [12:18:21:695]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Documents MSI (c) (18:3C) [12:18:21:697]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (c) (18:3C) [12:18:21:697]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent MSI (c) (18:3C) [12:18:21:697]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo MSI (c) (18:3C) [12:18:21:697]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates MSI (c) (18:3C) [12:18:21:697]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (c) (18:3C) [12:18:21:699]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Local MSI (c) (18:3C) [12:18:21:699]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Pictures MSI (c) (18:3C) [12:18:21:699]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (c) (18:3C) [12:18:21:699]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (c) (18:3C) [12:18:21:699]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (c) (18:3C) [12:18:21:701]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (c) (18:3C) [12:18:21:701]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (c) (18:3C) [12:18:21:701]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (c) (18:3C) [12:18:21:701]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (c) (18:3C) [12:18:21:703]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (c) (18:3C) [12:18:21:703]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu MSI (c) (18:3C) [12:18:21:703]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Desktop MSI (c) (18:3C) [12:18:21:703]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (c) (18:3C) [12:18:21:703]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts MSI (c) (18:3C) [12:18:21:705]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (c) (18:3C) [12:18:21:707]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation MSI (c) (18:3C) [12:18:21:707]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (c) (18:3C) [12:18:21:707]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (c) (18:3C) [12:18:21:707]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (c) (18:3C) [12:18:21:707]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (18:3C) [12:18:21:707]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'user'. MSI (c) (18:3C) [12:18:21:707]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (18:3C) [12:18:21:707]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi'. MSI (c) (18:3C) [12:18:21:707]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi'. MSI (c) (18:3C) [12:18:21:707]: Machine policy value 'MsiDisableEmbeddedUI' is 0 MSI (c) (18:3C) [12:18:21:707]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI MSI (c) (18:3C) [12:18:21:707]: EEUI - Disabling MsiEmbeddedUI in quiet mode === Logging started: 9/1/2020 12:18:21 === MSI (c) (18:3C) [12:18:21:709]: Machine policy value 'DisableRollback' is 0 MSI (c) (18:3C) [12:18:21:709]: User policy value 'DisableRollback' is 0 MSI (c) (18:3C) [12:18:21:709]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. MSI (c) (18:3C) [12:18:21:733]: Note: 1: 2265 2: 3: -2147287035 MSI (c) (18:3C) [12:18:21:733]: Checking in-progress install: install for different product. MSI (c) (18:3C) [12:18:21:733]: Checking in-progress install: install for an uninstall. MSI (c) (18:3C) [12:18:21:733]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes. MSI (c) (18:3C) [12:18:21:743]: Creating MSIHANDLE (1) of type 790537 for thread 17724 MSI (c) (18:3C) [12:18:21:743]: MsiOpenPackageEx is returning 0 MSI (c) (18:3C) [12:18:21:743]: Closing MSIHANDLE (1) of type 790537 for thread 17724 === Verbose logging stopped: 9/1/2020 12:18:21 === setup::MsiInstaller::install: New version: {4B1F9009-CD85-43C0-BCBD-D491908D5A52}, version: 1.9.2235.0 === Verbose logging started: 9/1/2020 12:18:21 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (18:3C) [12:18:21:769]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\WINDOWS\Installer\610c1.msi' against software restriction policy MSI (c) (18:3C) [12:18:21:769]: SOFTWARE RESTRICTION POLICY: C:\WINDOWS\Installer\610c1.msi has a digital signature MSI (c) (18:3C) [12:18:21:769]: SOFTWARE RESTRICTION POLICY: C:\WINDOWS\Installer\610c1.msi is permitted to run because the user token authorizes execution (system or service token). MSI (c) (18:3C) [12:18:21:771]: Cloaking enabled. MSI (c) (18:3C) [12:18:21:771]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (18:3C) [12:18:21:771]: End dialog not enabled MSI (c) (18:3C) [12:18:21:771]: Original package ==> C:\WINDOWS\Installer\610c1.msi MSI (c) (18:3C) [12:18:21:771]: Package we're running from ==> C:\WINDOWS\Installer\610c1.msi MSI (c) (18:3C) [12:18:21:773]: APPCOMPAT: Uninstall Flags override found. MSI (c) (18:3C) [12:18:21:773]: APPCOMPAT: Uninstall VersionNT override found. MSI (c) (18:3C) [12:18:21:773]: APPCOMPAT: Uninstall ServicePackLevel override found. MSI (c) (18:3C) [12:18:21:773]: APPCOMPAT: looking for appcompat database entry with ProductCode '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}'. MSI (c) (18:3C) [12:18:21:773]: APPCOMPAT: no matching ProductCode found in database. MSI (c) (18:3C) [12:18:21:775]: MSCOREE not loaded loading copy from system32 MSI (c) (18:3C) [12:18:21:831]: Machine policy value 'DisablePatch' is 0 MSI (c) (18:3C) [12:18:21:831]: Machine policy value 'AllowLockdownPatch' is 0 MSI (c) (18:3C) [12:18:21:831]: Machine policy value 'DisableLUAPatching' is 0 MSI (c) (18:3C) [12:18:21:831]: Machine policy value 'DisableFlyWeightPatching' is 0 MSI (c) (18:3C) [12:18:21:831]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active MSI (c) (18:3C) [12:18:21:833]: APPCOMPAT: looking for appcompat database entry with ProductCode '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}'. MSI (c) (18:3C) [12:18:21:833]: APPCOMPAT: no matching ProductCode found in database. MSI (c) (18:3C) [12:18:21:833]: Transforms are not secure. MSI (c) (18:3C) [12:18:21:833]: Note: 1: 2205 2: 3: Control MSI (c) (18:3C) [12:18:21:833]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\WINDOWS\TEMP\Sophos Network Threat Protection Install Log 20200901 121821.txt'. MSI (c) (18:3C) [12:18:21:833]: No Command Line. MSI (c) (18:3C) [12:18:21:833]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{FEBAF421-B555-408D-B670-6604E0732280}'. MSI (c) (18:3C) [12:18:21:833]: Product Code passed to Engine.Initialize: '(none)' MSI (c) (18:3C) [12:18:21:833]: Product Code from property table before transforms: '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}' MSI (c) (18:3C) [12:18:21:833]: Product Code from property table after transforms: '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}' MSI (c) (18:3C) [12:18:21:833]: Product registered: entering maintenance mode MSI (c) (18:3C) [12:18:21:833]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine. MSI (c) (18:3C) [12:18:21:835]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'. MSI (c) (18:3C) [12:18:21:835]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'. MSI (c) (18:3C) [12:18:21:835]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 MSI (c) (18:3C) [12:18:21:835]: Package name retrieved from configuration data: 'Sophos Network Threat Protection.msi' MSI (c) (18:3C) [12:18:21:837]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (c) (18:3C) [12:18:21:837]: Machine policy value 'DisableMsi' is 0 MSI (c) (18:3C) [12:18:21:837]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (c) (18:3C) [12:18:21:837]: User policy value 'AlwaysInstallElevated' is 0 MSI (c) (18:3C) [12:18:21:837]: Product {604350BF-BE9A-4F79-B0EB-B1C22D889E2D} is admin assigned: LocalSystem owns the publish key. MSI (c) (18:3C) [12:18:21:837]: Product {604350BF-BE9A-4F79-B0EB-B1C22D889E2D} is managed. MSI (c) (18:3C) [12:18:21:837]: Running product '{604350BF-BE9A-4F79-B0EB-B1C22D889E2D}' with elevated privileges: Product is assigned. MSI (c) (18:3C) [12:18:21:837]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'. MSI (c) (18:3C) [12:18:21:837]: TRANSFORMS property is now: MSI (c) (18:3C) [12:18:21:837]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'. MSI (c) (18:3C) [12:18:21:837]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '405'. MSI (c) (18:3C) [12:18:21:837]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming MSI (c) (18:3C) [12:18:21:837]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Favorites MSI (c) (18:3C) [12:18:21:837]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (c) (18:3C) [12:18:21:837]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Documents MSI (c) (18:3C) [12:18:21:837]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (c) (18:3C) [12:18:21:837]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent MSI (c) (18:3C) [12:18:21:837]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo MSI (c) (18:3C) [12:18:21:837]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Local MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Pictures MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Desktop MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (c) (18:3C) [12:18:21:839]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts MSI (c) (18:3C) [12:18:21:839]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (c) (18:3C) [12:18:21:843]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation MSI (c) (18:3C) [12:18:21:843]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (c) (18:3C) [12:18:21:843]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (c) (18:3C) [12:18:21:843]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (c) (18:3C) [12:18:21:843]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (18:3C) [12:18:21:843]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'user'. MSI (c) (18:3C) [12:18:21:843]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (c) (18:3C) [12:18:21:843]: PROPERTY CHANGE: Adding Installed property. Its value is '00:00:00'. MSI (c) (18:3C) [12:18:21:843]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\WINDOWS\Installer\610c1.msi'. MSI (c) (18:3C) [12:18:21:843]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\WINDOWS\Installer\610c1.msi'. MSI (c) (18:3C) [12:18:21:843]: Machine policy value 'MsiDisableEmbeddedUI' is 0 MSI (c) (18:3C) [12:18:21:843]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI MSI (c) (18:3C) [12:18:21:843]: EEUI - Disabling MsiEmbeddedUI in quiet mode === Logging started: 9/1/2020 12:18:21 === MSI (c) (18:3C) [12:18:21:843]: Note: 1: 2205 2: 3: PatchPackage MSI (c) (18:3C) [12:18:21:843]: Machine policy value 'DisableRollback' is 0 MSI (c) (18:3C) [12:18:21:843]: User policy value 'DisableRollback' is 0 MSI (c) (18:3C) [12:18:21:843]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. MSI (c) (18:3C) [12:18:21:847]: Note: 1: 2265 2: 3: -2147287035 MSI (c) (18:3C) [12:18:21:847]: Checking in-progress install: install for different product. MSI (c) (18:3C) [12:18:21:847]: Checking in-progress install: install for an uninstall. MSI (c) (18:3C) [12:18:21:847]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes. MSI (c) (18:3C) [12:18:21:847]: Creating MSIHANDLE (2) of type 790537 for thread 17724 MSI (c) (18:3C) [12:18:21:847]: MsiOpenPackageEx is returning 0 MSI (c) (18:3C) [12:18:21:847]: MsiOpenPackage is returning 0 MSI (c) (18:3C) [12:18:21:847]: Closing MSIHANDLE (2) of type 790537 for thread 17724 === Verbose logging stopped: 9/1/2020 12:18:21 === setup::MsiInstaller::install: Installed version: {604350BF-BE9A-4F79-B0EB-B1C22D889E2D}, version: 1.8.77.0 setup::MsiInstaller::install: Performing major upgrade setup::MsiInstaller::cleanInstall: Running clean install setup::MsiInstaller::installOrUpgrade: Executing: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi INSTALLDIR="" REBOOT=ReallySuppress INSTALLINGVERSION="1.9.2235.0" setup::MsiInstaller::tryRunMsi: Running MSI command, attempt (1 of 10) === Verbose logging started: 9/1/2020 12:18:21 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (18:1C) [12:18:21:873]: Resetting cached policy values MSI (c) (18:1C) [12:18:21:873]: Machine policy value 'Debug' is 0 MSI (c) (18:1C) [12:18:21:873]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (c) (18:1C) [12:18:21:875]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (18:1C) [12:18:24:875]: Failed to grab execution mutex. System error 258. MSI (c) (18:1C) [12:18:24:879]: Cloaking enabled. MSI (c) (18:1C) [12:18:24:879]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (18:1C) [12:18:24:879]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (c) (18:1C) [12:18:24:881]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (18:1C) [12:18:24:883]: MainEngineThread is returning 1618 === Verbose logging stopped: 9/1/2020 12:18:24 === setup::MsiInstaller::tryRunMsi: Another installer is running, retrying in 30 sec setup::MsiInstaller::tryRunMsi: Running MSI command, attempt (2 of 10) === Verbose logging started: 9/1/2020 12:18:54 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (18:DC) [12:18:54:891]: Resetting cached policy values MSI (c) (18:DC) [12:18:54:891]: Machine policy value 'Debug' is 0 MSI (c) (18:DC) [12:18:54:891]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (c) (18:DC) [12:18:54:891]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (18:DC) [12:18:57:891]: Failed to grab execution mutex. System error 258. MSI (c) (18:DC) [12:18:57:893]: Cloaking enabled. MSI (c) (18:DC) [12:18:57:893]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (18:DC) [12:18:57:893]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (c) (18:DC) [12:18:57:895]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (18:DC) [12:18:57:897]: MainEngineThread is returning 1618 === Verbose logging stopped: 9/1/2020 12:18:57 === setup::MsiInstaller::tryRunMsi: Another installer is running, retrying in 30 sec setup::MsiInstaller::tryRunMsi: Running MSI command, attempt (3 of 10) === Verbose logging started: 9/1/2020 12:19:27 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (18:E0) [12:19:27:906]: Resetting cached policy values MSI (c) (18:E0) [12:19:27:906]: Machine policy value 'Debug' is 0 MSI (c) (18:E0) [12:19:27:906]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (c) (18:E0) [12:19:27:906]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (18:E0) [12:19:30:906]: Failed to grab execution mutex. System error 258. MSI (c) (18:E0) [12:19:30:908]: Cloaking enabled. MSI (c) (18:E0) [12:19:30:908]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (18:E0) [12:19:30:908]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (c) (18:E0) [12:19:30:911]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (18:E0) [12:19:30:911]: MainEngineThread is returning 1618 === Verbose logging stopped: 9/1/2020 12:19:30 === setup::MsiInstaller::tryRunMsi: Another installer is running, retrying in 30 sec setup::MsiInstaller::tryRunMsi: Running MSI command, attempt (4 of 10) === Verbose logging started: 9/1/2020 12:20:00 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (18:C4) [12:20:00:919]: Resetting cached policy values MSI (c) (18:C4) [12:20:00:919]: Machine policy value 'Debug' is 0 MSI (c) (18:C4) [12:20:00:919]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (c) (18:C4) [12:20:00:919]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (18:C4) [12:20:03:920]: Failed to grab execution mutex. System error 258. MSI (c) (18:C4) [12:20:03:922]: Cloaking enabled. MSI (c) (18:C4) [12:20:03:922]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (18:C4) [12:20:03:922]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (c) (18:C4) [12:20:03:924]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (18:C4) [12:20:03:926]: MainEngineThread is returning 1618 === Verbose logging stopped: 9/1/2020 12:20:03 === setup::MsiInstaller::tryRunMsi: Another installer is running, retrying in 30 sec setup::MsiInstaller::tryRunMsi: Running MSI command, attempt (5 of 10) === Verbose logging started: 9/1/2020 12:20:33 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (18:C0) [12:20:33:934]: Resetting cached policy values MSI (c) (18:C0) [12:20:33:934]: Machine policy value 'Debug' is 0 MSI (c) (18:C0) [12:20:33:934]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (c) (18:C0) [12:20:33:934]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (18:C0) [12:20:36:934]: Failed to grab execution mutex. System error 258. MSI (c) (18:C0) [12:20:36:936]: Cloaking enabled. MSI (c) (18:C0) [12:20:36:936]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (18:C0) [12:20:36:936]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (c) (18:C0) [12:20:36:938]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (18:C0) [12:20:36:940]: MainEngineThread is returning 1618 === Verbose logging stopped: 9/1/2020 12:20:36 === setup::MsiInstaller::tryRunMsi: Another installer is running, retrying in 30 sec setup::MsiInstaller::tryRunMsi: Running MSI command, attempt (6 of 10) === Verbose logging started: 9/1/2020 12:21:06 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (18:F4) [12:21:06:948]: Resetting cached policy values MSI (c) (18:F4) [12:21:06:948]: Machine policy value 'Debug' is 0 MSI (c) (18:F4) [12:21:06:948]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (c) (18:F4) [12:21:06:948]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (18:F4) [12:21:09:948]: Failed to grab execution mutex. System error 258. MSI (c) (18:F4) [12:21:09:950]: Cloaking enabled. MSI (c) (18:F4) [12:21:09:950]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (18:F4) [12:21:09:950]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (c) (18:F4) [12:21:09:953]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (18:F4) [12:21:09:953]: MainEngineThread is returning 1618 === Verbose logging stopped: 9/1/2020 12:21:09 === setup::MsiInstaller::tryRunMsi: Another installer is running, retrying in 30 sec setup::MsiInstaller::tryRunMsi: Running MSI command, attempt (7 of 10) === Verbose logging started: 9/1/2020 12:21:39 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (18:CC) [12:21:39:961]: Resetting cached policy values MSI (c) (18:CC) [12:21:39:961]: Machine policy value 'Debug' is 0 MSI (c) (18:CC) [12:21:39:961]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (c) (18:CC) [12:21:39:961]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (18:CC) [12:21:42:961]: Failed to grab execution mutex. System error 258. MSI (c) (18:CC) [12:21:42:962]: Cloaking enabled. MSI (c) (18:CC) [12:21:42:962]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (18:CC) [12:21:42:962]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (c) (18:CC) [12:21:42:963]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (18:CC) [12:21:42:964]: MainEngineThread is returning 1618 === Verbose logging stopped: 9/1/2020 12:21:42 === setup::MsiInstaller::tryRunMsi: Another installer is running, retrying in 30 sec setup::MsiInstaller::tryRunMsi: Running MSI command, attempt (8 of 10) === Verbose logging started: 9/1/2020 12:22:12 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (18:8C) [12:22:12:971]: Resetting cached policy values MSI (c) (18:8C) [12:22:12:971]: Machine policy value 'Debug' is 0 MSI (c) (18:8C) [12:22:12:971]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (c) (18:8C) [12:22:12:971]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (18:8C) [12:22:15:972]: Failed to grab execution mutex. System error 258. MSI (c) (18:8C) [12:22:15:974]: Cloaking enabled. MSI (c) (18:8C) [12:22:15:974]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (18:8C) [12:22:15:974]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (c) (18:8C) [12:22:15:976]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (18:8C) [12:22:15:978]: MainEngineThread is returning 1618 === Verbose logging stopped: 9/1/2020 12:22:15 === setup::MsiInstaller::tryRunMsi: Another installer is running, retrying in 30 sec setup::MsiInstaller::tryRunMsi: Running MSI command, attempt (9 of 10) === Verbose logging started: 9/1/2020 12:22:45 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (18:A0) [12:22:45:984]: Resetting cached policy values MSI (c) (18:A0) [12:22:45:984]: Machine policy value 'Debug' is 0 MSI (c) (18:A0) [12:22:45:984]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (c) (18:A0) [12:22:45:986]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (18:A0) [12:22:48:986]: Failed to grab execution mutex. System error 258. MSI (c) (18:A0) [12:22:48:988]: Cloaking enabled. MSI (c) (18:A0) [12:22:48:988]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (18:A0) [12:22:48:988]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (c) (18:A0) [12:22:48:990]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (18:A0) [12:22:48:990]: MainEngineThread is returning 1618 === Verbose logging stopped: 9/1/2020 12:22:48 === setup::MsiInstaller::tryRunMsi: Another installer is running, retrying in 30 sec setup::MsiInstaller::tryRunMsi: Running MSI command, attempt (10 of 10) === Verbose logging started: 9/1/2020 12:23:18 Build type: SHIP UNICODE 5.00.10011.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (18:08) [12:23:18:999]: Resetting cached policy values MSI (c) (18:08) [12:23:18:999]: Machine policy value 'Debug' is 0 MSI (c) (18:08) [12:23:18:999]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64\Sophos Network Threat Protection.msi ******* Action: ******* CommandLine: ********** MSI (c) (18:08) [12:23:18:999]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (18:08) [12:23:22:000]: Failed to grab execution mutex. System error 258. MSI (c) (18:08) [12:23:22:001]: Cloaking enabled. MSI (c) (18:08) [12:23:22:001]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (18:08) [12:23:22:001]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (c) (18:08) [12:23:22:003]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (18:08) [12:23:22:003]: MainEngineThread is returning 1618 === Verbose logging stopped: 9/1/2020 12:23:22 === setup::MsiInstaller::installOrUpgrade: Install/upgrade returned 1618 `anonymous-namespace'::setResult: installation failed setup::TamperProtectionControl::enable: Registered tamper protection integrity.dat for NTP setup::TamperProtectionControl::enable: Enabled tamper protection for NTP ProductSetup::~ProductSetup: End product setup