2014-04-29 09:39:30 Info: Logging started: installing/upgrading Sophos Anti-Virus 2014-04-29 09:39:30 Info: InstallFromPath is: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\ 2014-04-29 09:39:30 Info: InstallToPath is: 2014-04-29 09:39:30 Detected version of SAV with product code: {4320988A-7DE0-478D-A38B-CE9509BCE320} 2014-04-29 09:39:30 Info: SAV is not installed. Installing to {InstallToPath} 2014-04-29 09:39:30 Info: Standalone install 2014-04-29 09:39:31 Info: Performing major update of Sophos Anti-Virus using msi. 2014-04-29 09:39:31 Info: Update is signalled. 2014-04-29 09:39:31 Info: PutSetupOptionsToRegistry 2014-04-29 09:39:31 Info: Install MSXML 2014-04-29 09:39:31 Info: Check boot driver and kms driver 2014-04-29 09:39:31 Info: no existing installation of Sophos Anti-Virus was found 2014-04-29 09:39:31 Info: Transform file returned: 2014-04-29 09:39:31 Info: SAV Setup plugin: running MsiInstallProduct (C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Sophos Anti-Virus.msi, INSTALLDIR="" REBOOT=ReallySuppress UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1) === Verbose logging started: 29-4-2014 09:39:32 Build type: SHIP UNICODE 5.00.9600.00 Calling process: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\alupdate.exe === MSI (c) (10:CC) [09:39:32:368]: Resetting cached policy values MSI (c) (10:CC) [09:39:32:368]: Machine policy value 'Debug' is 0 MSI (c) (10:CC) [09:39:32:368]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Sophos Anti-Virus.msi ******* Action: ******* CommandLine: ********** MSI (c) (10:CC) [09:39:32:377]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (10:CC) [09:39:32:377]: Grabbed execution mutex. MSI (c) (10:CC) [09:39:34:040]: Cloaking enabled. MSI (c) (10:CC) [09:39:34:040]: Attempting to enable all disabled privileges before calling Install on Server MSI (c) (10:CC) [09:39:34:042]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (F8:CC) [09:39:34:059]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Sophos Anti-Virus.msi MSI (s) (F8:CC) [09:39:34:059]: Grabbed execution mutex. MSI (s) (F8:48) [09:39:34:067]: Resetting cached policy values MSI (s) (F8:48) [09:39:34:067]: Machine policy value 'Debug' is 0 MSI (s) (F8:48) [09:39:34:067]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Sophos Anti-Virus.msi ******* Action: ******* CommandLine: ********** MSI (s) (F8:48) [09:39:34:067]: Machine policy value 'DisableUserInstalls' is 0 MSI (s) (F8:48) [09:39:34:083]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038 MSI (s) (F8:48) [09:39:34:087]: SRSetRestorePoint skipped for this transaction. MSI (s) (F8:48) [09:39:34:089]: MSCOREE not loaded loading copy from system32 MSI (s) (F8:48) [09:39:34:296]: End dialog not enabled MSI (s) (F8:48) [09:39:34:296]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Sophos Anti-Virus.msi MSI (s) (F8:48) [09:39:34:296]: Package we're running from ==> C:\Windows\Installer\f44c82.msi MSI (s) (F8:48) [09:39:34:301]: APPCOMPAT: Uninstall Flags override found. MSI (s) (F8:48) [09:39:34:301]: APPCOMPAT: Uninstall VersionNT override found. MSI (s) (F8:48) [09:39:34:301]: APPCOMPAT: Uninstall ServicePackLevel override found. MSI (s) (F8:48) [09:39:34:345]: APPCOMPAT: looking for appcompat database entry with ProductCode '{4320988A-7DE0-478D-A38B-CE9509BCE320}'. MSI (s) (F8:48) [09:39:34:346]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (F8:48) [09:39:35:951]: Machine policy value 'DisablePatch' is 0 MSI (s) (F8:48) [09:39:35:951]: Machine policy value 'AllowLockdownPatch' is 0 MSI (s) (F8:48) [09:39:35:951]: Machine policy value 'DisableLUAPatching' is 0 MSI (s) (F8:48) [09:39:35:951]: Machine policy value 'DisableFlyWeightPatching' is 0 MSI (s) (F8:48) [09:39:35:951]: APPCOMPAT: looking for appcompat database entry with ProductCode '{4320988A-7DE0-478D-A38B-CE9509BCE320}'. MSI (s) (F8:48) [09:39:35:951]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (F8:48) [09:39:35:951]: Transforms are not secure. MSI (s) (F8:48) [09:39:35:952]: Note: 1: 2205 2: 3: Control MSI (s) (F8:48) [09:39:35:952]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\WINDOWS\TEMP\Sophos Anti-Virus Major Install Log_140429_083931.txt'. MSI (s) (F8:48) [09:39:35:952]: Command Line: INSTALLDIR= REBOOT=ReallySuppress UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=0 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1 CURRENTDIRECTORY=C:\WINDOWS\system32 CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=3856 MSI (s) (F8:48) [09:39:35:952]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{A585B546-7378-4F66-A471-ED4AC4BD0B43}'. MSI (s) (F8:48) [09:39:35:952]: Product Code passed to Engine.Initialize: '{4320988A-7DE0-478D-A38B-CE9509BCE320}' MSI (s) (F8:48) [09:39:35:952]: Product Code from property table before transforms: '{4320988A-7DE0-478D-A38B-CE9509BCE320}' MSI (s) (F8:48) [09:39:35:952]: Product Code from property table after transforms: '{4320988A-7DE0-478D-A38B-CE9509BCE320}' MSI (s) (F8:48) [09:39:35:952]: Product registered: entering maintenance mode MSI (s) (F8:48) [09:39:35:952]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine. MSI (s) (F8:48) [09:39:35:952]: Product {4320988A-7DE0-478D-A38B-CE9509BCE320} is admin assigned: LocalSystem owns the publish key. MSI (s) (F8:48) [09:39:35:952]: Product {4320988A-7DE0-478D-A38B-CE9509BCE320} is managed. MSI (s) (F8:48) [09:39:35:952]: MSI_LUA: Credential prompt not required, user is an admin MSI (s) (F8:48) [09:39:35:952]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'. MSI (s) (F8:48) [09:39:35:952]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'. MSI (s) (F8:48) [09:39:35:952]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 MSI (s) (F8:48) [09:39:35:952]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (s) (F8:48) [09:39:35:952]: Specifed source is not already in a list. MSI (s) (F8:48) [09:39:35:952]: User policy value 'SearchOrder' is 'nmu' MSI (s) (F8:48) [09:39:35:952]: Machine policy value 'DisableBrowse' is 0 MSI (s) (F8:48) [09:39:35:952]: Machine policy value 'AllowLockdownBrowse' is 0 MSI (s) (F8:48) [09:39:35:952]: Adding new sources is allowed. MSI (s) (F8:48) [09:39:35:952]: Package name retrieved from configuration data: 'Sophos Anti-Virus.msi' MSI (s) (F8:48) [09:39:35:980]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (s) (F8:48) [09:39:35:980]: Machine policy value 'DisableMsi' is 0 MSI (s) (F8:48) [09:39:35:980]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (F8:48) [09:39:35:980]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (F8:48) [09:39:35:980]: Product {4320988A-7DE0-478D-A38B-CE9509BCE320} is admin assigned: LocalSystem owns the publish key. MSI (s) (F8:48) [09:39:35:980]: Product {4320988A-7DE0-478D-A38B-CE9509BCE320} is managed. MSI (s) (F8:48) [09:39:35:980]: Running product '{4320988A-7DE0-478D-A38B-CE9509BCE320}' with elevated privileges: Product is assigned. MSI (s) (F8:48) [09:39:35:980]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'. MSI (s) (F8:48) [09:39:35:980]: PROPERTY CHANGE: Modifying UPDATECLASSFILTER property. Its current value is '0'. Its new value: '1'. MSI (s) (F8:48) [09:39:35:980]: PROPERTY CHANGE: Adding UPDATEKMSDRIVERS property. Its value is '1'. MSI (s) (F8:48) [09:39:35:980]: PROPERTY CHANGE: Modifying MANAGED property. Its current value is '1'. Its new value: '0'. MSI (s) (F8:48) [09:39:35:980]: PROPERTY CHANGE: Modifying DATACONTROL property. Its current value is '0'. Its new value: '1'. MSI (s) (F8:48) [09:39:35:980]: PROPERTY CHANGE: Modifying DEVICECONTROL property. Its current value is '0'. Its new value: '1'. MSI (s) (F8:48) [09:39:35:980]: PROPERTY CHANGE: Adding WEBCONTROL property. Its value is '1'. MSI (s) (F8:48) [09:39:35:980]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\WINDOWS\system32'. MSI (s) (F8:48) [09:39:35:980]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'. MSI (s) (F8:48) [09:39:35:980]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'. MSI (s) (F8:48) [09:39:35:980]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '3856'. MSI (s) (F8:48) [09:39:35:980]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0 MSI (s) (F8:48) [09:39:35:980]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality. MSI (s) (F8:48) [09:39:35:980]: TRANSFORMS property is now: MSI (s) (F8:48) [09:39:35:980]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'. MSI (s) (F8:48) [09:39:35:980]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'. MSI (s) (F8:48) [09:39:35:982]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming MSI (s) (F8:48) [09:39:35:983]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Favorites MSI (s) (F8:48) [09:39:35:983]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts MSI (s) (F8:48) [09:39:35:984]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Documents MSI (s) (F8:48) [09:39:35:984]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts MSI (s) (F8:48) [09:39:35:985]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent MSI (s) (F8:48) [09:39:35:985]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo MSI (s) (F8:48) [09:39:35:986]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates MSI (s) (F8:48) [09:39:35:986]: SHELL32::SHGetFolderPath returned: C:\ProgramData MSI (s) (F8:48) [09:39:35:986]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Local MSI (s) (F8:48) [09:39:35:987]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Pictures MSI (s) (F8:48) [09:39:35:988]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (F8:48) [09:39:35:988]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (F8:48) [09:39:35:989]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs MSI (s) (F8:48) [09:39:35:989]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu MSI (s) (F8:48) [09:39:35:990]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop MSI (s) (F8:48) [09:39:35:991]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools MSI (s) (F8:48) [09:39:35:991]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MSI (s) (F8:48) [09:39:35:992]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs MSI (s) (F8:48) [09:39:35:992]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu MSI (s) (F8:48) [09:39:35:993]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Desktop MSI (s) (F8:48) [09:39:35:994]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates MSI (s) (F8:48) [09:39:35:994]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts MSI (s) (F8:48) [09:39:35:996]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (s) (F8:48) [09:39:35:999]: MSI_LUA: Setting AdminUser property to 1 because the product is already installed managed and per-machine MSI (s) (F8:48) [09:39:35:999]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated. MSI (s) (F8:48) [09:39:35:999]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'. MSI (s) (F8:48) [09:39:35:999]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (s) (F8:48) [09:39:35:999]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (F8:48) [09:39:35:999]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Gebruiker'. MSI (s) (F8:48) [09:39:35:999]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (F8:48) [09:39:35:999]: PROPERTY CHANGE: Adding Installed property. Its value is '00:00:00'. MSI (s) (F8:48) [09:39:35:999]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\f44c82.msi'. MSI (s) (F8:48) [09:39:35:999]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Sophos Anti-Virus.msi'. MSI (s) (F8:48) [09:39:35:999]: Machine policy value 'MsiDisableEmbeddedUI' is 0 MSI (s) (F8:48) [09:39:35:999]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI MSI (s) (F8:48) [09:39:35:999]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install MSI (s) (F8:48) [09:39:36:000]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (F8:48) [09:39:36:000]: Machine policy value 'DisableRollback' is 0 MSI (s) (F8:48) [09:39:36:000]: User policy value 'DisableRollback' is 0 MSI (s) (F8:48) [09:39:36:000]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. === Logging started: 29-4-2014 09:39:35 === MSI (s) (F8:48) [09:39:36:000]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038 MSI (s) (F8:48) [09:39:36:000]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes. MSI (s) (F8:48) [09:39:36:008]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'. MSI (s) (F8:48) [09:39:36:008]: Doing action: INSTALL Action start 09:39:36: INSTALL. MSI (s) (F8:48) [09:39:36:008]: Running ExecuteSequence MSI (s) (F8:48) [09:39:36:008]: Doing action: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C MSI (s) (F8:48) [09:39:36:009]: PROPERTY CHANGE: Adding SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\SysWOW64\'. Action start 09:39:36: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C. MSI (s) (F8:48) [09:39:36:009]: Doing action: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA Action ended 09:39:36: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C. Return value 1. MSI (s) (F8:48) [09:39:36:009]: PROPERTY CHANGE: Adding SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\SysWOW64\'. Action start 09:39:36: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA. MSI (s) (F8:48) [09:39:36:009]: Doing action: AppSearch Action ended 09:39:36: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA. Return value 1. Action start 09:39:36: AppSearch. MSI (s) (F8:48) [09:39:36:010]: Note: 1: 2262 2: Signature 3: -2147287038 MSI (s) (F8:48) [09:39:36:010]: PROPERTY CHANGE: Adding SWCSERVICEFILEEXISTS.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\'. MSI (s) (F8:48) [09:39:36:010]: Doing action: LaunchConditions Action ended 09:39:36: AppSearch. Return value 1. Action start 09:39:36: LaunchConditions. MSI (s) (F8:48) [09:39:36:011]: Skipping action: CheckUserIsSophosAdmin (condition is false) MSI (s) (F8:48) [09:39:36:011]: Skipping action: TP_CheckRemoveAllowed (condition is false) MSI (s) (F8:48) [09:39:36:011]: Doing action: FindRelatedProducts Action ended 09:39:36: LaunchConditions. Return value 1. MSI (s) (F8:48) [09:39:36:011]: Skipping FindRelatedProducts action: not run in maintenance mode Action start 09:39:36: FindRelatedProducts. MSI (s) (F8:48) [09:39:36:011]: Skipping action: CCPSearch (condition is false) MSI (s) (F8:48) [09:39:36:011]: Skipping action: RMCCPSearch (condition is false) MSI (s) (F8:48) [09:39:36:011]: Doing action: ValidateProductID Action ended 09:39:36: FindRelatedProducts. Return value 0. Action start 09:39:36: ValidateProductID. MSI (s) (F8:48) [09:39:36:011]: Doing action: setUserProfileNT Action ended 09:39:36: ValidateProductID. Return value 1. MSI (s) (F8:48) [09:39:36:012]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Users\Default'. Action start 09:39:36: setUserProfileNT. MSI (s) (F8:48) [09:39:36:012]: Skipping action: SetAllUsersProfileNT (condition is false) MSI (s) (F8:48) [09:39:36:012]: Doing action: setAllUsersProfile2K Action ended 09:39:36: setUserProfileNT. Return value 1. MSI (s) (F8:48) [09:39:36:012]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\ProgramData'. Action start 09:39:36: setAllUsersProfile2K. MSI (s) (F8:48) [09:39:36:012]: Doing action: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA Action ended 09:39:36: setAllUsersProfile2K. Return value 1. MSI (s) (F8:48) [09:39:36:013]: PROPERTY CHANGE: Adding WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\'. Action start 09:39:36: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA. MSI (s) (F8:48) [09:39:36:013]: Doing action: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C Action ended 09:39:36: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA. Return value 1. MSI (s) (F8:48) [09:39:36:013]: PROPERTY CHANGE: Adding WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\'. Action start 09:39:36: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C. MSI (s) (F8:48) [09:39:36:013]: Doing action: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 Action ended 09:39:36: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C. Return value 1. MSI (s) (F8:48) [09:39:36:013]: PROPERTY CHANGE: Adding WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\WINDOWS\'. Action start 09:39:36: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207. MSI (s) (F8:48) [09:39:36:014]: Doing action: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC Action ended 09:39:36: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207. Return value 1. MSI (s) (F8:48) [09:39:36:014]: PROPERTY CHANGE: Adding WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\WINDOWS\'. Action start 09:39:36: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC. MSI (s) (F8:48) [09:39:36:014]: Doing action: CostInitialize Action ended 09:39:36: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC. Return value 1. MSI (s) (F8:48) [09:39:36:014]: Machine policy value 'MaxPatchCacheSize' is 10 MSI (s) (F8:48) [09:39:36:052]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'D:\'. MSI (s) (F8:48) [09:39:36:053]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'. MSI (s) (F8:48) [09:39:36:053]: Note: 1: 2205 2: 3: Patch MSI (s) (F8:48) [09:39:36:053]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (F8:48) [09:39:36:053]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (F8:48) [09:39:36:053]: Note: 1: 2205 2: 3: __MsiPatchFileList MSI (s) (F8:48) [09:39:36:053]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (F8:48) [09:39:36:053]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId` MSI (s) (F8:48) [09:39:36:053]: Note: 1: 2205 2: 3: Patch Action start 09:39:36: CostInitialize. MSI (s) (F8:48) [09:39:36:053]: Doing action: FileCost Action ended 09:39:36: CostInitialize. Return value 1. MSI (s) (F8:48) [09:39:36:056]: Note: 1: 2262 2: Extension 3: -2147287038 Action start 09:39:36: FileCost. MSI (s) (F8:48) [09:39:36:056]: Skipping action: SetMFC71 (condition is false) MSI (s) (F8:48) [09:39:36:056]: Doing action: IsolateComponents Action ended 09:39:36: FileCost. Return value 1. Action start 09:39:36: IsolateComponents. MSI (s) (F8:48) [09:39:36:057]: Doing action: InstallLocationWorkaround Action ended 09:39:36: IsolateComponents. Return value 0. Action start 09:39:36: InstallLocationWorkaround. MSI (s) (F8:48) [09:39:36:057]: Doing action: CostFinalize Action ended 09:39:36: InstallLocationWorkaround. Return value 1. MSI (s) (F8:48) [09:39:36:057]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'. MSI (s) (F8:48) [09:39:36:057]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'. MSI (s) (F8:48) [09:39:36:057]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'. MSI (s) (F8:48) [09:39:36:057]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'. MSI (s) (F8:48) [09:39:36:057]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'. MSI (s) (F8:48) [09:39:36:057]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus'. MSI (s) (F8:48) [09:39:36:058]: PROPERTY CHANGE: Adding INSTALL property. Its value is 'C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install'. MSI (s) (F8:48) [09:39:36:081]: PROPERTY CHANGE: Adding CONFIG property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'. MSI (s) (F8:48) [09:39:36:082]: PROPERTY CHANGE: Adding INFECTED property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED'. MSI (s) (F8:48) [09:39:36:082]: PROPERTY CHANGE: Adding LOGS property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\logs'. MSI (s) (F8:48) [09:39:36:082]: PROPERTY CHANGE: Adding TEMP property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Temp'. MSI (s) (F8:48) [09:39:36:082]: PROPERTY CHANGE: Adding CACHE property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Cache'. MSI (s) (F8:48) [09:39:36:082]: PROPERTY CHANGE: Adding LOGS1 property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\logs'. MSI (s) (F8:48) [09:39:36:082]: PROPERTY CHANGE: Adding LOGS2 property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\logs'. MSI (s) (F8:48) [09:39:36:082]: PROPERTY CHANGE: Adding LOGS3 property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\logs'. MSI (s) (F8:48) [09:39:36:098]: PROPERTY CHANGE: Adding INSTALLDIR_X64 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus'. MSI (s) (F8:48) [09:39:36:137]: PROPERTY CHANGE: Adding WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control'. MSI (s) (F8:48) [09:39:36:157]: PROPERTY CHANGE: Adding SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence'. MSI (s) (F8:48) [09:39:36:157]: Note: 1: 2205 2: 3: Patch MSI (s) (F8:48) [09:39:36:157]: Note: 1: 2205 2: 3: Condition MSI (s) (F8:48) [09:39:36:157]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'D:\'. MSI (s) (F8:48) [09:39:36:157]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\WINDOWS\winsxs\'. MSI (s) (F8:48) [09:39:36:157]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\WINDOWS\winsxs\Policies\'. MSI (s) (F8:48) [09:39:36:157]: PROPERTY CHANGE: Adding policydir.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\'. MSI (s) (F8:48) [09:39:36:157]: PROPERTY CHANGE: Adding payload_ul.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f47e1bd6f6571810\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\WINDOWS\winsxs\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\WINDOWS\winsxs\Policies\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding policydir.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding payload_ul.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f0efb442f8a0f46c\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding policydir_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\Policies\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding policydir.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding WinSxsManifests.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\Manifests\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding payload_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding policydir_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\Policies\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding policydir.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding WinSxsManifests.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\Manifests\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding payload_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_51ca66a2bbe76806\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding newfolder1 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding newfolder2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding NEW_DIRECTORY2 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\'. MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Adding System16Folder property. Its value is 'D:\'. MSI (s) (F8:48) [09:39:36:158]: WIN64DUALFOLDERS: 'C:\WINDOWS\SysWOW64\' will substitute 20 characters in 'C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1). MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Modifying SendToFolder property. Its current value is 'C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\'. Its new value: 'C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\'. MSI (s) (F8:48) [09:39:36:158]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0). MSI (s) (F8:48) [09:39:36:158]: PROPERTY CHANGE: Modifying ProgramFiles64Folder property. Its current value is 'C:\Program Files\'. Its new value: 'C:\Program Files (x86)\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'D:\'. MSI (s) (F8:48) [09:39:36:159]: WIN64DUALFOLDERS: 'C:\WINDOWS\SysWOW64\' will substitute 20 characters in 'C:\WINDOWS\system32\config\systemprofile\AppData\Local\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1). MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Modifying LocalAppDataFolder property. Its current value is 'C:\WINDOWS\system32\config\systemprofile\AppData\Local\'. Its new value: 'C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Local\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Adding GlobalAssemblyCache property. Its value is 'D:\'. MSI (s) (F8:48) [09:39:36:159]: WIN64DUALFOLDERS: 'C:\WINDOWS\SysWOW64\' will substitute 20 characters in 'C:\WINDOWS\system32\config\systemprofile\Favorites\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1). MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Modifying FavoritesFolder property. Its current value is 'C:\WINDOWS\system32\config\systemprofile\Favorites\'. Its new value: 'C:\WINDOWS\SysWOW64\config\systemprofile\Favorites\'. MSI (s) (F8:48) [09:39:36:159]: WIN64DUALFOLDERS: 'C:\Program Files (x86)\' will substitute 17 characters in 'C:\Program Files\Common Files\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 0). MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Modifying CommonFiles64Folder property. Its current value is 'C:\Program Files\Common Files\'. Its new value: 'C:\Program Files (x86)\Common Files\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Users\Default'. Its new value: 'C:\Users\Default\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Modifying ALLUSERSPROFILE property. Its current value is 'C:\ProgramData'. Its new value: 'C:\ProgramData\'. MSI (s) (F8:48) [09:39:36:159]: WIN64DUALFOLDERS: 'C:\WINDOWS\SysWOW64\' will substitute 20 characters in 'C:\WINDOWS\system32\' folder path. (mask argument = 0, the folder pair's iSwapAttrib member = 1). MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Modifying System64Folder property. Its current value is 'C:\WINDOWS\system32\'. Its new value: 'C:\WINDOWS\SysWOW64\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Adding SOPHOS property. Its value is 'C:\Program Files (x86)\Sophos\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Adding SOPHOS_ANTI_VIRUS property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Modifying INSTALLDIR property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Modifying SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Modifying WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Modifying INSTALLDIR_X64 property. Its current value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Adding INSTALLDIR_WIN32 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Adding INSTALLDIR_IA64 property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Adding NEW_DIRECTORY1 property. Its value is 'C:\ProgramData\Sophos\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Adding SOPHOS_TAMPER_PROTECTION property. Its value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Modifying LOGS3 property. Its current value is 'C:\ProgramData\Sophos\Sophos Tamper Protection\logs'. Its new value: 'C:\ProgramData\Sophos\Sophos Tamper Protection\logs\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Adding SOPHOS_DEVICE_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Device Control\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Modifying LOGS2 property. Its current value is 'C:\ProgramData\Sophos\Sophos Device Control\logs'. Its new value: 'C:\ProgramData\Sophos\Sophos Device Control\logs\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Adding SOPHOS_DATA_CONTROL property. Its value is 'C:\ProgramData\Sophos\Sophos Data Control\'. MSI (s) (F8:48) [09:39:36:159]: PROPERTY CHANGE: Modifying LOGS1 property. Its current value is 'C:\ProgramData\Sophos\Sophos Data Control\logs'. Its new value: 'C:\ProgramData\Sophos\Sophos Data Control\logs\'. MSI (s) (F8:48) [09:39:36:160]: PROPERTY CHANGE: Adding RESOURCES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\'. MSI (s) (F8:48) [09:39:36:160]: PROPERTY CHANGE: Adding RES property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'. MSI (s) (F8:48) [09:39:36:160]: PROPERTY CHANGE: Adding NEW_DIRECTORY3 property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Res\'. MSI (s) (F8:48) [09:39:36:160]: PROPERTY CHANGE: Modifying CACHE property. Its current value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Cache'. Its new value: 'C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\'. MSI (s) (F8:48) [09:39:36:160]: PROPERTY CHANGE: Modifying TEMP property. Its current value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Temp'. Its new value: 'C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\'. MSI (s) (F8:48) [09:39:36:160]: PROPERTY CHANGE: Modifying LOGS property. Its current value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\logs'. Its new value: 'C:\ProgramData\Sophos\Sophos Anti-Virus\logs\'. MSI (s) (F8:48) [09:39:36:160]: PROPERTY CHANGE: Modifying INFECTED property. Its current value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED'. Its new value: 'C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\'. MSI (s) (F8:48) [09:39:36:160]: PROPERTY CHANGE: Modifying CONFIG property. Its current value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'. Its new value: 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config\'. MSI (s) (F8:48) [09:39:36:160]: PROPERTY CHANGE: Adding CISCO_SYSTEMS property. Its value is 'C:\Program Files (x86)\Common Files\Cisco Systems\'. MSI (s) (F8:48) [09:39:36:160]: PROPERTY CHANGE: Adding CISCOTRUSTAGENT property. Its value is 'C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\'. MSI (s) (F8:48) [09:39:36:160]: PROPERTY CHANGE: Adding PLUGINS property. Its value is 'C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\'. MSI (s) (F8:48) [09:39:36:160]: PROPERTY CHANGE: Modifying INSTALL property. Its current value is 'C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install'. Its new value: 'C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\'. MSI (s) (F8:48) [09:39:36:160]: Target path resolution complete. Dumping Directory table... MSI (s) (F8:48) [09:39:36:160]: Note: target paths subject to change (via custom actions or browsing) MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: TARGETDIR , Object: D:\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\WINDOWS\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\WINDOWS\winsxs\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\WINDOWS\winsxs\Policies\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: policydir.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: payload_ul.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f47e1bd6f6571810\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\WINDOWS\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\WINDOWS\winsxs\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\WINDOWS\winsxs\Policies\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: policydir.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: payload_ul.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f0efb442f8a0f46c\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WinSxsDirectory.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: policydir_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WinSxsPolicies.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\Policies\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: policydir.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WinSxsManifests.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\Manifests\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: payload_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\SysWOW64\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WinSxsDirectory.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: policydir_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WinSxsPolicies.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\Policies\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: policydir.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WinSxsManifests.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\Manifests\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: payload_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_51ca66a2bbe76806\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\SysWOW64\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: ProgramMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: newfolder1 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: newfolder2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: StartMenuFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WindowsVolume , Object: C:\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WindowsFolder , Object: C:\WINDOWS\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: TemplateFolder , Object: C:\ProgramData\Microsoft\Windows\Templates\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: TempFolder , Object: C:\WINDOWS\TEMP\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: System16Folder , Object: D:\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: StartupFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: SendToFolder , Object: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: ProgramFiles64Folder , Object: C:\Program Files (x86)\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: PrimaryVolumePath , Object: D:\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: LocalAppDataFolder , Object: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Local\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: GlobalAssemblyCache , Object: D:\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: FontsFolder , Object: C:\WINDOWS\Fonts\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: FavoritesFolder , Object: C:\WINDOWS\SysWOW64\config\systemprofile\Favorites\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: DesktopFolder , Object: C:\Users\Public\Desktop\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: CommonFiles64Folder , Object: C:\Program Files (x86)\Common Files\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: AdminToolsFolder , Object: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: USERPROFILE , Object: C:\Users\Default\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: ALLUSERSPROFILE , Object: C:\ProgramData\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: System64Folder , Object: C:\WINDOWS\SysWOW64\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: SystemFolder , Object: C:\WINDOWS\SysWOW64\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files (x86)\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: SOPHOS , Object: C:\Program Files (x86)\Sophos\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: SOPHOS_ANTI_VIRUS , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: INSTALLDIR_X64 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: INSTALLDIR_WIN32 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: INSTALLDIR_IA64 , Object: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: LOGS3 , Object: C:\ProgramData\Sophos\Sophos Tamper Protection\logs\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\Sophos Device Control\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: LOGS2 , Object: C:\ProgramData\Sophos\Sophos Device Control\logs\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\Sophos Data Control\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: LOGS1 , Object: C:\ProgramData\Sophos\Sophos Data Control\logs\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: RESOURCES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: RES , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Res\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: CACHE , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: TEMP , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: LOGS , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\logs\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: INFECTED , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: CONFIG , Object: C:\ProgramData\Sophos\Sophos Anti-Virus\Config\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: CommonFilesFolder , Object: C:\Program Files (x86)\Common Files\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: CISCO_SYSTEMS , Object: C:\Program Files (x86)\Common Files\Cisco Systems\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: CISCOTRUSTAGENT , Object: C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: PLUGINS , Object: C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\ MSI (s) (F8:48) [09:39:36:160]: Dir (target): Key: INSTALL , Object: C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\ Action start 09:39:36: CostFinalize. MSI (s) (F8:48) [09:39:36:161]: Doing action: ResolveSource Action ended 09:39:36: CostFinalize. Return value 1. MSI (s) (F8:48) [09:39:36:162]: Resolving source. MSI (s) (F8:48) [09:39:36:162]: Resolving source to launched-from source. MSI (s) (F8:48) [09:39:36:162]: Setting launched-from source as last-used. MSI (s) (F8:48) [09:39:36:162]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\'. MSI (s) (F8:48) [09:39:36:162]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\'. MSI (s) (F8:48) [09:39:36:162]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{4320988A-7DE0-478D-A38B-CE9509BCE320}'. MSI (s) (F8:48) [09:39:36:162]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\ MSI (s) (F8:48) [09:39:36:162]: SOURCEDIR product ==> {4320988A-7DE0-478D-A38B-CE9509BCE320} MSI (s) (F8:48) [09:39:36:162]: Determining source type MSI (s) (F8:48) [09:39:36:162]: Source type from package 'Sophos Anti-Virus.msi': 0 MSI (s) (F8:48) [09:39:36:162]: Source path resolution complete. Dumping Directory table... MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: TARGETDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\ , LongSubPath: , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\ , LongSubPath: Windows\winsxs\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\Policies\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: policydir.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\Policies\dlpCRTx86\ , LongSubPath: Windows\winsxs\Policies\dlpCRTx86\ , ShortSubPath: Windows\winsxs\Policies\q6krynxr\ MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: payload_ul.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\ulpCRTx86\ , LongSubPath: Windows\winsxs\ulpCRTx86\ , ShortSubPath: Windows\winsxs\01ll_b-5\ MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\ , LongSubPath: Windows\winsxs\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\Policies\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: policydir.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\Policies\dlpATLx86\ , LongSubPath: Windows\winsxs\Policies\dlpATLx86\ , ShortSubPath: Windows\winsxs\Policies\atmex81e\ MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: payload_ul.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\ulpATLx86\ , LongSubPath: Windows\winsxs\ulpATLx86\ , ShortSubPath: Windows\winsxs\kx-fp5sw\ MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WinSxsDirectory.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\ , LongSubPath: Windows\winsxs\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: policydir_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , LongSubPath: Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , ShortSubPath: Windows\winsxs\wof83_qs\ MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WinSxsPolicies.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\Policies\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: policydir.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , LongSubPath: Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , ShortSubPath: Windows\winsxs\Policies\kqdemndt\ MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WinSxsManifests.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\Manifests\ , LongSubPath: Windows\winsxs\Manifests\ , ShortSubPath: Windows\winsxs\e72hoa3e\ MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\dlCRTx86\ , LongSubPath: Windows\winsxs\dlCRTx86\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: payload_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\ulCRTx86\ , LongSubPath: Windows\winsxs\ulCRTx86\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\system32\ , LongSubPath: Windows\system32\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WinSxsDirectory.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\ , LongSubPath: Windows\winsxs\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: policydir_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ , LongSubPath: Windows\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ , ShortSubPath: Windows\winsxs\imvtabx-\ MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WinSxsPolicies.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\Policies\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: policydir.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ , LongSubPath: Windows\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ , ShortSubPath: Windows\winsxs\Policies\pxd_ylb3\ MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WinSxsManifests.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\Manifests\ , LongSubPath: Windows\winsxs\Manifests\ , ShortSubPath: Windows\winsxs\7ivp-it9\ MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\dlATLx86\ , LongSubPath: Windows\winsxs\dlATLx86\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: payload_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\winsxs\ulATLx86\ , LongSubPath: Windows\winsxs\ulATLx86\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\system32\ , LongSubPath: Windows\system32\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: ProgramMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Programs\ , LongSubPath: Programs\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: newfolder1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Programs\Sophos\ , LongSubPath: Programs\Sophos\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: newfolder2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Programs\Sophos\Sophos Endpoint Security and Control\ , LongSubPath: Programs\Sophos\Sophos Endpoint Security and Control\ , ShortSubPath: Programs\Sophos\SOPHOS~1\ MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: StartMenuFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Start Menu\ , LongSubPath: Start Menu\ , ShortSubPath: STARTM~1\ MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: NEW_DIRECTORY2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Start Menu\Sophos\ , LongSubPath: Start Menu\Sophos\ , ShortSubPath: STARTM~1\Sophos\ MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WindowsVolume , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\WinRoot\ , LongSubPath: WinRoot\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:162]: Dir (source): Key: WindowsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: TemplateFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\ShellNew\ , LongSubPath: ShellNew\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: TempFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Temp\ , LongSubPath: Temp\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: System16Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\System\ , LongSubPath: System\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: StartupFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\StartUp\ , LongSubPath: StartUp\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: SendToFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\SendTo\ , LongSubPath: SendTo\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: ProgramFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Program Files 64\ , LongSubPath: Program Files 64\ , ShortSubPath: Prog64~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: PrimaryVolumePath , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\PrimaryVolumePath\ , LongSubPath: PrimaryVolumePath\ , ShortSubPath: Primar~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: LocalAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\LocalAppData\ , LongSubPath: LocalAppData\ , ShortSubPath: LocalA~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: GlobalAssemblyCache , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\GlobalAssemblyCache\ , LongSubPath: GlobalAssemblyCache\ , ShortSubPath: Global~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: FontsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Fonts\ , LongSubPath: Fonts\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: FavoritesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Favorites\ , LongSubPath: Favorites\ , ShortSubPath: FAVORI~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: DesktopFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Desktop\ , LongSubPath: Desktop\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: CommonFiles64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Common64\ , LongSubPath: Common64\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: AdminToolsFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\AdminTools\ , LongSubPath: AdminTools\ , ShortSubPath: Admint~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: USERPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\UserProfile\ , LongSubPath: UserProfile\ , ShortSubPath: USERPR~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: ALLUSERSPROFILE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\All Users\ , LongSubPath: All Users\ , ShortSubPath: ALLUSE~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: System64Folder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\System64\ , LongSubPath: System64\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: SystemFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\System32\ , LongSubPath: System32\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: ProgramFilesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\program files\ , LongSubPath: program files\ , ShortSubPath: PROGRA~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: SOPHOS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\program files\Sophos\ , LongSubPath: program files\Sophos\ , ShortSubPath: PROGRA~1\Sophos\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: SOPHOS_ANTI_VIRUS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: INSTALLDIR , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\program files\Sophos\Sophos Anti-Virus\Web Control\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Control\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: INSTALLDIR_X64 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\program files\Sophos\Sophos Anti-Virus\WSC_X64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_X64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\WSC_X64\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: INSTALLDIR_WIN32 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\jwgiamqy\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: INSTALLDIR_IA64 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\program files\Sophos\Sophos Anti-Virus\WSC_IA64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_IA64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\WSC_IA64\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: CommonAppDataFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\ , LongSubPath: CommonAppData\ , ShortSubPath: Common~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: NEW_DIRECTORY1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\ , LongSubPath: CommonAppData\Sophos\ , ShortSubPath: Common~1\Sophos\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Tamper Protection\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: LOGS3 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Tamper Protection\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\logs\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: SOPHOS_DEVICE_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Device Control\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: LOGS2 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Device Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\logs\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: SOPHOS_DATA_CONTROL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Data Control\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: LOGS1 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Data Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\logs\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: RESOURCES , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Anti-Virus\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: RES , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: NEW_DIRECTORY3 , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: CACHE , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Cache\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: TEMP , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Temp\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: LOGS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Anti-Virus\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\logs\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: INFECTED , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: CONFIG , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\CommonAppData\Sophos\Sophos Anti-Virus\Config\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Config\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Config\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: CommonFilesFolder , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Common\ , LongSubPath: Common\ , ShortSubPath: MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: CISCO_SYSTEMS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Common\Cisco Systems\ , LongSubPath: Common\Cisco Systems\ , ShortSubPath: Common\CISCOS~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: CISCOTRUSTAGENT , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Common\Cisco Systems\CiscoTrustAgent\ , LongSubPath: Common\Cisco Systems\CiscoTrustAgent\ , ShortSubPath: Common\CISCOS~1\CISCOT~1\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: PLUGINS , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Common\Cisco Systems\CiscoTrustAgent\Plugins\ , LongSubPath: Common\Cisco Systems\CiscoTrustAgent\Plugins\ , ShortSubPath: Common\CISCOS~1\CISCOT~1\Plugins\ MSI (s) (F8:48) [09:39:36:163]: Dir (source): Key: INSTALL , Object: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Common\Cisco Systems\CiscoTrustAgent\Plugins\Install\ , LongSubPath: Common\Cisco Systems\CiscoTrustAgent\Plugins\Install\ , ShortSubPath: Common\CISCOS~1\CISCOT~1\Plugins\Install\ Action start 09:39:36: ResolveSource. MSI (s) (F8:48) [09:39:36:163]: Doing action: SetInstallDir Action ended 09:39:36: ResolveSource. Return value 1. Action start 09:39:36: SetInstallDir. MSI (s) (F8:48) [09:39:36:164]: Skipping action: UninstallDowngradeCheck (condition is false) MSI (s) (F8:48) [09:39:36:164]: Doing action: SetScriptProperty Action ended 09:39:36: SetInstallDir. Return value 1. MSI (s) (F8:48) [09:39:36:164]: PROPERTY CHANGE: Adding RunPreLaunchScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""10.3.1"'. Action start 09:39:36: SetScriptProperty. MSI (s) (F8:48) [09:39:36:164]: Skipping action: CheckForSophosClientFirewall (condition is false) MSI (s) (F8:48) [09:39:36:164]: Skipping action: ISInitAllUsers (condition is false) MSI (s) (F8:48) [09:39:36:164]: Doing action: SetODBCFolders Action ended 09:39:36: SetScriptProperty. Return value 1. MSI (s) (F8:48) [09:39:36:164]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (F8:48) [09:39:36:164]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCDriver`, `Component` WHERE `ODBCDriver`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2) MSI (s) (F8:48) [09:39:36:164]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (F8:48) [09:39:36:164]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCTranslator`, `Component` WHERE `ODBCTranslator`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2) Action start 09:39:36: SetODBCFolders. MSI (s) (F8:48) [09:39:36:164]: Doing action: MigrateFeatureStates Action ended 09:39:36: SetODBCFolders. Return value 0. MSI (s) (F8:48) [09:39:36:165]: Skipping MigrateFeatureStates action: not run in maintenance mode Action start 09:39:36: MigrateFeatureStates. MSI (s) (F8:48) [09:39:36:165]: Doing action: InstallValidate Action ended 09:39:36: MigrateFeatureStates. Return value 0. Action start 09:39:36: InstallValidate. MSI (s) (F8:48) [09:39:36:165]: Note: 1: 2205 2: 3: Dialog MSI (s) (F8:48) [09:39:36:165]: Feature: EngineFiles; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Feature: SAVService; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Feature: MainComponents; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Feature: ConfigFiles; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Feature: Resources; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Feature: ServiceComponents; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SAVMSCM.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SAVService; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SAVPosturePlugin.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: ConfigFilesNoReplace; Installed: Local; Request: Null; Action: Local MSI (s) (F8:48) [09:39:36:165]: Component: ConfigFilesReplace; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: AllOtherFiles2; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: AllOtherFiles1; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: AllOtherFiles3; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: AllOtherFiles8; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: AllOtherFiles5; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: AllOtherFiles6; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: AllOtherFiles7; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: ControlSAVAdminService; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: ControlSAVService; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SophosCleanupService.exe; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: sav32cli.exe; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: AllOtherFiles4; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SAVHelpChs.chm; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SAVHelpCht.chm; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SAVHelpDeu.chm; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SAVHelpEsp.chm; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SAVHelpFra.chm; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SAVHelpIta.chm; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SAVHelpJap.chm; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SCF.dat; Installed: Local; Request: Null; Action: Local MSI (s) (F8:48) [09:39:36:165]: Component: SavHelpEng.chm; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SavShellExtia64; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SavShellExtx64; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: Shortcut_de; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: Shortcut_es; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: Shortcut_fr; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: Shortcut_it; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: Shortcut_ja; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: Shortcut_zh_cn; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: Shortcut_zh_tw; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: Shortcuts; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: Categories.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SavNeutralRes.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SavRes.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SavResChs.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SavResCht.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SavResDeu.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SavResEng.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SavResEsp.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SavResFra.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SavResIt.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SavResJap.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: BackgroundScanClient.exe; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SavAdapter.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: WSCClientI64; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: WSCClientW32; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: WSCClientX64; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: SAVAdminService; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: AllOtherFiles; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: AuthorisedLists.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: DCManagement.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: DataControlManagement.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: DataControlPlugin.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: DetectionFeedback.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: DeviceControlPlugin.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: BHOManagement.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: BackgroundScanning.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: ComponentManager.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: Configuration.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: DesktopMessaging.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: DriveProcessor.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: EEConsumer.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:165]: Component: FSDecomposer.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: FilterProcessors.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: ICAdapter.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: ICManagement.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: ICProcessors.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: LegacyConsumers.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: Localisation.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: Logging.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: Persistance.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SAVControl.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SavPlugin.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SIPSManagement.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SWIManagement.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SavMain.exe; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SavProgress.exe; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SavShellExt.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: ScanEditExports.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: ScanEditFacade.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: ScanManagement.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SavSecurity.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SophtainerAdapter.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SystemInformation.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: TamperProtectionControl.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: TamperProtectionManagement.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: TamperProtectionPlugin.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: ThreatDetection.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: ThreatManagement.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: Translators.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: VirusDetection.dll; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: uplevel.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: nosxs.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: downlevel_payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: downlevel_manifest.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: uplevel.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: nosxs.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: downlevel_payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: downlevel_manifest.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: uplevel.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: downlevel_manifest.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: uplevel.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: downlevel_manifest.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: swc_service_exe.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SWCAdapter_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCPResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCPResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCPResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCPResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCPResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCPResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCPResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCPResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WebControlMessaging_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCMResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCMResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCMResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCMResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCMResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCMResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCMResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WCMResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (F8:48) [09:39:36:166]: Component: WebControlMessaging_dll_reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Local; Request: Null; Action: Local MSI (s) (F8:48) [09:39:36:166]: Component: SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SwiComponent32Only.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: SwiComponent64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Local; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __uplevel.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __uplevel.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __uplevel.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_33890336620765; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __uplevel.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __Shortcuts65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __Shortcut_de65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __Shortcuts66; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __Shortcuts67; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __SavMain.exe65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __Shortcut_es65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __Shortcut_fr65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __Shortcut_it65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __Shortcut_ja65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __Shortcut_zh_cn65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __Shortcut_zh_tw65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __SAVService65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __DCManagement.dll65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __DataControlManagement.dll65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __nosxs.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __downlevel_payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __downlevel_manifest.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __nosxs.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __downlevel_payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __downlevel_manifest.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __downlevel_manifest.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_33890336620765; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __downlevel_manifest.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Null; Action: Local MSI (s) (F8:48) [09:39:36:166]: Component: __WebControlMessaging_dll_reg.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Null; Action: Local MSI (s) (F8:48) [09:39:36:166]: Component: __SWCAdapter_dll.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C10165; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Component: __SAVMSCM.dll65; Installed: Null; Request: Null; Action: Null MSI (s) (F8:48) [09:39:36:166]: Note: 1: 2205 2: 3: BindImage MSI (s) (F8:48) [09:39:36:166]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (F8:48) [09:39:36:166]: Note: 1: 2205 2: 3: SelfReg MSI (s) (F8:48) [09:39:36:166]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (F8:48) [09:39:36:166]: Note: 1: 2205 2: 3: Font MSI (s) (F8:48) [09:39:36:167]: Note: 1: 2205 2: 3: _RemoveFilePath MSI (s) (F8:48) [09:39:36:175]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'. MSI (s) (F8:48) [09:39:36:175]: Note: 1: 2205 2: 3: BindImage MSI (s) (F8:48) [09:39:36:175]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (F8:48) [09:39:36:175]: Note: 1: 2205 2: 3: SelfReg MSI (s) (F8:48) [09:39:36:175]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (F8:48) [09:39:36:175]: Note: 1: 2205 2: 3: Font MSI (s) (F8:48) [09:39:36:175]: Note: 1: 2727 2: MSI (s) (F8:48) [09:39:36:179]: Note: 1: 2727 2: MSI (s) (F8:48) [09:39:36:180]: Doing action: RemoveExistingProducts Action ended 09:39:36: InstallValidate. Return value 1. MSI (s) (F8:48) [09:39:36:180]: Skipping RemoveExistingProducts action: current configuration is maintenance mode or an uninstall Action start 09:39:36: RemoveExistingProducts. MSI (s) (F8:48) [09:39:36:180]: Doing action: InstallInitialize Action ended 09:39:36: RemoveExistingProducts. Return value 0. MSI (s) (F8:48) [09:39:36:180]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (F8:48) [09:39:36:180]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (F8:48) [09:39:36:180]: BeginTransaction: Locking Server MSI (s) (F8:48) [09:39:36:181]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038 MSI (s) (F8:48) [09:39:36:181]: SRSetRestorePoint skipped for this transaction. MSI (s) (F8:48) [09:39:36:181]: Note: 1: 2203 2: C:\WINDOWS\Installer\inprogressinstallinfo.ipi 3: -2147287038 MSI (s) (F8:48) [09:39:36:181]: Server not locked: locking for product {4320988A-7DE0-478D-A38B-CE9509BCE320} Action start 09:39:36: InstallInitialize. MSI (s) (F8:48) [09:39:36:280]: Doing action: SetUpdateFailed Action ended 09:39:36: InstallInitialize. Return value 1. Action start 09:39:36: SetUpdateFailed. MSI (s) (F8:48) [09:39:36:285]: Doing action: SetRestoreMovedFiles Action ended 09:39:36: SetUpdateFailed. Return value 1. MSI (s) (F8:48) [09:39:36:286]: PROPERTY CHANGE: Adding RestoreMovedFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:36: SetRestoreMovedFiles. MSI (s) (F8:48) [09:39:36:286]: Doing action: RestoreMovedFiles Action ended 09:39:36: SetRestoreMovedFiles. Return value 1. Action start 09:39:36: RestoreMovedFiles. MSI (s) (F8:48) [09:39:36:289]: Doing action: CheckRegForNullDACLs Action ended 09:39:36: RestoreMovedFiles. Return value 1. Action start 09:39:36: CheckRegForNullDACLs. MSI (s) (F8:48) [09:39:36:293]: Doing action: SetErrorScriptProperty Action ended 09:39:36: CheckRegForNullDACLs. Return value 1. MSI (s) (F8:48) [09:39:36:293]: PROPERTY CHANGE: Adding RunErrorScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""10.3.1"'. Action start 09:39:36: SetErrorScriptProperty. MSI (s) (F8:48) [09:39:36:293]: Doing action: RunErrorScript Action ended 09:39:36: SetErrorScriptProperty. Return value 1. Action start 09:39:36: RunErrorScript. MSI (s) (F8:48) [09:39:36:296]: Doing action: ExtractClassicConfig Action ended 09:39:36: RunErrorScript. Return value 1. MSI (s) (F8:54) [09:39:36:333]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI39C7.tmp, Entrypoint: ExtractClassicConfig MSI (s) (F8:28) [09:39:36:333]: Generating random cookie. MSI (s) (F8:28) [09:39:36:444]: Created Custom Action Server with PID 2388 (0x954). MSI (s) (F8:78) [09:39:37:223]: Running as a service. MSI (s) (F8:78) [09:39:37:224]: Hello, I'm your 32bit Elevated custom action server. Action start 09:39:36: ExtractClassicConfig. MSI (s) (F8:48) [09:39:37:240]: Doing action: PreInstallChecks Action ended 09:39:37: ExtractClassicConfig. Return value 1. MSI (s) (F8:E0) [09:39:37:280]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI3D81.tmp, Entrypoint: PreInstallChecks Action start 09:39:37: PreInstallChecks. MSI (s) (F8:48) [09:39:37:335]: Doing action: SetUpdateBegin Action ended 09:39:37: PreInstallChecks. Return value 1. Action start 09:39:37: SetUpdateBegin. MSI (s) (F8:48) [09:39:37:338]: Doing action: SetBootDriverStartupProperty Action ended 09:39:37: SetUpdateBegin. Return value 1. MSI (s) (F8:68) [09:39:37:375]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI3DE0.tmp, Entrypoint: SetBootDriverStartupProperty Action start 09:39:37: SetBootDriverStartupProperty. MSI (s) (F8:48) [09:39:37:546]: Doing action: CloseSavMainWindow Action ended 09:39:37: SetBootDriverStartupProperty. Return value 1. Action start 09:39:37: CloseSavMainWindow. MSI (s) (F8:48) [09:39:37:549]: Skipping action: SxsInstallCA (condition is false) MSI (s) (F8:48) [09:39:37:549]: Skipping action: AllocateRegistrySpace (condition is false) MSI (s) (F8:48) [09:39:37:549]: Doing action: ProcessComponents Action ended 09:39:37: CloseSavMainWindow. Return value 1. Action start 09:39:37: ProcessComponents. MSI (s) (F8:48) [09:39:37:551]: Doing action: UnpublishComponents Action ended 09:39:37: ProcessComponents. Return value 1. MSI (s) (F8:48) [09:39:37:551]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (F8:48) [09:39:37:551]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND (`Feature`.`Action` = 0 OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2))) Action start 09:39:37: UnpublishComponents. MSI (s) (F8:48) [09:39:37:551]: Doing action: MsiUnpublishAssemblies Action ended 09:39:37: UnpublishComponents. Return value 0. Action start 09:39:37: MsiUnpublishAssemblies. MSI (s) (F8:48) [09:39:37:552]: Doing action: UnpublishFeatures Action ended 09:39:37: MsiUnpublishAssemblies. Return value 1. Action start 09:39:37: UnpublishFeatures. MSI (s) (F8:48) [09:39:37:552]: Doing action: RollbackDisableServices Action ended 09:39:37: UnpublishFeatures. Return value 1. Action start 09:39:37: RollbackDisableServices. MSI (s) (F8:48) [09:39:37:555]: Doing action: DisableServices Action ended 09:39:37: RollbackDisableServices. Return value 1. Action start 09:39:37: DisableServices. MSI (s) (F8:48) [09:39:37:559]: Doing action: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 09:39:37: DisableServices. Return value 1. MSI (s) (F8:F8) [09:39:37:578]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI3EBB.tmp, Entrypoint: SwcDisableSwcServiceStart Action start 09:39:37: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (F8:48) [09:39:37:624]: Doing action: SwiRollbackUpgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 09:39:37: SwcDisableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 09:39:37: SwiRollbackUpgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (F8:48) [09:39:37:626]: Doing action: SwiService_dereg.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 09:39:37: SwiRollbackUpgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. Action start 09:39:37: SwiService_dereg.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (F8:48) [09:39:37:627]: Skipping action: SwiService_uninstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (F8:48) [09:39:37:627]: Doing action: StopServices Action ended 09:39:37: SwiService_dereg.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. Action start 09:39:37: StopServices. MSI (s) (F8:48) [09:39:37:628]: Doing action: ForceStopSAVService Action ended 09:39:37: StopServices. Return value 1. Action start 09:39:37: ForceStopSAVService. MSI (s) (F8:48) [09:39:37:631]: Doing action: WaitForSAVService Action ended 09:39:37: ForceStopSAVService. Return value 1. Action start 09:39:37: WaitForSAVService. MSI (s) (F8:48) [09:39:37:634]: Doing action: DeleteServices Action ended 09:39:37: WaitForSAVService. Return value 1. Action start 09:39:37: DeleteServices. MSI (s) (F8:48) [09:39:37:635]: Skipping action: RemoveSophosCleanupService (condition is false) MSI (s) (F8:48) [09:39:37:635]: Doing action: UnregisterComPlus Action ended 09:39:37: DeleteServices. Return value 1. MSI (s) (F8:48) [09:39:37:635]: Note: 1: 2205 2: 3: Complus MSI (s) (F8:48) [09:39:37:635]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND `Action` = 0 Action start 09:39:37: UnregisterComPlus. MSI (s) (F8:48) [09:39:37:635]: Doing action: SelfUnregModules Action ended 09:39:37: UnregisterComPlus. Return value 0. MSI (s) (F8:48) [09:39:37:636]: Note: 1: 2205 2: 3: SelfReg MSI (s) (F8:48) [09:39:37:636]: Note: 1: 2228 2: 3: SelfReg 4: Select `File`.`FileName`,`Component`.`Directory_`,`Component`.`Installed`, `File`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `File`, `Component` Where `SelfReg`.`File_` = `File`.`File` And `File`.`Component_` = `Component`.`Component` And `Component`.`Action` = 0 Action start 09:39:37: SelfUnregModules. MSI (s) (F8:48) [09:39:37:636]: Doing action: UnregisterTypeLibraries Action ended 09:39:37: SelfUnregModules. Return value 1. Action start 09:39:37: UnregisterTypeLibraries. MSI (s) (F8:48) [09:39:37:636]: Doing action: RemoveODBC Action ended 09:39:37: UnregisterTypeLibraries. Return value 1. MSI (s) (F8:48) [09:39:37:636]: Note: 1: 2205 2: 3: ODBCDataSource MSI (s) (F8:48) [09:39:37:636]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ? MSI (s) (F8:48) [09:39:37:636]: Note: 1: 2205 2: 3: ODBCDataSource MSI (s) (F8:48) [09:39:37:636]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND `Component`.`Action` = 0 AND `BinaryType` = ? MSI (s) (F8:48) [09:39:37:636]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (F8:48) [09:39:37:636]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ? MSI (s) (F8:48) [09:39:37:636]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (F8:48) [09:39:37:636]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCTranslator`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ? MSI (s) (F8:48) [09:39:37:637]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (F8:48) [09:39:37:637]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ? MSI (s) (F8:48) [09:39:37:637]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (F8:48) [09:39:37:637]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`, `RuntimeFlags`, `Component`.`Attributes` FROM `ODBCDriver`, `Component` WHERE `Component_` = `Component` AND `Component`.`ActionRequest` = 0 AND `BinaryType` = ? MSI (s) (F8:48) [09:39:37:637]: Note: 1: 2711 2: ODBCDriverManager Action start 09:39:37: RemoveODBC. MSI (s) (F8:48) [09:39:37:637]: Note: 1: 2711 2: ODBCDriverManager64 MSI (s) (F8:48) [09:39:37:637]: Doing action: UnregisterFonts Action ended 09:39:37: RemoveODBC. Return value 1. MSI (s) (F8:48) [09:39:37:637]: Note: 1: 2205 2: 3: Font MSI (s) (F8:48) [09:39:37:637]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Installed`From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And `FileAction`.`Action` = 0 ORDER BY `FileAction`.`Directory_` Action start 09:39:37: UnregisterFonts. MSI (s) (F8:48) [09:39:37:637]: Skipping action: UninstallSecurityCenter (condition is false) MSI (s) (F8:48) [09:39:37:637]: Doing action: RemoveRegistryValues Action ended 09:39:37: UnregisterFonts. Return value 1. Action start 09:39:37: RemoveRegistryValues. MSI (s) (F8:48) [09:39:37:641]: Skipping action: SwcPauseForUnload.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (F8:48) [09:39:37:641]: Doing action: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 09:39:37: RemoveRegistryValues. Return value 1. Action start 09:39:37: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (F8:48) [09:39:37:642]: Skipping action: SwcDeleteReg.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (F8:48) [09:39:37:642]: Skipping action: SwcService_unreg_rb.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (F8:48) [09:39:37:642]: Skipping action: SwcService_unregister.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (F8:48) [09:39:37:642]: Skipping action: Swc_postcleanup.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (F8:48) [09:39:37:642]: Doing action: UnregisterClassInfo Action ended 09:39:37: SwcDeleteRegProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 09:39:37: UnregisterClassInfo. MSI (s) (F8:48) [09:39:37:642]: Doing action: UnregisterExtensionInfo Action ended 09:39:37: UnregisterClassInfo. Return value 1. MSI (s) (F8:48) [09:39:37:643]: Note: 1: 2262 2: Extension 3: -2147287038 Action start 09:39:37: UnregisterExtensionInfo. MSI (s) (F8:48) [09:39:37:643]: Doing action: UnregisterProgIdInfo Action ended 09:39:37: UnregisterExtensionInfo. Return value 1. MSI (s) (F8:48) [09:39:37:644]: Note: 1: 2262 2: Extension 3: -2147287038 Action start 09:39:37: UnregisterProgIdInfo. MSI (s) (F8:48) [09:39:37:644]: Doing action: UnregisterMIMEInfo Action ended 09:39:37: UnregisterProgIdInfo. Return value 1. MSI (s) (F8:48) [09:39:37:644]: Note: 1: 2205 2: 3: MIME MSI (s) (F8:48) [09:39:37:644]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND (`Feature`.`Action` = 0 OR (`Feature`.`Action` = 4 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2)) OR ((`Feature`.`Action` = NULL OR `Feature`.`Action` = 3) AND `Component`.`Action` = 0 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2))) Action start 09:39:37: UnregisterMIMEInfo. MSI (s) (F8:48) [09:39:37:644]: Doing action: RemoveIniValues Action ended 09:39:37: UnregisterMIMEInfo. Return value 0. MSI (s) (F8:48) [09:39:37:644]: Note: 1: 2205 2: 3: IniFile MSI (s) (F8:48) [09:39:37:644]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND `Component`.`Action`=0 ORDER BY `FileName`,`Section` Action start 09:39:37: RemoveIniValues. MSI (s) (F8:48) [09:39:37:645]: Doing action: RemoveShortcuts Action ended 09:39:37: RemoveIniValues. Return value 1. Action start 09:39:37: RemoveShortcuts. MSI (s) (F8:48) [09:39:37:645]: Doing action: RemoveEnvironmentStrings Action ended 09:39:37: RemoveShortcuts. Return value 1. MSI (s) (F8:48) [09:39:37:645]: Note: 1: 2205 2: 3: Environment MSI (s) (F8:48) [09:39:37:645]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 0) Action start 09:39:37: RemoveEnvironmentStrings. MSI (s) (F8:48) [09:39:37:645]: Skipping action: RevealMSXML4 (condition is false) MSI (s) (F8:48) [09:39:37:645]: Doing action: SetRemoveSAVIProperty Action ended 09:39:37: RemoveEnvironmentStrings. Return value 1. MSI (s) (F8:48) [09:39:37:646]: PROPERTY CHANGE: Modifying RemoveSAVI property. Its current value is 'INSTALLDIR'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:37: SetRemoveSAVIProperty. MSI (s) (F8:48) [09:39:37:646]: Skipping action: RemoveSAVI (condition is false) MSI (s) (F8:48) [09:39:37:646]: Doing action: SetUninstallDriverFilesOnUpdateProperty Action ended 09:39:37: SetRemoveSAVIProperty. Return value 1. MSI (s) (F8:48) [09:39:37:646]: PROPERTY CHANGE: Adding UninstallDriverFilesOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'. Action start 09:39:37: SetUninstallDriverFilesOnUpdateProperty. MSI (s) (F8:48) [09:39:37:646]: Doing action: SetUninstallBootDriverProperty Action ended 09:39:37: SetUninstallDriverFilesOnUpdateProperty. Return value 1. MSI (s) (F8:48) [09:39:37:647]: PROPERTY CHANGE: Adding UninstallBootDriver property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'. Action start 09:39:37: SetUninstallBootDriverProperty. MSI (s) (F8:48) [09:39:37:647]: Doing action: SetUninstallBootDriverOnUpdateProperty Action ended 09:39:37: SetUninstallBootDriverProperty. Return value 1. MSI (s) (F8:48) [09:39:37:647]: PROPERTY CHANGE: Adding UninstallBootDriverOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'. Action start 09:39:37: SetUninstallBootDriverOnUpdateProperty. MSI (s) (F8:48) [09:39:37:647]: Doing action: SetUninstallKMSDriverProperty Action ended 09:39:37: SetUninstallBootDriverOnUpdateProperty. Return value 1. MSI (s) (F8:48) [09:39:37:647]: PROPERTY CHANGE: Adding UninstallKMSDriver property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF'. Action start 09:39:37: SetUninstallKMSDriverProperty. MSI (s) (F8:48) [09:39:37:648]: Doing action: SetUninstallKMSDriverOnUpdateProperty Action ended 09:39:37: SetUninstallKMSDriverProperty. Return value 1. MSI (s) (F8:48) [09:39:37:648]: PROPERTY CHANGE: Adding UninstallKMSDriverOnUpdate property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF'. Action start 09:39:37: SetUninstallKMSDriverOnUpdateProperty. MSI (s) (F8:48) [09:39:37:648]: Doing action: SetUninstallDriverFilesVistaProperty Action ended 09:39:37: SetUninstallKMSDriverOnUpdateProperty. Return value 1. MSI (s) (F8:48) [09:39:37:648]: PROPERTY CHANGE: Adding UninstallDriverFilesVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'. Action start 09:39:37: SetUninstallDriverFilesVistaProperty. MSI (s) (F8:48) [09:39:37:648]: Doing action: SetUninstallClassFilterVistaProperty Action ended 09:39:37: SetUninstallDriverFilesVistaProperty. Return value 1. MSI (s) (F8:48) [09:39:37:649]: PROPERTY CHANGE: Adding UninstallClassFilterVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf'. Action start 09:39:37: SetUninstallClassFilterVistaProperty. MSI (s) (F8:48) [09:39:37:649]: Doing action: SetClassFilterPresentProperty Action ended 09:39:37: SetUninstallClassFilterVistaProperty. Return value 1. MSI (s) (F8:E4) [09:39:37:688]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI3F1A.tmp, Entrypoint: SetClassFilterPresentProperty Action start 09:39:37: SetClassFilterPresentProperty. MSI (s) (F8:48) [09:39:37:794]: Doing action: CheckUninstallDrivers Action ended 09:39:37: SetClassFilterPresentProperty. Return value 1. Action start 09:39:37: CheckUninstallDrivers. MSI (s) (F8:48) [09:39:37:797]: Skipping action: UninstallDriverFilesOnUpdate (condition is false) MSI (s) (F8:48) [09:39:37:797]: Doing action: UninstallDriverFiles64OnUpdate Action ended 09:39:37: CheckUninstallDrivers. Return value 1. Action start 09:39:37: UninstallDriverFiles64OnUpdate. MSI (s) (F8:48) [09:39:37:798]: Skipping action: UninstallDriverFiles (condition is false) MSI (s) (F8:48) [09:39:37:798]: Skipping action: UninstallDriverFiles64 (condition is false) MSI (s) (F8:48) [09:39:37:798]: Skipping action: UninstallDriverFilesVista (condition is false) MSI (s) (F8:48) [09:39:37:798]: Skipping action: UninstallDriverFiles64Vista (condition is false) MSI (s) (F8:48) [09:39:37:798]: Skipping action: UninstallBootDriverOnUpdate (condition is false) MSI (s) (F8:48) [09:39:37:798]: Doing action: UninstallBootDriverOnUpdate64 Action ended 09:39:37: UninstallDriverFiles64OnUpdate. Return value 1. Action start 09:39:37: UninstallBootDriverOnUpdate64. MSI (s) (F8:48) [09:39:37:799]: Skipping action: UninstallBootDriver (condition is false) MSI (s) (F8:48) [09:39:37:799]: Skipping action: UninstallBootDriver64 (condition is false) MSI (s) (F8:48) [09:39:37:799]: Skipping action: UninstallClassFilterCleanReg (condition is false) MSI (s) (F8:48) [09:39:37:799]: Skipping action: UninstallClassFilter64 (condition is false) MSI (s) (F8:48) [09:39:37:799]: Skipping action: UninstallClassFilter64Vista (condition is false) MSI (s) (F8:48) [09:39:37:799]: Skipping action: UninstallClassFilter (condition is false) MSI (s) (F8:48) [09:39:37:799]: Skipping action: UninstallClassFilterVista (condition is false) MSI (s) (F8:48) [09:39:37:799]: Skipping action: UninstallKMSDriver (condition is false) MSI (s) (F8:48) [09:39:37:799]: Skipping action: UninstallKMSDriverOnUpdate (condition is false) MSI (s) (F8:48) [09:39:37:799]: Skipping action: UnregisterSavShellExtIA64 (condition is false) MSI (s) (F8:48) [09:39:37:799]: Skipping action: UnregisterSavShellExtX64 (condition is false) MSI (s) (F8:48) [09:39:37:799]: Doing action: SetUninstallDeviceControlProperty Action ended 09:39:37: UninstallBootDriverOnUpdate64. Return value 1. MSI (s) (F8:48) [09:39:37:799]: PROPERTY CHANGE: Adding UninstallDeviceControl property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'. Action start 09:39:37: SetUninstallDeviceControlProperty. MSI (s) (F8:48) [09:39:37:799]: Skipping action: UninstallDeviceControl (condition is false) MSI (s) (F8:48) [09:39:37:799]: Doing action: SetDeleteDriverKeysProperty Action ended 09:39:37: SetUninstallDeviceControlProperty. Return value 1. MSI (s) (F8:48) [09:39:37:800]: PROPERTY CHANGE: Adding DeleteDriverKeys property. Its value is '0'. Action start 09:39:37: SetDeleteDriverKeysProperty. MSI (s) (F8:48) [09:39:37:800]: Skipping action: DeleteDriverKeys (condition is false) MSI (s) (F8:48) [09:39:37:800]: Skipping action: DeleteSKMScanDriverKeys (condition is false) MSI (s) (F8:48) [09:39:37:800]: Skipping action: DeleteSDCFilterDriverKeys (condition is false) MSI (s) (F8:48) [09:39:37:800]: Skipping action: DeleteSDCFilterDriverFiles (condition is false) MSI (s) (F8:48) [09:39:37:800]: Doing action: SetUnregisterBufferOverflowProtection Action ended 09:39:37: SetDeleteDriverKeysProperty. Return value 1. MSI (s) (F8:48) [09:39:37:800]: PROPERTY CHANGE: Adding UnregisterBufferOverflowProtection property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:37: SetUnregisterBufferOverflowProtection. MSI (s) (F8:48) [09:39:37:800]: Skipping action: UnregisterBufferOverflowProtection (condition is false) MSI (s) (F8:48) [09:39:37:800]: Doing action: SetDeleteOtherFilesProperty Action ended 09:39:37: SetUnregisterBufferOverflowProtection. Return value 1. MSI (s) (F8:48) [09:39:37:800]: PROPERTY CHANGE: Adding DeleteOtherFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:37: SetDeleteOtherFilesProperty. MSI (s) (F8:48) [09:39:37:801]: Skipping action: DeleteOtherFiles (condition is false) MSI (s) (F8:48) [09:39:37:801]: Skipping action: CreateRebootTestFile (condition is false) MSI (s) (F8:48) [09:39:37:801]: Skipping action: CheckCTAInstalled (condition is false) MSI (s) (F8:48) [09:39:37:801]: Doing action: RemoveDuplicateFiles Action ended 09:39:37: SetDeleteOtherFilesProperty. Return value 1. Action start 09:39:37: RemoveDuplicateFiles. MSI (s) (F8:48) [09:39:37:801]: Skipping action: SwiUpdate_cleanup.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (F8:48) [09:39:37:801]: Skipping action: SwiUpdate_cleanup_64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (F8:48) [09:39:37:801]: Doing action: RemoveFiles Action ended 09:39:37: RemoveDuplicateFiles. Return value 1. Action start 09:39:37: RemoveFiles. MSI (s) (F8:48) [09:39:37:801]: Doing action: RemoveFolders Action ended 09:39:37: RemoveFiles. Return value 1. Action start 09:39:37: RemoveFolders. MSI (s) (F8:48) [09:39:37:802]: Doing action: CreateFolders Action ended 09:39:37: RemoveFolders. Return value 1. Action start 09:39:37: CreateFolders. MSI (s) (F8:48) [09:39:37:802]: Doing action: SetDeleteIDEsProperty Action ended 09:39:37: CreateFolders. Return value 1. MSI (s) (F8:48) [09:39:37:802]: PROPERTY CHANGE: Modifying DeleteIDEs property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:37: SetDeleteIDEsProperty. MSI (s) (F8:48) [09:39:37:802]: Doing action: DeleteIDEs Action ended 09:39:37: SetDeleteIDEsProperty. Return value 1. Action start 09:39:37: DeleteIDEs. MSI (s) (F8:48) [09:39:37:806]: Doing action: SetDeleteBDLsProperty Action ended 09:39:37: DeleteIDEs. Return value 1. MSI (s) (F8:48) [09:39:37:806]: PROPERTY CHANGE: Modifying DeleteBDLs property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:37: SetDeleteBDLsProperty. MSI (s) (F8:48) [09:39:37:806]: Doing action: DeleteBDLs Action ended 09:39:37: SetDeleteBDLsProperty. Return value 1. Action start 09:39:37: DeleteBDLs. MSI (s) (F8:48) [09:39:37:810]: Doing action: SetDeleteHIPSConfigProperty Action ended 09:39:37: DeleteBDLs. Return value 1. MSI (s) (F8:48) [09:39:37:811]: PROPERTY CHANGE: Adding DeleteHIPSConfig property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:37: SetDeleteHIPSConfigProperty. MSI (s) (F8:48) [09:39:37:811]: Doing action: DeleteHIPSConfig Action ended 09:39:37: SetDeleteHIPSConfigProperty. Return value 1. Action start 09:39:37: DeleteHIPSConfig. MSI (s) (F8:48) [09:39:37:814]: Doing action: SetRemoveFilesOnUpgradeProperty Action ended 09:39:37: DeleteHIPSConfig. Return value 1. MSI (s) (F8:48) [09:39:37:814]: PROPERTY CHANGE: Adding RemoveFilesOnUpgrade property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:37: SetRemoveFilesOnUpgradeProperty. MSI (s) (F8:48) [09:39:37:815]: Doing action: RemoveFilesOnUpgrade Action ended 09:39:37: SetRemoveFilesOnUpgradeProperty. Return value 1. Action start 09:39:37: RemoveFilesOnUpgrade. MSI (s) (F8:48) [09:39:37:819]: Doing action: SetRollbackForceProperty Action ended 09:39:37: RemoveFilesOnUpgrade. Return value 1. MSI (s) (F8:48) [09:39:37:820]: PROPERTY CHANGE: Adding RollbackForceDeleteFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:37: SetRollbackForceProperty. MSI (s) (F8:48) [09:39:37:820]: Skipping action: RollbackForceDeleteFiles (condition is false) MSI (s) (F8:48) [09:39:37:820]: Doing action: SetRollbackOtherFilesProperty Action ended 09:39:37: SetRollbackForceProperty. Return value 1. MSI (s) (F8:48) [09:39:37:820]: PROPERTY CHANGE: Modifying RollbackOtherFiles property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:37: SetRollbackOtherFilesProperty. MSI (s) (F8:48) [09:39:37:821]: Skipping action: RollbackOtherFiles (condition is false) MSI (s) (F8:48) [09:39:37:821]: Doing action: SetRollbackUpdateSavAdapterDllProperty Action ended 09:39:37: SetRollbackOtherFilesProperty. Return value 1. MSI (s) (F8:48) [09:39:37:821]: PROPERTY CHANGE: Adding RollbackUpdateSavAdapterDll property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:37: SetRollbackUpdateSavAdapterDllProperty. MSI (s) (F8:48) [09:39:37:821]: Doing action: RollbackUpdateSavAdapterDll Action ended 09:39:37: SetRollbackUpdateSavAdapterDllProperty. Return value 1. Action start 09:39:37: RollbackUpdateSavAdapterDll. MSI (s) (F8:48) [09:39:37:825]: Doing action: UpdateSavAdapterDll Action ended 09:39:37: RollbackUpdateSavAdapterDll. Return value 1. Action start 09:39:37: UpdateSavAdapterDll. MSI (s) (F8:48) [09:39:37:828]: Skipping action: SetInitialDriverProperty (condition is false) MSI (s) (F8:48) [09:39:37:828]: Doing action: SetInstallDriverProperty Action ended 09:39:37: UpdateSavAdapterDll. Return value 1. MSI (s) (F8:04) [09:39:37:866]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI3FC7.tmp, Entrypoint: SetDriverProperty MSI (s) (F8!00) [09:39:37:889]: PROPERTY CHANGE: Modifying DRIVERVERSION property. Its current value is '0'. Its new value: 'VISTA_AMD64'. MSI (s) (F8!00) [09:39:37:890]: PROPERTY CHANGE: Modifying BOOTDRIVERSIGNED property. Its current value is '0'. Its new value: '1'. Action start 09:39:37: SetInstallDriverProperty. MSI (s) (F8:48) [09:39:37:893]: Doing action: SetProcessorProperties Action ended 09:39:37: SetInstallDriverProperty. Return value 1. MSI (s) (F8:4C) [09:39:37:931]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI4006.tmp, Entrypoint: SetProcessorProperties MSI (s) (F8!18) [09:39:37:961]: PROPERTY CHANGE: Modifying PROCESSOR_NX_ENABLED property. Its current value is '0'. Its new value: '1'. Action start 09:39:37: SetProcessorProperties. MSI (s) (F8:48) [09:39:37:965]: Doing action: SetCopyOtherFilesProperty Action ended 09:39:37: SetProcessorProperties. Return value 1. MSI (s) (F8:48) [09:39:37:965]: PROPERTY CHANGE: Adding CopyOtherFiles property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""VISTA_AMD64"'. Action start 09:39:37: SetCopyOtherFilesProperty. MSI (s) (F8:48) [09:39:37:966]: Doing action: CopyOtherFiles Action ended 09:39:37: SetCopyOtherFilesProperty. Return value 1. Action start 09:39:37: CopyOtherFiles. MSI (s) (F8:48) [09:39:37:969]: Doing action: SetRegisterBufferOverflowProtection Action ended 09:39:37: CopyOtherFiles. Return value 1. MSI (s) (F8:48) [09:39:37:970]: PROPERTY CHANGE: Adding RegisterBufferOverflowProtection property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:37: SetRegisterBufferOverflowProtection. MSI (s) (F8:48) [09:39:37:970]: Doing action: RegisterBufferOverflowProtection Action ended 09:39:37: SetRegisterBufferOverflowProtection. Return value 1. Action start 09:39:37: RegisterBufferOverflowProtection. MSI (s) (F8:48) [09:39:37:974]: Skipping action: RollbackClassFilter (condition is false) MSI (s) (F8:48) [09:39:37:974]: Skipping action: RollbackClassFilter64 (condition is false) MSI (s) (F8:48) [09:39:37:974]: Skipping action: RollbackClassFilter64Vista (condition is false) MSI (s) (F8:48) [09:39:37:974]: Skipping action: RollbackDriverFiles (condition is false) MSI (s) (F8:48) [09:39:37:974]: Skipping action: RollbackBootDriver (condition is false) MSI (s) (F8:48) [09:39:37:974]: Skipping action: RollbackDriverFiles64 (condition is false) MSI (s) (F8:48) [09:39:37:974]: Skipping action: RollbackBootDriver64 (condition is false) MSI (s) (F8:48) [09:39:37:974]: Skipping action: RollbackKMSDriver (condition is false) MSI (s) (F8:48) [09:39:37:974]: Doing action: SetRollbackDriverFilesVistaProperty Action ended 09:39:37: RegisterBufferOverflowProtection. Return value 1. MSI (s) (F8:48) [09:39:37:974]: PROPERTY CHANGE: Adding RollbackDriverFilesVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF'. Action start 09:39:37: SetRollbackDriverFilesVistaProperty. MSI (s) (F8:48) [09:39:37:974]: Doing action: SetRollbackBootDriverVistaProperty Action ended 09:39:37: SetRollbackDriverFilesVistaProperty. Return value 1. MSI (s) (F8:48) [09:39:37:974]: PROPERTY CHANGE: Adding RollbackBootDriverVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF'. Action start 09:39:37: SetRollbackBootDriverVistaProperty. MSI (s) (F8:48) [09:39:37:974]: Doing action: SetRollbackClassFilterVistaProperty Action ended 09:39:37: SetRollbackBootDriverVistaProperty. Return value 1. MSI (s) (F8:48) [09:39:37:975]: PROPERTY CHANGE: Adding RollbackClassFilterVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf'. Action start 09:39:37: SetRollbackClassFilterVistaProperty. MSI (s) (F8:48) [09:39:37:975]: Doing action: SetRollbackKMSDriverVistaProperty Action ended 09:39:37: SetRollbackClassFilterVistaProperty. Return value 1. MSI (s) (F8:48) [09:39:37:975]: PROPERTY CHANGE: Adding RollbackKMSDriverVista property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\skmscan.inf'. Action start 09:39:37: SetRollbackKMSDriverVistaProperty. MSI (s) (F8:48) [09:39:37:975]: Skipping action: RollbackBootDriverVista (condition is false) MSI (s) (F8:48) [09:39:37:975]: Skipping action: RollbackDriverFilesVista (condition is false) MSI (s) (F8:48) [09:39:37:975]: Skipping action: RollbackClassFilterVista (condition is false) MSI (s) (F8:48) [09:39:37:975]: Skipping action: RollbackBootDriver64Vista (condition is false) MSI (s) (F8:48) [09:39:37:975]: Skipping action: RollbackDriverFiles64Vista (condition is false) MSI (s) (F8:48) [09:39:37:975]: Skipping action: RollbackKMSDriverVista (condition is false) MSI (s) (F8:48) [09:39:37:975]: Skipping action: InstallDriverFiles2K (condition is false) MSI (s) (F8:48) [09:39:37:975]: Skipping action: InstallBootDriver2K (condition is false) MSI (s) (F8:48) [09:39:37:975]: Skipping action: InstallDriverFilesXP (condition is false) MSI (s) (F8:48) [09:39:37:975]: Skipping action: InstallBootDriverXP (condition is false) MSI (s) (F8:48) [09:39:37:975]: Doing action: SetInstallDriverFilesVistaProperty Action ended 09:39:37: SetRollbackKMSDriverVistaProperty. Return value 1. MSI (s) (F8:48) [09:39:37:976]: PROPERTY CHANGE: Adding InstallDriverFilesVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\WinLH_i386\SAVONACCESSDRIV.INF'. Action start 09:39:37: SetInstallDriverFilesVistaProperty. MSI (s) (F8:48) [09:39:37:976]: Skipping action: InstallDriverFilesVista (condition is false) MSI (s) (F8:48) [09:39:37:976]: Doing action: SetInstallClassFilterVistaProperty Action ended 09:39:37: SetInstallDriverFilesVistaProperty. Return value 1. MSI (s) (F8:48) [09:39:37:976]: PROPERTY CHANGE: Adding InstallClassFilterVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\ClassFilterDrivers\i386\sdcfilter.inf'. Action start 09:39:37: SetInstallClassFilterVistaProperty. MSI (s) (F8:48) [09:39:37:976]: Skipping action: InstallClassFilterVista (condition is false) MSI (s) (F8:48) [09:39:37:976]: Doing action: SetInstallBootDriverVistaProperty Action ended 09:39:37: SetInstallClassFilterVistaProperty. Return value 1. MSI (s) (F8:48) [09:39:37:976]: PROPERTY CHANGE: Adding InstallBootDriverVista property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\WinLH_i386\SOPHOSBOOTDRIVER.INF'. Action start 09:39:37: SetInstallBootDriverVistaProperty. MSI (s) (F8:48) [09:39:37:977]: Skipping action: InstallBootDriverVista (condition is false) MSI (s) (F8:48) [09:39:37:977]: Skipping action: InstallBootDriverAMD64 (condition is false) MSI (s) (F8:48) [09:39:37:977]: Skipping action: InstallDriverFilesAMD64 (condition is false) MSI (s) (F8:48) [09:39:37:977]: Skipping action: InstallDriverFilesIA64 (condition is false) MSI (s) (F8:48) [09:39:37:977]: Skipping action: InstallBootDriverIA64 (condition is false) MSI (s) (F8:48) [09:39:37:977]: Doing action: InstallBootDriverAMD64Vista Action ended 09:39:37: SetInstallBootDriverVistaProperty. Return value 1. Action start 09:39:37: InstallBootDriverAMD64Vista. MSI (s) (F8:48) [09:39:37:977]: Doing action: InstallDriverFilesAMD64Vista Action ended 09:39:37: InstallBootDriverAMD64Vista. Return value 1. Action start 09:39:37: InstallDriverFilesAMD64Vista. MSI (s) (F8:48) [09:39:37:978]: Skipping action: InstallDriverFilesIA64Vista (condition is false) MSI (s) (F8:48) [09:39:37:978]: Skipping action: InstallBootDriverIA64Vista (condition is false) MSI (s) (F8:48) [09:39:37:978]: Doing action: SetInstallUnsignedBootDriver Action ended 09:39:37: InstallDriverFilesAMD64Vista. Return value 1. MSI (s) (F8:48) [09:39:37:978]: PROPERTY CHANGE: Adding InstallUnsignedBootDriver property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""VISTA_AMD64"'. Action start 09:39:37: SetInstallUnsignedBootDriver. MSI (s) (F8:48) [09:39:37:978]: Doing action: SetInstallUnsignedDrivers Action ended 09:39:37: SetInstallUnsignedBootDriver. Return value 1. MSI (s) (F8:48) [09:39:37:978]: PROPERTY CHANGE: Adding InstallUnsignedDrivers property. Its value is '"C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""VISTA_AMD64"'. Action start 09:39:37: SetInstallUnsignedDrivers. MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallUnsignedBootDriver (condition is false) MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallUnsignedDrivers (condition is false) MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallUnsignedBootDriverAMD64 (condition is false) MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallUnsignedDriversAMD64 (condition is false) MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallUnsignedBootDriverIA64 (condition is false) MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallUnsignedDriversIA64 (condition is false) MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallUnsignedBootDriverAMD64Vista (condition is false) MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallUnsignedBootDriverIA64Vista (condition is false) MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallUnsignedDriversAMD64Vista (condition is false) MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallUnsignedDriversIA64Vista (condition is false) MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallClassFilter (condition is false) MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallClassFilterIA64 (condition is false) MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallClassFilterIA64Vista (condition is false) MSI (s) (F8:48) [09:39:37:979]: Skipping action: InstallClassFilterX64 (condition is false) MSI (s) (F8:48) [09:39:37:979]: Doing action: InstallClassFilterX64Vista Action ended 09:39:37: SetInstallUnsignedDrivers. Return value 1. Action start 09:39:37: InstallClassFilterX64Vista. MSI (s) (F8:48) [09:39:37:979]: Doing action: SetInstallKMSDriverProperty Action ended 09:39:37: InstallClassFilterX64Vista. Return value 1. MSI (s) (F8:48) [09:39:37:979]: PROPERTY CHANGE: Adding InstallKMSDriver property. Its value is 'C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\drivers\i386\skmscan.inf'. Action start 09:39:37: SetInstallKMSDriverProperty. MSI (s) (F8:48) [09:39:37:980]: Skipping action: InstallKMSDriver (condition is false) MSI (s) (F8:48) [09:39:37:980]: Doing action: SetStartDriverServicesProperty Action ended 09:39:37: SetInstallKMSDriverProperty. Return value 1. MSI (s) (F8:48) [09:39:37:980]: PROPERTY CHANGE: Adding StartDriverServices property. Its value is 'VISTA_AMD64'. Action start 09:39:37: SetStartDriverServicesProperty. MSI (s) (F8:48) [09:39:37:980]: Doing action: StartDriverServices Action ended 09:39:37: SetStartDriverServicesProperty. Return value 1. Action start 09:39:37: StartDriverServices. MSI (s) (F8:48) [09:39:37:984]: Doing action: SetMoveLockedFiles Action ended 09:39:37: StartDriverServices. Return value 1. MSI (s) (F8:48) [09:39:37:984]: PROPERTY CHANGE: Adding MoveLockedFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\|'. Action start 09:39:37: SetMoveLockedFiles. MSI (s) (F8:48) [09:39:37:984]: Skipping action: MoveLockedFiles (condition is false) MSI (s) (F8:48) [09:39:37:984]: Doing action: MoveFiles Action ended 09:39:37: SetMoveLockedFiles. Return value 1. Action start 09:39:37: MoveFiles. MSI (s) (F8:48) [09:39:37:985]: Doing action: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 09:39:37: MoveFiles. Return value 1. MSI (s) (F8:48) [09:39:38:003]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI4065.tmp, Entrypoint: SwcDeleteSAUPluginRegistry Action start 09:39:37: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (F8:48) [09:39:38:010]: Doing action: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 09:39:38: SwcUnhookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (F8:D0) [09:39:38:030]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI4085.tmp, Entrypoint: SwcDeleteRMSPluginRegistry Action start 09:39:38: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (F8:48) [09:39:38:044]: Doing action: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 09:39:38: SwcUnhookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (F8:14) [09:39:38:064]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI40A6.tmp, Entrypoint: SwcPauseForUnhook Action start 09:39:38: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (F8:48) [09:39:41:105]: Doing action: InstallFiles Action ended 09:39:41: SwcUnhookWait.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 09:39:41: InstallFiles. MSI (s) (F8:48) [09:39:41:253]: Note: 1: 2205 2: 3: Patch MSI (s) (F8:48) [09:39:41:253]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? AND `Patch`.`#_MsiActive`=? ORDER BY `Patch`.`Sequence` MSI (s) (F8:48) [09:39:41:253]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (F8:48) [09:39:41:253]: Note: 1: 2228 2: 3: MsiPatchHeaders 4: SELECT `Header` FROM `MsiPatchHeaders` WHERE `StreamRef` = ? MSI (s) (F8:48) [09:39:41:432]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (F8:48) [09:39:41:618]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (F8:48) [09:39:41:618]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (F8:48) [09:39:41:618]: Note: 1: 2203 2: 3: 0 MSI (s) (F8:48) [09:39:41:623]: Note: 1: 2205 2: 3: Patch MSI (s) (F8:48) [09:39:41:623]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (F8:48) [09:39:41:624]: Note: 1: 2205 2: 3: Patch MSI (s) (F8:48) [09:39:41:624]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` MSI (s) (F8:48) [09:39:41:626]: Skipping action: SwcService_unreg_nc.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (F8:48) [09:39:41:626]: Skipping action: SwcService_reg_rb.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (F8:48) [09:39:41:626]: Skipping action: SwcService_register.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (F8:48) [09:39:41:627]: Skipping action: SwcDeleteRegExceptId.92A5750A_B99C_4D18_8E96_314353D4097A (condition is false) MSI (s) (F8:48) [09:39:41:627]: Doing action: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 09:39:41: InstallFiles. Return value 1. MSI (s) (F8:48) [09:39:41:627]: PROPERTY CHANGE: Adding SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll'. Action start 09:39:41: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (F8:48) [09:39:41:627]: Doing action: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 09:39:41: SwcHookSAUProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 09:39:41: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (F8:48) [09:39:41:629]: Doing action: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 09:39:41: SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (F8:48) [09:39:41:632]: PROPERTY CHANGE: Adding SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll'. Action start 09:39:41: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (F8:48) [09:39:41:632]: Doing action: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 09:39:41: SwcHookRMSProp.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 09:39:41: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (F8:48) [09:39:41:634]: Doing action: PatchFiles Action ended 09:39:41: SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. MSI (s) (F8:48) [09:39:41:634]: Note: 1: 2205 2: 3: Patch MSI (s) (F8:48) [09:39:41:634]: Note: 1: 2228 2: 3: Patch 4: SELECT `File`,`FileName`,`FileSize`,`Directory_`,`PatchSize`,`File`.`Attributes`,`Patch`.`Attributes`,`Patch`.`Sequence`,`Component`.`Component`,`Component`.`ComponentId` FROM `File`,`Component`,`Patch` WHERE `Patch`.`#_MsiActive`=? AND `File`=`File_` AND `Component`=`Component_` ORDER BY `Patch`.`Sequence` Action start 09:39:41: PatchFiles. MSI (s) (F8:48) [09:39:41:634]: Doing action: DuplicateFiles Action ended 09:39:41: PatchFiles. Return value 0. Action start 09:39:41: DuplicateFiles. MSI (s) (F8:48) [09:39:41:635]: Skipping action: DeleteUserGroups (condition is false) MSI (s) (F8:48) [09:39:41:635]: Skipping action: RollbackUserGroups (condition is false) MSI (s) (F8:48) [09:39:41:635]: Doing action: SetUserGroupsProperty Action ended 09:39:41: DuplicateFiles. Return value 1. MSI (s) (F8:48) [09:39:41:635]: PROPERTY CHANGE: Adding CreateUserGroups property. Its value is 'C:\ProgramData\Sophos\Sophos Anti-Virus\Config'. Action start 09:39:41: SetUserGroupsProperty. MSI (s) (F8:48) [09:39:41:635]: Doing action: CreateUserGroups Action ended 09:39:41: SetUserGroupsProperty. Return value 1. Action start 09:39:41: CreateUserGroups. MSI (s) (F8:48) [09:39:41:638]: Doing action: AddDomainGroups Action ended 09:39:41: CreateUserGroups. Return value 1. Action start 09:39:41: AddDomainGroups. MSI (s) (F8:48) [09:39:41:642]: Doing action: BindImage Action ended 09:39:41: AddDomainGroups. Return value 1. Action start 09:39:41: BindImage. MSI (s) (F8:48) [09:39:41:643]: Doing action: CreateShortcuts Action ended 09:39:41: BindImage. Return value 1. Action start 09:39:41: CreateShortcuts. MSI (s) (F8:48) [09:39:41:644]: Doing action: RegisterClassInfo Action ended 09:39:41: CreateShortcuts. Return value 1. Action start 09:39:41: RegisterClassInfo. MSI (s) (F8:48) [09:39:41:650]: Doing action: RegisterExtensionInfo Action ended 09:39:41: RegisterClassInfo. Return value 1. MSI (s) (F8:48) [09:39:41:650]: Note: 1: 2262 2: Extension 3: -2147287038 Action start 09:39:41: RegisterExtensionInfo. MSI (s) (F8:48) [09:39:41:651]: Doing action: RegisterProgIdInfo Action ended 09:39:41: RegisterExtensionInfo. Return value 1. MSI (s) (F8:48) [09:39:41:652]: Note: 1: 2262 2: Extension 3: -2147287038 Action start 09:39:41: RegisterProgIdInfo. MSI (s) (F8:48) [09:39:41:652]: Doing action: RegisterMIMEInfo Action ended 09:39:41: RegisterProgIdInfo. Return value 1. MSI (s) (F8:48) [09:39:41:652]: Note: 1: 2205 2: 3: MIME MSI (s) (F8:48) [09:39:41:652]: Note: 1: 2228 2: 3: MIME 4: SELECT `BinaryType`, `ContentType`, `Extension`.`Extension`, `MIME`.`CLSID`, `Component`.`RuntimeFlags`, `Component`.`Component`, `Component`.`Attributes` FROM `MIME`, `Extension`, `Feature`, `Component` WHERE `MIME`.`Extension_` = `Extension`.`Extension` AND `Feature_` = `Feature` AND `Extension`.`Component_` = `Component` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)) OR (`Feature`.`Action` = NULL AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND ((`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4)))) Action start 09:39:41: RegisterMIMEInfo. MSI (s) (F8:48) [09:39:41:652]: Doing action: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 09:39:41: RegisterMIMEInfo. Return value 0. Action start 09:39:41: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (F8:48) [09:39:41:654]: Doing action: WriteRegistryValues Action ended 09:39:41: SwcPauseForUnload_rollback.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 09:39:41: WriteRegistryValues. MSI (s) (F8:48) [09:39:41:655]: Skipping action: SetSAVAdminUpdateBegin (condition is false) MSI (s) (F8:48) [09:39:41:655]: Doing action: SetRollBackSaviProperty Action ended 09:39:41: WriteRegistryValues. Return value 1. MSI (s) (F8:48) [09:39:41:655]: PROPERTY CHANGE: Modifying RollbackSavi property. Its current value is '0'. Its new value: 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:41: SetRollBackSaviProperty. MSI (s) (F8:48) [09:39:41:655]: Skipping action: RollbackSavi (condition is false) MSI (s) (F8:48) [09:39:41:655]: Doing action: SetUpdateSaviProperty Action ended 09:39:41: SetRollBackSaviProperty. Return value 1. MSI (s) (F8:48) [09:39:41:655]: PROPERTY CHANGE: Modifying UpdateSAVI property. Its current value is '0'. Its new value: '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\"'. Action start 09:39:41: SetUpdateSaviProperty. MSI (s) (F8:48) [09:39:41:656]: Doing action: UpdateSAVI Action ended 09:39:41: SetUpdateSaviProperty. Return value 1. Action start 09:39:41: UpdateSAVI. MSI (s) (F8:48) [09:39:41:659]: Doing action: SetSetFolderPermissions Action ended 09:39:41: UpdateSAVI. Return value 1. MSI (s) (F8:48) [09:39:41:660]: PROPERTY CHANGE: Adding SetFolderPermissions property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:41: SetSetFolderPermissions. MSI (s) (F8:48) [09:39:41:660]: Doing action: SetFolderPermissions Action ended 09:39:41: SetSetFolderPermissions. Return value 1. Action start 09:39:41: SetFolderPermissions. MSI (s) (F8:48) [09:39:41:664]: Doing action: WriteIniValues Action ended 09:39:41: SetFolderPermissions. Return value 1. MSI (s) (F8:48) [09:39:41:664]: Note: 1: 2205 2: 3: IniFile MSI (s) (F8:48) [09:39:41:664]: Note: 1: 2228 2: 3: IniFile 4: SELECT `FileName`,`IniFile`.`DirProperty`,`Section`,`IniFile`.`Key`,`IniFile`.`Value`,`IniFile`.`Action` FROM `IniFile`, `Component` WHERE `Component`=`Component_` AND (`Component`.`Action`=1 OR `Component`.`Action`=2) ORDER BY `FileName`,`Section` Action start 09:39:41: WriteIniValues. MSI (s) (F8:48) [09:39:41:664]: Doing action: WriteEnvironmentStrings Action ended 09:39:41: WriteIniValues. Return value 1. MSI (s) (F8:48) [09:39:41:665]: Note: 1: 2205 2: 3: Environment MSI (s) (F8:48) [09:39:41:665]: Note: 1: 2228 2: 3: Environment 4: SELECT `Name`,`Value` FROM `Environment`,`Component` WHERE `Component_`=`Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) Action start 09:39:41: WriteEnvironmentStrings. MSI (s) (F8:48) [09:39:41:665]: Doing action: RegisterFonts Action ended 09:39:41: WriteEnvironmentStrings. Return value 1. MSI (s) (F8:48) [09:39:41:665]: Note: 1: 2205 2: 3: Font MSI (s) (F8:48) [09:39:41:665]: Note: 1: 2228 2: 3: Font 4: SELECT `FontTitle`, `FileName`, `Directory_`, `Action` From `Font`, `FileAction` Where `Font`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 Or `FileAction`.`Action` = 2) ORDER BY `FileAction`.`Directory_` Action start 09:39:41: RegisterFonts. MSI (s) (F8:48) [09:39:41:665]: Doing action: InstallODBC Action ended 09:39:41: RegisterFonts. Return value 1. MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2711 2: ODBCDriverManager MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2711 2: ODBCDriverManager64 MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ? MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `Driver`,`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCDriver`, `File`, `Component` WHERE `File_` = `File` AND `ODBCDriver`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ? MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ? MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `Translator`,`Component`.`ComponentId`,`Description`,`RuntimeFlags`,`Directory_`,`FileName`,`File_Setup`,`Action` FROM `ODBCTranslator`, `File`, `Component` WHERE `File_` = `File` AND `ODBCTranslator`.`Component_` = `Component` AND (`Component`.`ActionRequest` = 1 OR `Component`.`ActionRequest` = 2) AND `BinaryType` = ? MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2205 2: 3: ODBCDataSource MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ? MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2205 2: 3: ODBCDataSource MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2228 2: 3: ODBCDataSource 4: SELECT `DataSource`,`ComponentId`,`DriverDescription`,`Description`,`Registration` FROM `ODBCDataSource`, `Component` WHERE `Component_` = `Component` AND (`Component`.`Action` = 1 OR `Component`.`Action` = 2) AND `BinaryType` = ? Action start 09:39:41: InstallODBC. MSI (s) (F8:48) [09:39:41:666]: Doing action: RegisterTypeLibraries Action ended 09:39:41: InstallODBC. Return value 0. Action start 09:39:41: RegisterTypeLibraries. MSI (s) (F8:48) [09:39:41:666]: Doing action: RegisterComPlus Action ended 09:39:41: RegisterTypeLibraries. Return value 1. MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2205 2: 3: Complus MSI (s) (F8:48) [09:39:41:666]: Note: 1: 2228 2: 3: Complus 4: SELECT `ComponentId`, `FileName`, `Component`.`Directory_`, `ExpType`, `Component`.`Action`, `Component`.`Installed` FROM `Complus`, `Component`, `File` WHERE `Complus`.`Component_` = `Component` AND `Component`.`KeyPath` = `File`.`File` AND (`Action` = 1 OR `Action` = 2) Action start 09:39:41: RegisterComPlus. MSI (s) (F8:48) [09:39:41:667]: Doing action: SelfRegModules Action ended 09:39:41: RegisterComPlus. Return value 0. MSI (s) (F8:48) [09:39:41:667]: Note: 1: 2205 2: 3: SelfReg MSI (s) (F8:48) [09:39:41:667]: Note: 1: 2228 2: 3: SelfReg 4: Select `FileAction`.`FileName`,`FileAction`.`Directory_`,`FileAction`.`Action`, `FileAction`.`Component_`,`SelfReg`.`File_` From `SelfReg`, `FileAction` Where `SelfReg`.`File_` = `FileAction`.`File` And (`FileAction`.`Action` = 1 OR `FileAction`.`Action` = 2) Action start 09:39:41: SelfRegModules. MSI (s) (F8:48) [09:39:41:667]: Doing action: InstallServices Action ended 09:39:41: SelfRegModules. Return value 1. Action start 09:39:41: InstallServices. MSI (s) (F8:48) [09:39:41:712]: Doing action: SetServiceXP Action ended 09:39:41: InstallServices. Return value 1. Action start 09:39:41: SetServiceXP. MSI (s) (F8:48) [09:39:41:716]: Doing action: SetServiceSecurity Action ended 09:39:41: SetServiceXP. Return value 1. Action start 09:39:41: SetServiceSecurity. MSI (s) (F8:48) [09:39:41:720]: Doing action: SetServiceRecoveryActions Action ended 09:39:41: SetServiceSecurity. Return value 1. Action start 09:39:41: SetServiceRecoveryActions. MSI (s) (F8:48) [09:39:41:724]: Doing action: SetRollbackInstallDeviceControlProperty Action ended 09:39:41: SetServiceRecoveryActions. Return value 1. MSI (s) (F8:48) [09:39:41:725]: PROPERTY CHANGE: Adding RollBackInstallDeviceControl property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:41: SetRollbackInstallDeviceControlProperty. MSI (s) (F8:48) [09:39:41:725]: Skipping action: RollbackInstallDeviceControl (condition is false) MSI (s) (F8:48) [09:39:41:725]: Doing action: SetInstallDeviceControlProperty Action ended 09:39:41: SetRollbackInstallDeviceControlProperty. Return value 1. MSI (s) (F8:48) [09:39:41:725]: PROPERTY CHANGE: Adding InstallDeviceControl property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\"'. Action start 09:39:41: SetInstallDeviceControlProperty. MSI (s) (F8:48) [09:39:41:725]: Skipping action: InstallDeviceControl (condition is false) MSI (s) (F8:48) [09:39:41:725]: Doing action: SetAdminGroupDescription Action ended 09:39:41: SetInstallDeviceControlProperty. Return value 1. Action start 09:39:41: SetAdminGroupDescription. MSI (s) (F8:48) [09:39:41:729]: Doing action: SetPowerGroupDescription Action ended 09:39:41: SetAdminGroupDescription. Return value 1. Action start 09:39:41: SetPowerGroupDescription. MSI (s) (F8:48) [09:39:41:732]: Doing action: SetUserGroupDescription Action ended 09:39:41: SetPowerGroupDescription. Return value 1. Action start 09:39:41: SetUserGroupDescription. MSI (s) (F8:48) [09:39:41:736]: Doing action: SetOnAccessGroupDescription Action ended 09:39:41: SetUserGroupDescription. Return value 1. Action start 09:39:41: SetOnAccessGroupDescription. MSI (s) (F8:48) [09:39:41:740]: Skipping action: DisableOnAccess (condition is false) MSI (s) (F8:48) [09:39:41:740]: Skipping action: DisablePUADetection_setprop (condition is false) MSI (s) (F8:48) [09:39:41:740]: Skipping action: DisablePUADetection (condition is false) MSI (s) (F8:48) [09:39:41:740]: Doing action: DeleteExpiredCaches Action ended 09:39:41: SetOnAccessGroupDescription. Return value 1. Action start 09:39:41: DeleteExpiredCaches. MSI (s) (F8:48) [09:39:41:744]: Skipping action: EnableJournals (condition is false) MSI (s) (F8:48) [09:39:41:744]: Skipping action: DisableWebProtection_setprop (condition is false) MSI (s) (F8:48) [09:39:41:744]: Skipping action: DisableWebProtection (condition is false) MSI (s) (F8:48) [09:39:41:744]: Skipping action: DisableSxlLookups_setprop (condition is false) MSI (s) (F8:48) [09:39:41:744]: Skipping action: DisableSxlLookups (condition is false) MSI (s) (F8:48) [09:39:41:744]: Skipping action: CheckSNMPDLLPresence_setprop (condition is false) MSI (s) (F8:48) [09:39:41:744]: Skipping action: CheckSNMPDLLPresence (condition is false) MSI (s) (F8:48) [09:39:41:744]: Doing action: SetUpdateSXLServerList Action ended 09:39:41: DeleteExpiredCaches. Return value 1. MSI (s) (F8:48) [09:39:41:744]: PROPERTY CHANGE: Adding UpdateSXLServerList property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config"'. Action start 09:39:41: SetUpdateSXLServerList. MSI (s) (F8:48) [09:39:41:745]: Doing action: UpdateSXLServerList Action ended 09:39:41: SetUpdateSXLServerList. Return value 1. Action start 09:39:41: UpdateSXLServerList. MSI (s) (F8:48) [09:39:41:748]: Skipping action: GenerateSavMachineId (condition is false) MSI (s) (F8:48) [09:39:41:748]: Doing action: RegisterUser Action ended 09:39:41: UpdateSXLServerList. Return value 1. Action start 09:39:41: RegisterUser. MSI (s) (F8:48) [09:39:41:749]: Doing action: RegisterProduct Action ended 09:39:41: RegisterUser. Return value 0. Action start 09:39:41: RegisterProduct. MSI (s) (F8:48) [09:39:41:750]: Doing action: PublishComponents Action ended 09:39:41: RegisterProduct. Return value 1. MSI (s) (F8:48) [09:39:41:750]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (F8:48) [09:39:41:750]: Note: 1: 2228 2: 3: PublishComponent 4: SELECT `PublishComponent`.`ComponentId`, `PublishComponent`.`Qualifier`, `PublishComponent`.`AppData`, `Feature`, `Component`.`ComponentId`, `Component`.`RuntimeFlags` FROM `PublishComponent`, `Component`, `Feature` WHERE `PublishComponent`.`Component_` = `Component`.`Component` AND `PublishComponent`.`Feature_` = `Feature`.`Feature` AND ((`Feature`.`Action` = 1 OR `Feature`.`Action` = 2) OR (`Feature`.`Action` = 4 AND `Feature`.`Installed` = 0) OR (`Feature`.`Action` = 3 AND (`Feature`.`Installed` = 1 OR `Feature`.`Installed` = 2 OR `Feature`.`Installed` = 4))) Action start 09:39:41: PublishComponents. MSI (s) (F8:48) [09:39:41:750]: Doing action: MsiPublishAssemblies Action ended 09:39:41: PublishComponents. Return value 0. Action start 09:39:41: MsiPublishAssemblies. MSI (s) (F8:48) [09:39:41:751]: Doing action: PublishFeatures Action ended 09:39:41: MsiPublishAssemblies. Return value 1. Action start 09:39:41: PublishFeatures. MSI (s) (F8:48) [09:39:41:751]: Doing action: PublishProduct Action ended 09:39:41: PublishFeatures. Return value 1. Action start 09:39:41: PublishProduct. MSI (s) (F8:48) [09:39:41:805]: Skipping action: RollbackRegisterSavShellExtX64 (condition is false) MSI (s) (F8:48) [09:39:41:805]: Skipping action: RollbackRegisterSavShellExtIA64 (condition is false) MSI (s) (F8:48) [09:39:41:805]: Doing action: RegisterSavShellExtX64 Action ended 09:39:41: PublishProduct. Return value 1. Action start 09:39:41: RegisterSavShellExtX64. MSI (s) (F8:48) [09:39:41:806]: Skipping action: RegisterSavShellExtIA64 (condition is false) MSI (s) (F8:48) [09:39:41:806]: Skipping action: RollbackInstallSecurityCenter (condition is false) MSI (s) (F8:48) [09:39:41:806]: Doing action: SetRestoreFirstInstallTimeProperty Action ended 09:39:41: RegisterSavShellExtX64. Return value 1. MSI (s) (F8:48) [09:39:41:807]: PROPERTY CHANGE: Adding RestoreFirstInstallTime property. Its value is '0'. Action start 09:39:41: SetRestoreFirstInstallTimeProperty. MSI (s) (F8:48) [09:39:41:807]: Skipping action: RestoreFirstInstallTime (condition is false) MSI (s) (F8:48) [09:39:41:807]: Doing action: SetSAVAdminUpdateComplete Action ended 09:39:41: SetRestoreFirstInstallTimeProperty. Return value 1. Action start 09:39:41: SetSAVAdminUpdateComplete. MSI (s) (F8:48) [09:39:41:810]: Doing action: RunPreLaunchScript Action ended 09:39:41: SetSAVAdminUpdateComplete. Return value 1. Action start 09:39:41: RunPreLaunchScript. MSI (s) (F8:48) [09:39:41:813]: Doing action: RegisterDCIfEnabled Action ended 09:39:41: RunPreLaunchScript. Return value 1. Action start 09:39:41: RegisterDCIfEnabled. MSI (s) (F8:48) [09:39:41:817]: Doing action: StartSAVServices Action ended 09:39:41: RegisterDCIfEnabled. Return value 1. Action start 09:39:41: StartSAVServices. MSI (s) (F8:48) [09:39:41:820]: Skipping action: ApplyCachedPolicies (condition is false) MSI (s) (F8:48) [09:39:41:821]: Doing action: StartServices Action ended 09:39:41: StartSAVServices. Return value 1. Action start 09:39:41: StartServices. MSI (s) (F8:48) [09:39:41:821]: Skipping action: SwiUpdate_install.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (F8:48) [09:39:41:821]: Skipping action: SwiService_regis.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (F8:48) [09:39:41:821]: Skipping action: SwiUpdate_install_64.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (F8:48) [09:39:41:821]: Skipping action: SwiUpdate_upgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (F8:48) [09:39:41:821]: Doing action: SwiService_rereg.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 09:39:41: StartServices. Return value 1. Action start 09:39:41: SwiService_rereg.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (F8:48) [09:39:41:822]: Doing action: SwiUpdate_upgrade_64.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 09:39:41: SwiService_rereg.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. Action start 09:39:41: SwiUpdate_upgrade_64.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (F8:48) [09:39:41:823]: Doing action: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A Action ended 09:39:41: SwiUpdate_upgrade_64.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. MSI (s) (F8:80) [09:39:41:932]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI4F6C.tmp, Entrypoint: SwcEnableSwcServiceStart Action start 09:39:41: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. MSI (s) (F8:48) [09:39:42:065]: Doing action: BootDriverStartup Action ended 09:39:42: SwcEnableSwcServiceStart.92A5750A_B99C_4D18_8E96_314353D4097A. Return value 1. Action start 09:39:42: BootDriverStartup. MSI (s) (F8:48) [09:39:42:069]: Doing action: SetUpdateDriversProperty Action ended 09:39:42: BootDriverStartup. Return value 1. MSI (s) (F8:48) [09:39:42:069]: PROPERTY CHANGE: Modifying UPDATEDRIVERS property. Its current value is '1'. Its new value: '0'. Action start 09:39:42: SetUpdateDriversProperty. MSI (s) (F8:48) [09:39:42:069]: Doing action: SetConfigureSAVProperty Action ended 09:39:42: SetUpdateDriversProperty. Return value 1. MSI (s) (F8:48) [09:39:42:069]: PROPERTY CHANGE: Adding ConfigureSAV property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""0"'. Action start 09:39:42: SetConfigureSAVProperty. MSI (s) (F8:48) [09:39:42:070]: Skipping action: ScheduleReboot (condition is false) MSI (s) (F8:48) [09:39:42:070]: Doing action: ConfigureSAV Action ended 09:39:42: SetConfigureSAVProperty. Return value 1. Action start 09:39:42: ConfigureSAV. MSI (s) (F8:48) [09:39:42:073]: Doing action: SetUpdateFinished Action ended 09:39:42: ConfigureSAV. Return value 1. Action start 09:39:42: SetUpdateFinished. MSI (s) (F8:48) [09:39:42:076]: Skipping action: SetInstallationComplete (condition is false) MSI (s) (F8:48) [09:39:42:076]: Doing action: SetCreateSavAdapterDllRegistryEntryProperty Action ended 09:39:42: SetUpdateFinished. Return value 1. MSI (s) (F8:48) [09:39:42:076]: PROPERTY CHANGE: Adding CreateSavAdapterDllRegistryEntry property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:42: SetCreateSavAdapterDllRegistryEntryProperty. MSI (s) (F8:48) [09:39:42:076]: Doing action: CreateSavAdapterDllRegistryEntry Action ended 09:39:42: SetCreateSavAdapterDllRegistryEntryProperty. Return value 1. Action start 09:39:42: CreateSavAdapterDllRegistryEntry. MSI (s) (F8:48) [09:39:42:080]: Doing action: SetForceDeleteFilesProperty Action ended 09:39:42: CreateSavAdapterDllRegistryEntry. Return value 1. MSI (s) (F8:48) [09:39:42:080]: PROPERTY CHANGE: Adding ForceDeleteFiles property. Its value is 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\'. Action start 09:39:42: SetForceDeleteFilesProperty. MSI (s) (F8:48) [09:39:42:080]: Skipping action: ForceDeleteFiles (condition is false) MSI (s) (F8:48) [09:39:42:080]: Doing action: SetAfterScriptProperty Action ended 09:39:42: SetForceDeleteFilesProperty. Return value 1. MSI (s) (F8:48) [09:39:42:081]: PROPERTY CHANGE: Adding RunAfterScript property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""10.3.1"'. Action start 09:39:42: SetAfterScriptProperty. MSI (s) (F8:48) [09:39:42:081]: Doing action: RunAfterScript Action ended 09:39:42: SetAfterScriptProperty. Return value 1. Action start 09:39:42: RunAfterScript. MSI (s) (F8:48) [09:39:42:084]: Doing action: SetCopySavSyncFileProperty Action ended 09:39:42: RunAfterScript. Return value 1. MSI (s) (F8:48) [09:39:42:084]: PROPERTY CHANGE: Adding CopySAVSyncFile property. Its value is '"C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\"'. Action start 09:39:42: SetCopySavSyncFileProperty. MSI (s) (F8:48) [09:39:42:084]: Doing action: CopySAVSyncFile Action ended 09:39:42: SetCopySavSyncFileProperty. Return value 1. Action start 09:39:42: CopySAVSyncFile. MSI (s) (F8:48) [09:39:42:087]: Skipping action: SwiRollbackInstall.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (F8:48) [09:39:42:088]: Skipping action: SwiRollbackSwisDereg.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (F8:48) [09:39:42:088]: Skipping action: SwiRollbackSwisDeregRepair.11DACB83_28A7_4FA6_AF5B_C006E340C101 (condition is false) MSI (s) (F8:48) [09:39:42:088]: Doing action: InstallFinalize Action ended 09:39:42: CopySAVSyncFile. Return value 1. MSI (s) (F8:48) [09:39:42:140]: Running Script: C:\WINDOWS\Installer\MSI39B6.tmp MSI (s) (F8:48) [09:39:42:140]: PROPERTY CHANGE: Adding UpdateStarted property. Its value is '1'. MSI (s) (F8:48) [09:39:42:278]: Note: 1: 2265 2: 3: -2147287035 MSI (s) (F8:48) [09:39:42:279]: Machine policy value 'DisableRollback' is 0 MSI (s) (F8:48) [09:39:42:344]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (F8:48) [09:39:42:360]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1151159539,LangId=1033,Platform=0,ScriptType=1,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1) Action start 09:39:42: InstallFinalize. MSI (s) (F8:48) [09:39:42:361]: Executing op: ProductInfo(ProductKey={4320988A-7DE0-478D-A38B-CE9509BCE320},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=167968769,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={A585B546-7378-4F66-A471-ED4AC4BD0B43},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3) MSI (s) (F8:48) [09:39:42:363]: Executing op: DialogInfo(Type=0,Argument=1033) MSI (s) (F8:48) [09:39:42:372]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus) MSI (s) (F8:48) [09:39:42:372]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1]) MSI (s) (F8:48) [09:39:42:372]: Executing op: SetBaseline(Baseline=0,) MSI (s) (F8:48) [09:39:42:372]: Executing op: SetBaseline(Baseline=1,) MSI (s) (F8:48) [09:39:42:372]: Executing op: ActionStart(Name=SetUpdateFailed,,) MSI (s) (F8:48) [09:39:42:373]: Executing op: CustomActionSchedule(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,) MSI (s) (F8:48) [09:39:42:375]: Executing op: ActionStart(Name=RestoreMovedFiles,,) MSI (s) (F8:48) [09:39:42:376]: Executing op: CustomActionSchedule(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (F8:48) [09:39:42:378]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,) MSI (s) (F8:48) [09:39:42:379]: Executing op: CustomActionSchedule(Action=CheckRegForNullDACLs,ActionType=1025,Source=BinaryData,Target=CheckRegForNullDACLs,) MSI (s) (F8:98) [09:39:42:415]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI5191.tmp, Entrypoint: CheckRegForNullDACLs MSI (s) (F8:48) [09:39:42:463]: Executing op: ActionStart(Name=RunErrorScript,,) MSI (s) (F8:48) [09:39:42:463]: Executing op: CustomActionSchedule(Action=RunErrorScript,ActionType=1345,Source=BinaryData,Target=RunErrorScripts,CustomActionData="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""10.3.1") MSI (s) (F8:48) [09:39:42:466]: Executing op: ActionStart(Name=SetUpdateBegin,,) MSI (s) (F8:48) [09:39:42:466]: Executing op: CustomActionSchedule(Action=SetUpdateBegin,ActionType=1025,Source=BinaryData,Target=SetUpdateBegin,) MSI (s) (F8:74) [09:39:42:502]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI51F0.tmp, Entrypoint: SetUpdateBegin MSI (s) (F8:48) [09:40:12:790]: Executing op: ActionStart(Name=CloseSavMainWindow,,) MSI (s) (F8:48) [09:40:12:791]: Executing op: CustomActionSchedule(Action=CloseSavMainWindow,ActionType=1025,Source=BinaryData,Target=CloseSavMainWindow,) MSI (s) (F8:60) [09:40:12:842]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIC869.tmp, Entrypoint: CloseSavMainWindow MSI (s) (F8:48) [09:40:12:927]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,) MSI (s) (F8:48) [09:40:12:928]: Executing op: ProgressTotal(Total=4,Type=1,ByteEquivalent=24000) MSI (s) (F8:48) [09:40:12:928]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (F8:48) [09:40:12:928]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (F8:48) [09:40:12:929]: Executing op: ComponentRegister(ComponentId={9EED603A-240C-44CD-9136-F3703168D6A8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (F8:48) [09:40:12:929]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (F8:48) [09:40:12:929]: Executing op: ComponentRegister(ComponentId={15A3052C-E1D6-4ADE-9DF2-DAAF479F9A7B},KeyPath=02:\Software\Sophos\SAVService\SAVUI\plugins\WebControlPlugin.WebControlUIPlugin,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (F8:48) [09:40:12:929]: Executing op: ComponentRegister(ComponentId={DBD323D5-758C-4D26-BD2E-E46EB73EAC11},KeyPath=02:\Software\Sophos\AutoUpdate\Plugins\SWCPlugin\DLLPath,State=3,,Disk=1,SharedDllRefCount=0,BinaryType=0) MSI (s) (F8:48) [09:40:12:930]: Executing op: ActionStart(Name=RollbackDisableServices,,) MSI (s) (F8:48) [09:40:12:930]: Executing op: CustomActionSchedule(Action=RollbackDisableServices,ActionType=1281,Source=BinaryData,Target=RollbackDisableServices,) MSI (s) (F8:48) [09:40:12:932]: Executing op: ActionStart(Name=DisableServices,,) MSI (s) (F8:48) [09:40:12:933]: Executing op: CustomActionSchedule(Action=DisableServices,ActionType=1025,Source=BinaryData,Target=DisableServices,) MSI (s) (F8:A0) [09:40:12:968]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIC8F6.tmp, Entrypoint: DisableServices MSI (s) (F8:48) [09:40:13:027]: Executing op: ActionStart(Name=SwiRollbackUpgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101,,) MSI (s) (F8:48) [09:40:13:028]: Executing op: CustomActionSchedule(Action=SwiRollbackUpgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101,ActionType=1281,Source=BinaryData,Target=SwiRollbackUpgrade,) MSI (s) (F8:48) [09:40:13:029]: Executing op: ActionStart(Name=SwiService_dereg.11DACB83_28A7_4FA6_AF5B_C006E340C101,,) MSI (s) (F8:48) [09:40:13:029]: Executing op: CustomActionSchedule(Action=SwiService_dereg.11DACB83_28A7_4FA6_AF5B_C006E340C101,ActionType=1122,Source=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\,Target="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe" /unregisterService,) MSI (s) (F8:48) [09:40:13:555]: Executing op: ActionStart(Name=ForceStopSAVService,,) MSI (s) (F8:48) [09:40:13:556]: Executing op: CustomActionSchedule(Action=ForceStopSAVService,ActionType=1025,Source=BinaryData,Target=ForceStopSAVService,) MSI (s) (F8:38) [09:40:13:597]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSICB68.tmp, Entrypoint: ForceStopSAVService MSI (s) (F8:48) [09:40:13:860]: Executing op: ActionStart(Name=WaitForSAVService,,) MSI (s) (F8:48) [09:40:13:861]: Executing op: CustomActionSchedule(Action=WaitForSAVService,ActionType=1025,Source=BinaryData,Target=WaitForSAVService,) MSI (s) (F8:94) [09:40:13:897]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSICC92.tmp, Entrypoint: WaitForSAVService MSI (s) (F8:48) [09:40:13:978]: Executing op: ActionStart(Name=RemoveODBC,Description=Removing ODBC components,) MSI (s) (F8:48) [09:40:13:978]: Executing op: ODBCDriverManager(,BinaryType=0) MSI (s) (F8:48) [09:40:13:978]: Executing op: ODBCDriverManager(,BinaryType=1) MSI (s) (F8:48) [09:40:13:978]: Executing op: ActionStart(Name=CheckUninstallDrivers,,) MSI (s) (F8:48) [09:40:13:979]: Executing op: CustomActionSchedule(Action=CheckUninstallDrivers,ActionType=1025,Source=BinaryData,Target=CheckUninstallDrivers,) MSI (s) (F8:44) [09:40:14:015]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSICD10.tmp, Entrypoint: CheckUninstallDrivers MSI (s) (F8:48) [09:40:14:088]: Executing op: ActionStart(Name=UninstallDriverFiles64OnUpdate,,) MSI (s) (F8:48) [09:40:14:088]: Executing op: CustomActionSchedule(Action=UninstallDriverFiles64OnUpdate,ActionType=1058,Source=C:\WINDOWS\SysWOW64\,Target=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF",) MSI (s) (F8:48) [09:40:14:089]: Note: 1: 1721 2: UninstallDriverFiles64OnUpdate 3: C:\WINDOWS\SysWOW64\ 4: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF" MSI (s) (F8:48) [09:40:14:089]: Product: Sophos Anti-Virus -- Error 1721.There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: UninstallDriverFiles64OnUpdate, location: C:\WINDOWS\SysWOW64\, command: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\NATIVE.EXE /lhu "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF" MSI (s) (F8:48) [09:40:14:142]: Note: 1: 2265 2: 3: -2147287035 MSI (s) (F8:48) [09:40:14:142]: User policy value 'DisableRollback' is 0 MSI (s) (F8:48) [09:40:14:142]: Machine policy value 'DisableRollback' is 0 Action ended 09:40:14: InstallFinalize. Return value 3. MSI (s) (F8:48) [09:40:14:144]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1151159542,LangId=1033,Platform=0,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1) MSI (s) (F8:48) [09:40:14:144]: Executing op: DialogInfo(Type=0,Argument=1033) MSI (s) (F8:48) [09:40:14:145]: Executing op: DialogInfo(Type=1,Argument=Sophos Anti-Virus) MSI (s) (F8:48) [09:40:14:145]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1]) MSI (s) (F8:48) [09:40:14:145]: Executing op: ActionStart(Name=UninstallDriverFiles64OnUpdate,,) MSI (s) (F8:48) [09:40:14:145]: Executing op: ProductInfo(ProductKey={4320988A-7DE0-478D-A38B-CE9509BCE320},ProductName=Sophos Anti-Virus,PackageName=Sophos Anti-Virus.msi,Language=1033,Version=167968769,Assignment=1,ObsoleteArg=0,ProductIcon=ARPPRODUCTICON.exe,,PackageCode={A585B546-7378-4F66-A471-ED4AC4BD0B43},,,InstanceType=0,LUASetting=0,RemoteURTInstalls=0,ProductDeploymentFlags=3) MSI (s) (F8:48) [09:40:14:146]: Executing op: ActionStart(Name=CheckUninstallDrivers,,) MSI (s) (F8:48) [09:40:14:146]: Executing op: ActionStart(Name=RemoveODBC,Description=Removing ODBC components,) MSI (s) (F8:48) [09:40:14:146]: Executing op: ActionStart(Name=WaitForSAVService,,) MSI (s) (F8:48) [09:40:14:146]: Executing op: ActionStart(Name=ForceStopSAVService,,) MSI (s) (F8:48) [09:40:14:146]: Executing op: ActionStart(Name=SwiService_dereg.11DACB83_28A7_4FA6_AF5B_C006E340C101,,) MSI (s) (F8:48) [09:40:14:147]: Executing op: ActionStart(Name=SwiRollbackUpgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101,,) MSI (s) (F8:48) [09:40:14:147]: Executing op: CustomActionRollback(Action=SwiRollbackUpgrade.11DACB83_28A7_4FA6_AF5B_C006E340C101,ActionType=1281,Source=BinaryData,Target=SwiRollbackUpgrade,) MSI (s) (F8:40) [09:40:14:164]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSICDBD.tmp, Entrypoint: SwiRollbackUpgrade SwiRollbackUpgrade: swi_update.exe not found MSI (s) (F8:48) [09:40:14:464]: Executing op: ActionStart(Name=DisableServices,,) MSI (s) (F8:48) [09:40:14:464]: Executing op: ActionStart(Name=RollbackDisableServices,,) MSI (s) (F8:48) [09:40:14:465]: Executing op: CustomActionRollback(Action=RollbackDisableServices,ActionType=1281,Source=BinaryData,Target=RollbackDisableServices,) MSI (s) (F8:30) [09:40:14:504]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSICEF7.tmp, Entrypoint: RollbackDisableServices MSI (s) (F8:48) [09:40:14:536]: Executing op: ActionStart(Name=ProcessComponents,Description=Updating component registration,) MSI (s) (F8:48) [09:40:14:536]: Executing op: ComponentRegister(ComponentId={DBD323D5-758C-4D26-BD2E-E46EB73EAC11},KeyPath=02:\Software\Sophos\AutoUpdate\Plugins\SWCPlugin\DLLPath,State=3,ProductKey={4320988A-7DE0-478D-A38B-CE9509BCE320},,SharedDllRefCount=0,BinaryType=0) MSI (s) (F8:48) [09:40:14:536]: Executing op: ComponentRegister(ComponentId={15A3052C-E1D6-4ADE-9DF2-DAAF479F9A7B},KeyPath=02:\Software\Sophos\SAVService\SAVUI\plugins\WebControlPlugin.WebControlUIPlugin,State=3,ProductKey={4320988A-7DE0-478D-A38B-CE9509BCE320},,SharedDllRefCount=0,BinaryType=0) MSI (s) (F8:48) [09:40:14:536]: Executing op: ComponentRegister(ComponentId={9EED603A-240C-44CD-9136-F3703168D6A8},KeyPath=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat,State=3,ProductKey={4320988A-7DE0-478D-A38B-CE9509BCE320},,SharedDllRefCount=0,BinaryType=0) MSI (s) (F8:48) [09:40:14:536]: WIN64DUALFOLDERS: Substitution in 'C:\Program Files (x86)\Sophos\Sophos Anti-Virus\scf.dat' folder had been blocked by the 1 mask argument (the folder pair's iSwapAttrib member = 0). MSI (s) (F8:48) [09:40:14:537]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={00000000-0000-0000-0000-000000000000},,SharedDllRefCount=0,BinaryType=0) MSI (s) (F8:48) [09:40:14:537]: Executing op: ComponentRegister(ComponentId={6DEE3B23-340D-4E95-9F03-A14651369222},KeyPath=C:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml,State=3,ProductKey={4320988A-7DE0-478D-A38B-CE9509BCE320},,SharedDllRefCount=0,BinaryType=0) MSI (s) (F8:48) [09:40:14:537]: Executing op: ActionStart(Name=CloseSavMainWindow,,) MSI (s) (F8:48) [09:40:14:537]: Executing op: ActionStart(Name=SetUpdateBegin,,) MSI (s) (F8:48) [09:40:14:537]: Executing op: ActionStart(Name=RunErrorScript,,) MSI (s) (F8:48) [09:40:14:538]: Executing op: CustomActionRollback(Action=RunErrorScript,ActionType=1345,Source=BinaryData,Target=RunErrorScripts,CustomActionData="C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""10.3.1") MSI (s) (F8:F8) [09:40:14:580]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSICF36.tmp, Entrypoint: RunErrorScripts MSI (s) (F8:48) [09:40:14:610]: Executing op: ActionStart(Name=CheckRegForNullDACLs,,) MSI (s) (F8:48) [09:40:14:610]: Executing op: ActionStart(Name=RestoreMovedFiles,,) MSI (s) (F8:48) [09:40:14:611]: Executing op: CustomActionRollback(Action=RestoreMovedFiles,ActionType=1281,Source=BinaryData,Target=RestoreMovedFiles,CustomActionData=C:\Program Files (x86)\Sophos\Sophos Anti-Virus\) MSI (s) (F8:4C) [09:40:14:650]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSICF85.tmp, Entrypoint: RestoreMovedFiles MSI (s) (F8:48) [09:40:14:667]: Executing op: ActionStart(Name=SetUpdateFailed,,) MSI (s) (F8:48) [09:40:14:668]: Executing op: CustomActionRollback(Action=SetUpdateFailed,ActionType=1281,Source=BinaryData,Target=SetUpdateFailed,) MSI (s) (F8:6C) [09:40:14:707]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSICFC5.tmp, Entrypoint: SetUpdateFailed MSI (s) (F8:48) [09:40:44:744]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0) MSI (s) (F8:48) [09:40:44:744]: Error in rollback skipped. Return: 5 MSI (s) (F8:48) [09:40:44:782]: Note: 1: 2318 2: MSI (s) (F8:48) [09:40:44:795]: No System Restore sequence number for this installation. MSI (s) (F8:48) [09:40:44:795]: Unlocking Server MSI (s) (F8:48) [09:40:44:829]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'. Action ended 09:40:44: INSTALL. Return value 3. Property(S): DiskPrompt = [1] Property(S): INSTALL = C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\ Property(S): CONFIG = C:\ProgramData\Sophos\Sophos Anti-Virus\Config\ Property(S): INFECTED = C:\ProgramData\Sophos\Sophos Anti-Virus\INFECTED\ Property(S): LOGS = C:\ProgramData\Sophos\Sophos Anti-Virus\logs\ Property(S): TEMP = C:\ProgramData\Sophos\Sophos Anti-Virus\Temp\ Property(S): CACHE = C:\ProgramData\Sophos\Sophos Anti-Virus\Cache\ Property(S): LOGS1 = C:\ProgramData\Sophos\Sophos Data Control\logs\ Property(S): LOGS2 = C:\ProgramData\Sophos\Sophos Device Control\logs\ Property(S): LOGS3 = C:\ProgramData\Sophos\Sophos Tamper Protection\logs\ Property(S): INSTALLDIR = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): MsiAMD64 = 6 Property(S): INSTALLDIR_IA64 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): INSTALLDIR_WIN32 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): INSTALLDIR_X64 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): VersionNT64 = 603 Property(S): BootDriverStartup = 0 Property(S): ConfigureSAV = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""0" Property(S): CopyOtherFiles = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""VISTA_AMD64" Property(S): CopySAVSyncFile = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\" Property(S): CreateSavAdapterDllRegistryEntry = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): CreateUserGroups = C:\ProgramData\Sophos\Sophos Anti-Virus\Config Property(S): DeleteBDLs = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): DeleteDriverKeys = 0 Property(S): DeleteHIPSConfig = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): DeleteIDEs = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): DeleteOtherFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): ForceDeleteFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): ALLUSERS = 1 Property(S): SystemFolder = C:\WINDOWS\SysWOW64\ Property(S): System64Folder = C:\WINDOWS\SysWOW64\ Property(S): InstallBootDriverVista = C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\WinLH_i386\SOPHOSBOOTDRIVER.INF Property(S): InstallClassFilterVista = C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\ClassFilterDrivers\i386\sdcfilter.inf Property(S): InstallDeviceControl = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\" Property(S): InstallDriverFilesVista = C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\WinLH_i386\SAVONACCESSDRIV.INF Property(S): InstallKMSDriver = C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\drivers\i386\skmscan.inf Property(S): InstallUnsignedBootDriver = "C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""VISTA_AMD64" Property(S): InstallUnsignedDrivers = "C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""VISTA_AMD64" Property(S): MoveLockedFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\| Property(S): RegisterBufferOverflowProtection = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RemoveFilesOnUpgrade = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RemoveSAVI = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RestoreFirstInstallTime = 0 Property(S): RestoreMovedFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackBootDriverVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF Property(S): RollbackClassFilterVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf Property(S): RollbackDriverFilesVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF Property(S): RollbackForceDeleteFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackKMSDriverVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\skmscan.inf Property(S): RollbackOtherFiles = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackSavi = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RollbackUpdateSavAdapterDll = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): RunAfterScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""10.3.1" Property(S): RunErrorScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""10.3.1" Property(S): RunPreLaunchScript = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\""10.3.1" Property(S): SetAdminGroupDescription = SophosAdministrators may run Sophos Anti-Virus with complete access Property(S): ALLUSERSPROFILE = C:\ProgramData\ Property(S): SetFolderPermissions = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): UPDATEDRIVERS = 0 Property(S): TARGETDIR = D:\ Property(S): SetOnAccessGroupDescription = Contains accounts used by Sophos Anti-Virus when it performs threat scanning and cleanup functions Property(S): SetPowerGroupDescription = SophosPowerUsers may run Sophos Anti-Virus with the access that SophosUsers have, plus greater access to cleanup Property(S): RollBackInstallDeviceControl = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): StartDriverServices = VISTA_AMD64 Property(S): UninstallBootDriverOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF Property(S): UninstallBootDriver = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SOPHOSBOOTDRIVER.INF Property(S): UninstallClassFilterVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sdcfilter.inf Property(S): UninstallDeviceControl = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config" Property(S): UninstallDriverFilesOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF Property(S): UninstallDriverFilesVista = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVONACCESSDRIV.INF Property(S): UninstallKMSDriverOnUpdate = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF Property(S): UninstallKMSDriver = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SKMSCAN.INF Property(S): UnregisterBufferOverflowProtection = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): UpdateSXLServerList = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\Sophos Anti-Virus\Config" Property(S): UpdateSAVI = "C:\Program Files (x86)\Sophos\Sophos Anti-Virus\""C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\" Property(S): SetUserGroupDescription = SophosUsers may run Sophos Anti-Virus with limited access to scanning configuration and cleanup Property(S): USERPROFILE = C:\Users\Default\ Property(S): EventType = BEGIN_SYSTEM_CHANGE Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ Property(S): CommonFiles64Folder = C:\Program Files (x86)\Common Files\ Property(S): DesktopFolder = C:\Users\Public\Desktop\ Property(S): FavoritesFolder = C:\WINDOWS\SysWOW64\config\systemprofile\Favorites\ Property(S): FontsFolder = C:\WINDOWS\Fonts\ Property(S): GlobalAssemblyCache = D:\ Property(S): LocalAppDataFolder = C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Local\ Property(S): PrimaryVolumePath = D:\ Property(S): ProgramFiles64Folder = C:\Program Files (x86)\ Property(S): SendToFolder = C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\ Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ Property(S): System16Folder = D:\ Property(S): TempFolder = C:\WINDOWS\TEMP\ Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\ Property(S): WindowsFolder = C:\WINDOWS\ Property(S): WindowsVolume = C:\ Property(S): PLUGINS = C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\ Property(S): CISCOTRUSTAGENT = C:\Program Files (x86)\Common Files\Cisco Systems\CiscoTrustAgent\ Property(S): CISCO_SYSTEMS = C:\Program Files (x86)\Common Files\Cisco Systems\ Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\ Property(S): RESOURCES = C:\ProgramData\Sophos\Sophos Anti-Virus\ Property(S): NEW_DIRECTORY3 = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\ Property(S): RES = C:\ProgramData\Sophos\Sophos Anti-Virus\Res\ Property(S): NEW_DIRECTORY1 = C:\ProgramData\Sophos\ Property(S): SOPHOS_DATA_CONTROL = C:\ProgramData\Sophos\Sophos Data Control\ Property(S): SOPHOS_DEVICE_CONTROL = C:\ProgramData\Sophos\Sophos Device Control\ Property(S): SOPHOS_TAMPER_PROTECTION = C:\ProgramData\Sophos\Sophos Tamper Protection\ Property(S): CommonAppDataFolder = C:\ProgramData\ Property(S): SOPHOS_ANTI_VIRUS = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\ Property(S): SOPHOS = C:\Program Files (x86)\Sophos\ Property(S): ProgramFilesFolder = C:\Program Files (x86)\ Property(S): NEW_DIRECTORY2 = C:\ProgramData\Microsoft\Windows\Start Menu\Sophos\ Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\ Property(S): newfolder2 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\ Property(S): newfolder1 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos\ Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\ Property(S): VersionNT = 603 Property(S): Installed = 00:00:00 Property(S): AdminUser = 1 Property(S): Manufacturer = Sophos Limited Property(S): ProductCode = {4320988A-7DE0-478D-A38B-CE9509BCE320} Property(S): ProductLanguage = 1033 Property(S): ProductName = Sophos Anti-Virus Property(S): ProductVersion = 10.3.1 Property(S): UpgradeCode = {597B239E-3032-491A-A322-817737925E8A} Property(S): _IsMaintenance = Change Property(S): _IsSetupTypeMin = Typical Property(S): AFTERREBOOT = 0 Property(S): AgreeToLicense = No Property(S): ApplicationUsers = AllUsers Property(S): APPLYCLASSICCONFIG = 0 Property(S): ARPCOMMENTS = Protects your computer and network from threats Property(S): ARPCONTACT = Sophos Technical Support Property(S): ARPHELPLINK = http://www.sophos.com/support Property(S): ARPHELPTELEPHONE = Property(S): ARPNOMODIFY = 1 Property(S): ARPNOREPAIR = 1 Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe Property(S): ARPURLINFOABOUT = http://www.sophos.com Property(S): ARPURLUPDATEINFO = http://www.sophos.com/support/updates Property(S): BOOTDRIVERSIGNED = 1 Property(S): CHECKFORCOMPETITORS = 1 Property(S): CHECKFORSCF = 1 Property(S): CLASSFILTERPRESENT = 0 Property(S): CopyBDLs = 0 Property(S): CopyIDEs = 0 Property(S): DATACONTROL = 1 Property(S): DefaultUIFont = Tahoma8 Property(S): DEVICECONTROL = 1 Property(S): DialogCaption = Sophos Installer Property(S): DISABLEONACCESS = 0 Property(S): Display_IsBitmapDlg = 1 Property(S): DisplayNameCustom = Custom Property(S): DisplayNameMinimal = Minimal Property(S): DisplayNameTypical = Typical Property(S): DRIVERVERSION = VISTA_AMD64 Property(S): FIRST_INSTALL_DATE = 0 Property(S): IDEONLY = 0 Property(S): InstallChoice = AR Property(S): INSTALLLEVEL = 100 Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1] Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1] Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1] Property(S): IS_PROGMSG_XML_COSTING = Costing XML files... Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s... Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes... Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s... Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes... Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s... Property(S): IS_SQLSERVER_AUTHENTICATION = 0 Property(S): IS_SQLSERVER_USERNAME = sa Property(S): ISReleaseFlags = SAV Property(S): ISVROOT_PORT_NO = 0 Property(S): MAJORUPGRADE = 0 Property(S): MANAGED = 0 Property(S): MSIRESTARTMANAGERCONTROL = Disable Property(S): NEEDREBOOT = 0 Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@ Property(S): PROCESSOR_NX_ENABLED = 1 Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools... Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories... Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions... Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories... Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories... Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools... Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories... Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions... Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools... Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes... Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions... Property(S): ProgressType0 = install Property(S): ProgressType1 = Installing Property(S): ProgressType2 = installed Property(S): ProgressType3 = installs Property(S): RebootYesNo = Yes Property(S): Registration = No Property(S): ReinstallModeText = omus Property(S): SAVIONLY = 0 Property(S): SCRIPTDIR = [SOURCEDIR] Property(S): SequenceNumber = 0 Property(S): SetupType = Typical Property(S): UNINSTALLBOOTDRIVERS = 1 Property(S): UNINSTALLCLASSFILTER = 1 Property(S): UNINSTALLDRIVERS = 1 Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus. Property(S): UNINSTALLKMSDRIVERS = 1 Property(S): UPDATEBOOTDRIVERS = 1 Property(S): UPDATECLASSFILTER = 1 Property(S): VIRUSDATAUPDATE = 0 Property(S): SecureCustomProperties = INSTALLINGVERSION;MAJORUPGRADE;WEBCONTROL Property(S): WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\ Property(S): SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\SysWOW64\ Property(S): WinSxsDirectory.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\ Property(S): payload_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_51ca66a2bbe76806\ Property(S): payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\ Property(S): WinSxsManifests.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\Manifests\ Property(S): WinSxsPolicies.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\Policies\ Property(S): policydir.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ Property(S): policydir_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ Property(S): SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\SysWOW64\ Property(S): WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\ Property(S): WinSxsDirectory.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\ Property(S): payload_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\ Property(S): payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\ Property(S): WinSxsManifests.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\Manifests\ Property(S): WinSxsPolicies.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\Policies\ Property(S): policydir.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ Property(S): policydir_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ Property(S): WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\WINDOWS\winsxs\ Property(S): payload_ul.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f0efb442f8a0f46c\ Property(S): WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\WINDOWS\winsxs\Policies\ Property(S): policydir.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\ Property(S): WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\WINDOWS\ Property(S): WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\WINDOWS\winsxs\ Property(S): payload_ul.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f47e1bd6f6571810\ Property(S): WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\WINDOWS\winsxs\Policies\ Property(S): policydir.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\ Property(S): WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\WINDOWS\ Property(S): WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\ Property(S): SwcHookSAU.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\WebControlMessaging.dll Property(S): SwcHookRMS.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\SWCAdapter.dll Property(S): SWCSERVICEFILEEXISTS.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\ Property(S): SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\ Property(S): MsiLogFileLocation = C:\WINDOWS\TEMP\Sophos Anti-Virus Major Install Log_140429_083931.txt Property(S): PackageCode = {A585B546-7378-4F66-A471-ED4AC4BD0B43} Property(S): ProductState = 5 Property(S): ProductToBeRegistered = 1 Property(S): REBOOT = ReallySuppress Property(S): UPDATEKMSDRIVERS = 1 Property(S): WEBCONTROL = 1 Property(S): CURRENTDIRECTORY = C:\WINDOWS\system32 Property(S): CLIENTUILEVEL = 3 Property(S): MSICLIENTUSESEXTERNALUI = 1 Property(S): CLIENTPROCESSID = 3856 Property(S): PRODUCTLANGUAGE = 1033 Property(S): VersionDatabase = 200 Property(S): VersionMsi = 5.00 Property(S): WindowsBuild = 9600 Property(S): ServicePackLevel = 0 Property(S): ServicePackLevelMinor = 0 Property(S): MsiNTProductType = 1 Property(S): MsiNTSuitePersonal = 1 Property(S): RemoteAdminTS = 1 Property(S): AppDataFolder = C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\ Property(S): NetHoodFolder = C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\ Property(S): PersonalFolder = C:\WINDOWS\system32\config\systemprofile\Documents\ Property(S): PrintHoodFolder = C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\ Property(S): RecentFolder = C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\ Property(S): MyPicturesFolder = C:\WINDOWS\system32\config\systemprofile\Pictures\ Property(S): GPTSupport = 1 Property(S): OLEAdvtSupport = 1 Property(S): ShellAdvtSupport = 1 Property(S): Msix64 = 6 Property(S): Intel = 6 Property(S): PhysicalMemory = 6030 Property(S): VirtualMemory = 4667 Property(S): MsiTrueAdminUser = 1 Property(S): LogonUser = SYSTEM Property(S): UserSID = S-1-5-18 Property(S): UserLanguageID = 1043 Property(S): ComputerName = COMPUTER Property(S): SystemLanguageID = 1043 Property(S): ScreenX = 1024 Property(S): ScreenY = 768 Property(S): CaptionHeight = 23 Property(S): BorderTop = 1 Property(S): BorderSide = 1 Property(S): TextHeight = 16 Property(S): TextInternalLeading = 3 Property(S): ColorBits = 32 Property(S): TTCSupport = 1 Property(S): Time = 09:40:44 Property(S): Date = 29-4-2014 Property(S): MsiNetAssemblySupport = 4.0.30319.33440 Property(S): MsiWin32AssemblySupport = 6.3.9600.16384 Property(S): RedirectedDllSupport = 2 Property(S): MsiRunningElevated = 1 Property(S): Privileged = 1 Property(S): USERNAME = Gebruiker Property(S): DATABASE = C:\Windows\Installer\f44c82.msi Property(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\Sophos Anti-Virus.msi Property(S): UILevel = 2 Property(S): ACTION = INSTALL Property(S): ROOTDRIVE = D:\ Property(S): CostingComplete = 1 Property(S): OutOfDiskSpace = 0 Property(S): OutOfNoRbDiskSpace = 0 Property(S): PrimaryVolumeSpaceAvailable = 0 Property(S): PrimaryVolumeSpaceRequired = 0 Property(S): PrimaryVolumeSpaceRemaining = 0 Property(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\1398760633\ Property(S): SourcedirProduct = {4320988A-7DE0-478D-A38B-CE9509BCE320} MSI (s) (F8:48) [09:40:44:856]: Note: 1: 1729 MSI (s) (F8:48) [09:40:44:856]: Product: Sophos Anti-Virus -- Configuration failed. MSI (s) (F8:48) [09:40:44:958]: Het product is opnieuw geconfigureerd. Productnaam: Sophos Anti-Virus. Productversie: 10.3.1. Producttaal: 1033. Fabrikant: Sophos Limited. Status van geslaagd/mislukt opnieuw configureren: 1603. MSI (s) (F8:48) [09:40:45:048]: Deferring clean up of packages/files, if any exist MSI (s) (F8:48) [09:40:45:048]: MainEngineThread is returning 1603 MSI (s) (F8:CC) [09:40:45:048]: No System Restore sequence number for this installation. === Logging stopped: 29-4-2014 09:40:44 === MSI (s) (F8:CC) [09:40:45:094]: User policy value 'DisableRollback' is 0 MSI (s) (F8:CC) [09:40:45:094]: Machine policy value 'DisableRollback' is 0 MSI (s) (F8:CC) [09:40:45:094]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (F8:CC) [09:40:45:094]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (F8:CC) [09:40:45:094]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 MSI (s) (F8:CC) [09:40:45:095]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (s) (F8:CC) [09:40:45:213]: Destroying RemoteAPI object. MSI (s) (F8:28) [09:40:45:214]: Custom Action Manager thread ending. MSI (c) (10:CC) [09:40:45:227]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (10:CC) [09:40:45:228]: MainEngineThread is returning 1603 === Verbose logging stopped: 29-4-2014 09:40:45 === 2014-04-29 09:40:45 ERROR: Installation failed