2015-01-29 12:44:46 Info: Logging started: installing/upgrading Sophos Anti-Virus 2015-01-29 12:44:46 Info: InstallFromPath is: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\ 2015-01-29 12:44:46 Info: InstallToPath is: 2015-01-29 12:44:46 Info: SAV is not installed. Installing to {InstallToPath} 2015-01-29 12:44:46 INFO: Checking the validity of the VDL manifest file. 2015-01-29 12:44:47 INFO: The manifest file has been successfully validated. 2015-01-29 12:44:47 Info: Managed install 2015-01-29 12:44:47 Info: Performing major update of Sophos Anti-Virus using msi. 2015-01-29 12:44:47 Info: Update is signalled. 2015-01-29 12:44:47 UpdateVersionInfo(), SAU can't supply version info - using msi version 2015-01-29 12:44:47 Info: PutSetupOptionsToRegistry 2015-01-29 12:44:47 Info: Install MSXML 2015-01-29 12:44:47 Info: Check boot driver and kms driver 2015-01-29 12:44:47 Info: no existing installation of Sophos Anti-Virus was found 2015-01-29 12:44:47 Info: Restart required for Data Control (clean managed full install) 2015-01-29 12:44:47 Info: Transform file returned: 2015-01-29 12:44:47 Info: SAV Setup plugin: running MsiInstallProduct (C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi, INSTALLDIR="" REBOOT=ReallySuppress UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1) === Verbose logging started: 1/29/2015 12:44:47 Build type: SHIP UNICODE 3.01.4001.5512 Calling process: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\ALUpdate.exe === MSI (c) (F8:80) [12:44:47:540]: Resetting cached policy values MSI (c) (F8:80) [12:44:47:540]: Machine policy value 'Debug' is 0 MSI (c) (F8:80) [12:44:47:540]: ******* RunEngine: ******* Product: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi ******* Action: ******* CommandLine: ********** MSI (c) (F8:80) [12:44:47:540]: Client-side and UI is none or basic: Running entire install on the server. MSI (c) (F8:80) [12:44:47:540]: Grabbed execution mutex. MSI (c) (F8:80) [12:44:47:555]: Cloaking enabled. MSI (c) (F8:80) [12:44:47:555]: Attempting to enable all disabled priveleges before calling Install on Server MSI (c) (F8:80) [12:44:47:555]: Incrementing counter to disable shutdown. Counter after increment: 0 MSI (s) (B8:D0) [12:44:47:571]: Grabbed execution mutex. MSI (s) (B8:E8) [12:44:47:571]: Resetting cached policy values MSI (s) (B8:E8) [12:44:47:571]: Machine policy value 'Debug' is 0 MSI (s) (B8:E8) [12:44:47:571]: ******* RunEngine: ******* Product: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi ******* Action: ******* CommandLine: ********** MSI (s) (B8:E8) [12:44:47:571]: Machine policy value 'DisableUserInstalls' is 0 MSI (s) (B8:E8) [12:44:47:571]: File will have security applied from OpCode. MSI (s) (B8:E8) [12:44:47:586]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi' against software restriction policy MSI (s) (B8:E8) [12:44:47:586]: SOFTWARE RESTRICTION POLICY: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi has a digital signature MSI (s) (B8:E8) [12:44:47:680]: SOFTWARE RESTRICTION POLICY: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi is permitted to run at the 'unrestricted' authorization level. MSI (s) (B8:E8) [12:44:47:680]: End dialog not enabled MSI (s) (B8:E8) [12:44:47:680]: Original package ==> C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi MSI (s) (B8:E8) [12:44:47:680]: Package we're running from ==> C:\WINDOWS\Installer\bff56b.msi MSI (s) (B8:E8) [12:44:47:696]: APPCOMPAT: looking for appcompat database entry with ProductCode '{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}'. MSI (s) (B8:E8) [12:44:47:696]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (B8:E8) [12:44:47:696]: MSCOREE not loaded loading copy from system32 MSI (s) (B8:E8) [12:44:47:696]: Machine policy value 'TransformsSecure' is 0 MSI (s) (B8:E8) [12:44:47:696]: User policy value 'TransformsAtSource' is 0 MSI (s) (B8:E8) [12:44:47:696]: Machine policy value 'DisablePatch' is 0 MSI (s) (B8:E8) [12:44:47:696]: Machine policy value 'AllowLockdownPatch' is 0 MSI (s) (B8:E8) [12:44:47:696]: Machine policy value 'DisableLUAPatching' is 0 MSI (s) (B8:E8) [12:44:47:696]: Machine policy value 'DisableFlyWeightPatching' is 0 MSI (s) (B8:E8) [12:44:47:696]: APPCOMPAT: looking for appcompat database entry with ProductCode '{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}'. MSI (s) (B8:E8) [12:44:47:696]: APPCOMPAT: no matching ProductCode found in database. MSI (s) (B8:E8) [12:44:47:696]: Transforms are not secure. MSI (s) (B8:E8) [12:44:47:696]: Note: 1: 2205 2: 3: Control MSI (s) (B8:E8) [12:44:47:696]: Command Line: INSTALLDIR= REBOOT=ReallySuppress UPDATEDRIVERS=1 UPDATECLASSFILTER=1 UPDATEBOOTDRIVERS=1 UPDATEKMSDRIVERS=1 SAVIONLY=0 MANAGED=1 DATACONTROL=1 DEVICECONTROL=1 WEBCONTROL=1 CURRENTDIRECTORY=C:\WINDOWS\system32 CLIENTUILEVEL=3 CLIENTPROCESSID=1784 MSI (s) (B8:E8) [12:44:47:696]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{62513949-B49A-48C4-B9F2-972FA625C57E}'. MSI (s) (B8:E8) [12:44:47:696]: Product Code passed to Engine.Initialize: '' MSI (s) (B8:E8) [12:44:47:696]: Product Code from property table before transforms: '{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}' MSI (s) (B8:E8) [12:44:47:696]: Product Code from property table after transforms: '{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}' MSI (s) (B8:E8) [12:44:47:696]: Product not registered: beginning first-time install MSI (s) (B8:E8) [12:44:47:696]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'. MSI (s) (B8:E8) [12:44:47:696]: Entering CMsiConfigurationManager::SetLastUsedSource. MSI (s) (B8:E8) [12:44:47:696]: User policy value 'SearchOrder' is 'nmu' MSI (s) (B8:E8) [12:44:47:696]: Adding new sources is allowed. MSI (s) (B8:E8) [12:44:47:696]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'. MSI (s) (B8:E8) [12:44:47:696]: Package name extracted from package path: 'Sophos Anti-Virus.msi' MSI (s) (B8:E8) [12:44:47:696]: Package to be registered: 'Sophos Anti-Virus.msi' MSI (s) (B8:E8) [12:44:47:696]: Note: 1: 2729 MSI (s) (B8:E8) [12:44:47:696]: Note: 1: 2729 MSI (s) (B8:E8) [12:44:47:696]: Note: 1: 2262 2: AdminProperties 3: -2147287038 MSI (s) (B8:E8) [12:44:47:696]: Machine policy value 'DisableMsi' is 0 MSI (s) (B8:E8) [12:44:47:696]: Machine policy value 'AlwaysInstallElevated' is 0 MSI (s) (B8:E8) [12:44:47:696]: User policy value 'AlwaysInstallElevated' is 0 MSI (s) (B8:E8) [12:44:47:696]: Product installation will be elevated because user is admin and product is being installed per-machine. MSI (s) (B8:E8) [12:44:47:696]: Running product '{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}' with elevated privileges: Product is assigned. MSI (s) (B8:E8) [12:44:47:696]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'. MSI (s) (B8:E8) [12:44:47:696]: PROPERTY CHANGE: Modifying UPDATECLASSFILTER property. Its current value is '0'. Its new value: '1'. MSI (s) (B8:E8) [12:44:47:696]: PROPERTY CHANGE: Adding UPDATEKMSDRIVERS property. Its value is '1'. MSI (s) (B8:E8) [12:44:47:696]: PROPERTY CHANGE: Modifying DATACONTROL property. Its current value is '0'. Its new value: '1'. MSI (s) (B8:E8) [12:44:47:696]: PROPERTY CHANGE: Modifying DEVICECONTROL property. Its current value is '0'. Its new value: '1'. MSI (s) (B8:E8) [12:44:47:696]: PROPERTY CHANGE: Adding WEBCONTROL property. Its value is '1'. MSI (s) (B8:E8) [12:44:47:696]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\WINDOWS\system32'. MSI (s) (B8:E8) [12:44:47:696]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'. MSI (s) (B8:E8) [12:44:47:696]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '1784'. MSI (s) (B8:E8) [12:44:47:696]: TRANSFORMS property is now: MSI (s) (B8:E8) [12:44:47:696]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'. MSI (s) (B8:E8) [12:44:47:696]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Application Data MSI (s) (B8:E8) [12:44:47:696]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Favorites MSI (s) (B8:E8) [12:44:47:696]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\NetHood MSI (s) (B8:E8) [12:44:47:696]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\My Documents MSI (s) (B8:E8) [12:44:47:696]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\PrintHood MSI (s) (B8:E8) [12:44:47:696]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Recent MSI (s) (B8:E8) [12:44:47:696]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\SendTo MSI (s) (B8:E8) [12:44:47:696]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Templates MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Application Data MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\My Documents\My Pictures MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Startup MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Desktop MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Administrative Tools MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Start Menu MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\system32\config\systemprofile\Desktop MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Templates MSI (s) (B8:E8) [12:44:47:711]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts MSI (s) (B8:E8) [12:44:47:711]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (s) (B8:E8) [12:44:47:711]: MSCOREE not loaded loading copy from system32 MSI (s) (B8:E8) [12:44:47:711]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'. MSI (s) (B8:E8) [12:44:47:711]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (B8:E8) [12:44:47:711]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'MNL-OFF-59'. MSI (s) (B8:E8) [12:44:47:711]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2 MSI (s) (B8:E8) [12:44:47:711]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'Micro Nav Ltd'. MSI (s) (B8:E8) [12:44:47:711]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\WINDOWS\Installer\bff56b.msi'. MSI (s) (B8:E8) [12:44:47:711]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi'. MSI (s) (B8:E8) [12:44:47:711]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (B8:E8) [12:44:47:711]: Machine policy value 'DisableRollback' is 0 MSI (s) (B8:E8) [12:44:47:711]: User policy value 'DisableRollback' is 0 MSI (s) (B8:E8) [12:44:47:711]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'. === Logging started: 1/29/2015 12:44:47 === MSI (s) (B8:E8) [12:44:47:711]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'. MSI (s) (B8:E8) [12:44:47:711]: Doing action: INSTALL MSI (s) (B8:E8) [12:44:47:711]: Running ExecuteSequence MSI (s) (B8:E8) [12:44:47:711]: Doing action: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C Action start 12:44:47: INSTALL. MSI (s) (B8:E8) [12:44:47:711]: PROPERTY CHANGE: Adding SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\system32\'. Action start 12:44:47: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C. MSI (s) (B8:E8) [12:44:47:711]: Doing action: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA Action ended 12:44:47: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C. Return value 1. MSI (s) (B8:E8) [12:44:47:711]: PROPERTY CHANGE: Adding SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\system32\'. Action start 12:44:47: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA. MSI (s) (B8:E8) [12:44:47:711]: Doing action: AppSearch Action ended 12:44:47: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA. Return value 1. Action start 12:44:47: AppSearch. MSI (s) (B8:E8) [12:44:47:711]: Note: 1: 2262 2: Signature 3: -2147287038 MSI (s) (B8:E8) [12:44:47:711]: Doing action: LaunchConditions Action ended 12:44:47: AppSearch. Return value 1. Action start 12:44:47: LaunchConditions. MSI (s) (B8:E8) [12:44:47:711]: Skipping action: CheckUserIsSophosAdmin (condition is false) MSI (s) (B8:E8) [12:44:47:711]: Skipping action: TP_CheckRemoveAllowed (condition is false) MSI (s) (B8:E8) [12:44:47:711]: Doing action: FindRelatedProducts Action ended 12:44:47: LaunchConditions. Return value 1. MSI (s) (B8:E8) [12:44:47:711]: Note: 1: 2205 2: 3: Upgrade MSI (s) (B8:E8) [12:44:47:711]: Note: 1: 2228 2: 3: Upgrade 4: SELECT `UpgradeCode`,`VersionMin`,`VersionMax`,`Language`,`Attributes`,`ActionProperty` FROM `Upgrade` Action start 12:44:47: FindRelatedProducts. MSI (s) (B8:E8) [12:44:47:711]: Skipping action: CCPSearch (condition is false) MSI (s) (B8:E8) [12:44:47:711]: Skipping action: RMCCPSearch (condition is false) MSI (s) (B8:E8) [12:44:47:711]: Doing action: ValidateProductID Action ended 12:44:47: FindRelatedProducts. Return value 0. Action start 12:44:47: ValidateProductID. MSI (s) (B8:E8) [12:44:47:711]: Doing action: setUserProfileNT Action ended 12:44:47: ValidateProductID. Return value 1. MSI (s) (B8:E8) [12:44:47:711]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Documents and Settings\Default User'. Action start 12:44:47: setUserProfileNT. MSI (s) (B8:E8) [12:44:47:711]: Skipping action: SetAllUsersProfileNT (condition is false) MSI (s) (B8:E8) [12:44:47:711]: Doing action: setAllUsersProfile2K Action ended 12:44:47: setUserProfileNT. Return value 1. MSI (s) (B8:E8) [12:44:47:711]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\Documents and Settings\All Users'. Action start 12:44:47: setAllUsersProfile2K. MSI (s) (B8:E8) [12:44:47:711]: Doing action: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA Action ended 12:44:47: setAllUsersProfile2K. Return value 1. MSI (s) (B8:E8) [12:44:47:727]: PROPERTY CHANGE: Adding WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\'. Action start 12:44:47: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA. MSI (s) (B8:E8) [12:44:47:727]: Doing action: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C Action ended 12:44:47: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA. Return value 1. MSI (s) (B8:E8) [12:44:47:727]: PROPERTY CHANGE: Adding WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\'. Action start 12:44:47: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C. MSI (s) (B8:E8) [12:44:47:727]: Doing action: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 Action ended 12:44:47: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C. Return value 1. MSI (s) (B8:E8) [12:44:47:727]: PROPERTY CHANGE: Adding WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\WINDOWS\'. Action start 12:44:47: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207. MSI (s) (B8:E8) [12:44:47:727]: Doing action: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC Action ended 12:44:47: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207. Return value 1. MSI (s) (B8:E8) [12:44:47:727]: PROPERTY CHANGE: Adding WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\WINDOWS\'. Action start 12:44:47: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC. MSI (s) (B8:E8) [12:44:47:727]: Doing action: CostInitialize Action ended 12:44:47: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC. Return value 1. MSI (s) (B8:E8) [12:44:47:727]: Machine policy value 'MaxPatchCacheSize' is 10 Action start 12:44:47: CostInitialize. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'. MSI (s) (B8:E8) [12:44:47:836]: Note: 1: 2205 2: 3: Patch MSI (s) (B8:E8) [12:44:47:836]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (B8:E8) [12:44:47:836]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (B8:E8) [12:44:47:836]: Note: 1: 2205 2: 3: __MsiPatchFileList MSI (s) (B8:E8) [12:44:47:836]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (B8:E8) [12:44:47:836]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId` MSI (s) (B8:E8) [12:44:47:836]: Doing action: FileCost Action ended 12:44:47: CostInitialize. Return value 1. MSI (s) (B8:E8) [12:44:47:836]: Note: 1: 2262 2: Extension 3: -2147287038 Action start 12:44:47: FileCost. MSI (s) (B8:E8) [12:44:47:836]: Doing action: SetMFC71 Action ended 12:44:47: FileCost. Return value 1. Action start 12:44:47: SetMFC71. MSI (s) (B8:E8) [12:44:47:836]: Doing action: IsolateComponents Action ended 12:44:47: SetMFC71. Return value 1. Action start 12:44:47: IsolateComponents. MSI (s) (B8:E8) [12:44:47:836]: Doing action: InstallLocationWorkaround Action ended 12:44:47: IsolateComponents. Return value 0. Action start 12:44:47: InstallLocationWorkaround. MSI (s) (B8:E8) [12:44:47:836]: Doing action: CostFinalize Action ended 12:44:47: InstallLocationWorkaround. Return value 1. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'. MSI (s) (B8:E8) [12:44:47:836]: Note: 1: 2205 2: 3: Patch MSI (s) (B8:E8) [12:44:47:836]: Note: 1: 2205 2: 3: Condition MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\WINDOWS\winsxs\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\WINDOWS\winsxs\Policies\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding policydir.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding payload_ul.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC property. Its value is 'C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f47e1bd6f6571810\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\WINDOWS\winsxs\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\WINDOWS\winsxs\Policies\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding policydir.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding payload_ul.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 property. Its value is 'C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f0efb442f8a0f46c\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding policydir_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\Policies\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding policydir.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding WinSxsManifests.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\Manifests\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding payload_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C property. Its value is 'C:\WINDOWS\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding WinSxsDirectory.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding policydir_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding WinSxsPolicies.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\Policies\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding policydir.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding WinSxsManifests.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\Manifests\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding payload_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA property. Its value is 'C:\WINDOWS\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_51ca66a2bbe76806\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding newfolder1 property. Its value is 'C:\Documents and Settings\All Users\Start Menu\Programs\Sophos\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding newfolder2 property. Its value is 'C:\Documents and Settings\All Users\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding NEW_DIRECTORY2 property. Its value is 'C:\Documents and Settings\All Users\Start Menu\Sophos\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding ProgramFiles64Folder property. Its value is 'C:\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'C:\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding GlobalAssemblyCache property. Its value is 'C:\'. MSI (s) (B8:E8) [12:44:47:836]: PROPERTY CHANGE: Adding CommonFiles64Folder property. Its value is 'C:\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Modifying USERPROFILE property. Its current value is 'C:\Documents and Settings\Default User'. Its new value: 'C:\Documents and Settings\Default User\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Modifying ALLUSERSPROFILE property. Its current value is 'C:\Documents and Settings\All Users'. Its new value: 'C:\Documents and Settings\All Users\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding System64Folder property. Its value is 'C:\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding SOPHOS property. Its value is 'C:\Program Files\Sophos\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding SOPHOS_ANTI_VIRUS property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding INSTALLDIR property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding INSTALLDIR_X64 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding INSTALLDIR_WIN32 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding INSTALLDIR_IA64 property. Its value is 'C:\Program Files\Sophos\Sophos Anti-Virus\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding NEW_DIRECTORY1 property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding SOPHOS_TAMPER_PROTECTION property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Tamper Protection\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding LOGS3 property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Tamper Protection\logs\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding SOPHOS_DEVICE_CONTROL property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Device Control\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding LOGS2 property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Device Control\logs\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding SOPHOS_DATA_CONTROL property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Data Control\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding LOGS1 property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Data Control\logs\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding RESOURCES property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding RES property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Res\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding NEW_DIRECTORY3 property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Res\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding CACHE property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Cache\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding TEMP property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Temp\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding LOGS property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\logs\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding INFECTED property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\INFECTED\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding CONFIG property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Config\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding CISCO_SYSTEMS property. Its value is 'C:\Program Files\Common Files\Cisco Systems\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding CISCOTRUSTAGENT property. Its value is 'C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding PLUGINS property. Its value is 'C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\'. MSI (s) (B8:E8) [12:44:47:852]: PROPERTY CHANGE: Adding INSTALL property. Its value is 'C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\'. MSI (s) (B8:E8) [12:44:47:852]: Target path resolution complete. Dumping Directory table... MSI (s) (B8:E8) [12:44:47:852]: Note: target paths subject to change (via custom actions or browsing) MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: TARGETDIR , Object: C:\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\WINDOWS\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\WINDOWS\winsxs\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\WINDOWS\winsxs\Policies\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: policydir.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: payload_ul.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f47e1bd6f6571810\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\WINDOWS\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\WINDOWS\winsxs\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\WINDOWS\winsxs\Policies\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: policydir.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: payload_ul.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f0efb442f8a0f46c\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WinSxsDirectory.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: policydir_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WinSxsPolicies.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\Policies\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: policydir.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WinSxsManifests.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\Manifests\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: payload_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\WINDOWS\system32\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WinSxsDirectory.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: policydir_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WinSxsPolicies.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\Policies\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: policydir.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WinSxsManifests.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\Manifests\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: payload_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_51ca66a2bbe76806\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\WINDOWS\system32\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: ProgramMenuFolder , Object: C:\Documents and Settings\All Users\Start Menu\Programs\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: newfolder1 , Object: C:\Documents and Settings\All Users\Start Menu\Programs\Sophos\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: newfolder2 , Object: C:\Documents and Settings\All Users\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: StartMenuFolder , Object: C:\Documents and Settings\All Users\Start Menu\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: NEW_DIRECTORY2 , Object: C:\Documents and Settings\All Users\Start Menu\Sophos\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WindowsVolume , Object: C:\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WindowsFolder , Object: C:\WINDOWS\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: TemplateFolder , Object: C:\Documents and Settings\All Users\Templates\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: TempFolder , Object: C:\WINDOWS\TEMP\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: System16Folder , Object: C:\WINDOWS\system\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: StartupFolder , Object: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: SendToFolder , Object: C:\WINDOWS\system32\config\systemprofile\SendTo\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: ProgramFiles64Folder , Object: C:\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: PrimaryVolumePath , Object: C:\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: LocalAppDataFolder , Object: C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: GlobalAssemblyCache , Object: C:\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: FontsFolder , Object: C:\WINDOWS\Fonts\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: FavoritesFolder , Object: C:\WINDOWS\system32\config\systemprofile\Favorites\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: DesktopFolder , Object: C:\Documents and Settings\All Users\Desktop\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: CommonFiles64Folder , Object: C:\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: AdminToolsFolder , Object: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: USERPROFILE , Object: C:\Documents and Settings\Default User\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: ALLUSERSPROFILE , Object: C:\Documents and Settings\All Users\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: System64Folder , Object: C:\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: SystemFolder , Object: C:\WINDOWS\system32\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: SOPHOS , Object: C:\Program Files\Sophos\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: SOPHOS_ANTI_VIRUS , Object: C:\Program Files\Sophos\Sophos Anti-Virus\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files\Sophos\Sophos Anti-Virus\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: INSTALLDIR_X64 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: INSTALLDIR_WIN32 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: INSTALLDIR_IA64 , Object: C:\Program Files\Sophos\Sophos Anti-Virus\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: CommonAppDataFolder , Object: C:\Documents and Settings\All Users\Application Data\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: NEW_DIRECTORY1 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Tamper Protection\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: LOGS3 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Tamper Protection\logs\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: SOPHOS_DEVICE_CONTROL , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Device Control\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: LOGS2 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Device Control\logs\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: SOPHOS_DATA_CONTROL , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Data Control\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: LOGS1 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Data Control\logs\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: RESOURCES , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: RES , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Res\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: NEW_DIRECTORY3 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Res\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: CACHE , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Cache\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: TEMP , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Temp\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: LOGS , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\logs\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: INFECTED , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\INFECTED\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: CONFIG , Object: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Config\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: CommonFilesFolder , Object: C:\Program Files\Common Files\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: CISCO_SYSTEMS , Object: C:\Program Files\Common Files\Cisco Systems\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: CISCOTRUSTAGENT , Object: C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: PLUGINS , Object: C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\ MSI (s) (B8:E8) [12:44:47:852]: Dir (target): Key: INSTALL , Object: C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\ Action start 12:44:47: CostFinalize. MSI (s) (B8:E8) [12:44:51:352]: Doing action: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101 Action ended 12:44:51: CostFinalize. Return value 1. MSI (s) (B8:E8) [12:44:51:352]: PROPERTY CHANGE: Modifying SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 property. Its current value is 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\'. Its new value: 'C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\'. Action start 12:44:51: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101. MSI (s) (B8:E8) [12:44:51:352]: Doing action: ResolveSource Action ended 12:44:51: SetSwiDir64.11DACB83_28A7_4FA6_AF5B_C006E340C101. Return value 1. MSI (s) (B8:E8) [12:44:51:352]: Resolving source. MSI (s) (B8:E8) [12:44:51:352]: Resolving source to launched-from source. MSI (s) (B8:E8) [12:44:51:352]: Setting launched-from source as last-used. MSI (s) (B8:E8) [12:44:51:352]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\'. MSI (s) (B8:E8) [12:44:51:352]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\'. MSI (s) (B8:E8) [12:44:51:352]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}'. MSI (s) (B8:E8) [12:44:51:352]: SOURCEDIR ==> C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\ MSI (s) (B8:E8) [12:44:51:352]: SOURCEDIR product ==> {D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4} MSI (s) (B8:E8) [12:44:51:352]: Determining source type MSI (s) (B8:E8) [12:44:51:352]: Source type from package 'Sophos Anti-Virus.msi': 0 MSI (s) (B8:E8) [12:44:51:352]: Source path resolution complete. Dumping Directory table... MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: TARGETDIR , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\ , LongSubPath: , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ , LongSubPath: Windows\winsxs\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: policydir.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\dlpCRTx86\ , LongSubPath: Windows\winsxs\Policies\dlpCRTx86\ , ShortSubPath: Windows\winsxs\Policies\q6krynxr\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: payload_ul.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ulpCRTx86\ , LongSubPath: Windows\winsxs\ulpCRTx86\ , ShortSubPath: Windows\winsxs\01ll_b-5\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ , LongSubPath: Windows\winsxs\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: policydir.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\dlpATLx86\ , LongSubPath: Windows\winsxs\Policies\dlpATLx86\ , ShortSubPath: Windows\winsxs\Policies\atmex81e\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: payload_ul.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ulpATLx86\ , LongSubPath: Windows\winsxs\ulpATLx86\ , ShortSubPath: Windows\winsxs\kx-fp5sw\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WinSxsDirectory.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ , LongSubPath: Windows\winsxs\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: policydir_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , LongSubPath: Windows\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , ShortSubPath: Windows\winsxs\wof83_qs\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WinSxsPolicies.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: policydir.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , LongSubPath: Windows\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ , ShortSubPath: Windows\winsxs\Policies\kqdemndt\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WinSxsManifests.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Manifests\ , LongSubPath: Windows\winsxs\Manifests\ , ShortSubPath: Windows\winsxs\e72hoa3e\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\dlCRTx86\ , LongSubPath: Windows\winsxs\dlCRTx86\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: payload_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ulCRTx86\ , LongSubPath: Windows\winsxs\ulCRTx86\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\system32\ , LongSubPath: Windows\system32\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WinSxsDirectory.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ , LongSubPath: Windows\winsxs\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: policydir_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ , LongSubPath: Windows\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ , ShortSubPath: Windows\winsxs\imvtabx-\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WinSxsPolicies.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\ , LongSubPath: Windows\winsxs\Policies\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: policydir.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ , LongSubPath: Windows\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ , ShortSubPath: Windows\winsxs\Policies\pxd_ylb3\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WinSxsManifests.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\Manifests\ , LongSubPath: Windows\winsxs\Manifests\ , ShortSubPath: Windows\winsxs\7ivp-it9\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\dlATLx86\ , LongSubPath: Windows\winsxs\dlATLx86\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: payload_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\winsxs\ulATLx86\ , LongSubPath: Windows\winsxs\ulATLx86\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\system32\ , LongSubPath: Windows\system32\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: ProgramMenuFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Programs\ , LongSubPath: Programs\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: newfolder1 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Programs\Sophos\ , LongSubPath: Programs\Sophos\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: newfolder2 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Programs\Sophos\Sophos Endpoint Security and Control\ , LongSubPath: Programs\Sophos\Sophos Endpoint Security and Control\ , ShortSubPath: Programs\Sophos\SOPHOS~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: StartMenuFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Start Menu\ , LongSubPath: Start Menu\ , ShortSubPath: STARTM~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: NEW_DIRECTORY2 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Start Menu\Sophos\ , LongSubPath: Start Menu\Sophos\ , ShortSubPath: STARTM~1\Sophos\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WindowsVolume , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\WinRoot\ , LongSubPath: WinRoot\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WindowsFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Windows\ , LongSubPath: Windows\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: TemplateFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\ShellNew\ , LongSubPath: ShellNew\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: TempFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Temp\ , LongSubPath: Temp\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: System16Folder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\System\ , LongSubPath: System\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: StartupFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\StartUp\ , LongSubPath: StartUp\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: SendToFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\SendTo\ , LongSubPath: SendTo\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: ProgramFiles64Folder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Program Files 64\ , LongSubPath: Program Files 64\ , ShortSubPath: Prog64~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: PrimaryVolumePath , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\PrimaryVolumePath\ , LongSubPath: PrimaryVolumePath\ , ShortSubPath: Primar~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: LocalAppDataFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\LocalAppData\ , LongSubPath: LocalAppData\ , ShortSubPath: LocalA~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: GlobalAssemblyCache , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\GlobalAssemblyCache\ , LongSubPath: GlobalAssemblyCache\ , ShortSubPath: Global~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: FontsFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Fonts\ , LongSubPath: Fonts\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: FavoritesFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Favorites\ , LongSubPath: Favorites\ , ShortSubPath: FAVORI~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: DesktopFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Desktop\ , LongSubPath: Desktop\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: CommonFiles64Folder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Common64\ , LongSubPath: Common64\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: AdminToolsFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\AdminTools\ , LongSubPath: AdminTools\ , ShortSubPath: Admint~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: USERPROFILE , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\UserProfile\ , LongSubPath: UserProfile\ , ShortSubPath: USERPR~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: ALLUSERSPROFILE , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\All Users\ , LongSubPath: All Users\ , ShortSubPath: ALLUSE~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: System64Folder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\System64\ , LongSubPath: System64\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: SystemFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\System32\ , LongSubPath: System32\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: ProgramFilesFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\program files\ , LongSubPath: program files\ , ShortSubPath: PROGRA~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: SOPHOS , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\program files\Sophos\ , LongSubPath: program files\Sophos\ , ShortSubPath: PROGRA~1\Sophos\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: SOPHOS_ANTI_VIRUS , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: INSTALLDIR , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Intelligence\x64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\xo6xzzcl\x64\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\Web Control\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\Web Control\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\j-0b_jsi\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: INSTALLDIR_X64 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_X64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_X64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\WSC_X64\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: INSTALLDIR_WIN32 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_Win32\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\jwgiamqy\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: INSTALLDIR_IA64 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\program files\Sophos\Sophos Anti-Virus\WSC_IA64\ , LongSubPath: program files\Sophos\Sophos Anti-Virus\WSC_IA64\ , ShortSubPath: PROGRA~1\Sophos\SOPHOS~1\WSC_IA64\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: CommonAppDataFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\ , LongSubPath: CommonAppData\ , ShortSubPath: Common~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: NEW_DIRECTORY1 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\ , LongSubPath: CommonAppData\Sophos\ , ShortSubPath: Common~1\Sophos\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: SOPHOS_TAMPER_PROTECTION , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Tamper Protection\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: LOGS3 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Tamper Protection\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Tamper Protection\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~4\logs\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: SOPHOS_DEVICE_CONTROL , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Device Control\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: LOGS2 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Device Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Device Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~3\logs\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: SOPHOS_DATA_CONTROL , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Data Control\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: LOGS1 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Data Control\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Data Control\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~2\logs\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: RESOURCES , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: RES , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: NEW_DIRECTORY3 , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Res\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Res\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Res\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: CACHE , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Cache\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Cache\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: TEMP , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Temp\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Temp\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: LOGS , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\logs\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\logs\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\logs\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: INFECTED , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\INFECTED\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\INFECTED\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: CONFIG , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\CommonAppData\Sophos\Sophos Anti-Virus\Config\ , LongSubPath: CommonAppData\Sophos\Sophos Anti-Virus\Config\ , ShortSubPath: Common~1\Sophos\SOPHOS~1\Config\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: CommonFilesFolder , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Common\ , LongSubPath: Common\ , ShortSubPath: MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: CISCO_SYSTEMS , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Common\Cisco Systems\ , LongSubPath: Common\Cisco Systems\ , ShortSubPath: Common\CISCOS~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: CISCOTRUSTAGENT , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Common\Cisco Systems\CiscoTrustAgent\ , LongSubPath: Common\Cisco Systems\CiscoTrustAgent\ , ShortSubPath: Common\CISCOS~1\CISCOT~1\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: PLUGINS , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Common\Cisco Systems\CiscoTrustAgent\Plugins\ , LongSubPath: Common\Cisco Systems\CiscoTrustAgent\Plugins\ , ShortSubPath: Common\CISCOS~1\CISCOT~1\Plugins\ MSI (s) (B8:E8) [12:44:51:352]: Dir (source): Key: INSTALL , Object: C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Common\Cisco Systems\CiscoTrustAgent\Plugins\Install\ , LongSubPath: Common\Cisco Systems\CiscoTrustAgent\Plugins\Install\ , ShortSubPath: Common\CISCOS~1\CISCOT~1\Plugins\Install\ Action start 12:44:51: ResolveSource. MSI (s) (B8:E8) [12:44:51:352]: Doing action: SetInstallDir Action ended 12:44:51: ResolveSource. Return value 1. Action start 12:44:51: SetInstallDir. MSI (s) (B8:E8) [12:44:51:352]: Skipping action: UninstallDowngradeCheck (condition is false) MSI (s) (B8:E8) [12:44:51:352]: Doing action: SetScriptProperty Action ended 12:44:51: SetInstallDir. Return value 1. MSI (s) (B8:E8) [12:44:51:352]: PROPERTY CHANGE: Adding RunPreLaunchScript property. Its value is '"C:\Program Files\Sophos\Sophos Anti-Virus\""C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\""10.3.12"'. Action start 12:44:51: SetScriptProperty. MSI (s) (B8:E8) [12:44:51:352]: Skipping action: CheckForSophosClientFirewall (condition is false) MSI (s) (B8:E8) [12:44:51:352]: Doing action: ISInitAllUsers Action ended 12:44:51: SetScriptProperty. Return value 1. MSI (s) (B8:E8) [12:44:51:352]: PROPERTY CHANGE: Modifying ALLUSERS property. Its current value is '1'. Its new value: '2'. Action start 12:44:51: ISInitAllUsers. MSI (s) (B8:E8) [12:44:51:352]: Doing action: SetODBCFolders Action ended 12:44:51: ISInitAllUsers. Return value 1. MSI (s) (B8:E8) [12:44:51:352]: Note: 1: 2205 2: 3: ODBCDriver MSI (s) (B8:E8) [12:44:51:352]: Note: 1: 2228 2: 3: ODBCDriver 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCDriver`, `Component` WHERE `ODBCDriver`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2) MSI (s) (B8:E8) [12:44:51:352]: Note: 1: 2205 2: 3: ODBCTranslator MSI (s) (B8:E8) [12:44:51:352]: Note: 1: 2228 2: 3: ODBCTranslator 4: SELECT `ComponentId`,`Description`,`Directory_`, `ActionRequest`, `Installed`, `Attributes` FROM `ODBCTranslator`, `Component` WHERE `ODBCTranslator`.`Component_` = `Component` AND (`ActionRequest` = 1 OR `ActionRequest` = 2) Action start 12:44:51: SetODBCFolders. MSI (s) (B8:E8) [12:44:51:352]: Doing action: MigrateFeatureStates Action ended 12:44:51: SetODBCFolders. Return value 0. Action start 12:44:51: MigrateFeatureStates. MSI (s) (B8:E8) [12:44:51:352]: Doing action: InstallValidate Action ended 12:44:51: MigrateFeatureStates. Return value 0. MSI (s) (B8:E8) [12:44:51:352]: Feature: SAVService; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Feature: MainComponents; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Feature: ConfigFiles; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Feature: Resources; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Feature: EngineFiles; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Feature: ServiceComponents; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SAVService; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SAVPosturePlugin.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: ConfigFilesNoReplace; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: ConfigFilesReplace; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: AllOtherFiles2; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: AllOtherFiles1; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: AllOtherFiles3; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: AllOtherFiles8; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: AllOtherFiles5; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: AllOtherFiles6; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: AllOtherFiles7; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: ControlSAVAdminService; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: ControlSAVService; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SophosCleanupService.exe; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: sav32cli.exe; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: AllOtherFiles4; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SAVHelpChs.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SAVHelpCht.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SAVHelpDeu.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SAVHelpEsp.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SAVHelpFra.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SAVHelpIta.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SAVHelpJap.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SCF.dat; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SOF.dat; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavHelpEng.chm; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavShellExtia64; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: SavShellExtx64; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: Shortcut_de; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: Shortcut_es; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: Shortcut_fr; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: Shortcut_it; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: Shortcut_ja; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: Shortcut_zh_cn; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: Shortcut_zh_tw; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: Shortcuts; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: Categories.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavNeutralRes.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavRes.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavResChs.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavResCht.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavResDeu.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavResEng.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavResEsp.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavResFra.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavResIt.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavResJap.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: BackgroundScanClient.exe; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavAdapter.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WSCClientI64; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: WSCClientW32; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WSCClientX64; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: SAVAdminService; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: AllOtherFiles; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: AuthorisedLists.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: DCManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: DataControlManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: DataControlPlugin.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: DetectionFeedback.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: DeviceControlPlugin.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: BHOManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: BackgroundScanning.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: ComponentManager.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: Configuration.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: DesktopMessaging.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: DriveProcessor.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: EEConsumer.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: FSDecomposer.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: FilterProcessors.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: ICAdapter.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: ICManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: ICProcessors.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: LegacyConsumers.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: Localisation.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: Logging.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: Persistance.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SAVControl.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavPlugin.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SIPSManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SWIManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavMain.exe; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavProgress.exe; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavShellExt.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: ScanEditExports.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: ScanEditFacade.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: ScanManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavSecurity.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SophtainerAdapter.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SystemInformation.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: TamperProtectionControl.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: TamperProtectionManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: TamperProtectionPlugin.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: ThreatDetection.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: ThreatManagement.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: Translators.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: VirusDetection.dll; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: uplevel.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: nosxs.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: downlevel_payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: downlevel_manifest.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: uplevel.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: nosxs.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: downlevel_payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: downlevel_manifest.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: uplevel.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: downlevel_manifest.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: uplevel.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: downlevel_manifest.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: swc_service_exe.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SWCAdapter_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WebControlPlugin_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCPResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCPResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCPResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCPResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCPResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCPResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCPResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCPResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WebControlMessaging_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCMResEng_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCMResFra_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCMResDeu_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCMResJap_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCMResEsp_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCMResIt_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCMResChs_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WCMResCht_dll.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WebControlAvailable.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SavWebControlKey.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WebControlPlugin.reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: WebControlMessaging_dll_reg.92A5750A_B99C_4D18_8E96_314353D4097A; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SwiCallout64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: SwiDi.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: Difx_dll_64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: SwiComponentCommon.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SwiComponent32OnlyNotWFP_SwiUpdate32.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: SwiComponent64.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: SwiCallout_cat.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: Swi_di.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: Difx_dll.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: SwiProxy.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: SwiProxyChild.11DACB83_28A7_4FA6_AF5B_C006E340C101; Installed: Absent; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: __Shortcuts65; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __Shortcut_de65; Installed: Null; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: __Shortcuts66; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __Shortcuts67; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __uplevel.30729.4148.Microsoft_VC90_ATL_x865; Installed: Null; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: __uplevel.30729.4148.Microsoft_VC90_CRT_x865; Installed: Null; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: __uplevel.30729.4148.policy_9_0_Microsoft_65; Installed: Null; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: __uplevel.30729.4148.policy_9_0_Microsoft_66; Installed: Null; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: __nosxs.30729.4148.Microsoft_VC90_ATL_x86.65; Installed: Null; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: __downlevel_payload.30729.4148.Microsoft_V65; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __downlevel_manifest.30729.4148.Microsoft_65; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __nosxs.30729.4148.Microsoft_VC90_CRT_x86.65; Installed: Null; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: __downlevel_payload.30729.4148.Microsoft_V66; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __downlevel_manifest.30729.4148.Microsoft_66; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __downlevel_manifest.30729.4148.policy_9_065; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __downlevel_manifest.30729.4148.policy_9_066; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __WebControlAvailable.reg.92A5750A_B99C_4D65; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __SavWebControlKey.reg.92A5750A_B99C_4D18_65; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __WebControlPlugin.reg.92A5750A_B99C_4D18_65; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __WebControlPlugin_dll.92A5750A_B99C_4D18_65; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __SwiComponentCommon.11DACB83_28A7_4FA6_AF65; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __SAVService65; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __DataControlManagement.dll65; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __DCManagement.dll65; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __SavMain.exe65; Installed: Null; Request: Local; Action: Local MSI (s) (B8:E8) [12:44:51:352]: Component: __Shortcut_es65; Installed: Null; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: __Shortcut_fr65; Installed: Null; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: __Shortcut_it65; Installed: Null; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: __Shortcut_ja65; Installed: Null; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: __Shortcut_zh_cn65; Installed: Null; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Component: __Shortcut_zh_tw65; Installed: Null; Request: Local; Action: Null MSI (s) (B8:E8) [12:44:51:352]: Note: 1: 2205 2: 3: BindImage MSI (s) (B8:E8) [12:44:51:352]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (B8:E8) [12:44:51:352]: Note: 1: 2205 2: 3: SelfReg MSI (s) (B8:E8) [12:44:51:352]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (B8:E8) [12:44:51:352]: Note: 1: 2205 2: 3: Font Action start 12:44:51: InstallValidate. MSI (s) (B8:E8) [12:44:51:352]: Note: 1: 2205 2: 3: _RemoveFilePath MSI (s) (B8:E8) [12:44:57:133]: Note: 1: 2318 2: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Config\factory.xml DEBUG: Error 2318: File does not exist: C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Config\factory.xml MSI (s) (B8:E8) [12:44:57:133]: Product: Sophos Anti-Virus -- Internal Error 2318. C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Config\factory.xml Action ended 12:44:57: InstallValidate. Return value 3. Action ended 12:44:57: INSTALL. Return value 3. Property(S): DiskPrompt = [1] Property(S): INSTALL = C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\Install\ Property(S): CONFIG = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Config\ Property(S): INFECTED = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\INFECTED\ Property(S): LOGS = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\logs\ Property(S): TEMP = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Temp\ Property(S): CACHE = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Cache\ Property(S): LOGS1 = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Data Control\logs\ Property(S): LOGS2 = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Device Control\logs\ Property(S): LOGS3 = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Tamper Protection\logs\ Property(S): INSTALLDIR = C:\Program Files\Sophos\Sophos Anti-Virus\ Property(S): INSTALLDIR_IA64 = C:\Program Files\Sophos\Sophos Anti-Virus\ Property(S): INSTALLDIR_WIN32 = C:\Program Files\Sophos\Sophos Anti-Virus\ Property(S): INSTALLDIR_X64 = C:\Program Files\Sophos\Sophos Anti-Virus\ Property(S): BootDriverStartup = 0 Property(S): DeleteBDLs = 0 Property(S): DeleteIDEs = 0 Property(S): ALLUSERS = 2 Property(S): SystemFolder = C:\WINDOWS\system32\ Property(S): System64Folder = C:\ Property(S): RemoveSAVI = INSTALLDIR Property(S): RollbackOtherFiles = 0 Property(S): RollbackSavi = 0 Property(S): RunPreLaunchScript = "C:\Program Files\Sophos\Sophos Anti-Virus\""C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\""10.3.12" Property(S): SetAdminGroupDescription = SophosAdministrators may run Sophos Anti-Virus with complete access Property(S): ALLUSERSPROFILE = C:\Documents and Settings\All Users\ Property(S): UPDATEDRIVERS = 1 Property(S): TARGETDIR = C:\ Property(S): SetOnAccessGroupDescription = Contains accounts used by Sophos Anti-Virus when it performs threat scanning and cleanup functions Property(S): SetPowerGroupDescription = SophosPowerUsers may run Sophos Anti-Virus with the access that SophosUsers have, plus greater access to cleanup Property(S): UpdateSAVI = 0 Property(S): SetUserGroupDescription = SophosUsers may run Sophos Anti-Virus with limited access to scanning configuration and cleanup Property(S): USERPROFILE = C:\Documents and Settings\Default User\ Property(S): EventType = BEGIN_SYSTEM_CHANGE Property(S): AdminToolsFolder = C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\ Property(S): CommonFiles64Folder = C:\ Property(S): DesktopFolder = C:\Documents and Settings\All Users\Desktop\ Property(S): FavoritesFolder = C:\WINDOWS\system32\config\systemprofile\Favorites\ Property(S): FontsFolder = C:\WINDOWS\Fonts\ Property(S): GlobalAssemblyCache = C:\ Property(S): LocalAppDataFolder = C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\ Property(S): PrimaryVolumePath = C:\ Property(S): ProgramFiles64Folder = C:\ Property(S): SendToFolder = C:\WINDOWS\system32\config\systemprofile\SendTo\ Property(S): StartupFolder = C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ Property(S): System16Folder = C:\WINDOWS\system\ Property(S): TempFolder = C:\WINDOWS\TEMP\ Property(S): TemplateFolder = C:\Documents and Settings\All Users\Templates\ Property(S): WindowsFolder = C:\WINDOWS\ Property(S): WindowsVolume = C:\ Property(S): PLUGINS = C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\Plugins\ Property(S): CISCOTRUSTAGENT = C:\Program Files\Common Files\Cisco Systems\CiscoTrustAgent\ Property(S): CISCO_SYSTEMS = C:\Program Files\Common Files\Cisco Systems\ Property(S): CommonFilesFolder = C:\Program Files\Common Files\ Property(S): RESOURCES = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\ Property(S): NEW_DIRECTORY3 = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Res\ Property(S): RES = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Res\ Property(S): NEW_DIRECTORY1 = C:\Documents and Settings\All Users\Application Data\Sophos\ Property(S): SOPHOS_DATA_CONTROL = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Data Control\ Property(S): SOPHOS_DEVICE_CONTROL = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Device Control\ Property(S): SOPHOS_TAMPER_PROTECTION = C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Tamper Protection\ Property(S): CommonAppDataFolder = C:\Documents and Settings\All Users\Application Data\ Property(S): SOPHOS_ANTI_VIRUS = C:\Program Files\Sophos\Sophos Anti-Virus\ Property(S): SOPHOS = C:\Program Files\Sophos\ Property(S): ProgramFilesFolder = C:\Program Files\ Property(S): NEW_DIRECTORY2 = C:\Documents and Settings\All Users\Start Menu\Sophos\ Property(S): StartMenuFolder = C:\Documents and Settings\All Users\Start Menu\ Property(S): newfolder2 = C:\Documents and Settings\All Users\Start Menu\Programs\Sophos\Sophos Endpoint Security and Control\ Property(S): newfolder1 = C:\Documents and Settings\All Users\Start Menu\Programs\Sophos\ Property(S): ProgramMenuFolder = C:\Documents and Settings\All Users\Start Menu\Programs\ Property(S): SourceDir = C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\ Property(S): VersionNT = 501 Property(S): AdminUser = 1 Property(S): Manufacturer = Sophos Limited Property(S): ProductCode = {D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4} Property(S): ProductLanguage = 1033 Property(S): ProductName = Sophos Anti-Virus Property(S): ProductVersion = 10.3.12 Property(S): UpgradeCode = {597B239E-3032-491A-A322-817737925E8A} Property(S): _IsMaintenance = Change Property(S): _IsSetupTypeMin = Typical Property(S): AFTERREBOOT = 0 Property(S): AgreeToLicense = No Property(S): ApplicationUsers = AllUsers Property(S): APPLYCLASSICCONFIG = 0 Property(S): ARPCOMMENTS = Protects your computer and network from threats Property(S): ARPCONTACT = Sophos Technical Support Property(S): ARPHELPLINK = http://www.sophos.com/support Property(S): ARPHELPTELEPHONE = Property(S): ARPNOMODIFY = 1 Property(S): ARPNOREPAIR = 1 Property(S): ARPPRODUCTICON = ARPPRODUCTICON.exe Property(S): ARPURLINFOABOUT = http://www.sophos.com Property(S): ARPURLUPDATEINFO = http://www.sophos.com/support/updates Property(S): BOOTDRIVERSIGNED = 0 Property(S): CHECKFORCOMPETITORS = 1 Property(S): CHECKFORSCF = 1 Property(S): CLASSFILTERPRESENT = 0 Property(S): CopyBDLs = 0 Property(S): CopyIDEs = 0 Property(S): DATACONTROL = 1 Property(S): DefaultUIFont = Tahoma8 Property(S): DEVICECONTROL = 1 Property(S): DialogCaption = Sophos Installer Property(S): DISABLEONACCESS = 0 Property(S): Display_IsBitmapDlg = 1 Property(S): DisplayNameCustom = Custom Property(S): DisplayNameMinimal = Minimal Property(S): DisplayNameTypical = Typical Property(S): DRIVERVERSION = 0 Property(S): FIRST_INSTALL_DATE = 0 Property(S): IDEONLY = 0 Property(S): InstallChoice = AR Property(S): INSTALLLEVEL = 100 Property(S): IS_COMPLUS_PROGRESSTEXT_COST = Costing COM+ application: [1] Property(S): IS_COMPLUS_PROGRESSTEXT_INSTALL = Installing COM+ application: [1] Property(S): IS_COMPLUS_PROGRESSTEXT_UNINSTALL = Uninstalling COM+ application: [1] Property(S): IS_PROGMSG_XML_COSTING = Costing XML files... Property(S): IS_PROGMSG_XML_CREATE_FILE = Creating XML file %s... Property(S): IS_PROGMSG_XML_FILES = Performing XML file changes... Property(S): IS_PROGMSG_XML_REMOVE_FILE = Removing XML file %s... Property(S): IS_PROGMSG_XML_ROLLBACK_FILES = Rolling back XML file changes... Property(S): IS_PROGMSG_XML_UPDATE_FILE = Updating XML file %s... Property(S): IS_SQLSERVER_AUTHENTICATION = 0 Property(S): IS_SQLSERVER_USERNAME = sa Property(S): ISReleaseFlags = SAV Property(S): ISVROOT_PORT_NO = 0 Property(S): MAJORUPGRADE = 0 Property(S): MANAGED = 1 Property(S): MSIRESTARTMANAGERCONTROL = Disable Property(S): NEEDREBOOT = 0 Property(S): PIDTemplate = 12345<###-%%%%%%%>@@@@@ Property(S): PROCESSOR_NX_ENABLED = 0 Property(S): PROGMSG_IIS_CREATEAPPPOOL = Creating application pool %s Property(S): PROGMSG_IIS_CREATEAPPPOOLS = Creating application Pools... Property(S): PROGMSG_IIS_CREATEVROOT = Creating IIS virtual directory %s Property(S): PROGMSG_IIS_CREATEVROOTS = Creating IIS virtual directories... Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSION = Creating web service extension Property(S): PROGMSG_IIS_CREATEWEBSERVICEEXTENSIONS = Creating web service extensions... Property(S): PROGMSG_IIS_EXTRACT = Extracting information for IIS virtual directories... Property(S): PROGMSG_IIS_EXTRACTDONE = Extracted information for IIS virtual directories... Property(S): PROGMSG_IIS_REMOVEAPPPOOL = Removing application pool Property(S): PROGMSG_IIS_REMOVEAPPPOOLS = Removing application pools... Property(S): PROGMSG_IIS_REMOVESITE = Removing web site at port %d Property(S): PROGMSG_IIS_REMOVEVROOT = Removing IIS virtual directory %s Property(S): PROGMSG_IIS_REMOVEVROOTS = Removing IIS virtual directories... Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSION = Removing web service extension Property(S): PROGMSG_IIS_REMOVEWEBSERVICEEXTENSIONS = Removing web service extensions... Property(S): PROGMSG_IIS_ROLLBACKAPPPOOLS = Rolling back application pools... Property(S): PROGMSG_IIS_ROLLBACKVROOTS = Rolling back virtual directory and web site changes... Property(S): PROGMSG_IIS_ROLLBACKWEBSERVICEEXTENSIONS = Rolling back web service extensions... Property(S): ProgressType0 = install Property(S): ProgressType1 = Installing Property(S): ProgressType2 = installed Property(S): ProgressType3 = installs Property(S): RebootYesNo = Yes Property(S): Registration = No Property(S): ReinstallModeText = omus Property(S): SAVIONLY = 0 Property(S): SCRIPTDIR = [SOURCEDIR] Property(S): SequenceNumber = 0 Property(S): SetupType = Typical Property(S): UNINSTALLBOOTDRIVERS = 1 Property(S): UNINSTALLCLASSFILTER = 1 Property(S): UNINSTALLDRIVERS = 1 Property(S): UNINSTALLERROR = An older version of Sophos Anti-Virus has not been fully removed from your machine. Please reboot your machine before attempting to install Sophos Anti-Virus. Property(S): UNINSTALLKMSDRIVERS = 1 Property(S): UPDATEBOOTDRIVERS = 1 Property(S): UPDATECLASSFILTER = 1 Property(S): VIRUSDATAUPDATE = 0 Property(S): SecureCustomProperties = EXCLUDEDPROCESSES;INSTALLINGVERSION;MAJORUPGRADE;WEBCONTROL Property(S): WindowsFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\ Property(S): SystemFolder.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\system32\ Property(S): WinSxsDirectory.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\ Property(S): payload_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_51ca66a2bbe76806\ Property(S): payload.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\ Property(S): WinSxsManifests.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\Manifests\ Property(S): WinSxsPolicies.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\Policies\ Property(S): policydir.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ Property(S): policydir_ul.30729.4148.Microsoft_VC90_ATL_x86.QFE.0901F145_82C9_3BF6_A91B_31F6791950EA = C:\WINDOWS\winsxs\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_fe8be9c7\ Property(S): SystemFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\system32\ Property(S): WindowsFolder.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\ Property(S): WinSxsDirectory.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\ Property(S): payload_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\ Property(S): payload.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\ Property(S): WinSxsManifests.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\Manifests\ Property(S): WinSxsPolicies.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\Policies\ Property(S): policydir.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\Policies\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ Property(S): policydir_ul.30729.4148.Microsoft_VC90_CRT_x86.QFE.AA2EBBCC_4E3B_3442_865E_7BB3E9F45F0C = C:\WINDOWS\winsxs\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_1742743b\ Property(S): WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\WINDOWS\winsxs\ Property(S): payload_ul.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f0efb442f8a0f46c\ Property(S): WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\WINDOWS\winsxs\Policies\ Property(S): policydir.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\ Property(S): WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_ATL_x86.QFE.36F772C3_DEA7_32C0_AD18_338903366207 = C:\WINDOWS\ Property(S): WinSxsDirectory.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\WINDOWS\winsxs\ Property(S): payload_ul.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\WINDOWS\winsxs\x86_policy.9.0.microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_f47e1bd6f6571810\ Property(S): WinSxsPolicies.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\WINDOWS\winsxs\Policies\ Property(S): policydir.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\WINDOWS\winsxs\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\ Property(S): WindowsFolder.30729.4148.policy_9_0_Microsoft_VC90_CRT_x86.QFE.EB5BA578_FF7F_3863_8E53_7A003222B7FC = C:\WINDOWS\ Property(S): WebControlDir.92A5750A_B99C_4D18_8E96_314353D4097A = C:\Program Files\Sophos\Sophos Anti-Virus\Web Control\ Property(S): SWIDIR.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\ Property(S): SWIDIR64.11DACB83_28A7_4FA6_AF5B_C006E340C101 = C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\ Property(S): REBOOTREQUIREDFILE.11DACB83_28A7_4FA6_AF5B_C006E340C101 = SwiRebootRequired.txt Property(S): PackageCode = {62513949-B49A-48C4-B9F2-972FA625C57E} Property(S): ProductState = -1 Property(S): PackagecodeChanging = 1 Property(S): REBOOT = ReallySuppress Property(S): UPDATEKMSDRIVERS = 1 Property(S): WEBCONTROL = 1 Property(S): CURRENTDIRECTORY = C:\WINDOWS\system32 Property(S): CLIENTUILEVEL = 3 Property(S): CLIENTPROCESSID = 1784 Property(S): VersionDatabase = 200 Property(S): VersionMsi = 3.01 Property(S): WindowsBuild = 2600 Property(S): ServicePackLevel = 3 Property(S): ServicePackLevelMinor = 0 Property(S): MsiNTProductType = 1 Property(S): RemoteAdminTS = 1 Property(S): AppDataFolder = C:\WINDOWS\system32\config\systemprofile\Application Data\ Property(S): NetHoodFolder = C:\WINDOWS\system32\config\systemprofile\NetHood\ Property(S): PersonalFolder = C:\WINDOWS\system32\config\systemprofile\My Documents\ Property(S): PrintHoodFolder = C:\WINDOWS\system32\config\systemprofile\PrintHood\ Property(S): RecentFolder = C:\WINDOWS\system32\config\systemprofile\Recent\ Property(S): MyPicturesFolder = C:\WINDOWS\system32\config\systemprofile\My Documents\My Pictures\ Property(S): GPTSupport = 1 Property(S): OLEAdvtSupport = 1 Property(S): ShellAdvtSupport = 1 Property(S): Intel = 6 Property(S): PhysicalMemory = 2038 Property(S): VirtualMemory = 3755 Property(S): LogonUser = SYSTEM Property(S): UserSID = S-1-5-18 Property(S): UserLanguageID = 1033 Property(S): ComputerName = MNL-OFF-59 Property(S): SystemLanguageID = 1033 Property(S): ScreenX = 1280 Property(S): ScreenY = 1024 Property(S): CaptionHeight = 19 Property(S): BorderTop = 1 Property(S): BorderSide = 1 Property(S): TextHeight = 16 Property(S): ColorBits = 32 Property(S): TTCSupport = 1 Property(S): Time = 12:44:57 Property(S): Date = 1/29/2015 Property(S): MsiWin32AssemblySupport = 5.1.2600.5512 Property(S): RedirectedDllSupport = 2 Property(S): Privileged = 1 Property(S): USERNAME = MNL-OFF-59 Property(S): COMPANYNAME = Micro Nav Ltd Property(S): DATABASE = C:\WINDOWS\Installer\bff56b.msi Property(S): OriginalDatabase = C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi Property(S): UILevel = 2 Property(S): ACTION = INSTALL Property(S): ROOTDRIVE = C:\ Property(S): CostingComplete = 0 Property(S): OutOfDiskSpace = 0 Property(S): OutOfNoRbDiskSpace = 0 Property(S): PrimaryVolumeSpaceAvailable = 0 Property(S): PrimaryVolumeSpaceRequired = 0 Property(S): PrimaryVolumeSpaceRemaining = 0 Property(S): SOURCEDIR = C:\Documents and Settings\All Users\Application Data\Sophos\AutoUpdate\cache\savxp\ Property(S): SourcedirProduct = {D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4} MSI (s) (B8:E8) [12:44:57:883]: Cleaning up uninstalled install packages, if any exist MSI (s) (B8:E8) [12:44:57:883]: MainEngineThread is returning 1603 === Logging stopped: 1/29/2015 12:44:57 === MSI (c) (F8:80) [12:44:58:883]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1 MSI (c) (F8:80) [12:44:58:883]: MainEngineThread is returning 1603 === Verbose logging stopped: 1/29/2015 12:44:58 === 2015-01-29 12:44:58 ERROR: Installation failed